This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft File: OhZp0d72mq2VjU5W4b_5xk01DF8.mft (raw, json) Hash identifier: zkYBd8JtLhWC0E0548Pt3CUZd4mHyBwC2dQ0TALnVhI= Subject key identifier: 6D:E9:06:90:E2:62:F0:14:83:B3:AF:41:A4:AE:EE:8C:D5:F7:74:51 Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F Certificate issuer: /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f Certificate serial: 019AF12EEE41D3FB8777856044D71996AC2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:02:55 +0000 Manifest this update: Sat 06 Dec 2025 01:02:55 +0000 Manifest next update: Sun 07 Dec 2025 01:02:55 +0000 Files and hashes: 1: OhZp0d72mq2VjU5W4b_5xk01DF8.crl (hash: xtDmpErE9V5wjtk8GgvngwuEREtZVmDgel1tIaQskdw=) 2: noyu-6tYZVHLrDpPGxAJtnQSh_U.roa (hash: nKGQEFiiWYGJZ59iiIKbp3yXCuzw4v74qvYho/+7XMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ee:41:d3:fb:87:77:85:60:44:d7:19:96:ac:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f Validity Not Before: Dec 6 01:02:55 2025 GMT Not After : Dec 7 01:02:55 2025 GMT Subject: CN=6de90690e262f01483b3af41a4aeee8cd5f77451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:6b:58:db:2a:ff:31:58:7d:60:7d:46:80: 21:6e:3b:2f:66:9a:bc:de:55:24:ba:f7:4c:89:ad: 64:4c:67:66:c4:f5:d4:d0:ca:70:04:95:b7:9c:c6: b2:c3:56:06:b8:9c:0a:02:9d:ec:9d:e4:8c:e1:65: 6d:63:67:c5:9f:c3:30:7e:4d:18:37:4b:03:b8:ba: 6a:c7:24:3a:e6:6b:d5:98:27:ae:33:0e:eb:a3:28: fb:ba:ce:0e:36:1e:dd:15:08:11:d1:46:49:1e:a4: 98:2e:41:a9:66:b2:0c:56:1c:5a:8a:82:b4:27:76: f1:12:73:1b:c4:5e:d8:6a:a6:cd:ed:fd:f4:a8:08: 35:6b:08:2b:e5:b1:cc:a1:db:75:10:d6:21:17:e9: 5c:37:ab:46:98:09:d5:3e:9a:6d:91:fb:9d:a5:6f: 62:ff:1d:ed:e1:94:51:ce:ff:da:b5:a9:07:b5:10: db:82:93:11:bd:97:a6:2c:68:0f:e3:b4:aa:56:58: 02:5a:d0:21:41:83:a0:66:5a:04:cd:7b:71:78:fa: 71:c2:34:7f:26:cb:73:ae:95:22:54:8c:05:d6:4e: b0:b9:33:ee:dc:43:b5:00:2c:80:08:dd:01:26:00: dc:03:0d:9f:8d:00:a2:13:42:65:06:6f:85:57:d2: 96:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E9:06:90:E2:62:F0:14:83:B3:AF:41:A4:AE:EE:8C:D5:F7:74:51 X509v3 Authority Key Identifier: keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bd:cf:3c:b8:7c:4c:12:fe:9d:e8:83:4a:a8:6c:d1:2d:d5: 73:6d:f7:22:d5:29:0e:53:c8:33:fe:a4:ae:3b:94:a9:e1:53: f6:d9:7f:e6:21:23:82:97:b7:66:81:0c:44:a7:c3:de:45:51: 21:df:94:2c:f0:da:d8:56:db:57:3a:51:97:d4:12:56:48:7d: 93:4b:85:30:3d:ea:97:93:e5:a0:5d:cf:a9:3e:0c:b6:3b:3b: 84:68:da:19:86:fc:10:76:a0:bf:e4:44:66:a3:4e:4a:15:5f: 99:64:32:bb:56:26:40:c3:ee:31:4b:ff:83:e2:1b:59:a2:91: 80:74:2f:57:da:0b:3d:bc:84:f3:b4:a6:f0:bb:fa:51:a5:54: 9e:cb:58:36:97:49:33:e1:59:ed:4f:09:e1:09:22:f1:3c:d3: d3:1e:2a:d8:f4:97:75:ce:86:9e:5a:ed:c5:a5:92:81:7d:04: dc:87:ce:06:05:ef:e5:dd:cf:c1:ae:bf:23:73:45:a6:60:a0: a2:11:85:ef:b0:0c:9b:c9:46:ef:55:d1:cc:49:94:a3:bf:68: 5a:e2:12:c0:a6:14:77:24:14:c4:5c:17:39:6f:94:9d:b0:9c: bd:de:8d:fe:a1:aa:61:db:af:aa:85:c5:ab:6d:8b:ff:dc:df: 22:22:87:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLu5B0/uHd4VgRNcZlqwvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMTY2OWQxZGVmNjlhYWQ5NThkNGU1NmUxYmZmOWM2NGQz NTBjNWYwHhcNMjUxMjA2MDEwMjU1WhcNMjUxMjA3MDEwMjU1WjAzMTEwLwYDVQQD Eyg2ZGU5MDY5MGUyNjJmMDE0ODNiM2FmNDFhNGFlZWU4Y2Q1Zjc3NDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhtrWNsq/zFYfWB9RoAhbjsvZpq8 3lUkuvdMia1kTGdmxPXU0MpwBJW3nMayw1YGuJwKAp3sneSM4WVtY2fFn8Mwfk0Y N0sDuLpqxyQ65mvVmCeuMw7royj7us4ONh7dFQgR0UZJHqSYLkGpZrIMVhxaioK0 J3bxEnMbxF7YaqbN7f30qAg1awgr5bHModt1ENYhF+lcN6tGmAnVPpptkfudpW9i /x3t4ZRRzv/atakHtRDbgpMRvZemLGgP47SqVlgCWtAhQYOgZloEzXtxePpxwjR/ JstzrpUiVIwF1k6wuTPu3EO1ACyACN0BJgDcAw2fjQCiE0JlBm+FV9KWKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3pBpDiYvAUg7OvQaSu7ozV93RRMB8GA1UdIwQY MBaAFDoWadHe9pqtlY1OVuG/+cZNNQxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jNzQwZjUtNGYyYi00MTE5LWJkMzIt ZTE1OWNkNmYzNjU0LzEvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9jNzQwZjUtNGYyYi00MTE5LWJkMzItZTE1OWNkNmYzNjU0 LzEvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADL3PPLh8 TBL+neiDSqhs0S3Vc233ItUpDlPIM/6krjuUqeFT9tl/5iEjgpe3ZoEMRKfD3kVR Id+ULPDa2FbbVzpRl9QSVkh9k0uFMD3ql5PloF3PqT4Mtjs7hGjaGYb8EHagv+RE ZqNOShVfmWQyu1YmQMPuMUv/g+IbWaKRgHQvV9oLPbyE87Sm8Lv6UaVUnstYNpdJ M+FZ7U8J4Qki8TzT0x4q2PSXdc6GnlrtxaWSgX0E3IfOBgXv5d3Pwa6/I3NFpmCg ohGF77AMm8lG71XRzEmUo79oWuISwKYUdyQUxFwXOW+UnbCcvd6N/qGqYduvqoXF q22L/9zfIiKHSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:57:03 2025 by rpki-client