This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft File: OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft (raw, json) Hash identifier: 8l+5m/0q2/4yb9M/ju+isk3bdScecVZSGqyy92IJIbQ= Subject key identifier: 69:BE:03:06:B9:92:AF:90:1F:FA:76:BF:C0:94:6C:4B:6C:F7:2A:59 Authority key identifier: 39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37 Certificate issuer: /CN=398881e06383fd2c36e9f245c4bfa1301d15a537 Certificate serial: 019B34C5160B5FA0DECB73621BC81EB96934 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft Manifest number: 0C4E Signing time: Fri 19 Dec 2025 04:01:29 +0000 Manifest this update: Fri 19 Dec 2025 04:01:29 +0000 Manifest next update: Sat 20 Dec 2025 04:01:29 +0000 Files and hashes: 1: OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl (hash: Dc2q3QjHzVyOvfIDdZG3DsMm3890sRI7wHzO5ttQ9Co=) 2: ZheJClH79M-pTRLGEsquKEEr6pM.roa (hash: eeP+fsrVhAPz7GiAy+y57uO8gQvXWPRMB7ruMgXE6Js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:16:0b:5f:a0:de:cb:73:62:1b:c8:1e:b9:69:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=398881e06383fd2c36e9f245c4bfa1301d15a537 Validity Not Before: Dec 19 04:01:29 2025 GMT Not After : Dec 20 04:01:29 2025 GMT Subject: CN=69be0306b992af901ffa76bfc0946c4b6cf72a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0d:9a:cf:86:72:a1:31:b1:22:79:fc:c0:2c: fe:6b:eb:a1:c2:b7:65:5a:7c:8f:ea:fc:15:da:74: a1:16:cc:d0:ef:d5:30:49:a9:71:95:a1:ed:5f:4e: f8:2f:f6:ce:2f:5a:b2:a1:02:40:70:df:ef:27:78: 93:ce:d2:82:4f:e6:7c:25:90:c3:30:5d:e0:56:50: a1:15:f3:37:a2:2e:24:0e:f0:b0:4d:22:76:82:5a: 1c:93:31:96:59:26:98:98:eb:3d:05:41:57:2b:ba: 46:c4:a6:88:ff:de:31:97:d9:9f:c5:eb:31:3a:f8: 75:0a:37:1b:c4:f1:9b:1d:e9:8e:d6:43:03:8a:18: cc:5b:10:a7:a0:d7:be:f0:ab:cb:eb:4e:c5:12:8c: 93:4f:8e:09:57:d6:9b:a0:41:73:8c:19:7b:b2:aa: 6c:fe:e3:fd:6f:e3:30:60:b0:37:cd:35:d4:df:cc: 9c:be:8a:f4:f4:51:ab:c8:6c:c3:08:86:cd:62:87: 7f:56:bc:1c:a8:28:ed:b2:d2:27:65:c3:c8:f2:4d: 2a:71:bc:d8:10:67:60:35:4d:e6:08:48:96:da:76: 39:8e:fe:8e:5d:ca:2b:69:6b:db:a2:6c:6d:16:5b: 4e:e7:ff:08:2e:61:e8:bd:97:4a:30:bd:11:a3:35: 85:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BE:03:06:B9:92:AF:90:1F:FA:76:BF:C0:94:6C:4B:6C:F7:2A:59 X509v3 Authority Key Identifier: keyid:39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:52:07:39:9c:2a:cd:4c:02:be:fa:d9:c8:7c:4a:e1:ec:18: