This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft File: ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft (raw, json) Hash identifier: T3wwC8Blr+YvtMXtjIbB7tGCSxhwRYqn3lp/89WkmXo= Subject key identifier: FD:97:FF:D6:19:0C:57:31:BA:ED:01:51:5E:2F:E1:8A:A1:02:F2:1D Authority key identifier: A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F Certificate issuer: /CN=a214fabfef203a8ee08ccb47dd6473fce799a28f Certificate serial: 019AF578200266188E18063E228EA5B7E2F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft Manifest number: 1106 Signing time: Sat 06 Dec 2025 21:01:21 +0000 Manifest this update: Sat 06 Dec 2025 21:01:21 +0000 Manifest next update: Sun 07 Dec 2025 21:01:21 +0000 Files and hashes: 1: ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl (hash: kZyPk0PFPv2fNTXNbm1z3+zUhf/3Xb3goP+6NQCx2Nc=) 2: thsd_2EivTS0FbZ7b83mqFkVBNo.roa (hash: Pv1XY8/swMxg7QqZhkFzX8BQKAWTTZrU7LwKowVl3tU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:20:02:66:18:8e:18:06:3e:22:8e:a5:b7:e2:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a214fabfef203a8ee08ccb47dd6473fce799a28f Validity Not Before: Dec 6 21:01:21 2025 GMT Not After : Dec 7 21:01:21 2025 GMT Subject: CN=fd97ffd6190c5731baed01515e2fe18aa102f21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e1:a5:1e:e7:d6:8f:45:fa:f4:3a:4b:29:9d: 0b:2d:d2:90:d9:73:ca:32:aa:58:85:9a:d0:9c:62: 03:24:86:7f:f0:ab:d5:26:19:fc:4d:94:fd:da:ce: a1:67:07:4c:34:e0:2f:67:b4:20:4e:de:15:94:cd: c8:c1:0e:76:cd:5b:7a:21:b5:70:cf:ba:76:54:2d: f5:91:44:c3:24:b1:55:ca:54:c8:a6:39:09:bc:9c: 77:4a:e3:f3:e3:f9:ee:85:55:b2:ff:3e:42:3a:2c: 93:e9:14:8f:23:15:c5:54:02:ac:d1:e0:2f:14:f4: 58:7b:fe:80:b3:92:c8:ee:25:fc:4a:21:cd:40:6c: f6:86:d7:08:b3:4e:30:74:b7:37:01:80:af:1e:2e: 2b:96:23:be:ef:71:6b:69:91:c2:90:c2:ce:b0:24: ad:21:c9:01:cf:10:ce:57:a1:e3:e9:30:99:67:a3: 23:98:bc:a6:a0:c3:3c:55:fc:11:69:94:3b:d0:87: 05:54:da:3d:04:f9:96:bf:69:8e:2d:de:04:0d:a9: 30:ba:d2:1e:a8:26:20:c1:8f:c0:7d:61:df:da:9e: 89:82:33:30:80:55:15:7a:5a:43:8f:a9:57:0e:98: 52:61:8f:ed:bc:2d:4e:45:89:ad:1b:b8:f5:eb:c6: 15:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:97:FF:D6:19:0C:57:31:BA:ED:01:51:5E:2F:E1:8A:A1:02:F2:1D X509v3 Authority Key Identifier: keyid:A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:9b:87:4b:20:4c:b6:e1:3b:a7:ab:85:f5:1f:eb:9a:de:03: b6:42:20:9a:ca:41:38:26:d7:98:76:a2:ad:46:66:e8:6d:f5: 69:77:75:5e:8c:0b:ee:de:63:4d:8d:74:d0:24:19:ac:0a:61: fd:fb:09:36:2e:b6:fe:f3:a4:ee:6a:00:8c:bc:78:b8:c8:69: ca:c2:a5:19:b8:9a:20:d7:e3:93:cb:84:bf:8a:07:3c:bf:46: 9d:14:c2:f5:f2:5b:74:98:c8:a2:b1:e3:de:f7:95:7b:05:8b: ec:98:ac:37:c4:4b:9f:8d:89:09:74:99:b9:47:fb:db:05:35: 5b:20:e6:ba:6e:71:6d:90:76:d5:04:a5:39:a2:38:55:c7:76: d0:30:1e:80:64:7e:8c:d0:79:2a:25:c8:f3:49:01:75:f3:e5: 44:f6:a4:00:41:b9:20:ee:ed:5c:65:d8:0d:b9:26:d4:41:0d: af:e7:55:71:ee:1f:7c:72:32:68:78:ca:f7:ab:3a:f6:5b:41: 79:5b:d7:f6:09:fa:06:55:0f:01:66:3d:5a:cb:7f:03:e8:92: 8c:8c:5d:33:bb:95:36:48:2d:59:0a:0e:ad:30:dd:29:12:ea: 8d:af:18:4c:4e:2f:0a:eb:3f:27:95:41:95:89:58:17:c7:7d: 35:05:64:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eCACZhiOGAY+Io6lt+LzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMTRmYWJmZWYyMDNhOGVlMDhjY2I0N2RkNjQ3M2ZjZTc5 OWEyOGYwHhcNMjUxMjA2MjEwMTIxWhcNMjUxMjA3MjEwMTIxWjAzMTEwLwYDVQQD EyhmZDk3ZmZkNjE5MGM1NzMxYmFlZDAxNTE1ZTJmZTE4YWExMDJmMjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+GlHufWj0X69DpLKZ0LLdKQ2XPK MqpYhZrQnGIDJIZ/8KvVJhn8TZT92s6hZwdMNOAvZ7QgTt4VlM3IwQ52zVt6IbVw z7p2VC31kUTDJLFVylTIpjkJvJx3SuPz4/nuhVWy/z5COiyT6RSPIxXFVAKs0eAv FPRYe/6As5LI7iX8SiHNQGz2htcIs04wdLc3AYCvHi4rliO+73FraZHCkMLOsCSt IckBzxDOV6Hj6TCZZ6MjmLymoMM8VfwRaZQ70IcFVNo9BPmWv2mOLd4EDakwutIe qCYgwY/AfWHf2p6JgjMwgFUVelpDj6lXDphSYY/tvC1ORYmtG7j168YVTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2X/9YZDFcxuu0BUV4v4YqhAvIdMB8GA1UdIwQY MBaAFKIU+r/vIDqO4IzLR91kc/znmaKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9lYmE0NTktMDNkMy00Y2Q1LTg2MDYt MjVjNWY3MTIzZTM1LzEvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9lYmE0NTktMDNkMy00Y2Q1LTg2MDYtMjVjNWY3MTIzZTM1 LzEvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZuHSyBM tuE7p6uF9R/rmt4DtkIgmspBOCbXmHairUZm6G31aXd1XowL7t5jTY100CQZrAph /fsJNi62/vOk7moAjLx4uMhpysKlGbiaINfjk8uEv4oHPL9GnRTC9fJbdJjIorHj 3veVewWL7JisN8RLn42JCXSZuUf72wU1WyDmum5xbZB21QSlOaI4Vcd20DAegGR+ jNB5KiXI80kBdfPlRPakAEG5IO7tXGXYDbkm1EENr+dVce4ffHIyaHjK96s69ltB eVvX9gn6BlUPAWY9Wst/A+iSjIxdM7uVNkgtWQoOrTDdKRLqja8YTE4vCus/J5VB lYlYF8d9NQVk1w== -----END CERTIFICATE-----Generated at Sun Dec 7 06:18:42 2025 by rpki-client