This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft File: OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft (raw, json) Hash identifier: zXqPPwEz0CvKKEPlo1wUURf7QB31MKA31BEvD0CNLTE= Subject key identifier: 6C:9B:1B:7F:CD:2F:5B:BC:3B:39:05:31:4E:61:50:4F:27:97:B9:68 Authority key identifier: 38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84 Certificate issuer: /CN=38fee6c1f8cb22503925c1e9292bfd181ca95984 Certificate serial: 019B4926C55BDF2E184F001F8C064D563EBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft Manifest number: 06F3 Signing time: Tue 23 Dec 2025 03:00:36 +0000 Manifest this update: Tue 23 Dec 2025 03:00:36 +0000 Manifest next update: Wed 24 Dec 2025 03:00:36 +0000 Files and hashes: 1: OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl (hash: YXyICuLZqApZilJ7NvK0xIbJ+RDaHZlPN/ZCUDVCCv8=) 2: TvJ9FFxxJgWb2YPWhxlxYkv76Os.roa (hash: rwvG+QNgKmW7F7MUDt67iKamV918LuVdz1uOfLvRAOI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:c5:5b:df:2e:18:4f:00:1f:8c:06:4d:56:3e:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fee6c1f8cb22503925c1e9292bfd181ca95984 Validity Not Before: Dec 23 03:00:36 2025 GMT Not After : Dec 24 03:00:36 2025 GMT Subject: CN=6c9b1b7fcd2f5bbc3b3905314e61504f2797b968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:20:03:22:17:5a:df:45:8f:2c:69:20:43:62: 23:66:8a:93:20:02:2f:73:39:9f:b8:ff:be:42:88: d6:8c:3f:8e:41:1d:ab:6c:a1:c6:39:05:27:48:e2: 8a:de:4a:8a:54:c7:98:58:81:2f:4d:1d:b8:2d:f5: e0:fd:bc:a3:dc:61:e5:54:95:5a:5a:af:0a:f0:3a: dd:23:eb:c5:2e:c7:f0:76:6d:a7:7e:78:15:3d:45: c3:71:38:b5:8a:61:f4:dd:b8:75:74:2d:c0:cf:07: 22:5b:85:50:9b:92:c8:20:b5:a5:23:15:8d:ee:6b: 08:27:1e:86:88:13:a9:e6:24:09:62:77:b0:aa:17: 8e:4a:28:a6:40:ba:6b:e9:83:5c:7c:ea:da:a2:3d: b8:55:1c:93:ef:89:f3:48:34:86:72:e6:d9:c2:c9: 79:e5:32:17:4c:2d:5a:49:89:57:6e:ec:61:46:d4: 4e:6a:8d:ca:d8:4b:dc:5e:b0:7b:a7:ac:b5:3e:e1: c1:5d:72:7f:dd:50:2e:b3:26:8d:16:78:6e:46:56: d9:db:17:0e:ef:1c:fa:d2:0e:70:55:98:b3:1f:21: 9a:46:ca:73:ec:92:1d:25:30:a3:6e:d7:a2:0c:15: e5:c8:a9:fc:d2:0c:4d:0c:c7:92:b0:99:67:26:f6: 1a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9B:1B:7F:CD:2F:5B:BC:3B:39:05:31:4E:61:50:4F:27:97:B9:68 X509v3 Authority Key Identifier: keyid:38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:57:18:eb:b9:ad:24:46:f1:74:0e:4f:ec:39:33:fc:ad:ee: 