This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft File: OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json) Hash identifier: aKHRUamsecoRAjJuZMov1wTJMQ+Fig/fBsv3HGHx95g= Subject key identifier: 86:3C:5D:8A:0D:78:03:2D:3A:7F:9B:D9:8F:AA:CA:97:9C:36:C5:93 Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 019AF1D18683E3E630C4152F57FE8F431E39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft Manifest number: 1770 Signing time: Sat 06 Dec 2025 04:00:31 +0000 Manifest this update: Sat 06 Dec 2025 04:00:31 +0000 Manifest next update: Sun 07 Dec 2025 04:00:31 +0000 Files and hashes: 1: 3nAxOrqe3oi83iVjt7-kMzJ_imI.roa (hash: 0jNIl4uBhcm5LdIuubw+L/Ha2QMXka6zLLkNeAcF40c=) 2: 7B2j1343QblR9F6iTWiRinHn8x0.roa (hash: Bp/dbOZRIjunqnEsDuN3X0tRwg1SKVjgcGEA09U24Zc=) 3: B9dwnbBbiJenj05UDjyUy_TzXDg.roa (hash: s4Wv5YaGEZaX82N6dusRWR3tSJBVmvjmxniLSHfxYAE=) 4: E6umy5_OlHHb3NOgNKiaqTj372A.roa (hash: kmYIRPqCRch39x2r6WhmK+8aDVBlwYVLvzQIGAbOPps=) 5: GrCJk2XTvFQ1bFg3LeF86Dm0kMU.roa (hash: //aHWa+QTi3TqyDc0NocuZ54Ser38N49WnMxWn6LdwE=) 6: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: jVY9j59L+9eDtgYQNPXYGPRi0pOfl/qg/i/u+zOhsLQ=) 7: P0hYRZk_epkkwrcDiaxk_ejd9pE.roa (hash: RbP7Hj7hNb6SHmHJtPw1bzOEo2w8Ign3eKIaXKeZWz8=) 8: SOBAES4j7h-D6nKfccoc2NpSr8A.roa (hash: vmAKmT6VUkF1cozh164hgKJKVk8BJXYwDbwibYkkVy4=) 9: WBa-OMWvS5R9EiWcpIqPa_m7lKo.roa (hash: JhWDx8KAw0uX/VJGQRKzvoZLcAnbsOAM+D0EwwgJJrs=) 10: _6ucnx77KQFalvj5yEE2wp5osls.roa (hash: Xw55WCSv/8tmiRj4/KKvZ6v3swmB6TKO4qL1Xw6aI30=) 11: hmNo0lfF6aVfLa7MkqmEKjtbdyQ.roa (hash: +xwhsq1RdvJOWfeJtHcoWSMc+U0UkSWEqMUWf9xz80w=) 12: jtw47htspCaZBqLn-szAwwLDgRI.roa (hash: 4ge4ZfZPpCPnlsJ6k5nbKp3z9nIWCai+fnrSIWJ/WUA=) 13: jzrvK-bgXnpFKZtkluSwDEQbp08.roa (hash: ZM3tthCJVaSjXclzoJDdeWjLh7O5ICpnIBuMTiMEL9g=) 14: nDB6bqiXy-rzhdku9Lj005kPHfA.roa (hash: 0AJR+PurXnO7T0pJNk8Tq3MFQx7X/cSxW3eCAXJvtLk=) 15: pvCC0r4LUt3fsl1VHVQdfXh8Y18.roa (hash: 7j0tvWV4dVH4uAAkH8k/IyIqfSMk5UZQp8CnBxjMpFY=) 16: u50dx3Lab1g7VZDVh4T56LPcn_0.roa (hash: jDquIHZmp2NFyWqEfhpXVj8qaJ2TUhubdI3kfdM2qms=) 17: z5q48ktpf1eARPpbmIGK9GsvsrQ.roa (hash: tmWASzkDn54AHUg2VFq+szTIlcEFXE4zmXDoc40cFbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:86:83:e3:e6:30:c4:15:2f:57:fe:8f:43:1e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Dec 6 04:00:31 2025 GMT Not After : Dec 7 04:00:31 2025 GMT Subject: CN=863c5d8a0d78032d3a7f9bd98faaca979c36c593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:df:5c:29:76:4b:ca:f0:15:50:79:c5:92:af: 50:0b:15:58:07:11:59:e2:27:ed:57:0d:8b:a6:88: 54:98:d6:93:ff:c8:3b:28:c1:2a:7f:52:a0:9d:31: e8:75:f9:6b:b3:c0:54:e3:6a:4f:2b:1a:f6:c1:b3: c7:a4:d9:81:d9:e9:70:2f:8e:f4:52:96:1f:7e:46: