This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft File: OUaa8zYRt5CE9XXpWxPmZVDts4M.mft (raw, json) Hash identifier: G3NaHnAKcApE+LQAwtDzvZU0ZtEq2q+0qXW0FnZlSQ8= Subject key identifier: 3E:12:91:7D:AA:20:14:6B:0A:54:51:25:12:A4:9D:0B:07:43:C8:D6 Authority key identifier: 39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83 Certificate issuer: /CN=39469af33611b79084f575e95b13e66550edb383 Certificate serial: 019B1080C80073D6CAC749D6186B1F8A1BA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 03:00:33 +0000 Manifest this update: Fri 12 Dec 2025 03:00:33 +0000 Manifest next update: Sat 13 Dec 2025 03:00:33 +0000 Files and hashes: 1: OUaa8zYRt5CE9XXpWxPmZVDts4M.crl (hash: vd6CYomfJKW5emtBtpcBfa4PP/HYC8cN4AvUM+qNBWo=) 2: es8QJCh0ckzLwfP8fcS7Bv9ovnQ.roa (hash: vTpYfK5q1nJR4gRnUXuRk239gyWGFIrlMOouYSRgbnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:80:c8:00:73:d6:ca:c7:49:d6:18:6b:1f:8a:1b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39469af33611b79084f575e95b13e66550edb383 Validity Not Before: Dec 12 03:00:33 2025 GMT Not After : Dec 13 03:00:33 2025 GMT Subject: CN=3e12917daa20146b0a54512512a49d0b0743c8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:27:42:1d:40:08:8f:39:85:6d:db:d2:f3:42: ed:41:8e:e7:d4:a9:cd:66:a8:0d:f8:78:13:71:64: ab:29:ad:ae:5c:32:87:a3:b9:b2:3c:64:18:19:f0: c6:27:79:be:28:1c:67:26:e5:0d:61:d2:6f:5c:3d: ea:d7:04:e4:97:28:70:ee:86:75:d5:61:31:7f:32: da:11:de:b9:62:db:7d:1f:f8:70:c9:a3:a7:15:49: 52:26:5f:78:c4:45:ec:1d:27:b7:a7:77:7b:39:96: e6:37:ad:ba:fb:e9:10:51:73:44:f3:42:a9:5f:c5: fa:a3:49:52:12:c2:0b:2f:03:da:89:c1:7a:81:5f: 3e:20:e8:24:39:96:42:56:92:09:4a:7d:42:2c:96: 45:0d:91:26:84:03:e2:70:b5:2a:5a:31:8b:d4:fa: c1:4f:bb:1e:2e:f8:da:a6:50:44:8f:66:7f:60:b2: 8e:cc:cc:5f:4c:99:66:3f:14:ec:60:a2:10:7e:5e: 87:f8:45:8b:91:cb:52:c2:df:04:52:94:64:b6:31: 7b:8e:71:e5:ea:2a:25:bb:a8:16:13:87:60:41:27: 83:df:79:47:20:8e:f8:b0:64:73:25:57:f7:33:e6: 63:07:42:14:34:08:a1:42:e1:fc:34:77:88:6f:b2: 13:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:12:91:7D:AA:20:14:6B:0A:54:51:25:12:A4:9D:0B:07:43:C8:D6 X509v3 Authority Key Identifier: keyid:39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:dc:cc:07:fc:87:30:70:14:d7:71:a0:c7:9f:7e:1a:fe:0d: 54:7e:32:e8:bc:3e:ea:29:84:4a:47:ed:8e:ff:d4:46:ca:3e: 