67:95:1b:4e:e5:09:ee:56:e5:9c:1f:32:b8:75:5d:c5:cd:90: 4b:cb:60:59:b7:d0:2c:b4:f7:21:e9:a9:82:6c:22:87:3e:70: f2:ff:7d:33:b8:1c:37:54:e8:e5:b1:e2:41:3c:80:c1:f9:bd: d5:b1:d9:a6:e2:62:35:d5:bc:8b:6f:ba:3d:49:04:45:86:dc: 64:5a:a3:25:a3:6c:6f:16:89:94:fe:31:95:de:56:ea:b1:c3: e3:54:3f:f7:9f:41:cf:f3:4f:51:de:69:33:60:ac:2f:7e:61: 92:bf:8b:08:6b:43:ea:e1:b2:75:c0:2d:11:57:b9:e7:84:13: ce:70:c5:a0:6a:6f:ce:da:cc:99:6d:e1:b2:d0:40:b6:b9:86: 59:4d:fe:cd:a0:59:b3:2f:8f:0c:7a:75:a0:25:3e:63:5c:25: 5c:26:a8:f6:dc:7f:fa:d2:f7:8a:d4:0d:07:80:7b:4f:63:fe: bc:7e:39:72:8d:42:81:e2:6f:df:3c:0f:58:c4:cb:7f:df:4f: ed:17:a3:4a:a7:51:46:3e:73:a6:3b:f5:95:b8:d7:c7:3a:4c: 61:31:b1:11:50:9c:ae:5a:39:4a:0a:6a:98:64:70:f2:34:6d: f5:81:61:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJsVb3y4YTwAfjAZNVj6+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZmVlNmMxZjhjYjIyNTAzOTI1YzFlOTI5MmJmZDE4MWNh OTU5ODQwHhcNMjUxMjIzMDMwMDM2WhcNMjUxMjI0MDMwMDM2WjAzMTEwLwYDVQQD Eyg2YzliMWI3ZmNkMmY1YmJjM2IzOTA1MzE0ZTYxNTA0ZjI3OTdiOTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSADIhda30WPLGkgQ2IjZoqTIAIv czmfuP++QojWjD+OQR2rbKHGOQUnSOKK3kqKVMeYWIEvTR24LfXg/byj3GHlVJVa Wq8K8DrdI+vFLsfwdm2nfngVPUXDcTi1imH03bh1dC3AzwciW4VQm5LIILWlIxWN 7msIJx6GiBOp5iQJYnewqheOSiimQLpr6YNcfOraoj24VRyT74nzSDSGcubZwsl5 5TIXTC1aSYlXbuxhRtROao3K2EvcXrB7p6y1PuHBXXJ/3VAusyaNFnhuRlbZ2xcO 7xz60g5wVZizHyGaRspz7JIdJTCjbteiDBXlyKn80gxNDMeSsJlnJvYaDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGybG3/NL1u8OzkFMU5hUE8nl7loMB8GA1UdIwQY MBaAFDj+5sH4yyJQOSXB6Skr/RgcqVmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1A3bXdmakxJbEE1SmNIcEtTdjlHQnlwV1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lNjE5ODUtYjBiMi00ZTc4LWFmYmYt YjVlNGE2ZGNlMTk0LzEvT1A3bXdmakxJbEE1SmNIcEtTdjlHQnlwV1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9lNjE5ODUtYjBiMi00ZTc4LWFmYmYtYjVlNGE2ZGNlMTk0 LzEvT1A3bXdmakxJbEE1SmNIcEtTdjlHQnlwV1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1cY67mt JEbxdA5P7Dkz/K3uZ5UbTuUJ7lblnB8yuHVdxc2QS8tgWbfQLLT3Iempgmwihz5w 8v99M7gcN1To5bHiQTyAwfm91bHZpuJiNdW8i2+6PUkERYbcZFqjJaNsbxaJlP4x ld5W6rHD41Q/959Bz/NPUd5pM2CsL35hkr+LCGtD6uGydcAtEVe554QTznDFoGpv ztrMmW3hstBAtrmGWU3+zaBZsy+PDHp1oCU+Y1wlXCao9tx/+tL3itQNB4B7T2P+ vH45co1CgeJv3zwPWMTLf99P7RejSqdRRj5zpjv1lbjXxzpMYTGxEVCcrlo5Sgpq mGRw8jRt9YFhPQ== -----END CERTIFICATE-----Generated at Tue Dec 23 06:09:03 2025 by rpki-client