cd:c6:df:c5:c7:7d:17:5b:a7:ab:1f:c3:05:81:6a: d1:4a:1c:0e:0f:58:f2:78:d3:11:e2:9a:86:5d:52: d2:89:1b:3e:7d:7e:f9:9a:23:42:ee:b4:32:14:be: cf:32:b5:9a:df:2c:d4:61:65:ae:ee:b7:78:79:2e: f6:f2:c1:5d:b9:17:c2:c8:90:a8:27:f8:14:66:9a: ed:40:92:16:54:98:61:3f:62:ec:2d:fc:b9:db:43: 2c:59:ec:0b:fe:65:07:f8:ff:4d:8f:aa:bd:52:69: d2:00:88:ef:d7:88:db:bc:38:b5:44:23:c9:20:08: 4f:13:9e:9f:4d:4d:c9:4a:1c:14:b1:e3:22:92:c4: af:17:70:ed:dc:f6:04:ad:21:30:7f:60:67:ef:30: d4:9a:c5:f4:f7:6f:d9:41:75:a3:8a:64:a1:58:2d: 94:e4:53:39:58:36:76:38:50:a7:ad:83:85:37:e2: 6f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3C:5D:8A:0D:78:03:2D:3A:7F:9B:D9:8F:AA:CA:97:9C:36:C5:93 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ad:80:85:3b:c9:3b:91:af:10:7f:1e:4d:85:67:4b:43:55: c1:f2:ae:37:f8:21:60:d2:2f:79:98:22:f8:49:6c:d6:f8:2d: 83:39:b0:be:c0:d2:80:d6:4b:da:cc:c0:68:87:a9:d4:d9:2e: 29:ae:36:92:f1:20:bd:ee:5b:59:9b:6b:bb:87:00:7f:b7:e4: 3a:93:76:dd:9c:c0:b3:36:ab:7d:9d:24:e2:e2:b8:5a:47:c1: c7:c2:fc:65:7c:b7:6f:de:83:c2:fe:c9:ea:c4:f6:a5:9c:cc: 6d:83:f0:0a:34:d3:5b:92:3b:f4:d6:d8:02:58:94:20:e5:ed: 9d:60:e9:ec:d3:3c:e3:2e:52:ee:1b:5c:3b:2e:aa:e2:ca:f3: 0a:ae:16:5a:87:bd:43:16:63:e5:1a:68:54:36:6c:15:0e:2d: de:a0:06:c9:d5:90:38:d7:21:da:d2:54:d0:2d:84:2c:73:4e: 27:e4:a4:28:b7:62:0c:f1:dc:40:c1:cb:76:84:1f:78:d6:f4: d4:49:57:a9:8d:45:11:e0:0b:6c:76:d8:b6:5d:9d:fc:e7:d0: d2:90:ae:0c:2a:9c:09:ae:bb:8a:7a:03:39:65:bc:38:15:da: 31:b6:1d:3d:1c:5e:ab:d8:e1:6c:43:d0:8d:36:b8:46:00:8e: 07:8a:a0:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YaD4+YwxBUvV/6PQx45MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjUxMjA2MDQwMDMxWhcNMjUxMjA3MDQwMDMxWjAzMTEwLwYDVQQD Eyg4NjNjNWQ4YTBkNzgwMzJkM2E3ZjliZDk4ZmFhY2E5NzljMzZjNTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2d9cKXZLyvAVUHnFkq9QCxVYBxFZ 4iftVw2LpohUmNaT/8g7KMEqf1KgnTHodflrs8BU42pPKxr2wbPHpNmB2elwL470 UpYffkbNxt/Fx30XW6erH8MFgWrRShwOD1jyeNMR4pqGXVLSiRs+fX75miNC7rQy FL7PMrWa3yzUYWWu7rd4eS728sFduRfCyJCoJ/gUZprtQJIWVJhhP2LsLfy520Ms WewL/mUH+P9Nj6q9UmnSAIjv14jbvDi1RCPJIAhPE56fTU3JShwUseMiksSvF3Dt 3PYErSEwf2Bn7zDUmsX092/ZQXWjimShWC2U5FM5WDZ2OFCnrYOFN+JvxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIY8XYoNeAMtOn+b2Y+qypecNsWTMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANq2AhTvJ O5GvEH8eTYVnS0NVwfKuN/ghYNIveZgi+Els1vgtgzmwvsDSgNZL2szAaIep1Nku Ka42kvEgve5bWZtru4cAf7fkOpN23ZzAszarfZ0k4uK4WkfBx8L8ZXy3b96Dwv7J 6sT2pZzMbYPwCjTTW5I79NbYAliUIOXtnWDp7NM84y5S7htcOy6q4srzCq4WWoe9 QxZj5RpoVDZsFQ4t3qAGydWQONch2tJU0C2ELHNOJ+SkKLdiDPHcQMHLdoQfeNb0 1ElXqY1FEeALbHbYtl2d/OfQ0pCuDCqcCa67inoDOWW8OBXaMbYdPRxeq9jhbEPQ jTa4RgCOB4qgWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:07 2025 by rpki-client