This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft File: OPdGuBrsAONrm8t6CGQqZOkT2ls.mft (raw, json) Hash identifier: Kga/UuTc0jntHpm9oL4eTQr+Z1p1lfur5GnxSVhsPy4= Subject key identifier: 5E:45:71:88:93:49:A7:FC:F9:BF:FF:11:C2:87:D1:8A:F3:82:5F:44 Authority key identifier: 38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B Certificate issuer: /CN=38f746b81aec00e36b9bcb7a08642a64e913da5b Certificate serial: 019B38A21A7F316D80CEE91931E3D051A580 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft Manifest number: 0D89 Signing time: Fri 19 Dec 2025 22:01:46 +0000 Manifest this update: Fri 19 Dec 2025 22:01:46 +0000 Manifest next update: Sat 20 Dec 2025 22:01:46 +0000 Files and hashes: 1: MMlvH8atmySzJI7kLxLVPyyRhLQ.roa (hash: bccMFVINTXPOtpxYZS3LUeW2cuJPhCPq33JXorYAWpk=) 2: OPdGuBrsAONrm8t6CGQqZOkT2ls.crl (hash: ckRtmxfXLfD2uXVQTEvQqMy4keqVNYos+tio54+fNtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:1a:7f:31:6d:80:ce:e9:19:31:e3:d0:51:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38f746b81aec00e36b9bcb7a08642a64e913da5b Validity Not Before: Dec 19 22:01:46 2025 GMT Not After : Dec 20 22:01:46 2025 GMT Subject: CN=5e4571889349a7fcf9bfff11c287d18af3825f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ca:7e:5c:9c:ce:28:66:6f:28:84:9c:7d:6c: 8e:6f:62:73:39:ee:9f:23:5c:b4:d0:31:9e:3d:4b: 85:b5:3d:e1:f1:21:f3:52:d6:e4:47:6a:4f:7d:18: 74:0f:cc:e9:97:9f:24:1a:68:95:a8:8f:62:eb:64: 1e:1b:c6:85:96:f9:06:be:ce:7e:81:88:f2:1f:3a: e0:4a:3d:c8:94:97:50:f2:ba:be:f0:da:b2:0c:0a: 97:d4:59:9c:b3:61:20:b6:fb:f2:92:7f:ae:32:e6: 0a:c0:76:17:bd:4e:a9:b9:b7:34:f0:44:c2:a9:53: c9:b8:ff:ca:4e:1f:58:4d:c9:71:9f:0b:e9:5e:b3: 03:b2:dc:84:79:d6:c3:d7:f8:0a:d6:1e:7b:18:5d: 69:0e:ea:2e:03:1f:54:7a:c2:89:e0:ca:31:1b:a1: 5a:f6:ef:79:bb:90:90:65:78:40:78:5d:e2:c9:82: 03:53:ad:24:ef:22:52:15:51:c1:c7:da:41:9c:39: ff:1a:c7:1a:e5:fe:51:b0:f3:7f:92:34:7e:ff:d1: a8:03:f6:de:49:c0:a6:a0:0f:c2:39:12:14:52:86: a8:29:2c:7c:67:8a:5b:f3:51:1c:db:c4:9f:63:4f: 3d:31:8c:f2:0a:d1:f8:82:59:68:66:ab:c9:d5:a6: 2c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:45:71:88:93:49:A7:FC:F9:BF:FF:11:C2:87:D1:8A:F3:82:5F:44 X509v3 Authority Key Identifier: keyid:38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:7e:b9:d4:3a:1c:07:70:de:dd:9b:9a:5a:df:9e:ed:ab:af: 