This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json) Hash identifier: RuqHXJa4Rdby5lhSfaCo3z0QvoEdR39AdN7tGCwtDjU= Subject key identifier: 54:5B:89:31:87:A9:E5:34:B2:B7:EB:DA:76:7C:BF:4F:3A:99:61:F3 Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2 Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2 Certificate serial: 019B0F0072960B9A71F598FD38CA79A8C9ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 20:00:46 +0000 Manifest this update: Thu 11 Dec 2025 20:00:46 +0000 Manifest next update: Fri 12 Dec 2025 20:00:46 +0000 Files and hashes: 1: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: XaMOh+3K1OCiC/c8IK3j9NjGP/w0/yXbde2ghxh0kAY=) 2: gkWQrDSBz4IQ4_XEEVy4Y27yU80.roa (hash: VF6i/0gNwt2tTOONBHG2KH5sytCAkilisQqp9v19k2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:72:96:0b:9a:71:f5:98:fd:38:ca:79:a8:c9:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2 Validity Not Before: Dec 11 20:00:46 2025 GMT Not After : Dec 12 20:00:46 2025 GMT Subject: CN=545b893187a9e534b2b7ebda767cbf4f3a9961f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:60:84:66:e5:8f:90:99:55:10:c8:ad:99:b7: 40:34:e4:3d:8c:66:fc:55:81:f3:e4:e3:b2:6f:15: 6d:05:a3:6e:99:97:e3:cc:ae:b9:33:ba:14:80:ef: 77:c8:5c:9d:85:ce:a1:33:19:38:19:0a:b8:72:f4: 98:1c:16:56:a8:55:c7:ee:de:33:7e:7c:7b:e6:7b: 92:85:c8:a5:54:89:a2:6a:5c:56:02:0b:f1:1d:3c: 0e:b0:a7:8e:c4:e8:12:ce:82:13:7e:6a:43:ff:5a: e4:82:54:83:21:10:d4:0b:75:cb:3a:10:87:e6:5e: 16:30:67:94:c7:1b:e8:b6:2d:a4:f6:d6:40:78:ae: 10:ad:28:5c:0d:c2:00:d6:c1:2f:92:2e:8d:46:28: a9:74:f1:59:35:8e:1a:a2:3c:52:77:96:5f:36:96: 2d:45:0e:d4:cc:b7:2f:93:9a:5d:4b:68:e2:03:f8: 2c:56:90:37:df:c2:65:41:a9:98:cb:f3:35:0f:2c: 42:15:ac:d9:c4:f5:0d:79:27:0c:5d:ce:d0:75:c1: 46:ad:10:58:dc:41:a5:01:72:32:7f:ed:2d:82:f8: 16:aa:2a:ab:60:a5:d8:01:31:4b:28:de:42:05:b7: cc:c5:e1:81:c5:2e:79:99:3e:25:e4:38:5a:94:f4: c2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5B:89:31:87:A9:E5:34:B2:B7:EB:DA:76:7C:BF:4F:3A:99:61:F3 X509v3 Authority Key Identifier: keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:57:36:1f:23:52:dd:58:ef:19:24:b1:b0:5c:a5:99:98:39: 0e:31:71:fc:5b:ab:0f:d8:9d:bf:df:88:92:90:64:d3:11:d0: 32:d7:0d:e1:0b:a8:2b:c1:2d:9d:53:f5:dd:e7:5d:41:e9:14: 51:23:d8:1b:3e:96:ab:6e:7a:eb:31:2f:3b:04:65:09:d1:c6: 2e:e9:67:f3:9d:d8:47:6b:56:fc:b1:07:73:4e:c1:16:58:85: a0:8f:2c:f6:55:3e:ae:8a:08:77:99:99:f7:41:7c:14:5c:93: 1d:32:59:0f:71:aa:81:4a:36:36:3d:59:7e:e5:d9:53:15:5a: 4d:e5:aa:b6:71:a6:17:ff:60:35:a7:26:8f:fd:a9:01:25:7f: 7e:36:b1:46:47:19:a9:82:ad:c0:41:9c:8b:e8:d5:53:a6:37: 74:59:1f:3c:65:ec:5b:b2:6d:69:43:5e:98:4b:d6:8d:54:c0: aa:8b:a0:08:69:e1:27:4d:e1:16:fa:b6:dc:be:ed:bf:6a:66: d2:86:9e:e5:66:94:08:b5:01:55:e0:a8:45:1d:e0:7e:dc:e8: 25:57:5f:69:31:63:af:fb:db:37:c6:ec:cf:bd:cf:38:1f:95: de:66:d6:00:bd:d7:04:5e:94:ac:d3:06:85:ec:f9:3a:ef:36: 71:8d:bd:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAHKWC5px9Zj9OMp5qMntMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYTMyZWUwMTI2NmUwMThkMjM2NWMzYmJhMTc3MmY0MjQx NzlhYzIwHhcNMjUxMjExMjAwMDQ2WhcNMjUxMjEyMjAwMDQ2WjAzMTEwLwYDVQQD Eyg1NDViODkzMTg3YTllNTM0YjJiN2ViZGE3NjdjYmY0ZjNhOTk2MWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WCEZuWPkJlVEMitmbdANOQ9jGb8 VYHz5OOybxVtBaNumZfjzK65M7oUgO93yFydhc6hMxk4GQq4cvSYHBZWqFXH7t4z fnx75nuShcilVImialxWAgvxHTwOsKeOxOgSzoITfmpD/1rkglSDIRDUC3XLOhCH 5l4WMGeUxxvoti2k9tZAeK4QrShcDcIA1sEvki6NRiipdPFZNY4aojxSd5ZfNpYt RQ7UzLcvk5pdS2jiA/gsVpA338JlQamYy/M1DyxCFazZxPUNeScMXc7QdcFGrRBY 3EGlAXIyf+0tgvgWqiqrYKXYATFLKN5CBbfMxeGBxS55mT4l5DhalPTC2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRbiTGHqeU0srfr2nZ8v086mWHzMB8GA1UdIwQY MBaAFDqjLuASZuAY0jZcO7oXcvQkF5rCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hMTNhMTctNmM3My00Yzc4LTk3NTIt OTQ5ZGJlOWI1N2ZlLzEvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hMTNhMTctNmM3My00Yzc4LTk3NTItOTQ5ZGJlOWI1N2Zl LzEvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVc2HyNS 3VjvGSSxsFylmZg5DjFx/FurD9idv9+IkpBk0xHQMtcN4QuoK8EtnVP13eddQekU USPYGz6Wq2566zEvOwRlCdHGLuln853YR2tW/LEHc07BFliFoI8s9lU+rooId5mZ 90F8FFyTHTJZD3GqgUo2Nj1ZfuXZUxVaTeWqtnGmF/9gNacmj/2pASV/fjaxRkcZ qYKtwEGci+jVU6Y3dFkfPGXsW7JtaUNemEvWjVTAqougCGnhJ03hFvq23L7tv2pm 0oae5WaUCLUBVeCoRR3gftzoJVdfaTFjr/vbN8bsz73POB+V3mbWAL3XBF6UrNMG hez5Ou82cY29NA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:20:27 2025 by rpki-client