This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft File: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft (raw, json) Hash identifier: T5dZRK10U6hZfC+KEObvVMPa5PiBjI+5ro50NsvRzzk= Subject key identifier: E3:DD:30:07:4D:1A:1B:77:9E:21:CF:25:50:56:8F:50:67:7A:8B:B0 Authority key identifier: 38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83 Certificate issuer: /CN=3896d9f39201a49fa1369582e18f1a2bb965b283 Certificate serial: 019AF509EF9454B1ACB0FD9C51544F55420E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft Manifest number: 0984 Signing time: Sat 06 Dec 2025 19:01:00 +0000 Manifest this update: Sat 06 Dec 2025 19:01:00 +0000 Manifest next update: Sun 07 Dec 2025 19:01:00 +0000 Files and hashes: 1: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl (hash: tpo41+AUP+k4xiwuBCAr+6HThycHD7koa49ZMlmxVDY=) 2: cNiza7IEiNMNBNBagOrbk4czUFI.roa (hash: cxXOTzwPl8qSVNIA1za+AwOz7dJ4d9CdZy9RaFccNUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:ef:94:54:b1:ac:b0:fd:9c:51:54:4f:55:42:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3896d9f39201a49fa1369582e18f1a2bb965b283 Validity Not Before: Dec 6 19:01:00 2025 GMT Not After : Dec 7 19:01:00 2025 GMT Subject: CN=e3dd30074d1a1b779e21cf2550568f50677a8bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:68:ad:2c:b2:17:8c:c2:50:b0:4b:99:ee:95: 84:82:ee:6f:ff:a3:3d:66:c4:3b:18:af:f0:be:18: 7c:f8:44:24:43:ff:af:4f:2b:f3:7c:91:d6:24:e3: 77:f0:87:26:a5:a5:0c:e2:39:97:9a:e7:4a:62:8e: d2:5e:3b:6c:60:4f:9a:2d:0c:a6:07:30:a1:09:e0: eb:63:85:a3:de:90:3f:1d:90:5a:57:8e:c2:73:f5: e5:f5:70:30:d6:72:51:14:3d:c2:5e:5d:1b:59:38: cd:b5:d2:1e:6a:5f:99:46:5c:0e:7a:3e:fa:b8:8a: 98:b8:22:85:f9:be:42:5e:8f:75:b5:d9:32:c2:44: 91:60:8e:08:5b:80:b1:15:c7:0c:ed:fc:a2:64:24: af:fa:c6:36:25:33:bf:d4:6f:c3:1c:03:25:fb:e9: d2:83:81:1e:ce:75:2b:60:d9:79:14:29:1e:89:1b: 6d:89:2c:fd:88:16:ed:7a:c9:3b:76:d7:69:ac:e5: 73:d4:32:9d:12:75:50:73:3e:c7:6f:0c:22:4c:f2: 30:85:0c:1d:90:17:f8:d4:e0:0b:d7:a1:b1:30:bf: b5:c1:14:b5:39:da:0c:58:3d:82:0d:b0:4c:88:5e: ea:f2:87:86:2b:3d:69:b9:b2:c1:ab:6d:d0:fc:1d: e9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DD:30:07:4D:1A:1B:77:9E:21:CF:25:50:56:8F:50:67:7A:8B:B0 X509v3 Authority Key Identifier: keyid:38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:92:5b:a0:8a:65:0f:05:c1:66:ff:14:0a:3d:ff:bc:84:ac: 97:e9:5a:54:ea:d6:d2:35:41:a1:13:d2:1e:c1:ef:f5:f2:d1: bb:c3:7e:33:4e:b9:90:0a:48:a0:73:03:fd:f0:3a:50:3c:74: 8a:db:10:17:5a:88:a7:b7:af:ef:e3:bc:d1:7e:54:16:69:4e: df:0b:08:fa:d3:1e:a3:31:07:74:ae:54:e2:bb:8e:8b:2e:de: 4e:04:80:db:eb:a1:c6:c7:65:46:fd:70:1c:92:0f:82:07:7d: eb:1d:f7:3a:db:3e:33:37:3c:5b:23:b0:4f:63:f7:bb:a5:76: 97:f1:df:e6:19:e9:db:21:e0:b9:bb:11:c9:46:d5:75:96:b0: c3:6c:7a:a0:98:07:fe:87:ba:1f:e0:19:b5:1a:85:d1:8c:ad: 27:0a:b6:27:8c:8a:fa:8a:64:c9:bd:27:ac:f8:1e:17:8d:5d: be:73:c5:bb:f4:45:ac:89:0f:3d:52:7d:0f:d6:64:f4:c8:32: 1f:ce:3b:dd:03:bc:c4:70:bb:5f:92:64:99:b9:49:95:ed:88: 0f:46:31:45:c9:33:6c:d1:92:4e:bb:a5:5e:4d:45:76:10:9c: 65:4b:f4:8f:77:3a:e9:c6:39:36:15:7d:ee:c3:7a:bd:7a:ea: 6e:e5:33:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ce+UVLGssP2cUVRPVUIOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OTZkOWYzOTIwMWE0OWZhMTM2OTU4MmUxOGYxYTJiYjk2 NWIyODMwHhcNMjUxMjA2MTkwMTAwWhcNMjUxMjA3MTkwMTAwWjAzMTEwLwYDVQQD EyhlM2RkMzAwNzRkMWExYjc3OWUyMWNmMjU1MDU2OGY1MDY3N2E4YmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWitLLIXjMJQsEuZ7pWEgu5v/6M9 ZsQ7GK/wvhh8+EQkQ/+vTyvzfJHWJON38IcmpaUM4jmXmudKYo7SXjtsYE+aLQym BzChCeDrY4Wj3pA/HZBaV47Cc/Xl9XAw1nJRFD3CXl0bWTjNtdIeal+ZRlwOej76 uIqYuCKF+b5CXo91tdkywkSRYI4IW4CxFccM7fyiZCSv+sY2JTO/1G/DHAMl++nS g4EeznUrYNl5FCkeiRttiSz9iBbtesk7dtdprOVz1DKdEnVQcz7HbwwiTPIwhQwd kBf41OAL16GxML+1wRS1OdoMWD2CDbBMiF7q8oeGKz1pubLBq23Q/B3pkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPdMAdNGht3niHPJVBWj1BneouwMB8GA1UdIwQY MBaAFDiW2fOSAaSfoTaVguGPGiu5ZbKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83ODQ2MDEtMDQ2MS00NzUzLThhNTIt ZTgwYTA1ZTM5ZjRiLzEvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy83ODQ2MDEtMDQ2MS00NzUzLThhNTItZTgwYTA1ZTM5ZjRi LzEvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwpJboIpl DwXBZv8UCj3/vISsl+laVOrW0jVBoRPSHsHv9fLRu8N+M065kApIoHMD/fA6UDx0 itsQF1qIp7ev7+O80X5UFmlO3wsI+tMeozEHdK5U4ruOiy7eTgSA2+uhxsdlRv1w HJIPggd96x33Ots+Mzc8WyOwT2P3u6V2l/Hf5hnp2yHgubsRyUbVdZaww2x6oJgH /oe6H+AZtRqF0YytJwq2J4yK+opkyb0nrPgeF41dvnPFu/RFrIkPPVJ9D9Zk9Mgy H8473QO8xHC7X5JkmblJle2ID0YxRckzbNGSTrulXk1FdhCcZUv0j3c66cY5NhV9 7sN6vXrqbuUzLg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:41:18 2025 by rpki-client