This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft File: OhZp0d72mq2VjU5W4b_5xk01DF8.mft (raw, json) Hash identifier: AsoHCmokjRywXsxYhX8MShkd5i66KEn/Jy0yhwMb+C0= Subject key identifier: 4F:8B:DB:B3:56:C3:DD:A1:CE:0D:C9:3E:B5:E3:A0:31:3B:D3:A0:BF Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F Certificate issuer: /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f Certificate serial: 019B2B1E4C08666D4A4E42F25D4AA0B9BA7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 07:02:44 +0000 Manifest this update: Wed 17 Dec 2025 07:02:44 +0000 Manifest next update: Thu 18 Dec 2025 07:02:44 +0000 Files and hashes: 1: OhZp0d72mq2VjU5W4b_5xk01DF8.crl (hash: Gc5FZGtF5PYGlb45qdCFU8Qo1kUTrsauF08UKgA8BvE=) 2: noyu-6tYZVHLrDpPGxAJtnQSh_U.roa (hash: nKGQEFiiWYGJZ59iiIKbp3yXCuzw4v74qvYho/+7XMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1e:4c:08:66:6d:4a:4e:42:f2:5d:4a:a0:b9:ba:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f Validity Not Before: Dec 17 07:02:44 2025 GMT Not After : Dec 18 07:02:44 2025 GMT Subject: CN=4f8bdbb356c3dda1ce0dc93eb5e3a0313bd3a0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f4:28:e0:2c:1c:e3:1a:3f:e1:19:9b:5a:0c: 36:6e:fe:af:fe:dc:f8:9d:2b:73:dc:ca:49:bd:af: b0:9a:cd:f6:b0:bd:66:e8:c7:d0:62:65:0e:8b:2b: 73:6b:9f:1e:4b:a4:49:e7:2e:09:ff:2b:04:aa:7b: 16:ad:d5:05:7d:9f:aa:8d:77:3a:3a:df:79:7b:8c: d2:6d:20:0a:ef:27:81:97:63:be:75:be:b4:44:32: 26:d3:0f:0c:de:a9:98:42:34:09:be:47:ac:38:07: 10:cc:c4:a4:f3:02:e2:5e:9e:46:72:42:d1:52:18: a3:1c:0c:aa:e8:4a:fd:0d:e7:c1:85:64:7d:db:cf: f7:03:c5:72:ec:3c:a1:7e:c5:70:70:6c:21:1c:b6: e8:af:58:d1:97:54:75:ad:a0:0d:5d:ef:7f:c2:cd: 99:6b:63:9b:26:db:84:ee:91:1d:aa:76:01:d6:f8: 80:7e:50:15:a0:c1:b5:c6:c6:ce:40:40:40:55:8b: ca:95:ae:f7:06:25:d0:87:b6:23:36:e8:7f:73:f1: ea:d0:e6:31:ec:a3:77:6c:38:06:48:96:6f:ff:93: bc:27:a2:34:64:e5:05:9e:cb:3e:e6:ed:72:f7:87: 39:9a:c8:cc:7a:8f:1e:3a:4c:a7:1a:fa:e1:4d:ae: 3e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8B:DB:B3:56:C3:DD:A1:CE:0D:C9:3E:B5:E3:A0:31:3B:D3:A0:BF X509v3 Authority Key Identifier: keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f9:4c:0d:27:66:5b:19:a0:0a:4d:e1:12:64:ba:a9:34:7c: 12:1f:a5:9e:f3:85:75:10:30:3f:3c:d4:0d:3a:f2:ea:34:2f: 2c:61:f8:a2:ca:74:63:35:46:c2:50:c0:99:e2:80:2b:cd:ef: 50:b1:5a:6d:60:6a:5c:75:02:ad:f9:c1:90:bf:0b:7a:cf:f3: ce:ab:c1:d8:ce:5c:e3:77:ff:05:0d:62:22:18:1f:51:25:1e: 98:4b:04:7f:b7:00:b3:e8:c0:bf:d6:f5:b5:0c:96:5c:7e:22: d4:f6:4e:e1:76:1e:8c:7b:51:e0:21:c6:34:bc:94:3f:4d:61: dd:89:41:46:8d:fb:1b:5a:ba:17:b6:3f:83:e7:e5:a7:15:bf: 6b:36:5b:85:6a:ff:2c:90:1e:66:31:e6:ca:71:33:0e:01:94: 90:88:41:2a:89:67:f8:cf:d0:61:a7:3a:21:42:d5:e5:cb:a0: 0e:a2:c7:dd:b4:cb:69:0b:85:f3:c8:0f:74:ca:77:20:70:e1: 54:f6:68:6a:b1:34:e9:9a:47:9f:00:85:7a:bf:b2:89:29:7c: 93:df:1c:22:c2:f4:c2:40:a9:fb:67:bf:7b:c3:c4:69:b4:81: 5c:9d:e4:8b:08:07:8d:53:f9:da:41:1a:27:57:c4:d6:9f:8a: 38:43:e8:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHkwIZm1KTkLyXUqgubp6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMTY2OWQxZGVmNjlhYWQ5NThkNGU1NmUxYmZmOWM2NGQz NTBjNWYwHhcNMjUxMjE3MDcwMjQ0WhcNMjUxMjE4MDcwMjQ0WjAzMTEwLwYDVQQD Eyg0ZjhiZGJiMzU2YzNkZGExY2UwZGM5M2ViNWUzYTAzMTNiZDNhMGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvQo4Cwc4xo/4RmbWgw2bv6v/tz4 nStz3MpJva+wms32sL1m6MfQYmUOiytza58eS6RJ5y4J/ysEqnsWrdUFfZ+qjXc6 Ot95e4zSbSAK7yeBl2O+db60RDIm0w8M3qmYQjQJvkesOAcQzMSk8wLiXp5GckLR UhijHAyq6Er9DefBhWR928/3A8Vy7DyhfsVwcGwhHLbor1jRl1R1raANXe9/ws2Z a2ObJtuE7pEdqnYB1viAflAVoMG1xsbOQEBAVYvKla73BiXQh7YjNuh/c/Hq0OYx 7KN3bDgGSJZv/5O8J6I0ZOUFnss+5u1y94c5msjMeo8eOkynGvrhTa4+owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+L27NWw92hzg3JPrXjoDE706C/MB8GA1UdIwQY MBaAFDoWadHe9pqtlY1OVuG/+cZNNQxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jNzQwZjUtNGYyYi00MTE5LWJkMzIt ZTE1OWNkNmYzNjU0LzEvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9jNzQwZjUtNGYyYi00MTE5LWJkMzItZTE1OWNkNmYzNjU0 LzEvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/lMDSdm WxmgCk3hEmS6qTR8Eh+lnvOFdRAwPzzUDTry6jQvLGH4osp0YzVGwlDAmeKAK83v ULFabWBqXHUCrfnBkL8Les/zzqvB2M5c43f/BQ1iIhgfUSUemEsEf7cAs+jAv9b1 tQyWXH4i1PZO4XYejHtR4CHGNLyUP01h3YlBRo37G1q6F7Y/g+flpxW/azZbhWr/ LJAeZjHmynEzDgGUkIhBKoln+M/QYac6IULV5cugDqLH3bTLaQuF88gPdMp3IHDh VPZoarE06ZpHnwCFer+yiSl8k98cIsL0wkCp+2e/e8PEabSBXJ3kiwgHjVP52kEa J1fE1p+KOEPoYQ== -----END CERTIFICATE-----Generated at Wed Dec 17 16:39:10 2025 by rpki-client