This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json) Hash identifier: 5r9flMLyYN7C7WMEA44FRJt87IF/exgh4gVPvtk1OHo= Subject key identifier: 4D:17:51:F3:2E:98:3C:A9:25:25:22:4D:33:6A:D2:B0:0C:C9:E8:A6 Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a Certificate serial: 019B0E2667C2EB75DB9A020FBC9140FCCC7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft Manifest number: 14F3 Signing time: Thu 11 Dec 2025 16:02:36 +0000 Manifest this update: Thu 11 Dec 2025 16:02:36 +0000 Manifest next update: Fri 12 Dec 2025 16:02:36 +0000 Files and hashes: 1: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: hKIbeHzDC/fXFBV1IKEWfowogS5iN1qeQWZwrOMub4g=) 2: UR9eQe3KGZ-9c60OTO6AJ5Nv5N4.roa (hash: i7xKIbibG1Wf9vR46/89Xb0uAuY5HlesJatHG5Hh1rk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:67:c2:eb:75:db:9a:02:0f:bc:91:40:fc:cc:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a Validity Not Before: Dec 11 16:02:36 2025 GMT Not After : Dec 12 16:02:36 2025 GMT Subject: CN=4d1751f32e983ca92525224d336ad2b00cc9e8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f0:4c:f9:70:7a:81:a0:cc:24:a7:83:50:65: cb:8b:a1:77:b8:f8:e0:a7:41:2c:52:fd:49:99:cb: 57:a8:d9:d1:41:59:d4:6b:04:e2:f7:dc:18:f9:23: 7f:a8:7a:7f:9a:0c:ef:bb:75:dc:e6:92:3f:ab:6e: da:d6:cb:68:8b:71:c3:f5:ca:94:62:eb:25:33:94: 3c:02:8e:1e:f7:1f:2a:eb:7e:48:c9:bf:15:c3:c6: 0d:57:d0:6e:a2:78:74:6c:ec:90:c4:82:36:f9:34: 5f:a3:3d:3f:a2:41:d5:12:27:55:b7:45:4d:d2:80: 98:22:aa:58:43:cc:40:99:b7:1b:c1:87:5a:ce:6e: 11:88:99:cd:92:c2:c4:30:57:58:c3:e6:d1:42:68: 61:ec:b7:8c:48:4e:ae:5d:12:75:48:e2:d7:98:1f: 9c:49:c7:87:10:bd:a8:59:a7:c9:ce:70:c8:23:7b: 75:73:58:fc:2b:c3:15:b0:af:b7:04:fd:c9:09:a2: b5:42:f0:5c:10:19:3c:f8:08:18:33:e8:3c:a3:75: 45:f9:e8:eb:09:bb:ed:bd:be:db:54:dc:7e:b2:58: eb:c0:82:84:97:3d:bf:a7:1d:66:0b:67:6b:f0:50: fb:00:d8:b8:b8:aa:58:f1:3b:74:02:96:77:df:d0: 0f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:17:51:F3:2E:98:3C:A9:25:25:22:4D:33:6A:D2:B0:0C:C9:E8:A6 X509v3 Authority Key Identifier: keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:78:76:e3:c9:0f:ba:b0:fd:16:23:85:fd:c6:ca:2e:a9:9e: 4e:13:da:15:31:2e:67:22:31:c5:1b:8f:af:36:9b:5d:bd:c7: 7a:24:c4:1c:85:78:30:05:fa:a8:95:df:71:ea:df:e7:63:f6: 14:c4:43:94:1d:aa:f8:68:88:cc:f7:82:91:7f:dc:8e:fc:4f: 26:04:40:43:c5:3c:2a:0b:08:66:e2:8c:76:16:dc:eb:48:79: 68:f3:e9:d8:2d:b5:93:56:d3:ec:61:35:3d:59:18:0d:78:7e: e7:ea:51:95:72:e5:62:70:52:f0:3e:27:e4:c1:7d:ab:d1:5d: b5:90:d4:29:6e:e1:3f:a0:fd:b9:b7:ed:b9:e2:3b:b1:c7:db: 34:d0:fe:30:fb:99:28:8d:08:fe:0e:b3:a0:ff:20:6c:a7:77: 76:9a:73:49:89:9c:94:75:83:f0:83:52:6d:83:b5:25:76:2f: 43:a6:bb:71:7d:ff:6e:aa:d5:ec:d4:2b:aa:16:b2:19:16:be: ed:a4:8c:78:79:cb:86:c9:72:46:3a:54:d9:78:7c:f7:0f:37: ac:64:33:25:b9:2b:c2:4c:41:ae:4c:3f:6c:d1:c8:92:5d:d5: c4:ca:ee:ce:5e:24:65:cc:bf:4a:e8:ff:4a:2b:43:8f:e7:a1: 4a:56:9a:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJmfC63XbmgIPvJFA/Mx6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZWVhODQ2NTUxYzZlNDE5Yjk0N2UwZGExMDdlZWNiMDA3 MDQxOWEwHhcNMjUxMjExMTYwMjM2WhcNMjUxMjEyMTYwMjM2WjAzMTEwLwYDVQQD Eyg0ZDE3NTFmMzJlOTgzY2E5MjUyNTIyNGQzMzZhZDJiMDBjYzllOGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/BM+XB6gaDMJKeDUGXLi6F3uPjg p0EsUv1JmctXqNnRQVnUawTi99wY+SN/qHp/mgzvu3Xc5pI/q27a1stoi3HD9cqU YuslM5Q8Ao4e9x8q635Iyb8Vw8YNV9Buonh0bOyQxII2+TRfoz0/okHVEidVt0VN 0oCYIqpYQ8xAmbcbwYdazm4RiJnNksLEMFdYw+bRQmhh7LeMSE6uXRJ1SOLXmB+c SceHEL2oWafJznDII3t1c1j8K8MVsK+3BP3JCaK1QvBcEBk8+AgYM+g8o3VF+ejr Cbvtvb7bVNx+sljrwIKElz2/px1mC2dr8FD7ANi4uKpY8Tt0ApZ339APSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0XUfMumDypJSUiTTNq0rAMyeimMB8GA1UdIwQY MBaAFDnuqEZVHG5Bm5R+DaEH7ssAcEGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODIt MjgzMWE0ODUwNjQ1LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODItMjgzMWE0ODUwNjQ1 LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3h248kP urD9FiOF/cbKLqmeThPaFTEuZyIxxRuPrzabXb3HeiTEHIV4MAX6qJXfcerf52P2 FMRDlB2q+GiIzPeCkX/cjvxPJgRAQ8U8KgsIZuKMdhbc60h5aPPp2C21k1bT7GE1 PVkYDXh+5+pRlXLlYnBS8D4n5MF9q9FdtZDUKW7hP6D9ubftueI7scfbNND+MPuZ KI0I/g6zoP8gbKd3dppzSYmclHWD8INSbYO1JXYvQ6a7cX3/bqrV7NQrqhayGRa+ 7aSMeHnLhslyRjpU2Xh89w83rGQzJbkrwkxBrkw/bNHIkl3VxMruzl4kZcy/Suj/ SitDj+ehSlaaeA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:19:10 2025 by rpki-client