This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json) Hash identifier: gbY/hmjrECKdhHB0FDAveNB0WrqG6YRJ1M1tMIP79Bw= Subject key identifier: 1A:21:20:73:44:F7:6D:AB:F2:03:84:27:3D:CB:E6:05:F6:54:40:C7 Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d Certificate serial: 019AF0F5C52B39D93AB51F87FA5CD357BEC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft Manifest number: 1779 Signing time: Sat 06 Dec 2025 00:00:29 +0000 Manifest this update: Sat 06 Dec 2025 00:00:29 +0000 Manifest next update: Sun 07 Dec 2025 00:00:29 +0000 Files and hashes: 1: 9i_Fy4mZRlfNURa4hayKcHdiMEY.roa (hash: PDPb352f2JPLuJHrhYLanZ+7oePAn4VxO33SNBFdxI0=) 2: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: 3uZlrmU1URY0RR419ewbqlzlBwgezjXHfyiqur0g460=) 3: sQ8Q9JbQaoeHKywiLJo-bvW4TFM.roa (hash: /IXlZY/hi3esdJuWdO3U7HevNnK2FSj61hj5YPxercA=) 4: vZVAzO1comLh9rD--AKOhaNfFxQ.roa (hash: H/PssdlCji8ajNbZih50zN0dew5cG4Cssgd64RB/Rhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:c5:2b:39:d9:3a:b5:1f:87:fa:5c:d3:57:be:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d Validity Not Before: Dec 6 00:00:29 2025 GMT Not After : Dec 7 00:00:29 2025 GMT Subject: CN=1a21207344f76dabf20384273dcbe605f65440c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:58:6d:71:52:6f:c3:65:ca:29:c9:c4:18:53: e9:03:7e:ac:ff:c5:3e:0e:16:39:df:93:bf:d4:f5: 90:71:04:8c:d8:36:da:21:ef:b7:49:93:e2:13:2b: 51:1a:3a:a6:a1:f3:00:1e:9f:dd:0e:02:a3:fb:7d: 9c:49:af:23:83:d0:90:51:6b:ff:81:ed:e2:ed:87: 13:81:34:54:5c:00:2b:a3:0a:34:3f:4b:8b:a1:27: dd:a1:5d:25:ce:7f:e1:8b:b1:9a:f9:0b:cd:4c:cf: 93:0a:27:8f:44:d7:7d:83:4f:00:ce:ba:19:ee:3c: b6:e6:73:6d:74:c4:bc:61:4e:ec:d0:7d:69:c6:80: 17:fe:38:df:fc:59:ec:63:94:6c:a5:da:a6:38:56: 69:14:83:c4:35:09:ed:a2:15:da:28:47:9b:e8:36: b4:ea:a4:7d:74:89:bc:6a:90:54:1e:ca:80:69:30: 64:75:d6:ff:8c:5e:36:a8:ac:e1:91:de:2b:df:61: fc:c9:d8:a0:11:48:ca:1e:ee:e1:e7:f7:ef:96:d2: 4f:b9:ed:fe:a1:4b:13:e4:4f:0c:04:03:3a:37:a8: 31:29:2f:e6:12:14:52:5e:e4:a9:d4:68:c4:bb:15: 18:87:9e:57:2f:17:4e:64:4f:d3:c4:7a:36:e3:b1: e4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:21:20:73:44:F7:6D:AB:F2:03:84:27:3D:CB:E6:05:F6:54:40:C7 X509v3 Authority Key Identifier: keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:a7:e3:0e:88:a4:cf:7d:cb:8d:da:66:be:dd:b8:f9:bf:d1: c6:01:8d:d4:c8:30:5c:ad:e6:18:ef:34:b8:64:59:d6:97:7e: 34:fa:09:da:51:25:b3:67:01:84:72:a9:d6:95:c2:f5:3e:d9: 4b:be:3e:96:be:1b:6b:ac:33:a2:29:c0:df:84:b6:0d:23:ed: 69:a8:56:f6:e9:c7:f5:50:59:cb:17:b2:28:0e:f4:0f:e6:71: 86:d5:40:c7:0a:b8:39:ac:34:b6:a1:6d:d9:70:ba:61:36:83: 91:29:7c:74:fd:7d:ae:dd:8a:0a:c7:b0:7d:3d:0e:7f:e4:f8: 99:50:84:9f:da:f9:87:3b:b1:49:aa:b7:37:66:8f:d0:df:14: fc:8d:97:87:cc:10:c6:d6:e2:5f:2f:5b:7f:60:fa:d3:11:50: f9:62:f5:65:b3:74:b4:e3:eb:73:94:bc:4e:d0:9d:8f:33:5d: ae:0b:67:69:6f:f7:97:8c:ac:b0:c8:49:47:d6:1a:af:4a:65: 02:d4:d0:63:31:94:2e:c8:18:ca:5a:9b:a3:63:f9:3c:df:87: c0:dd:59:7a:d9:0d:f8:32:6b:9c:03:4f:57:18:c5:56:1e:60: aa:b5:e3:b9:87:0e:7a:fb:e4:d6:53:df:7b:b3:16:9f:e8:a3: 48:87:d9:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9cUrOdk6tR+H+lzTV77HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNDg0NWFmMWRjMDA4N2IyNzRjZWU1MmE0YTllMDg4MDMz NTQzNWQwHhcNMjUxMjA2MDAwMDI5WhcNMjUxMjA3MDAwMDI5WjAzMTEwLwYDVQQD EygxYTIxMjA3MzQ0Zjc2ZGFiZjIwMzg0MjczZGNiZTYwNWY2NTQ0MGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlhtcVJvw2XKKcnEGFPpA36s/8U+ DhY535O/1PWQcQSM2DbaIe+3SZPiEytRGjqmofMAHp/dDgKj+32cSa8jg9CQUWv/ ge3i7YcTgTRUXAArowo0P0uLoSfdoV0lzn/hi7Ga+QvNTM+TCiePRNd9g08AzroZ 7jy25nNtdMS8YU7s0H1pxoAX/jjf/FnsY5RspdqmOFZpFIPENQntohXaKEeb6Da0 6qR9dIm8apBUHsqAaTBkddb/jF42qKzhkd4r32H8ydigEUjKHu7h5/fvltJPue3+ oUsT5E8MBAM6N6gxKS/mEhRSXuSp1GjEuxUYh55XLxdOZE/TxHo247Hk+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBohIHNE922r8gOEJz3L5gX2VEDHMB8GA1UdIwQY MBaAFKBIRa8dwAh7J0zuUqSp4IgDNUNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjct NTA3MDExNTcwZWU2LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjctNTA3MDExNTcwZWU2 LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxKfjDoik z33Ljdpmvt24+b/RxgGN1MgwXK3mGO80uGRZ1pd+NPoJ2lEls2cBhHKp1pXC9T7Z S74+lr4ba6wzoinA34S2DSPtaahW9unH9VBZyxeyKA70D+ZxhtVAxwq4Oaw0tqFt 2XC6YTaDkSl8dP19rt2KCsewfT0Of+T4mVCEn9r5hzuxSaq3N2aP0N8U/I2Xh8wQ xtbiXy9bf2D60xFQ+WL1ZbN0tOPrc5S8TtCdjzNdrgtnaW/3l4yssMhJR9Yar0pl AtTQYzGULsgYylqbo2P5PN+HwN1ZetkN+DJrnANPVxjFVh5gqrXjuYcOevvk1lPf e7MWn+ijSIfZtA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:01 2025 by rpki-client