10:0b:20:8a:4b:e7:ee:4b:26:6c:77:1a:69:f8:91:94:ed:a6: 75:51:99:59:de:0c:ba:43:d5:c9:03:1b:07:66:ab:f8:f1:85: c4:9b:b7:6c:e3:7c:79:8b:65:7b:87:fd:6a:67:80:23:ce:5e: f9:ec:7a:0f:30:2c:d6:f1:0d:af:b2:43:83:70:aa:2b:4a:c0: 93:a2:ed:8a:f6:8a:a2:46:ed:13:d2:66:ad:cb:fe:ca:45:bf: 5b:18:1a:b4:b3:75:93:47:fc:80:df:e6:81:4b:83:9d:e8:9d: 90:9a:ef:3a:1a:9f:8e:2d:c1:96:b4:9b:1a:ea:f7:30:ef:a2: 78:4d:f1:02:b9:de:40:40:af:b8:9f:31:5a:a0:c9:1a:7c:9e: 6b:c8:45:33:a5:89:63:06:18:6e:03:23:4d:f1:24:0a:51:27: fc:b1:fd:50:69:6b:3d:31:9f:6c:df:b3:e6:9d:31:b2:4b:c1: ca:a7:11:df:2f:d1:4b:ec:0d:0d:91:85:3f:72:9e:a3:02:c9: 2f:30:35:44:aa:f4:f1:ba:b5:e3:cd:ee:e6:7b:3a:27:a9:d2: dd:fe:51:bc:db:10:e9:82:78:5c:aa:0e:1b:f4:dc:db:4b:72: 5b:42:e2:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ohp/MW2AzukZMePQUaWAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4Zjc0NmI4MWFlYzAwZTM2YjliY2I3YTA4NjQyYTY0ZTkx M2RhNWIwHhcNMjUxMjE5MjIwMTQ2WhcNMjUxMjIwMjIwMTQ2WjAzMTEwLwYDVQQD Eyg1ZTQ1NzE4ODkzNDlhN2ZjZjliZmZmMTFjMjg3ZDE4YWYzODI1ZjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Mp+XJzOKGZvKIScfWyOb2JzOe6f I1y00DGePUuFtT3h8SHzUtbkR2pPfRh0D8zpl58kGmiVqI9i62QeG8aFlvkGvs5+ gYjyHzrgSj3IlJdQ8rq+8NqyDAqX1Fmcs2Egtvvykn+uMuYKwHYXvU6pubc08ETC qVPJuP/KTh9YTclxnwvpXrMDstyEedbD1/gK1h57GF1pDuouAx9UesKJ4MoxG6Fa 9u95u5CQZXhAeF3iyYIDU60k7yJSFVHBx9pBnDn/Gsca5f5RsPN/kjR+/9GoA/be ScCmoA/CORIUUoaoKSx8Z4pb81Ec28SfY089MYzyCtH4glloZqvJ1aYsNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5FcYiTSaf8+b//EcKH0Yrzgl9EMB8GA1UdIwQY MBaAFDj3Rrga7ADja5vLeghkKmTpE9pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mNGRjNzYtZGNkMi00NzViLTllNjgt YzIyMzk1Y2UxYmU0LzEvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mNGRjNzYtZGNkMi00NzViLTllNjgtYzIyMzk1Y2UxYmU0 LzEvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3651Doc B3De3ZuaWt+e7auvEAsgikvn7ksmbHcaafiRlO2mdVGZWd4MukPVyQMbB2ar+PGF xJu3bON8eYtle4f9ameAI85e+ex6DzAs1vENr7JDg3CqK0rAk6LtivaKokbtE9Jm rcv+ykW/WxgatLN1k0f8gN/mgUuDneidkJrvOhqfji3BlrSbGur3MO+ieE3xArne QECvuJ8xWqDJGnyea8hFM6WJYwYYbgMjTfEkClEn/LH9UGlrPTGfbN+z5p0xskvB yqcR3y/RS+wNDZGFP3KeowLJLzA1RKr08bq1483u5ns6J6nS3f5RvNsQ6YJ4XKoO G/Tc20tyW0Lipg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:41:38 2025 by rpki-client