This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft File: OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft (raw, json) Hash identifier: eqRf1h1HFDnEiiWlL0uR/Y72wX6wuAUE2fwefMwFO74= Subject key identifier: 44:A6:D7:68:20:99:F8:46:6A:52:5C:CE:2C:AC:23:D0:5D:4B:ED:D6 Authority key identifier: 39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D Certificate issuer: /CN=39a4603b245b1d20849df88f16ee370cc0b4390d Certificate serial: 019B3456947DFDDAC87659777290037D0786 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft Manifest number: 0372 Signing time: Fri 19 Dec 2025 02:00:47 +0000 Manifest this update: Fri 19 Dec 2025 02:00:47 +0000 Manifest next update: Sat 20 Dec 2025 02:00:47 +0000 Files and hashes: 1: HAUk0L8nWB16tKZ41rvifWUUlnM.roa (hash: z7P8z3hdUqv0dJQpV8Dg51dK3XAE9P4Hf5LV3YuSIpA=) 2: OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl (hash: DplZmQ8aeDLyw/gW1xSveqXo3SvWrhpeswzFndwTOjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:94:7d:fd:da:c8:76:59:77:72:90:03:7d:07:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39a4603b245b1d20849df88f16ee370cc0b4390d Validity Not Before: Dec 19 02:00:47 2025 GMT Not After : Dec 20 02:00:47 2025 GMT Subject: CN=44a6d7682099f8466a525cce2cac23d05d4bedd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ed:c1:35:69:8c:dc:53:aa:50:32:d8:82:95: 05:c7:c5:e4:88:cc:6b:6c:63:4d:54:44:82:f9:3d: 62:c7:0d:bb:82:b6:38:d5:31:3f:5d:d8:6a:30:96: 42:d0:a0:ea:6c:fe:84:c8:0d:13:48:34:9d:d2:99: a3:25:da:73:05:2b:37:a7:49:2e:80:96:b7:6d:cb: 89:ed:cb:23:b5:c2:7f:24:c7:08:37:13:9e:fb:90: 66:bd:b8:44:b1:a7:06:9d:1d:88:2b:41:89:e3:88: 97:bd:02:00:8b:6f:1a:b9:f7:f3:ef:66:9f:78:6a: d6:54:e8:09:c7:d6:02:cc:41:01:ff:4c:89:d3:3c: 92:71:c0:06:9a:66:36:6b:b0:f0:75:be:bf:b7:c4: 30:96:eb:bd:25:d0:41:5e:e4:35:bc:39:73:df:be: c0:41:01:6c:20:24:ff:66:dc:07:db:f4:e8:02:2b: 16:02:ae:72:7e:ab:e4:85:83:88:30:3d:2c:59:2c: 81:ce:7a:f4:29:68:17:57:cb:90:91:18:98:d1:84: 8b:84:57:8c:b7:b9:ab:c9:43:f7:26:23:89:1c:ca: d7:b6:1e:76:1f:38:80:eb:d9:37:c1:4e:1c:de:6c: ef:a0:26:18:69:b6:d7:ae:2a:46:ea:cf:3f:7c:af: 5e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A6:D7:68:20:99:F8:46:6A:52:5C:CE:2C:AC:23:D0:5D:4B:ED:D6 X509v3 Authority Key Identifier: keyid:39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:03:2b:23:fb:ce:fb:54:cc:6e:49:1a:7f:05:af:b3:b6:97: bd:a5:ee:d6:eb:a5:95:45:ff:3f:1c:96:d9:cc:46:da:88:7f: b1:1d:40:cc:e2:2e:f3:60:47:82:16:48:38:39:0b:64:72:54: 46:4c:64:bd:fd:63:ae:1b:3e:15:f2:13:87:79:8e:80:15:c8: 2d:a4:37:7a:e4:09:59:d4:46:5e:55:6e:e0:28:e6:b9:88:e1: 5b:bd:5d:12:24:9d:62:78:04:a3:3d:0c:19:49:32:63:3d:3a: d1:ad:06:e0:81:d2:61:b8:ee:36:65:c4:fb:67:88:aa:f4:06: 32:85:d4:e1:6d:e1:f4:e8:5a:a1:66:8d:87:2d:c1:d9:79:55: fe:1c:de:b4:ef:f7:a9:bc:3d:64:af:6c:f2:22:41:1c:ca:50: 6a:5f:e3:0f:3f:d5:91:c3:f6:2d:bc:20:35:65:c5:48:ca:1d: e3:4b:78:28:ef:15:b6:75:d6:d5:2e:b3:fc:b2:63:c7:74:38: be:9b:58:29:ed:9e:3d:6a:c9:34:70:58:57:48:7f:ae:98:93: 89:1b:90:bf:9c:30:17:ba:83:fb:d1:68:2d:87:94:9f:46:42: cc:a9:b2:8c:1b:b3:28:6b:9f:64:1c:ec:61:e8:95:15:37:07: e9:8d:b9:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VpR9/drIdll3cpADfQeGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YTQ2MDNiMjQ1YjFkMjA4NDlkZjg4ZjE2ZWUzNzBjYzBi NDM5MGQwHhcNMjUxMjE5MDIwMDQ3WhcNMjUxMjIwMDIwMDQ3WjAzMTEwLwYDVQQD Eyg0NGE2ZDc2ODIwOTlmODQ2NmE1MjVjY2UyY2FjMjNkMDVkNGJlZGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+3BNWmM3FOqUDLYgpUFx8XkiMxr bGNNVESC+T1ixw27grY41TE/XdhqMJZC0KDqbP6EyA0TSDSd0pmjJdpzBSs3p0ku gJa3bcuJ7csjtcJ/JMcINxOe+5BmvbhEsacGnR2IK0GJ44iXvQIAi28auffz72af eGrWVOgJx9YCzEEB/0yJ0zySccAGmmY2a7Dwdb6/t8Qwluu9JdBBXuQ1vDlz377A QQFsICT/ZtwH2/ToAisWAq5yfqvkhYOIMD0sWSyBznr0KWgXV8uQkRiY0YSLhFeM t7mryUP3JiOJHMrXth52HziA69k3wU4c3mzvoCYYabbXripG6s8/fK9ebwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESm12ggmfhGalJcziysI9BdS+3WMB8GA1UdIwQY MBaAFDmkYDskWx0ghJ34jxbuNwzAtDkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi81ZTE3N2YtNWY1Zi00MjE0LWE4MTEt ZmNmMTA1ZmQyMDRjLzEvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi81ZTE3N2YtNWY1Zi00MjE0LWE4MTEtZmNmMTA1ZmQyMDRj LzEvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQMrI/vO +1TMbkkafwWvs7aXvaXu1uullUX/PxyW2cxG2oh/sR1AzOIu82BHghZIODkLZHJU Rkxkvf1jrhs+FfITh3mOgBXILaQ3euQJWdRGXlVu4CjmuYjhW71dEiSdYngEoz0M GUkyYz060a0G4IHSYbjuNmXE+2eIqvQGMoXU4W3h9OhaoWaNhy3B2XlV/hzetO/3 qbw9ZK9s8iJBHMpQal/jDz/VkcP2LbwgNWXFSMod40t4KO8VtnXW1S6z/LJjx3Q4 vptYKe2ePWrJNHBYV0h/rpiTiRuQv5wwF7qD+9FoLYeUn0ZCzKmyjBuzKGufZBzs YeiVFTcH6Y25SQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:34:59 2025 by rpki-client