This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft File: Oeh-8DzxcaQLor7InmiLudOCWHM.mft (raw, json) Hash identifier: BMpO06m/h/MH9fbBFIZzakDhh5LI1XxN3EJ9Da3GTkY= Subject key identifier: EB:05:37:77:24:09:9E:6D:FE:11:1D:59:F8:7E:72:BC:B7:4F:A5:7F Authority key identifier: 39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73 Certificate issuer: /CN=39e87ef03cf171a40ba2bec89e688bb9d3825873 Certificate serial: 019AF16492C64A2A8968DC43D8504FA400EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 02:01:31 +0000 Manifest this update: Sat 06 Dec 2025 02:01:31 +0000 Manifest next update: Sun 07 Dec 2025 02:01:31 +0000 Files and hashes: 1: Oeh-8DzxcaQLor7InmiLudOCWHM.crl (hash: OGnAOljVIDxLnQRhN4yQcTQwtGMgx1Ex68gDunZ+5q8=) 2: n5SYr_9AWl7ry045zaGcqL0nDKk.roa (hash: T+InoEanLxjmmolVeMM0w1zQ5q4vdK0ebBhDTbrVjAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:92:c6:4a:2a:89:68:dc:43:d8:50:4f:a4:00:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39e87ef03cf171a40ba2bec89e688bb9d3825873 Validity Not Before: Dec 6 02:01:31 2025 GMT Not After : Dec 7 02:01:31 2025 GMT Subject: CN=eb05377724099e6dfe111d59f87e72bcb74fa57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f3:87:24:06:53:68:20:13:f2:2c:b1:1f:0d: c0:c4:bd:c0:7f:e0:4b:d3:7d:9b:2f:ad:8d:03:9d: d0:64:db:9d:c2:e2:9e:03:9e:c6:d8:89:ba:e8:bf: a4:07:99:52:56:2c:c9:6f:28:70:f6:61:99:05:38: e9:fe:da:10:53:eb:98:c7:dc:de:af:f0:9a:b0:f2: 28:48:b6:8d:eb:bf:2e:47:84:f2:be:94:b6:8d:ce: c5:69:5a:b5:b0:27:12:4d:7b:f7:5b:ff:b1:9e:f2: c7:36:1f:d5:d4:5f:b9:fd:10:af:4e:03:05:40:5d: 97:ef:fc:75:ea:48:9e:54:df:d8:37:ea:69:8e:d2: 47:bd:b4:0c:28:39:65:c5:b8:1a:9e:8e:0e:c5:ef: d7:f4:0e:3c:02:72:08:4a:11:74:23:47:2b:18:11: fb:02:3c:6d:ce:b6:18:e3:1f:e9:3c:d1:cf:86:83: 89:9b:dc:2e:42:42:a6:db:44:4f:03:40:8a:c0:54: 43:c0:13:50:82:82:74:f7:f0:0c:b3:da:17:9e:b7: 73:c7:73:a7:91:3b:ec:47:37:91:23:52:70:39:37: 0e:fe:4c:e8:12:c9:cb:6e:0b:62:02:fe:15:03:ec: fc:75:6d:32:b1:cf:e9:d0:d3:2e:cd:83:17:63:a3: 20:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:05:37:77:24:09:9E:6D:FE:11:1D:59:F8:7E:72:BC:B7:4F:A5:7F X509v3 Authority Key Identifier: keyid:39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:31:79:8f:90:de:4d:f4:ee:92:c5:3e:79:8d:cf:27:39:6d: 88:3d:97:cf:0f:57:14:e1:f2:0b:e3:61:70:2d:b0:28:c2:f2: 