This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft File: oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft (raw, json) Hash identifier: SkCvRnYI3TvKbmv+i/gtifjKe9W0te4W6ymeYcWL7+w= Subject key identifier: 89:FB:AC:47:A4:4B:86:FE:46:07:5E:E3:BB:1A:21:7C:4A:86:0C:0A Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0 Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0 Certificate serial: 019AF08800179660E034CEF2E156858CAFB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft Manifest number: 175F Signing time: Fri 05 Dec 2025 22:00:35 +0000 Manifest this update: Fri 05 Dec 2025 22:00:35 +0000 Manifest next update: Sat 06 Dec 2025 22:00:35 +0000 Files and hashes: 1: oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl (hash: op5EYSdrkgiQ2/7mw/htU15fUbiDbJYUoAfqfVmqeZk=) 2: yDa2dQgeJJIFzKakaTK1-AlXD1I.roa (hash: mJdwofIlP4KR52j+bqtWhT0oD7xOVgPS7SMsHC+21ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:00:17:96:60:e0:34:ce:f2:e1:56:85:8c:af:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0 Validity Not Before: Dec 5 22:00:35 2025 GMT Not After : Dec 6 22:00:35 2025 GMT Subject: CN=89fbac47a44b86fe46075ee3bb1a217c4a860c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f0:52:b1:31:3a:c5:e8:aa:c3:5f:f6:6a:67: 11:7d:71:41:ca:99:8b:83:88:36:fc:88:3b:d6:95: 60:74:02:6d:ea:3e:49:a2:4a:41:b6:37:14:f0:26: f6:cd:e4:be:d5:4b:da:c0:98:af:9b:13:06:a3:66: fb:3f:a4:7f:cc:e3:83:b4:85:15:ec:5d:28:f4:a4: 21:83:cd:72:a6:4c:e8:40:fe:5f:6c:8a:25:f0:b8: be:aa:33:ee:89:03:09:35:41:67:74:5d:e8:4b:9b: 02:13:50:34:eb:7b:f1:8c:7e:4e:06:8a:8f:09:73: 1f:c8:72:31:d7:d5:10:45:a4:8e:81:b8:95:ee:eb: 95:2d:48:2e:41:a2:f4:b6:e2:e6:56:b4:33:c4:85: 93:27:45:43:c9:87:d3:bf:bb:e5:1a:0c:1c:ef:b3: 6b:2c:74:8d:8a:c0:0c:a7:2e:db:5b:3c:08:93:cb: 44:2b:18:92:98:f3:f8:9a:fa:0a:c5:5a:ab:e8:37: c9:c9:6d:cf:4a:80:95:9a:9f:2b:a8:3d:8d:62:89: 31:a6:6f:48:f9:74:93:0a:98:3f:90:30:ae:fd:c2: 29:61:05:50:a8:42:16:a4:55:07:e2:ed:8d:a2:81: f7:ad:59:b6:43:76:79:2c:f4:d0:5e:78:d9:73:1e: b1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FB:AC:47:A4:4B:86:FE:46:07:5E:E3:BB:1A:21:7C:4A:86:0C:0A X509v3 Authority Key Identifier: keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:94:5a:f1:d5:b4:ad:fd:fc:76:74:31:e9:5a:d7:e1:24:42: 00:d8:32:65:e4:f1:55:24:03:21:2e:d4:b5:ce:ff:0a:59:01: 41:c0:4c:ae:af:34:ff:6e:4b:1c:1f:86:36:d7:b4:31:ae:a1: e5:85:60:70:58:bc:a6:9c:f1:99:ea:30:67:73:71:4a:df:dd: 7f:e3:05:d0:94:9e:d4:38:2d:31:79:6f:33:f4:9f:b2:f9:cf: 44:2f:2a:43:2f:8b:59:b3:84:40:6f:7d:65:c9:99:4c:e4:67: e7:05:e9:89:75:80:cf:31:d4:68:fb:2d:ff:1d:27:38:72:37: c7:6a:23:1d:ae:06:e3:b5:01:c7:17:c2:ab:d1:c3:bb:86:2a: 72:b4:b0:45:9e:b1:d4:78:5b:e7:c8:e4:35:3c:59:a8:13:31: 8c:36:9c:4e:2c:18:46:bf:1c:de:8f:34:bd:d3:af:e6:ab:09: d6:e1:b5:62:f1:d8:38:32:dc:09:3b:29:a0:dc:6f:d1:6a:44: d3:19:e1:eb:cf:3e:de:3b:b2:8b:ad:c2:94:38:78:7a:eb:cb: a6:22:9e:d2:7a:06:55:60:e3:e8:84:99:94:71:ab:ae:ca:d2: 15:2b:1a:6a:4f:ef:33:58:95:c6:48:31:48:10:e9:d4:c6:1c: a4:60:71:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiAAXlmDgNM7y4VaFjK+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMWViNDA3Zjc2Y2ZhNWM3ZGExNTIxODM5N2IzYzQzMTc3 NjJhYzAwHhcNMjUxMjA1MjIwMDM1WhcNMjUxMjA2MjIwMDM1WjAzMTEwLwYDVQQD Eyg4OWZiYWM0N2E0NGI4NmZlNDYwNzVlZTNiYjFhMjE3YzRhODYwYzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPBSsTE6xeiqw1/2amcRfXFBypmL g4g2/Ig71pVgdAJt6j5JokpBtjcU8Cb2zeS+1UvawJivmxMGo2b7P6R/zOODtIUV 7F0o9KQhg81ypkzoQP5fbIol8Li+qjPuiQMJNUFndF3oS5sCE1A063vxjH5OBoqP CXMfyHIx19UQRaSOgbiV7uuVLUguQaL0tuLmVrQzxIWTJ0VDyYfTv7vlGgwc77Nr LHSNisAMpy7bWzwIk8tEKxiSmPP4mvoKxVqr6DfJyW3PSoCVmp8rqD2NYokxpm9I +XSTCpg/kDCu/cIpYQVQqEIWpFUH4u2NooH3rVm2Q3Z5LPTQXnjZcx6xJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIn7rEekS4b+Rgde47saIXxKhgwKMB8GA1UdIwQY MBaAFKIetAf3bPpcfaFSGDl7PEMXdirAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2g2MEJfZHMtbHg5b1ZJWU9YczhReGQyS3NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85OGIyNzgtMDY4YS00NjhmLWFjZDct MjZjZDM4NzFmMzY1LzEvb2g2MEJfZHMtbHg5b1ZJWU9YczhReGQyS3NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85OGIyNzgtMDY4YS00NjhmLWFjZDctMjZjZDM4NzFmMzY1 LzEvb2g2MEJfZHMtbHg5b1ZJWU9YczhReGQyS3NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5Ra8dW0 rf38dnQx6VrX4SRCANgyZeTxVSQDIS7Utc7/ClkBQcBMrq80/25LHB+GNte0Ma6h 5YVgcFi8ppzxmeowZ3NxSt/df+MF0JSe1DgtMXlvM/SfsvnPRC8qQy+LWbOEQG99 ZcmZTORn5wXpiXWAzzHUaPst/x0nOHI3x2ojHa4G47UBxxfCq9HDu4YqcrSwRZ6x 1Hhb58jkNTxZqBMxjDacTiwYRr8c3o80vdOv5qsJ1uG1YvHYODLcCTspoNxv0WpE 0xnh688+3juyi63ClDh4euvLpiKe0noGVWDj6ISZlHGrrsrSFSsaak/vM1iVxkgx SBDp1MYcpGBxoA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:07 2025 by rpki-client