This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json) Hash identifier: ykgTs00Rh8AZSsxi6qGc/13Hb47DZZk623ugGm3m4Sw= Subject key identifier: 45:4E:4A:6B:89:5E:02:BC:43:15:AD:06:14:D8:AC:46:FA:FC:A2:74 Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29 Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229 Certificate serial: 019B27AE54E83ACA56846D4800EA8009F719 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft Manifest number: 0DFB Signing time: Tue 16 Dec 2025 15:01:34 +0000 Manifest this update: Tue 16 Dec 2025 15:01:34 +0000 Manifest next update: Wed 17 Dec 2025 15:01:34 +0000 Files and hashes: 1: Mbpk8QVkIW5FKgYutE5nhEuorhg.roa (hash: XJAfJvP6njUJvUjL+QeRVdBXhasJwe6UWIW0OOiZ2es=) 2: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: joQHGrzWP+cCmzGyxQlB0uHynVl4lXAv2jNP7nbfpj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ae:54:e8:3a:ca:56:84:6d:48:00:ea:80:09:f7:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229 Validity Not Before: Dec 16 15:01:34 2025 GMT Not After : Dec 17 15:01:34 2025 GMT Subject: CN=454e4a6b895e02bc4315ad0614d8ac46fafca274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:00:d6:1b:76:61:3d:2b:25:30:9d:1a:80:4b: 20:dc:c9:5a:9d:86:d6:f5:b4:85:21:fe:ab:1c:00: 4c:d8:7b:64:d3:df:11:29:a5:31:6e:ec:f5:a5:80: 41:89:2b:41:d5:56:53:b7:da:52:43:0c:1a:83:44: 38:31:fa:6e:19:be:4c:93:ad:5e:88:c7:04:6f:6c: 6d:99:3c:7a:ea:ae:62:e0:45:ef:df:40:a4:fb:f9: b3:86:c9:64:1e:d4:e0:63:88:20:c1:86:31:89:ac: 55:54:7f:81:d0:86:2e:22:b4:f6:57:09:63:8b:8b: 2a:e4:e4:20:21:57:3a:19:bd:46:a0:9c:71:61:60: 11:1f:d4:3f:7c:61:17:42:b6:00:0a:cf:62:3d:c0: 43:e3:61:3d:38:69:cb:ef:a5:39:ea:43:55:65:f3: a3:cb:3d:d3:bd:1d:10:e3:77:1e:a1:50:11:05:0c: 6b:16:23:17:00:ed:41:a3:a0:f1:79:17:67:88:1d: 06:a4:8a:9b:5a:0a:29:16:07:ef:80:af:ea:69:5d: 89:32:6d:d4:e4:68:b6:a5:eb:89:0f:e4:90:e1:05: 81:44:bb:4b:20:e3:50:f9:54:48:54:49:3b:bf:02: 93:9c:8c:02:54:c0:78:01:5a:6b:3c:58:75:f8:5f: d1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4E:4A:6B:89:5E:02:BC:43:15:AD:06:14:D8:AC:46:FA:FC:A2:74 X509v3 Authority Key Identifier: keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:44:9e:8f:d0:93:a3:71:50:47:c9:d2:20:ed:c3:9e:97:cd: 07:7a:98:a7:94:6f:2a:8e:0e:d6:d7:38:27:03:36:09:44:85: 03:96:7c:a9:9f:2a:51:0e:74:9c:de:7a:aa:12:e1:83:3d:a5: 11:40:c9:dc:9d:6f:d0:bc:ef:b2:c5:3f:83:63:23:75:3d:db: 6b:75:d2:b1:66:6e:b0:b1:11:83:c9:bf:8c:7b:b8:0c:0c:8b: 4a:bc:a6:f7:bb:cf:78:3e:fd:a0:54:df:ed:0f:3a:1b:bc:5f: c5:ce:24:07:2f:20:4a:05:62:8a:08:8d:22:47:82:01:76:a4: 6c:49:c9:84:6b:61:9a:3a:c8:29:41:d7:12:e7:6e:b6:e9:cf: b6:a6:c8:32:b2:a1:36:ff:39:2b:c1:f5:e6:23:8e:55:d9:75: f8:3d:52:3a:1f:8b:d6:b3:97:e9:60:7b:10:2a:ef:c7:ff:18: 29:02:6e:27:d2:32:16:b7:4d:15:35:7f:af:9d:65:bd:36:90: 6e:b9:f8:ea:c0:8b:2d:ce:ad:fd:f0:de:1e:cf:8d:3f:69:f3: 17:a7:40:e9:ed:91:54:20:71:65:13:17:56:6f:52:0a:5a:db: ee:5b:ad:f2:18:00:9d:3c:f9:12:b1:14:64:53:11:df:5e:8b: f8:d9:b2:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrlToOspWhG1IAOqACfcZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ODM3ZTQ4YWFmNTk4YmNhYjU0YTVmYzhhZTQzYjE3YmUy NTQyMjkwHhcNMjUxMjE2MTUwMTM0WhcNMjUxMjE3MTUwMTM0WjAzMTEwLwYDVQQD Eyg0NTRlNGE2Yjg5NWUwMmJjNDMxNWFkMDYxNGQ4YWM0NmZhZmNhMjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QDWG3ZhPSslMJ0agEsg3MlanYbW 9bSFIf6rHABM2Htk098RKaUxbuz1pYBBiStB1VZTt9pSQwwag0Q4MfpuGb5Mk61e iMcEb2xtmTx66q5i4EXv30Ck+/mzhslkHtTgY4ggwYYxiaxVVH+B0IYuIrT2Vwlj i4sq5OQgIVc6Gb1GoJxxYWARH9Q/fGEXQrYACs9iPcBD42E9OGnL76U56kNVZfOj yz3TvR0Q43ceoVARBQxrFiMXAO1Bo6DxeRdniB0GpIqbWgopFgfvgK/qaV2JMm3U 5Gi2peuJD+SQ4QWBRLtLIONQ+VRIVEk7vwKTnIwCVMB4AVprPFh1+F/RmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVOSmuJXgK8QxWtBhTYrEb6/KJ0MB8GA1UdIwQY MBaAFDiDfkiq9Zi8q1Sl/IrkOxe+JUIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kZmZiYzgtYjE0OS00NmI0LWJiYjgt MzFlYTIwOTRiNTU3LzEvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9kZmZiYzgtYjE0OS00NmI0LWJiYjgtMzFlYTIwOTRiNTU3 LzEvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkSej9CT o3FQR8nSIO3DnpfNB3qYp5RvKo4O1tc4JwM2CUSFA5Z8qZ8qUQ50nN56qhLhgz2l EUDJ3J1v0LzvssU/g2MjdT3ba3XSsWZusLERg8m/jHu4DAyLSrym97vPeD79oFTf 7Q86G7xfxc4kBy8gSgViigiNIkeCAXakbEnJhGthmjrIKUHXEudutunPtqbIMrKh Nv85K8H15iOOVdl1+D1SOh+L1rOX6WB7ECrvx/8YKQJuJ9IyFrdNFTV/r51lvTaQ brn46sCLLc6t/fDeHs+NP2nzF6dA6e2RVCBxZRMXVm9SClrb7lut8hgAnTz5ErEU ZFMR316L+Nmylg== -----END CERTIFICATE-----Generated at Tue Dec 16 17:11:25 2025 by rpki-client