This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft File: OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json) Hash identifier: NoCqV1bbobhIYfhmM65DvQq7PQJ3Nl0I/cXCZN1t6x4= Subject key identifier: 34:8A:8E:F4:D1:11:44:70:B1:86:5F:8B:21:90:A4:B7:DE:57:44:08 Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25 Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425 Certificate serial: 019B281BBC0FC84F0B8D5839C9C518AB83FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft Manifest number: 1784 Signing time: Tue 16 Dec 2025 17:01:04 +0000 Manifest this update: Tue 16 Dec 2025 17:01:04 +0000 Manifest next update: Wed 17 Dec 2025 17:01:04 +0000 Files and hashes: 1: MS2eFccf4vEvkGRnlPG3imTckEg.roa (hash: +v5mVYQhL/JfyFrRFVMWxQ02mierIx6iDDJ3fFkdoPo=) 2: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: n1vq67+BEibCwKFZn0LmOS2sU+n6VZqvHoChpDGqo7I=) 3: XQ5elbBA2ZOvWo4wBD0xrzoPgZw.roa (hash: ziFD345nN2nfL35s2objtJIz7sADWUma9lbt9LOBqXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:bc:0f:c8:4f:0b:8d:58:39:c9:c5:18:ab:83:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425 Validity Not Before: Dec 16 17:01:04 2025 GMT Not After : Dec 17 17:01:04 2025 GMT Subject: CN=348a8ef4d1114470b1865f8b2190a4b7de574408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ac:35:26:f9:80:88:21:57:44:99:fb:1d:4c: 91:89:ed:a7:f8:93:25:0a:07:88:ac:94:09:22:ad: 6d:07:61:2b:41:17:c8:95:a7:38:7d:9d:ae:97:38: 4d:1c:a6:d8:af:d1:c5:9e:30:34:78:ee:68:3e:06: 2f:94:58:9f:ee:0d:da:6f:d7:cd:ef:d7:d3:fd:7f: 62:e4:e1:dc:2f:a2:9d:9d:99:71:a2:43:81:66:f0: 25:bd:88:fb:3a:46:5c:1d:fc:b5:da:f6:a6:75:dd: 0a:6d:b5:83:b4:ac:c9:d8:71:0e:50:d1:07:6e:c8: db:ba:47:45:6a:8a:d4:8a:e9:49:44:91:04:e7:a3: 55:06:22:46:d4:b3:ad:63:fc:0b:a2:09:7c:db:c7: 3e:15:b1:d5:c7:eb:3b:02:19:c1:74:e2:77:52:31: ae:e3:57:a9:17:d7:c7:d1:da:68:fc:79:3b:92:6a: 3a:68:8f:f9:d1:60:fe:ef:f9:0d:2d:a8:a1:d0:c2: bd:73:1f:08:86:f9:74:ea:b7:16:21:78:bd:4a:8c: b1:c7:ef:bd:41:89:b4:5f:8c:9d:a2:1c:10:af:e1: ba:f7:02:48:74:77:5f:1f:f9:60:43:ba:23:95:16: 23:3d:7b:9e:2d:2e:74:ff:7b:e0:a1:21:d5:f0:2d: 68:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8A:8E:F4:D1:11:44:70:B1:86:5F:8B:21:90:A4:B7:DE:57:44:08 X509v3 Authority Key Identifier: keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:73:d4:6a:0b:d2:60:43:94:36:84:55:dc:b1:31:74:77:f8: