This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json) Hash identifier: 4uKn5qi56YMQUYpit/fefPGRNxil3CbfqVFzQDZYp0w= Subject key identifier: 04:2D:71:6A:B1:16:4E:50:D3:77:0A:2D:63:94:E6:38:E9:21:E4:84 Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27 Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27 Certificate serial: 019AAC82B460245FAA5903C4B99035E64B46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft Manifest number: 1371 Signing time: Sat 22 Nov 2025 17:00:38 +0000 Manifest this update: Sat 22 Nov 2025 17:00:38 +0000 Manifest next update: Sun 23 Nov 2025 17:00:38 +0000 Files and hashes: 1: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: 3Vs/lWaTGVJfdRQZH3Cxvnog5IBAR8NAWceCUZIJp08=) 2: SkpuG1SShh_Tu0tEsS_zldokzRY.roa (hash: dFYDpE1wahaZPqcUFRinjMxK5eBFUvf/eJm1l8owCY8=) 3: wx1b7wSo3IENdo5aRxstuEb6e_8.roa (hash: Pjk1ZSdAEd1vWaEOWohydmZmcsdRJu6/0hd4TtAw+OQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:82:b4:60:24:5f:aa:59:03:c4:b9:90:35:e6:4b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27 Validity Not Before: Nov 22 17:00:38 2025 GMT Not After : Nov 23 17:00:38 2025 GMT Subject: CN=042d716ab1164e50d3770a2d6394e638e921e484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fb:25:d2:b4:73:7b:54:eb:9a:7f:84:50:49: 0c:af:f3:2f:f0:e3:70:e8:40:b5:0f:90:0d:f7:2e: eb:cc:5a:0f:70:e1:af:70:94:74:bc:a2:0f:e8:a5: 09:ba:c3:d9:a5:5e:5f:41:cd:56:03:76:99:a7:4b: d9:2f:d3:f9:b5:d1:dd:87:a4:04:df:b8:4b:1a:7a: e8:f7:8e:76:55:f9:d9:c6:7d:17:9d:2c:7f:e2:b9: f9:1e:31:3d:c6:2d:6b:23:88:5f:d7:24:5b:5d:4d: f1:e2:8a:8c:ba:29:d0:71:34:f6:04:dc:d1:5a:55: b8:dc:12:82:fe:26:67:37:7d:dd:f3:d1:44:57:79: 80:e1:fd:44:4a:6e:bd:86:9a:dc:da:29:6e:90:f5: cf:e2:88:e0:27:41:7f:b8:f9:27:22:58:ea:18:f8: 09:87:56:02:7e:ed:2d:1b:37:6a:8e:c0:82:ba:d5: 86:e8:df:7b:1e:cb:4d:6f:b8:70:7d:bd:6a:ec:b1: 86:cf:22:6d:50:90:26:8d:d5:9c:9b:81:d0:fb:8b: 70:50:49:26:35:65:f1:b7:11:ff:f4:b8:11:23:2b: 62:83:d9:e8:b7:36:29:8d:61:2e:87:59:1c:5b:45: 4b:43:81:7b:b0:03:3d:26:62:9b:1c:88:81:fe:73: 47:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2D:71:6A:B1:16:4E:50:D3:77:0A:2D:63:94:E6:38:E9:21:E4:84 X509v3 Authority Key Identifier: keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:1f:83:ac:92:6f:11:b3:1b:f1:4a:5d:f0:b6:10:54:d9:6a: df:0d:36:4c:cf:1f:36:30:7d:f6:37:8e:bf:f1:ae:bd:26:7f: 26:9e:19:fe:05:c1:45:db:2f:77:ae:a2:fe:a8:fa:6a:b0:fb: 20:6f:b9:90:96:d1:87:15:33:8b:a3:07:88:68:70:ea:ad:b6: 4e:8a:6c:b2:38:58:f6:62:e4:07:5d:5e:3a:a3:ff:62:b0:1f: 2a:20:a8:df:dd:8f:91:f7:69:59:f9:99:32:19:6b:4c:47:14: d2:1b:17:00:0c:da:e3:91:f9:62:c9:51:7e:14:db:1b:3c:89: 2f:81:6c:0c:8c:4c:29:8d:1e:3d:4c:ab:9e:6c:54:58:6f:63: da:d8:2a:a5:fc:84:19:47:66:c3:69:f5:5e:34:0f:8e:ea:0a: 64:34:39:5f:74:1d:d5:0a:4f:90:73:cf:ca:cc:28:bc:8e:17: 91:15:88:9b:cf:9e:17:9f:61:59:af:7d:59:c7:6a:1e:83:f6: 12:2d:db:83:ba:1c:57:3e:69:09:04:ee:4a:27:a4:b8:e5:d9: 1c:cd:18:e6:e6:76:7b:8c:0a:ad:25:85:27:db:5d:4d:87:d5: 88:61:b1:3d:bb:d2:8b:19:b1:ce:76:37:f9:14:9a:99:58:f9: 9f:2d:c5:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsgrRgJF+qWQPEuZA15ktGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OGU5NjI4NDBjZDMxNjhkZDJlYTM5NmZlNjgxMjc2Mjhh ZWFjMjcwHhcNMjUxMTIyMTcwMDM4WhcNMjUxMTIzMTcwMDM4WjAzMTEwLwYDVQQD EygwNDJkNzE2YWIxMTY0ZTUwZDM3NzBhMmQ2Mzk0ZTYzOGU5MjFlNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fsl0rRze1Trmn+EUEkMr/Mv8ONw 6EC1D5AN9y7rzFoPcOGvcJR0vKIP6KUJusPZpV5fQc1WA3aZp0vZL9P5tdHdh6QE 37hLGnro9452VfnZxn0XnSx/4rn5HjE9xi1rI4hf1yRbXU3x4oqMuinQcTT2BNzR WlW43BKC/iZnN33d89FEV3mA4f1ESm69hprc2ilukPXP4ojgJ0F/uPknIljqGPgJ h1YCfu0tGzdqjsCCutWG6N97HstNb7hwfb1q7LGGzyJtUJAmjdWcm4HQ+4twUEkm NWXxtxH/9LgRIytig9notzYpjWEuh1kcW0VLQ4F7sAM9JmKbHIiB/nNHkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQtcWqxFk5Q03cKLWOU5jjpIeSEMB8GA1UdIwQY MBaAFDiOlihAzTFo3S6jlv5oEnYorqwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEt YzMyMTg0MGMxZmFhLzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEtYzMyMTg0MGMxZmFh LzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0B+DrJJv EbMb8Upd8LYQVNlq3w02TM8fNjB99jeOv/GuvSZ/Jp4Z/gXBRdsvd66i/qj6arD7 IG+5kJbRhxUzi6MHiGhw6q22TopssjhY9mLkB11eOqP/YrAfKiCo392PkfdpWfmZ MhlrTEcU0hsXAAza45H5YslRfhTbGzyJL4FsDIxMKY0ePUyrnmxUWG9j2tgqpfyE GUdmw2n1XjQPjuoKZDQ5X3Qd1QpPkHPPyswovI4XkRWIm8+eF59hWa99WcdqHoP2 Ei3bg7ocVz5pCQTuSiekuOXZHM0Y5uZ2e4wKrSWFJ9tdTYfViGGxPbvSixmxznY3 +RSamVj5ny3FbA== -----END CERTIFICATE-----Generated at Sat Nov 22 21:49:27 2025 by rpki-client