This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft File: 91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json) Hash identifier: FTlUZjESwuUhPm+5zl0mJ5LeaUEw9din20AS/u+HG1M= Subject key identifier: 11:34:F7:0E:F1:90:F4:CA:C8:6A:DD:AE:B0:71:5B:E1:9A:7A:0F:9D Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B Certificate issuer: /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b Certificate serial: 019AF50A16C480C5347888CB65902DE2D223 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft Manifest number: 0A73 Signing time: Sat 06 Dec 2025 19:01:10 +0000 Manifest this update: Sat 06 Dec 2025 19:01:10 +0000 Manifest next update: Sun 07 Dec 2025 19:01:10 +0000 Files and hashes: 1: 7DobkB9YDZRCFthUqh8EeCazT9A.roa (hash: wrSSktbEIiruaMGzjyB9HPAsqfXawT4rvBYdbF17ar8=) 2: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: ME2rPAAOLUgYNJCAmFht+vlmeuApLHWtgqzfTrTnOq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:16:c4:80:c5:34:78:88:cb:65:90:2d:e2:d2:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b Validity Not Before: Dec 6 19:01:10 2025 GMT Not After : Dec 7 19:01:10 2025 GMT Subject: CN=1134f70ef190f4cac86addaeb0715be19a7a0f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5b:ee:dd:e9:db:1d:61:32:e2:46:a6:a5:d3: bb:11:97:76:fe:1b:9d:15:45:c0:23:a1:b5:c6:9c: 88:3a:3b:7e:6a:8d:73:1e:48:87:3f:35:f6:74:4b: 9a:66:7a:5d:44:dc:c0:b7:32:b2:91:3f:6b:7a:06: 02:53:cb:d8:03:df:a0:dd:d1:56:fb:4e:26:3c:92: 35:89:aa:6f:96:91:e5:73:41:17:7e:2b:32:6d:5d: 8a:ea:78:d7:6f:89:d6:53:03:32:d0:f8:eb:5a:d4: 68:5b:d1:bc:70:76:3a:da:21:54:80:2c:2b:78:29: 94:5a:d9:47:61:c0:16:28:0c:98:0f:6f:32:d8:32: a3:ed:f8:63:34:43:dc:2d:a8:b8:67:fb:cb:1d:c3: b8:9b:b6:c1:dd:a1:ac:32:39:6b:e6:30:ba:74:e8: 00:fa:44:f8:00:af:0f:19:7b:d1:ff:47:e0:b8:35: fe:1e:84:2d:6a:89:89:aa:03:9e:96:ed:1a:80:3d: 63:08:62:07:90:87:a8:f5:2b:02:65:3e:9a:04:c9: 8f:a5:51:a9:89:8f:51:8e:79:7d:83:e8:30:c7:bb: 52:77:1e:d8:99:44:52:d9:d4:ac:00:1e:b1:13:a7: 2a:73:58:88:e3:bd:17:a5:10:13:13:8f:e3:80:3a: 70:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:34:F7:0E:F1:90:F4:CA:C8:6A:DD:AE:B0:71:5B:E1:9A:7A:0F:9D X509v3 Authority Key Identifier: keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:88:a3:a1:1c:0a:6e:bd:7b:b6:93:4a:75:bd:1f:ba:73:5e: 9d:06:02:13:33:05:2f:85:64:02:31:35:59:b5:aa:1b:8c:b4: 50:ae:7f:af:a0:dd:82:70:8b:88:a3:c8:f2:ae:45:9a:74:2a: 18:fa:92:b1:b3:60:d1:c7:11:83:1f:6f:e0:27:15:54:b2:dd: 36:2a:b9:fc:bb:e9:c2:bd:b9:6e:65:b0:70:d8:c7:0b:25:6d: 0a:ce:76:7b:51:69:a3:98:7e:f2:bc:06:83:1c:15:d5:6f:41: 1c:f6:e9:ef:10:0a:f3:57:0f:e4:a6:e5:86:ed:13:3d:74:bd: 35:7c:37:e3:48:d9:58:09:be:ac:7f:c7:a7:cd:9a:35:64:04: 2f:af:d7:55:2a:ab:7d:3b:e5:18:a0:a5:54:dc:59:98:65:70: db:cd:40:53:86:4a:62:31:fc:0f:96:1f:2f:65:b3:b0:55:ac: 4e:bb:db:c9:a7:83:7a:c1:20:f1:4c:00:cc:b6:de:0e:87:8f: 77:8a:6d:56:19:36:38:65:83:e2:0b:02:a7:b6:e5:ef:3e:b4: 34:22:ae:9f:d9:f9:60:d1:cf:94:74:25:4f:ae:8c:4c:ed:8e: b4:c5:f4:43:eb:aa:db:4d:0c:a7:ee:aa:6f:54:79:5a:28:7b: b4:33:2f:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ChbEgMU0eIjLZZAt4tIjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NTNhMTliNWRjZTFkNDE1OTM1MjIyOTQyNmE5ZmRiN2Q5 ZjlhM2IwHhcNMjUxMjA2MTkwMTEwWhcNMjUxMjA3MTkwMTEwWjAzMTEwLwYDVQQD EygxMTM0ZjcwZWYxOTBmNGNhYzg2YWRkYWViMDcxNWJlMTlhN2EwZjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulvu3enbHWEy4kampdO7EZd2/hud FUXAI6G1xpyIOjt+ao1zHkiHPzX2dEuaZnpdRNzAtzKykT9regYCU8vYA9+g3dFW +04mPJI1iapvlpHlc0EXfisybV2K6njXb4nWUwMy0PjrWtRoW9G8cHY62iFUgCwr eCmUWtlHYcAWKAyYD28y2DKj7fhjNEPcLai4Z/vLHcO4m7bB3aGsMjlr5jC6dOgA +kT4AK8PGXvR/0fguDX+HoQtaomJqgOelu0agD1jCGIHkIeo9SsCZT6aBMmPpVGp iY9Rjnl9g+gwx7tSdx7YmURS2dSsAB6xE6cqc1iI470XpRATE4/jgDpwewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBE09w7xkPTKyGrdrrBxW+Gaeg+dMB8GA1UdIwQY MBaAFPdToZtdzh1BWTUiKUJqn9t9n5o7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTFPaG0xM09IVUZaTlNJcFFtcWYyMzJmbWpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mZmUwN2MtMTZmMC00OTk5LTg4OTQt MTBmMDA5M2VhYWUwLzEvOTFPaG0xM09IVUZaTlNJcFFtcWYyMzJmbWpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9mZmUwN2MtMTZmMC00OTk5LTg4OTQtMTBmMDA5M2VhYWUw LzEvOTFPaG0xM09IVUZaTlNJcFFtcWYyMzJmbWpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4ijoRwK br17tpNKdb0funNenQYCEzMFL4VkAjE1WbWqG4y0UK5/r6DdgnCLiKPI8q5FmnQq GPqSsbNg0ccRgx9v4CcVVLLdNiq5/Lvpwr25bmWwcNjHCyVtCs52e1Fpo5h+8rwG gxwV1W9BHPbp7xAK81cP5Kblhu0TPXS9NXw340jZWAm+rH/Hp82aNWQEL6/XVSqr fTvlGKClVNxZmGVw281AU4ZKYjH8D5YfL2WzsFWsTrvbyaeDesEg8UwAzLbeDoeP d4ptVhk2OGWD4gsCp7bl7z60NCKun9n5YNHPlHQlT66MTO2OtMX0Q+uq200Mp+6q b1R5Wih7tDMvQg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:00:50 2025 by rpki-client