This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft File: OyMEQv6un8Jri9iH-qDtAnWCelg.mft (raw, json) Hash identifier: ejMkaG4cC3rvmQ5AXDefHkMcYIqgqixU69kRF0RDxr4= Subject key identifier: 4D:E5:9F:73:E4:DE:81:CA:BD:1C:6D:98:C7:BE:D2:FB:A8:62:D3:5C Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58 Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58 Certificate serial: 019B34C5096D71310F67D29BA1107052B32E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft Manifest number: 1794 Signing time: Fri 19 Dec 2025 04:01:26 +0000 Manifest this update: Fri 19 Dec 2025 04:01:26 +0000 Manifest next update: Sat 20 Dec 2025 04:01:26 +0000 Files and hashes: 1: OyMEQv6un8Jri9iH-qDtAnWCelg.crl (hash: rBnhvz0dAwox/73FBvpGnpalInDvblju6DLFa9ot9pA=) 2: bYZg5VNnDS3g8_L52xT8Z2YcZHI.roa (hash: 0G8Nfe3vvbb4R9E1kVJGXztygd9crnFLcrSCl4faEH8=) 3: uQkJp5gejSkWH0cMZgm49Hidyo8.roa (hash: DCLiMhSoFxaa6tq6Shu2BcZUIDAzjhGc3ukCezafEuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:09:6d:71:31:0f:67:d2:9b:a1:10:70:52:b3:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58 Validity Not Before: Dec 19 04:01:26 2025 GMT Not After : Dec 20 04:01:26 2025 GMT Subject: CN=4de59f73e4de81cabd1c6d98c7bed2fba862d35c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:3e:18:71:01:ad:38:cd:d6:0f:97:2b:aa: db:c8:f4:0f:c8:3a:cd:27:02:b0:0e:90:f5:98:1c: e7:74:6a:50:08:37:6b:36:64:79:d1:5c:90:79:38: 5b:ab:37:a1:11:5b:8d:c1:7b:27:e1:49:5e:df:af: 4f:6c:a6:38:8e:be:36:43:2f:08:5b:52:94:5e:2a: b2:be:06:63:b4:fd:36:ae:0d:e0:63:00:01:8c:6f: 22:6a:b3:af:54:92:55:d2:06:6a:82:c9:c8:97:36: 12:ba:75:28:81:6f:b3:d6:59:e5:0b:9c:83:34:f8: f8:7f:93:45:68:8c:43:4d:8e:b0:28:ce:95:3e:62: 61:64:98:f1:26:e4:c3:cb:22:ca:a7:58:19:95:d6: d8:88:e6:0f:80:d8:69:88:f0:5d:d8:41:2b:a5:74: 92:6a:a0:7a:aa:08:b1:64:7d:0a:57:32:b3:56:fd: a0:b7:27:d8:40:c4:94:b0:b1:b0:ba:79:e1:09:91: 7e:a6:b4:09:47:96:d2:bd:72:98:fd:c3:cb:62:36: c0:fd:d6:72:69:f9:04:96:53:dc:7e:35:07:b7:06: f4:35:a7:9d:97:f9:7b:67:35:1e:7e:f7:a8:97:28: a6:bf:6c:9a:8f:11:86:17:ea:d5:66:03:a1:89:43: 4c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E5:9F:73:E4:DE:81:CA:BD:1C:6D:98:C7:BE:D2:FB:A8:62:D3:5C X509v3 Authority Key Identifier: keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:49:7c:41:eb:2c:47:1b:64:79:0b:d0:ae:07:40:19:21:66: 15:2d:74:e1:04:1e:52:cc:9e:0a:e5:2b:30:70:df:84:11:28: 