This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/Oh7rvRjfqoBV4TVRugJBZV2qo1I.mft File: Oh7rvRjfqoBV4TVRugJBZV2qo1I.mft (raw, json) Hash identifier: mxdj/pMOxPAxIzh76sCFRYZxaWfDqaP1bofCebUGOM4= Subject key identifier: 11:71:12:8C:DB:9C:1C:44:CE:BF:26:E6:DC:DB:17:C7:05:7F:4A:4A Authority key identifier: 3A:1E:EB:BD:18:DF:AA:80:55:E1:35:51:BA:02:41:65:5D:AA:A3:52 Certificate issuer: /CN=3a1eebbd18dfaa8055e13551ba0241655daaa352 Certificate serial: 019AF0BF5F37696059C3F12BD183E32A1E0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oh7rvRjfqoBV4TVRugJBZV2qo1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/Oh7rvRjfqoBV4TVRugJBZV2qo1I.mft Manifest number: 16 Signing time: Fri 05 Dec 2025 23:01:04 +0000 Manifest this update: Fri 05 Dec 2025 23:01:04 +0000 Manifest next update: Sat 06 Dec 2025 23:01:04 +0000 Files and hashes: 1: Mk4jN06mQ4fVbma_igKuXpQG3ps.roa (hash: 1RFESF+6Wti5ZNCZfHX28B3nSvTgVPMqHfySrz2lqWE=) 2: Oh7rvRjfqoBV4TVRugJBZV2qo1I.crl (hash: aHvrzBaw+JzAtnF7VAhbgxui1Z0MSZVBaET+d+hB16I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/Oh7rvRjfqoBV4TVRugJBZV2qo1I.crl rsync://rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/Oh7rvRjfqoBV4TVRugJBZV2qo1I.mft rsync://rpki.ripe.net/repository/DEFAULT/Oh7rvRjfqoBV4TVRugJBZV2qo1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:5f:37:69:60:59:c3:f1:2b:d1:83:e3:2a:1e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1eebbd18dfaa8055e13551ba0241655daaa352 Validity Not Before: Dec 5 23:01:04 2025 GMT Not After : Dec 6 23:01:04 2025 GMT Subject: CN=1171128cdb9c1c44cebf26e6dcdb17c7057f4a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f3:4a:e6:c5:d6:b2:24:67:d7:e1:ec:32:49: d8:6c:92:90:1c:1d:d8:96:de:91:65:99:79:10:e7: f2:96:0f:17:26:ea:fe:5e:12:0e:1f:ce:a3:9f:b5: 48:b5:01:99:7d:23:14:51:8f:37:78:44:0a:7f:80: 91:6e:26:4f:6e:55:74:f8:38:f1:13:78:dd:66:e7: b7:72:f4:5b:bd:da:b1:4f:bd:fb:87:46:82:7f:ce: 0b:43:9d:56:05:b0:32:0f:21:85:f0:7d:80:62:45: 65:cf:9c:45:39:0f:3e:51:bc:2c:6c:49:ea:11:c0: 57:c1:46:27:36:0f:d1:1d:7e:2b:bb:1e:ef:c2:7f: 13:89:f5:e9:33:32:5a:3d:2d:f9:20:c5:bd:6e:f2: c4:63:4e:ec:f3:c9:1a:d4:cf:f5:ea:54:4b:aa:1b: dd:0e:c9:41:88:a0:fb:f6:e4:92:6e:f3:58:37:26: 46:5e:df:17:70:2d:24:18:83:09:f9:30:22:93:a4: ab:35:31:75:b6:f9:c7:8d:af:73:49:0d:3b:3e:7f: e5:a2:40:7f:fe:44:03:c0:ab:e3:39:82:6a:f2:10: 66:37:46:9d:51:cf:8b:d9:28:c1:9f:b5:be:23:bc: d5:fd:29:a8:7f:85:72:e2:e1:3e:6d:b9:a0:1a:63: 98:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:71:12:8C:DB:9C:1C:44:CE:BF:26:E6:DC:DB:17:C7:05:7F:4A:4A X509v3 Authority Key Identifier: keyid:3A:1E:EB:BD:18:DF:AA:80:55:E1:35:51:BA:02:41:65:5D:AA:A3:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oh7rvRjfqoBV4TVRugJBZV2qo1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/Oh7rvRjfqoBV4TVRugJBZV2qo1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/999eaf-1cf0-4f48-8791-d1e4a5376510/1/Oh7rvRjfqoBV4TVRugJBZV2qo1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:49:86:c5:b9:1d:aa:6d:83:27:35:c1:15:41:f8:bc:1f:4b: 97:e3:b1:15:ad:ac:f0:66:eb:eb:cf:48:f8:c8:1c:fc:1b:71: 72:50:87:d0:e5:aa:40:99:75:ac:de:5c:07:32:e2:02:a1:54: 15:1e:67:6b:54:b5:99:21:9b:22:87:58:75:39:58:49:76:4e: 76:7d:7e:ac:c9:15:8b:ce:f0:51:22:c0:eb:46:bf:6f:12:af: ba:28:92:6d:5c:78:fe:50:24:78:3a:cb:44:b3:ff:e3:62:3f: 96:bf:1b:fb:58:06:83:78:e1:98:46:ae:e0:ef:31:15:21:96: e7:fd:41:b2:c5:56:9c:ac:59:dd:67:2f:4d:fb:6e:e9:9e:87: 88:5e:c7:64:a1:63:a4:83:39:32:c5:7d:66:0d:0a:dc:8d:5f: c6:8a:d6:19:7e:6e:f2:1a:49:bd:91:12:a4:61:3e:8d:30:ee: de:1a:69:dd:2d:48:07:ca:0e:18:8d:2b:92:94:30:1e:ab:28: a3:3c:cb:12:c7:43:2d:51:aa:1d:75:e5:4a:3c:5f:38:68:c1: 66:70:1e:a7:2d:c1:5d:37:8f:45:59:6b:1d:dc:0b:72:76:84: ad:80:26:f8:78:7c:3e:99:b6:36:3c:e6:41:97:21:a5:7a:ec: 52:79:d0:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv183aWBZw/Er0YPjKh4NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMWVlYmJkMThkZmFhODA1NWUxMzU1MWJhMDI0MTY1NWRh YWEzNTIwHhcNMjUxMjA1MjMwMTA0WhcNMjUxMjA2MjMwMTA0WjAzMTEwLwYDVQQD EygxMTcxMTI4Y2RiOWMxYzQ0Y2ViZjI2ZTZkY2RiMTdjNzA1N2Y0YTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fNK5sXWsiRn1+HsMknYbJKQHB3Y lt6RZZl5EOfylg8XJur+XhIOH86jn7VItQGZfSMUUY83eEQKf4CRbiZPblV0+Djx E3jdZue3cvRbvdqxT737h0aCf84LQ51WBbAyDyGF8H2AYkVlz5xFOQ8+UbwsbEnq EcBXwUYnNg/RHX4rux7vwn8TifXpMzJaPS35IMW9bvLEY07s88ka1M/16lRLqhvd DslBiKD79uSSbvNYNyZGXt8XcC0kGIMJ+TAik6SrNTF1tvnHja9zSQ07Pn/lokB/ /kQDwKvjOYJq8hBmN0adUc+L2SjBn7W+I7zV/Smof4Vy4uE+bbmgGmOYJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFxEozbnBxEzr8m5tzbF8cFf0pKMB8GA1UdIwQY MBaAFDoe670Y36qAVeE1UboCQWVdqqNSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2g3cnZSamZxb0JWNFRWUnVnSkJaVjJxbzFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OTllYWYtMWNmMC00ZjQ4LTg3OTEt ZDFlNGE1Mzc2NTEwLzEvT2g3cnZSamZxb0JWNFRWUnVnSkJaVjJxbzFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OTllYWYtMWNmMC00ZjQ4LTg3OTEtZDFlNGE1Mzc2NTEw LzEvT2g3cnZSamZxb0JWNFRWUnVnSkJaVjJxbzFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEmGxbkd qm2DJzXBFUH4vB9Ll+OxFa2s8Gbr689I+Mgc/BtxclCH0OWqQJl1rN5cBzLiAqFU FR5na1S1mSGbIodYdTlYSXZOdn1+rMkVi87wUSLA60a/bxKvuiiSbVx4/lAkeDrL RLP/42I/lr8b+1gGg3jhmEau4O8xFSGW5/1BssVWnKxZ3WcvTftu6Z6HiF7HZKFj pIM5MsV9Zg0K3I1fxorWGX5u8hpJvZESpGE+jTDu3hpp3S1IB8oOGI0rkpQwHqso ozzLEsdDLVGqHXXlSjxfOGjBZnAepy3BXTePRVlrHdwLcnaErYAm+Hh8Ppm2Njzm QZchpXrsUnnQxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:23 2025 by rpki-client