This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft File: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft (raw, json) Hash identifier: YsT/bBoOU6jybTAgZWzX6GNiIlz1Lnk1uHQ+EUFXJw0= Subject key identifier: 75:76:95:21:54:5A:CA:BD:2A:58:5C:47:B3:ED:7D:56:73:45:21:D6 Authority key identifier: 3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31 Certificate issuer: /CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031 Certificate serial: 019AF389F31DF66F64B2D0E73635A703903A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft Manifest number: 1662 Signing time: Sat 06 Dec 2025 12:01:35 +0000 Manifest this update: Sat 06 Dec 2025 12:01:35 +0000 Manifest next update: Sun 07 Dec 2025 12:01:35 +0000 Files and hashes: 1: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl (hash: qFqtCtqnfP6ot5gVHM27G/LXRCiZlI/xfYo2LbvGqz8=) 2: hE2ePAizZlQUV6uXdZuzIjMthNQ.roa (hash: +KNuL0RhbzwD+ZdqGTxpdbmElk+6cn62429cYK2AHFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:f3:1d:f6:6f:64:b2:d0:e7:36:35:a7:03:90:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031 Validity Not Before: Dec 6 12:01:35 2025 GMT Not After : Dec 7 12:01:35 2025 GMT Subject: CN=75769521545acabd2a585c47b3ed7d56734521d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:50:ec:61:c5:20:13:44:5e:3f:44:f1:99:08: 82:09:2b:df:33:40:ac:c4:44:c6:12:b4:3f:b0:dd: 07:da:02:90:27:7b:f7:e9:e6:49:1f:32:13:fd:19: 88:3f:7c:d3:4d:bc:39:9c:87:15:66:22:47:9d:b2: e1:a6:0f:cf:80:12:ff:af:73:19:55:db:4e:d1:f1: ce:82:2c:7a:e3:3c:a3:38:93:2e:02:ff:2a:bd:ab: b3:2b:ba:3d:aa:d2:f2:8b:5e:8c:1a:15:87:43:dd: 82:3e:51:34:2f:45:43:1e:0d:c6:b5:fa:da:7c:bf: 73:fe:8a:d8:09:2d:c6:5e:61:c9:18:3a:cb:31:aa: 8a:9b:17:c5:28:aa:48:44:48:0b:a1:f5:d7:34:48: 2b:ec:24:81:56:26:69:77:53:df:09:ee:88:c3:2b: f7:5c:8e:dd:22:69:96:4c:b3:01:ba:3e:05:e0:b8: c7:7f:9a:45:fc:9d:56:16:3b:84:65:f6:d8:0d:cf: 46:53:65:57:b1:3a:37:ed:2c:75:d9:1a:52:7d:66: da:c1:b1:3c:e0:e8:f3:59:2e:49:2e:dc:0e:97:87: 82:96:56:47:59:d4:20:f4:5a:67:1f:7f:72:28:2c: 07:e3:a9:34:05:0e:e3:06:c8:95:2e:54:60:0a:b4: c3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:76:95:21:54:5A:CA:BD:2A:58:5C:47:B3:ED:7D:56:73:45:21:D6 X509v3 Authority Key Identifier: keyid:3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:dc:08:18:6f:b4:2c:31:9d:23:7c:5a:a7:f0:f6:e4:bb:3a: be:f1:1f:53:7e:48:09:94:13:2e:6c:61:0b:ea:ac:bb:96:ba: 