This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft File: OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json) Hash identifier: kOtbyW0CCkttS2MPnjni9rmZv3V7hvNw4kwJJEQ9CeY= Subject key identifier: 3D:3C:AD:81:CE:40:37:D7:50:72:BE:43:74:E5:D2:DF:D7:28:46:76 Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82 Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582 Certificate serial: 019B25531FF09014775B7E9D579AE03258BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft Manifest number: 0E12 Signing time: Tue 16 Dec 2025 04:02:43 +0000 Manifest this update: Tue 16 Dec 2025 04:02:43 +0000 Manifest next update: Wed 17 Dec 2025 04:02:43 +0000 Files and hashes: 1: Gn-kDrXRDHHv43q56kRDHjj8q1w.roa (hash: Tu0d5Ny8jllovtj2b3OGyqwDSE7dzSUuYk4aE5120L8=) 2: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: O8GrW3+oxjr5XL6PNZqxgIWjpLWXA2XVHwkEgt8CXjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:53:1f:f0:90:14:77:5b:7e:9d:57:9a:e0:32:58:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389755423f832a528c93136110f0fe4b10453582 Validity Not Before: Dec 16 04:02:43 2025 GMT Not After : Dec 17 04:02:43 2025 GMT Subject: CN=3d3cad81ce4037d75072be4374e5d2dfd7284676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:a4:4b:91:05:e1:4d:7e:a5:3c:c4:c5:5c: bb:3c:98:24:b2:62:e2:fb:f7:70:84:51:09:2d:92: 5e:ce:56:cc:8b:af:47:ee:39:4e:a2:19:0c:3e:18: 2a:e2:0b:93:6d:de:95:bf:b6:1b:b9:ed:3e:1d:68: d6:c7:59:23:67:d8:d9:8f:a1:10:ae:7f:d0:31:1f: 8f:98:30:0b:56:f9:50:fa:f0:c8:e7:45:be:ba:71: 98:7c:fb:00:9e:9a:4b:db:85:b3:be:5b:bd:80:76: 16:aa:5e:9e:ae:77:1c:c4:ac:25:43:2d:66:e2:af: b9:0c:85:11:5b:1c:b2:c6:e6:f3:d2:91:85:3e:1f: 64:4d:0b:ca:6d:c9:c1:f6:6c:ea:e9:ce:be:e5:8e: b6:9b:cd:4c:f7:7c:1a:ba:11:4e:70:f2:cd:20:e1: ac:e0:27:4a:9c:a4:12:a0:ce:a1:2a:64:8b:1d:9a: f9:9d:4d:f8:06:63:57:b7:ac:6d:06:f5:a0:22:5d: 73:c1:cb:c8:5e:5b:ec:d8:d4:91:f6:be:1e:a0:d6: 31:93:99:ef:6e:64:80:80:8a:7c:d5:f0:40:52:7e: 69:16:29:3f:39:1a:d2:1c:a7:30:00:d4:7d:6c:fe: 57:c1:e1:01:97:e9:cb:0a:ee:8a:a4:38:ec:c4:f6: c5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3C:AD:81:CE:40:37:D7:50:72:BE:43:74:E5:D2:DF:D7:28:46:76 X509v3 Authority Key Identifier: keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:34:48:e5:44:34:67:78:fc:c1:f3:a0:a7:8d:7a:be:31:c6: 8c:03:95:42:96:8f:3d:f5:17:59:7d:a7:f5:2d:2b:69:23:85: 