This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft File: OJDnpFSaVx9otoja1PXO2OUpBos.mft (raw, json) Hash identifier: RPKNdsRH+cgTrtSE0MKrFI/bChASTWQ7xB1Up8fPEkM= Subject key identifier: D9:F9:8E:48:63:74:F7:8D:BC:6E:06:8B:72:BC:F6:09:08:5A:57:6A Authority key identifier: 38:90:E7:A4:54:9A:57:1F:68:B6:88:DA:D4:F5:CE:D8:E5:29:06:8B Certificate issuer: /CN=3890e7a4549a571f68b688dad4f5ced8e529068b Certificate serial: 019AF12F2E4D312D2CE13C6A1FD8D45C8691 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:03:12 +0000 Manifest this update: Sat 06 Dec 2025 01:03:12 +0000 Manifest next update: Sun 07 Dec 2025 01:03:12 +0000 Files and hashes: 1: OJDnpFSaVx9otoja1PXO2OUpBos.crl (hash: RjnOrhGFte/7QGAlO+A1QqJh9CnaW0a3OYB4mQUTOCg=) 2: XaY9bUiZ_CFGYXPkNboje_P8adc.roa (hash: b9+EkuxILTVWiZrAAhWN9xohV/5GiE1XVfEOgozpLGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.crl rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:2e:4d:31:2d:2c:e1:3c:6a:1f:d8:d4:5c:86:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3890e7a4549a571f68b688dad4f5ced8e529068b Validity Not Before: Dec 6 01:03:12 2025 GMT Not After : Dec 7 01:03:12 2025 GMT Subject: CN=d9f98e486374f78dbc6e068b72bcf609085a576a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ea:a7:46:32:74:ca:e6:49:80:7b:e5:5f:83: a2:57:70:f1:ab:16:0f:0d:e0:05:4b:95:be:43:67: 52:b8:26:8a:79:49:86:f2:ff:f3:35:20:05:c3:43: d7:82:19:44:69:fe:4b:94:d0:b6:16:f8:b8:21:c3: f8:f6:56:8b:54:32:60:c9:ff:08:25:f6:11:c3:10: 56:99:26:48:21:17:e1:49:7e:9e:00:84:e2:48:7c: fd:92:8b:e8:04:37:05:29:ca:a6:37:44:11:3a:20: 18:d2:48:5d:34:16:9a:9c:6c:5c:18:11:99:21:cb: f6:6e:c1:f8:98:14:93:aa:3d:5f:f8:9f:a9:08:05: a6:12:c6:b6:0f:b7:d3:e9:e9:13:79:de:55:31:cc: 11:93:b8:f2:5e:70:aa:fb:2b:f7:ab:57:85:25:81: 86:a2:f0:ed:d0:d3:88:32:7e:5b:a8:2d:fc:12:f2: 38:c5:42:9a:5b:51:bb:df:be:c3:84:6c:2b:a7:0b: 55:e1:c4:f2:de:c2:9e:53:aa:b6:00:a6:fb:0f:e2: ec:67:00:49:f8:86:0e:05:b2:05:66:e4:68:a7:67: 19:3a:a3:be:23:d1:82:37:ce:53:74:7f:bf:5b:2d: 79:15:6a:f4:4b:4f:59:9a:03:54:db:26:47:fa:1d: 4d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F9:8E:48:63:74:F7:8D:BC:6E:06:8B:72:BC:F6:09:08:5A:57:6A X509v3 Authority Key Identifier: keyid:38:90:E7:A4:54:9A:57:1F:68:B6:88:DA:D4:F5:CE:D8:E5:29:06:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:7f:38:6b:7c:e8:d1:6f:62:cc:26:94:b8:3d:cd:55:07:a8: 