31:98:71:43:3f:80:b6:97:eb:7f:41:c6:0a:40:93:47:cf:16: ca:95:68:1f:e7:9d:5a:86:af:23:86:46:e8:f6:83:bd:32:c8: 7a:4d:11:50:c1:9a:c3:63:6f:4e:e8:1d:74:52:e1:52:27:21: 75:fa:cb:97:ca:53:ea:d1:5b:b6:51:08:0b:a5:7d:22:8d:07: 31:d4:88:95:a5:2c:02:19:aa:40:43:16:0f:51:e7:b6:0b:0d: 51:da:81:62:4d:29:f3:42:61:7c:44:35:97:f9:e0:ef:ea:26: aa:93:9e:92:bf:9f:f3:47:8c:7d:07:af:84:46:4d:ca:ec:6d: ca:7a:84:7d:df:fe:de:35:df:d5:67:ae:86:a5:d6:2b:da:ac: b2:8d:f1:17:40:b0:f5:3e:df:25:ac:88:02:f5:fc:a2:9c:07: 0a:0a:aa:45:c5:fa:9e:d9:af:d3:84:bf:0f:fe:c9:c0:1b:47: 95:fa:49:f9:68:f6:b1:42:27:54:df:fd:83:14:39:e3:1e:c4: b0:be:c9:7a:79:28:d9:29:d2:a8:f0:f2:7e:85:c4:05:6f:9b: 0d:12:30:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgMgAc9bKx0nWGGsfihukMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NDY5YWYzMzYxMWI3OTA4NGY1NzVlOTViMTNlNjY1NTBl ZGIzODMwHhcNMjUxMjEyMDMwMDMzWhcNMjUxMjEzMDMwMDMzWjAzMTEwLwYDVQQD EygzZTEyOTE3ZGFhMjAxNDZiMGE1NDUxMjUxMmE0OWQwYjA3NDNjOGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnidCHUAIjzmFbdvS80LtQY7n1KnN ZqgN+HgTcWSrKa2uXDKHo7myPGQYGfDGJ3m+KBxnJuUNYdJvXD3q1wTklyhw7oZ1 1WExfzLaEd65Ytt9H/hwyaOnFUlSJl94xEXsHSe3p3d7OZbmN626++kQUXNE80Kp X8X6o0lSEsILLwPaicF6gV8+IOgkOZZCVpIJSn1CLJZFDZEmhAPicLUqWjGL1PrB T7seLvjaplBEj2Z/YLKOzMxfTJlmPxTsYKIQfl6H+EWLkctSwt8EUpRktjF7jnHl 6iolu6gWE4dgQSeD33lHII74sGRzJVf3M+ZjB0IUNAihQuH8NHeIb7ITYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4SkX2qIBRrClRRJRKknQsHQ8jWMB8GA1UdIwQY MBaAFDlGmvM2EbeQhPV16VsT5mVQ7bODMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1VhYTh6WVJ0NUNFOVhYcFd4UG1aVkR0czRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yNWUzOGYtYTA5MS00ZTVjLWJmNjMt NjZkZDJhOTFmYWNhLzEvT1VhYTh6WVJ0NUNFOVhYcFd4UG1aVkR0czRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8yNWUzOGYtYTA5MS00ZTVjLWJmNjMtNjZkZDJhOTFmYWNh LzEvT1VhYTh6WVJ0NUNFOVhYcFd4UG1aVkR0czRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNzMB/yH MHAU13Ggx59+Gv4NVH4y6Lw+6imESkftjv/URso+MZhxQz+Atpfrf0HGCkCTR88W ypVoH+edWoavI4ZG6PaDvTLIek0RUMGaw2NvTugddFLhUichdfrLl8pT6tFbtlEI C6V9Io0HMdSIlaUsAhmqQEMWD1HntgsNUdqBYk0p80JhfEQ1l/ng7+omqpOekr+f 80eMfQevhEZNyuxtynqEfd/+3jXf1WeuhqXWK9qsso3xF0Cw9T7fJayIAvX8opwH CgqqRcX6ntmv04S/D/7JwBtHlfpJ+Wj2sUInVN/9gxQ54x7EsL7Jenko2SnSqPDy foXEBW+bDRIwQg== -----END CERTIFICATE-----Generated at Fri Dec 12 07:01:14 2025 by rpki-client