08:86:44:0b:7c:0a:0d:af:01:0c:ca:8d:82:af:4b:76:17:f9: 11:db:08:e3:d9:d6:84:3b:a0:20:57:c7:aa:33:ae:a8:75:7f: 80:b7:83:f0:e3:38:3e:71:18:fe:41:e9:0f:4f:00:37:ba:92: e2:44:92:12:85:56:ce:cb:a1:b9:0f:00:f2:89:35:dc:06:cd: 47:19:c0:e9:cd:5b:de:94:2f:cb:26:36:d4:8e:08:24:6a:16: af:73:70:5c:cd:48:b4:15:60:75:3a:38:7d:f4:52:71:de:09: 2e:65:4e:34:32:0f:6f:6e:44:f9:d6:39:38:b8:65:5f:f8:d4: cd:a5:e7:7d:9b:7b:83:7a:70:40:60:82:c4:b2:28:a8:d1:46: 42:43:bf:a7:0f:1f:fa:bb:77:ca:c0:71:a5:a7:f0:12:f0:30: 3e:6f:8e:5a:c5:65:e4:3d:a5:3b:2e:2c:07:c0:42:b4:71:c3: 10:5a:d8:0c:f5:8a:20:a2:92:f8:9b:ef:62:34:ad:ce:59:36: 58:62:a2:84:78:fa:69:66:39:62:4c:8f:97:78:9c:05:d6:1c: 1b:4b:8c:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUx/wkBR3W36dV5rgMli7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OTc1NTQyM2Y4MzJhNTI4YzkzMTM2MTEwZjBmZTRiMTA0 NTM1ODIwHhcNMjUxMjE2MDQwMjQzWhcNMjUxMjE3MDQwMjQzWjAzMTEwLwYDVQQD EygzZDNjYWQ4MWNlNDAzN2Q3NTA3MmJlNDM3NGU1ZDJkZmQ3Mjg0Njc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk6kS5EF4U1+pTzExVy7PJgksmLi +/dwhFEJLZJezlbMi69H7jlOohkMPhgq4guTbd6Vv7Ybue0+HWjWx1kjZ9jZj6EQ rn/QMR+PmDALVvlQ+vDI50W+unGYfPsAnppL24Wzvlu9gHYWql6ernccxKwlQy1m 4q+5DIURWxyyxubz0pGFPh9kTQvKbcnB9mzq6c6+5Y62m81M93wauhFOcPLNIOGs 4CdKnKQSoM6hKmSLHZr5nU34BmNXt6xtBvWgIl1zwcvIXlvs2NSR9r4eoNYxk5nv bmSAgIp81fBAUn5pFik/ORrSHKcwANR9bP5XweEBl+nLCu6KpDjsxPbFiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD08rYHOQDfXUHK+Q3Tl0t/XKEZ2MB8GA1UdIwQY MBaAFDiXVUI/gypSjJMTYRDw/ksQRTWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0pkVlFqLURLbEtNa3hOaEVQRC1TeEJGTllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9kOWI1OTYtNjAxZS00NDI2LWE0Mjgt NDY5NTdiZDg4NjBkLzEvT0pkVlFqLURLbEtNa3hOaEVQRC1TeEJGTllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9kOWI1OTYtNjAxZS00NDI2LWE0MjgtNDY5NTdiZDg4NjBk LzEvT0pkVlFqLURLbEtNa3hOaEVQRC1TeEJGTllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzRI5UQ0 Z3j8wfOgp416vjHGjAOVQpaPPfUXWX2n9S0raSOFCIZEC3wKDa8BDMqNgq9Ldhf5 EdsI49nWhDugIFfHqjOuqHV/gLeD8OM4PnEY/kHpD08AN7qS4kSSEoVWzsuhuQ8A 8ok13AbNRxnA6c1b3pQvyyY21I4IJGoWr3NwXM1ItBVgdTo4ffRScd4JLmVONDIP b25E+dY5OLhlX/jUzaXnfZt7g3pwQGCCxLIoqNFGQkO/pw8f+rt3ysBxpafwEvAw Pm+OWsVl5D2lOy4sB8BCtHHDEFrYDPWKIKKS+JvvYjStzlk2WGKihHj6aWY5YkyP l3icBdYcG0uMNw== -----END CERTIFICATE-----Generated at Tue Dec 16 12:52:04 2025 by rpki-client