31:b3:6a:83:f8:fd:d5:1f:77:ea:35:8f:4e:3d:c3:54:d7:30: 76:87:b3:6c:26:51:37:6f:f7:42:66:45:ef:93:25:06:12:0a: 35:a1:7e:16:1a:01:21:19:c4:3e:6c:78:83:c5:43:d9:16:36: 57:c5:dd:b3:21:04:16:4b:6d:b8:17:0e:7a:cd:c1:bd:92:d0: 73:f5:2a:2c:dc:91:ab:bc:d3:a1:36:0f:d0:22:36:9c:f7:fb: 91:9a:29:9b:4a:2f:34:90:eb:70:2b:14:f1:f1:dc:3b:14:0a: c0:d0:60:de:6a:97:f5:ea:a1:ee:1f:89:fc:1b:10:07:69:61: d6:f5:0d:4f:b8:3e:27:5b:38:8e:61:cb:05:3a:7e:59:54:d0: d0:cd:57:34:a5:58:ec:a5:1a:49:f5:15:e9:b9:f3:28:e9:67: 11:fb:69:c4:0d:b6:9e:56:30:54:f6:3a:89:c9:16:82:39:60: 2d:ac:5c:66:52:33:cf:19:8e:90:9f:75:0e:1d:1e:67:5f:ef: 35:3f:46:7c:f1:59:6c:05:9a:c1:b4:36:ec:d1:0b:52:61:9e: ae:d1:61:9b:88:07:bd:7f:75:3c:48:36:9a:a9:52:2d:b0:6a: 62:8b:8d:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLy5NMS0s4TxqH9jUXIaRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OTBlN2E0NTQ5YTU3MWY2OGI2ODhkYWQ0ZjVjZWQ4ZTUy OTA2OGIwHhcNMjUxMjA2MDEwMzEyWhcNMjUxMjA3MDEwMzEyWjAzMTEwLwYDVQQD EyhkOWY5OGU0ODYzNzRmNzhkYmM2ZTA2OGI3MmJjZjYwOTA4NWE1NzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+qnRjJ0yuZJgHvlX4OiV3DxqxYP DeAFS5W+Q2dSuCaKeUmG8v/zNSAFw0PXghlEaf5LlNC2Fvi4IcP49laLVDJgyf8I JfYRwxBWmSZIIRfhSX6eAITiSHz9kovoBDcFKcqmN0QROiAY0khdNBaanGxcGBGZ Icv2bsH4mBSTqj1f+J+pCAWmEsa2D7fT6ekTed5VMcwRk7jyXnCq+yv3q1eFJYGG ovDt0NOIMn5bqC38EvI4xUKaW1G7377DhGwrpwtV4cTy3sKeU6q2AKb7D+LsZwBJ +IYOBbIFZuRop2cZOqO+I9GCN85TdH+/Wy15FWr0S09ZmgNU2yZH+h1NGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNn5jkhjdPeNvG4Gi3K89gkIWldqMB8GA1UdIwQY MBaAFDiQ56RUmlcfaLaI2tT1ztjlKQaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0pEbnBGU2FWeDlvdG9qYTFQWE8yT1VwQm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yNWRmNGUtYWZjNS00YzUwLThkZTIt OTQ4MTJjN2Y0NDllLzEvT0pEbnBGU2FWeDlvdG9qYTFQWE8yT1VwQm9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8yNWRmNGUtYWZjNS00YzUwLThkZTItOTQ4MTJjN2Y0NDll LzEvT0pEbnBGU2FWeDlvdG9qYTFQWE8yT1VwQm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACH84a3zo 0W9izCaUuD3NVQeoMbNqg/j91R936jWPTj3DVNcwdoezbCZRN2/3QmZF75MlBhIK NaF+FhoBIRnEPmx4g8VD2RY2V8XdsyEEFkttuBcOes3BvZLQc/UqLNyRq7zToTYP 0CI2nPf7kZopm0ovNJDrcCsU8fHcOxQKwNBg3mqX9eqh7h+J/BsQB2lh1vUNT7g+ J1s4jmHLBTp+WVTQ0M1XNKVY7KUaSfUV6bnzKOlnEftpxA22nlYwVPY6ickWgjlg LaxcZlIzzxmOkJ91Dh0eZ1/vNT9GfPFZbAWawbQ27NELUmGertFhm4gHvX91PEg2 mqlSLbBqYouNHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:13:42 2025 by rpki-client