60:4f:fb:5e:e1:82:d6:97:76:0b:b5:f5:46:5f:f6:31:83:00: 9e:cd:ba:27:0d:bf:07:c2:34:86:bd:8b:13:ad:cb:69:a6:c7: b5:8c:8b:25:49:c4:08:88:92:2e:1e:99:20:2b:e6:a5:f4:d8: 0b:f0:8d:c3:18:14:54:b4:6f:c6:79:0f:55:75:b8:9b:fd:64: 6d:34:31:8e:10:ff:ea:c9:41:d2:6b:a5:15:4d:08:00:f5:ba: 4c:fd:84:f5:a9:6a:a2:b5:3d:99:5b:e2:89:c5:a2:83:86:98: 3c:e3:52:11:c5:c8:2e:a5:5e:53:c5:cf:3f:ae:32:53:70:6c: 85:27:c8:4b:47:a6:ae:22:54:7d:3a:7d:ca:d6:76:8e:06:fd: 7b:66:c2:5d:27:9b:0b:2a:ce:07:1a:a7:b5:78:dd:69:03:12: 50:41:38:bc:ed:ae:8d:81:42:57:95:7c:53:c5:fb:a0:49:1b: e9:8b:31:33:ca:10:c6:82:c9:54:57:b4:0a:64:01:72:38:87: 6d:e3:0a:e8:0b:f3:dd:2c:aa:63:2d:77:f0:59:e7:41:ff:55: bd:df:42:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZJLGSiqJaNxD2FBPpADvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZTg3ZWYwM2NmMTcxYTQwYmEyYmVjODllNjg4YmI5ZDM4 MjU4NzMwHhcNMjUxMjA2MDIwMTMxWhcNMjUxMjA3MDIwMTMxWjAzMTEwLwYDVQQD EyhlYjA1Mzc3NzI0MDk5ZTZkZmUxMTFkNTlmODdlNzJiY2I3NGZhNTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/OHJAZTaCAT8iyxHw3AxL3Af+BL 032bL62NA53QZNudwuKeA57G2Im66L+kB5lSVizJbyhw9mGZBTjp/toQU+uYx9ze r/CasPIoSLaN678uR4TyvpS2jc7FaVq1sCcSTXv3W/+xnvLHNh/V1F+5/RCvTgMF QF2X7/x16kieVN/YN+ppjtJHvbQMKDllxbgano4Oxe/X9A48AnIIShF0I0crGBH7 AjxtzrYY4x/pPNHPhoOJm9wuQkKm20RPA0CKwFRDwBNQgoJ09/AMs9oXnrdzx3On kTvsRzeRI1JwOTcO/kzoEsnLbgtiAv4VA+z8dW0ysc/p0NMuzYMXY6MgWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsFN3ckCZ5t/hEdWfh+cry3T6V/MB8GA1UdIwQY MBaAFDnofvA88XGkC6K+yJ5oi7nTglhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2VoLThEenhjYVFMb3I3SW5taUx1ZE9DV0hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81MWE2MGMtY2Y2My00NDNkLTllMDIt MDRkZDU2ZjcwZmUzLzEvT2VoLThEenhjYVFMb3I3SW5taUx1ZE9DV0hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy81MWE2MGMtY2Y2My00NDNkLTllMDItMDRkZDU2ZjcwZmUz LzEvT2VoLThEenhjYVFMb3I3SW5taUx1ZE9DV0hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjF5j5De TfTuksU+eY3PJzltiD2Xzw9XFOHyC+NhcC2wKMLyYE/7XuGC1pd2C7X1Rl/2MYMA ns26Jw2/B8I0hr2LE63LaabHtYyLJUnECIiSLh6ZICvmpfTYC/CNwxgUVLRvxnkP VXW4m/1kbTQxjhD/6slB0mulFU0IAPW6TP2E9alqorU9mVviicWig4aYPONSEcXI LqVeU8XPP64yU3BshSfIS0emriJUfTp9ytZ2jgb9e2bCXSebCyrOBxqntXjdaQMS UEE4vO2ujYFCV5V8U8X7oEkb6YsxM8oQxoLJVFe0CmQBcjiHbeMK6Avz3SyqYy13 8FnnQf9Vvd9CAw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:26 2025 by rpki-client