This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft File: OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft (raw, json) Hash identifier: VfhkNsIoPpwbYjfojjUK5MCtQjDc33J3YfPL79TjxCo= Subject key identifier: 0C:6B:96:6A:53:78:CA:D0:C6:2F:3E:3F:1F:C8:C1:B2:77:26:B7:4C Authority key identifier: 39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98 Certificate issuer: /CN=39abeb591716e908345d329fffd3700352315b98 Certificate serial: 019B19BC2B1252E0734FDCB8A93274AC4D7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft Manifest number: 140A Signing time: Sat 13 Dec 2025 22:02:00 +0000 Manifest this update: Sat 13 Dec 2025 22:02:00 +0000 Manifest next update: Sun 14 Dec 2025 22:02:00 +0000 Files and hashes: 1: OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl (hash: NI5UfxsmsJZlHEgwsVw6fg15VQ4wfVZEM17vy4JHAT0=) 2: sRj9HIjhF6xAzSk8DsZiSona3z0.roa (hash: CKtuOB2HNTtxCaJDk6aobi//RFXR4AYliP1W8tH3cu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:2b:12:52:e0:73:4f:dc:b8:a9:32:74:ac:4d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39abeb591716e908345d329fffd3700352315b98 Validity Not Before: Dec 13 22:02:00 2025 GMT Not After : Dec 14 22:02:00 2025 GMT Subject: CN=0c6b966a5378cad0c62f3e3f1fc8c1b27726b74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:82:27:97:44:46:b0:d7:a5:8a:d6:9f:d7:b6: c6:d8:a3:d1:a9:c0:e1:01:87:44:1e:3b:37:9c:12: 15:bc:8e:4b:2e:04:aa:d0:f1:17:29:79:86:d8:f6: d6:5c:d8:5c:14:14:a9:42:eb:44:c4:cb:49:47:24: 2a:3f:c0:6b:e6:a8:81:12:84:11:0f:1e:a2:2b:dd: bb:03:43:9e:37:94:9e:4d:56:49:92:a5:6a:d6:7c: 1f:9c:69:26:88:d5:16:cd:12:fe:6f:c7:66:04:a1: 70:d6:67:8a:73:c6:88:a1:99:e6:b8:bb:0a:a8:da: 68:c9:51:ac:c5:56:cf:15:43:16:fa:17:30:a7:8a: d1:0b:6d:d7:4c:6d:f2:f1:13:a7:0f:d4:04:16:ab: 06:1f:7d:ca:60:f0:5a:52:50:7c:32:65:29:7f:64: 80:c5:23:a3:f3:cf:84:37:b4:2e:72:ba:81:a8:01: 34:cd:03:bf:f5:c6:2a:8e:a5:fc:a8:e3:45:d4:d5: 61:b5:61:af:5d:34:d5:29:44:f1:7d:06:3b:10:ee: 27:a6:f3:d0:c0:12:d5:77:79:42:fb:8c:7e:65:96: 04:ff:bf:bc:8f:a9:67:4b:a1:e4:09:84:f5:91:72: f9:46:ab:1b:7b:e7:14:94:70:9c:10:f6:58:86:c0: d7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6B:96:6A:53:78:CA:D0:C6:2F:3E:3F:1F:C8:C1:B2:77:26:B7:4C X509v3 Authority Key Identifier: keyid:39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:9c:3c:99:3d:6e:41:5a:9f:47:63:38:78:d7:49:a3:d4:97: 48:18:46:d2:55:34:ad:01:45:71:d1:93:6f:49:39:79:92:a4: 5b:87:62:5b:48:1c:b2:bc:70:67:ed:c8:6a:9e:26:bb:30:a2: 96:c9:e2:fd:3a:2e:31:4d:4f:8e:a7:30:eb:04:a6:6e:8a:f0: d3:74:ab:b4:c6:6d:52:b2:95:e7:a5:86:27:17:20:59:ea:b8: d8:01:4c:70:75:e1:d3:6e:2c:c5:f4:90:4f:6f:86:de:ff:c5: 48:f6:b9:1a:c6:12:3c:11:78:53:35:ce:c9:4d:b6:21:00:9d: de:01:13:66:45:d4:52:47:ae:13:67:2b:81:55:7b:7e:a1:ea: f9:23:3d:cb:c6:b9:19:37:96:08:d2:f7:97:a6:cd:07:fb:4b: 7c:fc:ea:c6:d7:6a:50:27:35:7a:50:fb:62:ff:4a:cb:41:7e: 25:5f:99:67:a1:0c:7d:14:6d:7c:89:71:0c:b7:c1:9c:2d:c3: 20:b5:3f:88:20:a4:e0:c9:e9:c1:77:bb:fb:3e:7b:05:c3:10: 95:c0:48:ae:3b:d0:1a:66:96:57:8c:05:5f:2d:b4:97:60:29: e7:c7:6e:a4:31:2b:00:57:44:d7:71:b5:26:15:2f:f5:cf:c9: e3:fb:3a:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvCsSUuBzT9y4qTJ0rE1/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YWJlYjU5MTcxNmU5MDgzNDVkMzI5ZmZmZDM3MDAzNTIz MTViOTgwHhcNMjUxMjEzMjIwMjAwWhcNMjUxMjE0MjIwMjAwWjAzMTEwLwYDVQQD EygwYzZiOTY2YTUzNzhjYWQwYzYyZjNlM2YxZmM4YzFiMjc3MjZiNzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YInl0RGsNelitaf17bG2KPRqcDh AYdEHjs3nBIVvI5LLgSq0PEXKXmG2PbWXNhcFBSpQutExMtJRyQqP8Br5qiBEoQR Dx6iK927A0OeN5SeTVZJkqVq1nwfnGkmiNUWzRL+b8dmBKFw1meKc8aIoZnmuLsK qNpoyVGsxVbPFUMW+hcwp4rRC23XTG3y8ROnD9QEFqsGH33KYPBaUlB8MmUpf2SA xSOj88+EN7QucrqBqAE0zQO/9cYqjqX8qONF1NVhtWGvXTTVKUTxfQY7EO4npvPQ wBLVd3lC+4x+ZZYE/7+8j6lnS6HkCYT1kXL5Rqsbe+cUlHCcEPZYhsDXMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxrlmpTeMrQxi8+Px/IwbJ3JrdMMB8GA1UdIwQY MBaAFDmr61kXFukINF0yn//TcANSMVuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iMDhmMjItMTFmNi00ZWU1LWEyMzEt YjdjZDQ0OTBhOTgzLzEvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9iMDhmMjItMTFmNi00ZWU1LWEyMzEtYjdjZDQ0OTBhOTgz LzEvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZw8mT1u QVqfR2M4eNdJo9SXSBhG0lU0rQFFcdGTb0k5eZKkW4diW0gcsrxwZ+3Iap4muzCi lsni/TouMU1Pjqcw6wSmborw03SrtMZtUrKV56WGJxcgWeq42AFMcHXh024sxfSQ T2+G3v/FSPa5GsYSPBF4UzXOyU22IQCd3gETZkXUUkeuE2crgVV7fqHq+SM9y8a5 GTeWCNL3l6bNB/tLfPzqxtdqUCc1elD7Yv9Ky0F+JV+ZZ6EMfRRtfIlxDLfBnC3D ILU/iCCk4MnpwXe7+z57BcMQlcBIrjvQGmaWV4wFXy20l2Ap58dupDErAFdE13G1 JhUv9c/J4/s6Ww== -----END CERTIFICATE-----Generated at Sun Dec 14 03:28:03 2025 by rpki-client