bc:18:12:14:01:9d:fd:28:ba:40:29:26:3d:7a:ae:3f:7c:d4: 3d:88:20:1c:82:78:3f:10:0c:2a:45:ed:c3:d4:42:cb:62:77: 61:19:b1:b3:19:9e:6a:c1:fc:62:4b:7d:ec:93:c4:e9:dd:3b: cd:e5:a9:bf:7a:78:1c:c3:92:04:9f:59:75:7b:66:ae:c0:4c: da:3a:b5:6c:52:4a:54:be:53:04:6a:46:34:2d:5d:57:ca:7a: b7:13:b8:10:6a:86:35:b6:ec:6d:3d:80:f5:73:f1:24:ff:a4: 3b:f8:08:2c:de:c6:ff:41:ad:3a:a9:17:ec:ce:79:5f:7b:1e: 24:56:fb:8b:f5:9a:15:53:2f:71:25:c0:7e:40:34:9b:d1:00: 19:2a:7e:4a:9b:2e:08:56:4d:74:15:10:8e:5d:77:d9:32:63: 5c:a3:81:91:52:c4:5e:6a:72:2a:39:3d:e1:ff:74:a9:75:ae: a8:20:ad:6a:69:14:9d:29:bc:b9:3a:1b:9d:31:2b:b4:69:c4: 9a:e4:84:70:97:19:6b:11:a6:b7:1f:53:74:d1:08:4f:d3:00: 13:01:bb:c0:e8:84:75:d4:d9:10:6b:ec:5a:04:05:60:c1:3b: bb:56:16:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG7wPyE8LjVg5ycUYq4P6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MGVmN2ZmNWI1NGY1M2ZjZjIzMTJhYmUyZWMzZjU5NThi YTE0MjUwHhcNMjUxMjE2MTcwMTA0WhcNMjUxMjE3MTcwMTA0WjAzMTEwLwYDVQQD EygzNDhhOGVmNGQxMTE0NDcwYjE4NjVmOGIyMTkwYTRiN2RlNTc0NDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6w1JvmAiCFXRJn7HUyRie2n+JMl CgeIrJQJIq1tB2ErQRfIlac4fZ2ulzhNHKbYr9HFnjA0eO5oPgYvlFif7g3ab9fN 79fT/X9i5OHcL6KdnZlxokOBZvAlvYj7OkZcHfy12vamdd0KbbWDtKzJ2HEOUNEH bsjbukdFaorUiulJRJEE56NVBiJG1LOtY/wLogl828c+FbHVx+s7AhnBdOJ3UjGu 41epF9fH0dpo/Hk7kmo6aI/50WD+7/kNLaih0MK9cx8Ihvl06rcWIXi9Soyxx++9 QYm0X4ydohwQr+G69wJIdHdfH/lgQ7ojlRYjPXueLS50/3vgoSHV8C1obwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSKjvTREURwsYZfiyGQpLfeV0QIMB8GA1UdIwQY MBaAFDgO9/9bVPU/zyMSq+LsP1lYuhQlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0E3M18xdFU5VF9QSXhLcjR1d19XVmk2RkNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kOTEyNTUtMzI0My00YTQ3LTk0NmEt ZjA0Y2MxYzIzMGNmLzEvT0E3M18xdFU5VF9QSXhLcjR1d19XVmk2RkNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kOTEyNTUtMzI0My00YTQ3LTk0NmEtZjA0Y2MxYzIzMGNm LzEvT0E3M18xdFU5VF9QSXhLcjR1d19XVmk2RkNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHPUagvS YEOUNoRV3LExdHf4vBgSFAGd/Si6QCkmPXquP3zUPYggHIJ4PxAMKkXtw9RCy2J3 YRmxsxmeasH8Ykt97JPE6d07zeWpv3p4HMOSBJ9ZdXtmrsBM2jq1bFJKVL5TBGpG NC1dV8p6txO4EGqGNbbsbT2A9XPxJP+kO/gILN7G/0GtOqkX7M55X3seJFb7i/Wa FVMvcSXAfkA0m9EAGSp+SpsuCFZNdBUQjl132TJjXKOBkVLEXmpyKjk94f90qXWu qCCtamkUnSm8uTobnTErtGnEmuSEcJcZaxGmtx9TdNEIT9MAEwG7wOiEddTZEGvs WgQFYME7u1YWcA== -----END CERTIFICATE-----Generated at Tue Dec 16 20:23:01 2025 by rpki-client