8c:59:79:58:50:9c:03:f3:db:53:01:3b:cd:ee:ac:a2:1c:03: 20:a2:1d:9b:13:5c:ef:cb:03:27:f4:90:4a:58:b3:3a:5a:df: 56:f0:43:70:29:f4:68:1d:2b:fd:32:8a:88:8b:2b:77:47:c2: 09:3f:11:a9:89:b1:28:aa:e2:73:c4:68:92:72:d5:07:40:c6: 94:0e:7f:73:22:b3:70:7a:1d:64:86:16:cc:e3:33:e8:ba:d4: 95:26:60:f0:57:4a:52:f6:4c:11:08:b4:56:91:02:e0:2b:51: 56:a0:f6:05:b6:5b:65:59:93:83:06:d9:3d:40:af:2e:df:87: 1f:d3:fa:7f:ce:a6:8c:53:58:b7:c0:1c:af:f4:c8:46:d5:ca: 5f:08:f1:15:fe:3f:c4:4c:42:a4:ff:9b:f0:56:44:4b:da:76: bc:3e:e2:85:61:7f:0e:86:a4:3b:73:77:98:d6:2d:49:a0:73: 15:43:63:85:6b:65:7b:04:bb:b2:54:75:b0:32:94:ef:01:06: dd:97:0c:09:47:15:3e:84:c9:52:ca:f2:c6:5f:35:93:cf:e6: ea:14:b8:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xQltcTEPZ9KboRBwUrMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMjMwNDQyZmVhZTlmYzI2YjhiZDg4N2ZhYTBlZDAyNzU4 MjdhNTgwHhcNMjUxMjE5MDQwMTI2WhcNMjUxMjIwMDQwMTI2WjAzMTEwLwYDVQQD Eyg0ZGU1OWY3M2U0ZGU4MWNhYmQxYzZkOThjN2JlZDJmYmE4NjJkMzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnQ+GHEBrTjN1g+XK6rbyPQPyDrN JwKwDpD1mBzndGpQCDdrNmR50VyQeThbqzehEVuNwXsn4Ule369PbKY4jr42Qy8I W1KUXiqyvgZjtP02rg3gYwABjG8iarOvVJJV0gZqgsnIlzYSunUogW+z1lnlC5yD NPj4f5NFaIxDTY6wKM6VPmJhZJjxJuTDyyLKp1gZldbYiOYPgNhpiPBd2EErpXSS aqB6qgixZH0KVzKzVv2gtyfYQMSUsLGwunnhCZF+prQJR5bSvXKY/cPLYjbA/dZy afkEllPcfjUHtwb0Naedl/l7ZzUefveolyimv2yajxGGF+rVZgOhiUNM9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3ln3Pk3oHKvRxtmMe+0vuoYtNcMB8GA1UdIwQY MBaAFDsjBEL+rp/Ca4vYh/qg7QJ1gnpYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3lNRVF2NnVuOEpyaTlpSC1xRHRBbldDZWxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zYTEwOTQtOWI3MC00MjUxLWI2OGYt NzI2NzA3Mzc2MWQ0LzEvT3lNRVF2NnVuOEpyaTlpSC1xRHRBbldDZWxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8zYTEwOTQtOWI3MC00MjUxLWI2OGYtNzI2NzA3Mzc2MWQ0 LzEvT3lNRVF2NnVuOEpyaTlpSC1xRHRBbldDZWxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUl8Qess RxtkeQvQrgdAGSFmFS104QQeUsyeCuUrMHDfhBEojFl5WFCcA/PbUwE7ze6sohwD IKIdmxNc78sDJ/SQSlizOlrfVvBDcCn0aB0r/TKKiIsrd0fCCT8RqYmxKKric8Ro knLVB0DGlA5/cyKzcHodZIYWzOMz6LrUlSZg8FdKUvZMEQi0VpEC4CtRVqD2BbZb ZVmTgwbZPUCvLt+HH9P6f86mjFNYt8Acr/TIRtXKXwjxFf4/xExCpP+b8FZES9p2 vD7ihWF/DoakO3N3mNYtSaBzFUNjhWtlewS7slR1sDKU7wEG3ZcMCUcVPoTJUsry xl81k8/m6hS4Lw== -----END CERTIFICATE-----Generated at Fri Dec 19 11:51:38 2025 by rpki-client