This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft File: OIeaeKWKSFzNiXDwQy2489dxcls.mft (raw, json) Hash identifier: kDtF6JxXB7/cHAv2NNq8kiuYG1wJQ/Be/qj1h6+21lU= Subject key identifier: 14:37:CC:29:71:F2:3D:7E:83:9D:C1:E0:C8:58:C5:57:9A:18:FC:1E Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b Certificate serial: 019B23D0BA23EBF70A26AD4223ED02E92C54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 21:00:40 +0000 Manifest this update: Mon 15 Dec 2025 21:00:40 +0000 Manifest next update: Tue 16 Dec 2025 21:00:40 +0000 Files and hashes: 1: OIeaeKWKSFzNiXDwQy2489dxcls.crl (hash: sqn0RUdYWhXvY9kSBBbxzSBPfx4hjuJEHdWIblKBXtg=) 2: aJF-_eUqR8Yma02F31ybPienJuY.roa (hash: duGwNDtPKrkB5Se3luyctTXBg25/A0K/ZPMK4FyGebo=) 3: xj83lBqnCiYenkchlr_-eEoB-30.roa (hash: rDaj6xDIGI3i5anidMQG7nyOyM3UPZwMFnNZdzH+C5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d0:ba:23:eb:f7:0a:26:ad:42:23:ed:02:e9:2c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b Validity Not Before: Dec 15 21:00:40 2025 GMT Not After : Dec 16 21:00:40 2025 GMT Subject: CN=1437cc2971f23d7e839dc1e0c858c5579a18fc1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:15:03:fd:09:ea:3e:48:f7:03:35:bf:3a:e2: e3:ad:5e:9c:33:e8:bc:e6:ef:cf:ec:b4:8c:c6:5b: cd:be:55:c8:c0:e4:c7:fb:9c:c1:8f:68:77:ed:99: d5:07:d8:e5:05:c9:0a:dc:ea:e3:9c:6e:70:d0:04: 0c:ab:9e:45:36:29:15:4a:f2:99:30:5f:1b:5c:26: 97:3f:46:ec:43:83:06:37:7d:cc:0c:9d:f9:82:b2: 26:3e:79:a6:e9:34:5f:d2:e1:31:53:95:63:53:b5: 2e:ea:46:2a:c8:f5:0a:3f:35:48:1e:c5:1b:36:3d: db:99:8a:30:67:08:cf:60:10:a2:39:cf:15:09:b9: f7:67:60:f5:75:af:35:ae:cc:06:9f:67:3a:55:b8: 4b:da:90:53:c1:9d:ca:16:46:13:d5:b4:00:ec:46: 6f:17:ee:b3:02:31:6e:a7:7c:67:e3:73:e0:2b:f8: ad:85:26:26:59:2d:d7:44:5b:1b:7f:7d:4f:2f:77: 29:98:6f:85:d5:5d:83:92:1a:8e:45:7a:71:2a:18: a4:86:fc:50:09:47:c9:cb:8f:10:f8:65:f9:2b:d6: a0:4c:6f:d3:8a:d2:c2:13:d8:9e:17:a8:99:28:96: c4:e1:4b:67:67:57:60:ce:04:c8:56:bb:67:71:0e: 93:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:37:CC:29:71:F2:3D:7E:83:9D:C1:E0:C8:58:C5:57:9A:18:FC:1E X509v3 Authority Key Identifier: keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a5:17:ed:df:84:40:a8:ed:1e:12:87:07:32:d1:07:89:e7: 1d:71:60:c9:73:f7:53:c9:84:ba:a2:46:bf:13:93:4b:33:67: 41:25:22:32:bf:4f:9d:57:48:45:f5:97:3c:c6:b2:0d:fc:3f: 94:fa:22:ba:64:91:3d:c7:e0:a1:72:88:9d:31:a6:3d:e6:8a: 5f:d5:9d:ef:63:8c:e1:f5:af:ec:ca:8e:11:82:c3:28:07:c7: 86:1f:ea:5f:dd:4b:fb:52:a0:91:81:9c:b2:f4:78:a2:a3:8b: 1d:6f:fe:2c:03:88:d0:92:1f:fb:db:6f:1e:37:55:c1:78:09: a0:f5:7e:0e:c1:24:03:50:68:66:04:07:93:fa:aa:b8:8e:c4: 68:39:bb:b9:e8:60:13:61:01:6e:a1:d0:5e:f6:23:ce:7c:91: 12:7c:23:a2:2c:ed:2f:76:cc:8b:ff:54:0b:31:ff:09:8c:61: 6a:a3:5b:0c:62:8d:92:2a:e9:5f:c4:ab:c1:c1:71:39:94:a2: 00:40:f5:a9:77:b3:f1:dc:fc:ef:2d:d7:63:b5:79:b8:7d:31: f5:68:bd:f2:4c:79:ae:bb:3c:cb:8e:04:78:29:3e:a4:01:22: 5b:55:ac:57:04:12:f1:e7:dd:c8:82:2b:9c:a0:90:2f:7c:61: 84:26:1e:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0Loj6/cKJq1CI+0C6SxUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ODc5YTc4YTU4YTQ4NWNjZDg5NzBmMDQzMmRiOGYzZDc3 MTcyNWIwHhcNMjUxMjE1MjEwMDQwWhcNMjUxMjE2MjEwMDQwWjAzMTEwLwYDVQQD EygxNDM3Y2MyOTcxZjIzZDdlODM5ZGMxZTBjODU4YzU1NzlhMThmYzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhUD/QnqPkj3AzW/OuLjrV6cM+i8 5u/P7LSMxlvNvlXIwOTH+5zBj2h37ZnVB9jlBckK3OrjnG5w0AQMq55FNikVSvKZ MF8bXCaXP0bsQ4MGN33MDJ35grImPnmm6TRf0uExU5VjU7Uu6kYqyPUKPzVIHsUb Nj3bmYowZwjPYBCiOc8VCbn3Z2D1da81rswGn2c6VbhL2pBTwZ3KFkYT1bQA7EZv F+6zAjFup3xn43PgK/ithSYmWS3XRFsbf31PL3cpmG+F1V2DkhqORXpxKhikhvxQ CUfJy48Q+GX5K9agTG/TitLCE9ieF6iZKJbE4UtnZ1dgzgTIVrtncQ6TRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQ3zClx8j1+g53B4MhYxVeaGPweMB8GA1UdIwQY MBaAFDiHmnilikhczYlw8EMtuPPXcXJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jMzg3OTctZDdmYS00YTU3LTlmODMt YTE2YTM0YzQ2ZjMwLzEvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jMzg3OTctZDdmYS00YTU3LTlmODMtYTE2YTM0YzQ2ZjMw LzEvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaUX7d+E QKjtHhKHBzLRB4nnHXFgyXP3U8mEuqJGvxOTSzNnQSUiMr9PnVdIRfWXPMayDfw/ lPoiumSRPcfgoXKInTGmPeaKX9Wd72OM4fWv7MqOEYLDKAfHhh/qX91L+1KgkYGc svR4oqOLHW/+LAOI0JIf+9tvHjdVwXgJoPV+DsEkA1BoZgQHk/qquI7EaDm7uehg E2EBbqHQXvYjznyREnwjoiztL3bMi/9UCzH/CYxhaqNbDGKNkirpX8SrwcFxOZSi AED1qXez8dz87y3XY7V5uH0x9Wi98kx5rrs8y44EeCk+pAEiW1WsVwQS8efdyIIr nKCQL3xhhCYeuw== -----END CERTIFICATE-----Generated at Tue Dec 16 00:02:14 2025 by rpki-client