8f:84:b4:69:b3:86:8f:25:bf:29:f9:21:d8:77:89:5a:ff:cf: 5e:57:b7:6b:81:db:ce:10:ec:c0:32:7f:e3:b4:cb:ee:cb:69: e3:0b:34:aa:57:15:b7:fc:db:c2:7c:63:cf:2b:2e:ee:28:b5: 9b:1d:06:41:8a:a5:d9:bb:9d:16:bc:24:88:74:f9:4c:73:d6: ea:77:4e:15:05:7f:6a:8d:e2:be:d6:d3:c8:d4:78:30:de:de: 5a:e1:d1:e3:12:bd:be:b2:22:c8:2a:46:d3:88:1d:84:0b:d4: 7e:9a:2f:d6:01:e4:7e:05:43:f5:c5:9a:3a:c8:7f:e3:02:8b: 69:46:40:5a:54:96:92:0c:b7:8a:bb:43:60:47:b8:61:ee:0e: e9:86:99:c0:4f:be:74:31:06:e9:9e:70:ff:65:f2:e4:0b:a9: 81:41:99:bf:ff:66:64:62:4a:ba:0f:38:c1:14:38:2d:bd:df: 3e:11:3f:ce:70:c2:e6:d0:29:45:e9:3e:d1:24:51:1e:d6:bc: 04:40:2e:c1:93:99:5b:60:0b:f4:8a:31:89:bb:58:cf:f9:f3: 80:bd:8e:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzifMd9m9kstDnNjWnA5A6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMTI4NTRhODQwMGQ4Yzg3ZWE0ZGU3YTIyZmRmMWJmNTc0 YTkwMzEwHhcNMjUxMjA2MTIwMTM1WhcNMjUxMjA3MTIwMTM1WjAzMTEwLwYDVQQD Eyg3NTc2OTUyMTU0NWFjYWJkMmE1ODVjNDdiM2VkN2Q1NjczNDUyMWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlDsYcUgE0ReP0TxmQiCCSvfM0Cs xETGErQ/sN0H2gKQJ3v36eZJHzIT/RmIP3zTTbw5nIcVZiJHnbLhpg/PgBL/r3MZ VdtO0fHOgix64zyjOJMuAv8qvauzK7o9qtLyi16MGhWHQ92CPlE0L0VDHg3Gtfra fL9z/orYCS3GXmHJGDrLMaqKmxfFKKpIREgLofXXNEgr7CSBViZpd1PfCe6Iwyv3 XI7dImmWTLMBuj4F4LjHf5pF/J1WFjuEZfbYDc9GU2VXsTo37Sx12RpSfWbawbE8 4OjzWS5JLtwOl4eCllZHWdQg9FpnH39yKCwH46k0BQ7jBsiVLlRgCrTDGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHV2lSFUWsq9KlhcR7PtfVZzRSHWMB8GA1UdIwQY MBaAFDoShUqEANjIfqTeeiL98b9XSpAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2hLRlNvUUEyTWgtcE41Nkl2M3h2MWRLa0RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yYjZlMTYtOWNlOC00OWRhLTllZDMt NjgyOWQ2OGUyYTU0LzEvT2hLRlNvUUEyTWgtcE41Nkl2M3h2MWRLa0RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8yYjZlMTYtOWNlOC00OWRhLTllZDMtNjgyOWQ2OGUyYTU0 LzEvT2hLRlNvUUEyTWgtcE41Nkl2M3h2MWRLa0RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArtwIGG+0 LDGdI3xap/D25Ls6vvEfU35ICZQTLmxhC+qsu5a6j4S0abOGjyW/Kfkh2HeJWv/P Xle3a4HbzhDswDJ/47TL7stp4ws0qlcVt/zbwnxjzysu7ii1mx0GQYql2budFrwk iHT5THPW6ndOFQV/ao3ivtbTyNR4MN7eWuHR4xK9vrIiyCpG04gdhAvUfpov1gHk fgVD9cWaOsh/4wKLaUZAWlSWkgy3irtDYEe4Ye4O6YaZwE++dDEG6Z5w/2Xy5Aup gUGZv/9mZGJKug84wRQ4Lb3fPhE/znDC5tApRek+0SRRHta8BEAuwZOZW2AL9Iox ibtYz/nzgL2Ozg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:07:59 2025 by rpki-client