d3:99:69:a2:25:e7:c9:6d:3f:2b:98:d1:18:9f:44:24:a0:ca: 0c:2e:3f:27:76:15:26:71:64:dc:59:0b:6a:04:c2:54:bf:4f: 2f:fe:5a:19:6a:7b:7a:4c:70:d4:fd:7c:e8:0b:53:0e:bc:93: c7:05:c8:22:2d:ab:73:20:6a:33:fc:01:63:14:c9:5f:d9:e7: 3e:1a:a2:88:f5:5f:5e:2f:02:eb:46:52:95:0f:7d:ed:08:c9: 82:b6:00:71:2f:64:2f:fa:50:9f:95:8d:c2:1f:47:5a:25:4e: 26:2e:fe:e1:88:c9:ab:58:3d:b5:a0:28:54:84:f5:74:b7:f1: 5e:c9:71:42:ed:09:8e:3a:cd:6b:1b:5c:5f:f8:f9:bb:47:3d: 77:78:d0:86:3e:76:5e:f4:26:6c:cc:eb:5f:62:00:26:92:5d: 9f:90:0e:76:84:3a:cc:e4:85:88:6f:cc:ae:d5:14:57:92:a9: 1b:23:d2:0e:4a:90:16:e2:52:fa:d4:2b:81:15:12:f2:03:bd: ab:57:fe:57:43:32:cd:97:f7:f0:18:70:29:af:f6:2b:fb:c8: 65:82:f8:af:30:67:11:01:bd:eb:d6:29:c9:72:49:b6:ed:3d: 57:79:b4:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xRYLX6Dey3NiG8geuWk0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ODg4MWUwNjM4M2ZkMmMzNmU5ZjI0NWM0YmZhMTMwMWQx NWE1MzcwHhcNMjUxMjE5MDQwMTI5WhcNMjUxMjIwMDQwMTI5WjAzMTEwLwYDVQQD Eyg2OWJlMDMwNmI5OTJhZjkwMWZmYTc2YmZjMDk0NmM0YjZjZjcyYTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3w2az4ZyoTGxInn8wCz+a+uhwrdl WnyP6vwV2nShFszQ79UwSalxlaHtX074L/bOL1qyoQJAcN/vJ3iTztKCT+Z8JZDD MF3gVlChFfM3oi4kDvCwTSJ2glockzGWWSaYmOs9BUFXK7pGxKaI/94xl9mfxesx Ovh1CjcbxPGbHemO1kMDihjMWxCnoNe+8KvL607FEoyTT44JV9aboEFzjBl7sqps /uP9b+MwYLA3zTXU38ycvor09FGryGzDCIbNYod/VrwcqCjtstInZcPI8k0qcbzY EGdgNU3mCEiW2nY5jv6OXcoraWvbomxtFltO5/8ILmHovZdKML0RozWFTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGm+Awa5kq+QH/p2v8CUbEts9ypZMB8GA1UdIwQY MBaAFDmIgeBjg/0sNunyRcS/oTAdFaU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1lpQjRHT0RfU3cyNmZKRnhMLWhNQjBWcFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9jZGEyMTUtNDlhZS00MDdiLWFmM2It MzU5ZTRlNGQ5MTc1LzEvT1lpQjRHT0RfU3cyNmZKRnhMLWhNQjBWcFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9jZGEyMTUtNDlhZS00MDdiLWFmM2ItMzU5ZTRlNGQ5MTc1 LzEvT1lpQjRHT0RfU3cyNmZKRnhMLWhNQjBWcFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFIHOZwq zUwCvvrZyHxK4ewY05lpoiXnyW0/K5jRGJ9EJKDKDC4/J3YVJnFk3FkLagTCVL9P L/5aGWp7ekxw1P186AtTDryTxwXIIi2rcyBqM/wBYxTJX9nnPhqiiPVfXi8C60ZS lQ997QjJgrYAcS9kL/pQn5WNwh9HWiVOJi7+4YjJq1g9taAoVIT1dLfxXslxQu0J jjrNaxtcX/j5u0c9d3jQhj52XvQmbMzrX2IAJpJdn5AOdoQ6zOSFiG/MrtUUV5Kp GyPSDkqQFuJS+tQrgRUS8gO9q1f+V0MyzZf38BhwKa/2K/vIZYL4rzBnEQG969Yp yXJJtu09V3m0aw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:59:05 2025 by rpki-client