This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft File: OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft (raw, json) Hash identifier: VSWEWXmmKOS3JPSCvrXJgunuB1W8+n1L+w00+o7CcyA= Subject key identifier: A6:78:8C:76:98:56:F5:AB:CD:E7:AF:52:0A:25:B3:01:AF:1B:87:B0 Authority key identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7 Certificate issuer: /CN=38728e9bd37399df9ffae587bd06884b350a65b7 Certificate serial: 019AF163DADF95682BFC8410FBBC13658585 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft Manifest number: 164B Signing time: Sat 06 Dec 2025 02:00:44 +0000 Manifest this update: Sat 06 Dec 2025 02:00:44 +0000 Manifest next update: Sun 07 Dec 2025 02:00:44 +0000 Files and hashes: 1: OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl (hash: faF90GEmfsemI8VnnkdG/ZJ03Bdc1s3tolguhhT9C+Q=) 2: twJfM1b3K1XophieDfrOK9Yb-bY.roa (hash: MXmmwrQwlazvGbzqXnWAVBTx7ErXJeD/39Xn13fKyq4=) 3: yDG1vLQ-KGVU7rKzL_YKjYA7asI.roa (hash: nobKKBS8kgxDPf0JFjAg1XT1LQOMq5xVuTfEuqxhhFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:da:df:95:68:2b:fc:84:10:fb:bc:13:65:85:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38728e9bd37399df9ffae587bd06884b350a65b7 Validity Not Before: Dec 6 02:00:44 2025 GMT Not After : Dec 7 02:00:44 2025 GMT Subject: CN=a6788c769856f5abcde7af520a25b301af1b87b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:12:62:f0:08:1e:1b:59:37:a7:22:8a:e3:11: 24:ef:dd:94:e6:78:ef:2b:21:e8:25:a9:15:31:87: fb:4f:b8:1c:2d:62:46:60:13:54:8a:4d:45:17:19: b5:02:32:f6:69:18:60:5c:ee:a7:ee:70:46:10:d1: d5:a0:44:7b:bf:d2:ca:4e:9f:a9:a8:31:cd:96:e3: 47:18:12:d6:61:51:31:78:23:dc:13:79:b0:55:a1: 7d:c4:ca:65:9e:7c:8a:14:55:93:94:62:3b:f0:59: 53:c0:56:5f:c2:34:05:33:79:1f:fa:56:c6:00:30: e2:28:e6:ee:65:ee:bf:a6:61:b4:e1:ee:b2:04:b6: 3b:03:db:97:93:94:79:83:9a:64:63:86:2d:4a:08: 54:c3:7e:74:70:84:e1:fe:c4:8b:87:8e:89:ae:7e: 4c:6c:9f:a3:03:43:02:82:0f:c9:22:c0:1b:5f:68: 3b:79:54:53:56:29:89:14:e9:76:a6:ec:7d:69:d8: 0d:ae:c6:73:36:be:b1:e8:40:89:b3:a2:15:ae:1d: 8e:6e:20:7d:ab:f8:62:e1:4d:a4:c5:70:67:64:2a: b6:65:9f:93:41:26:79:4d:47:0f:01:ca:37:02:8b: 87:77:7f:fa:df:55:bf:4c:0a:a5:d6:54:c8:dd:d9: 0d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:78:8C:76:98:56:F5:AB:CD:E7:AF:52:0A:25:B3:01:AF:1B:87:B0 X509v3 Authority Key Identifier: keyid:38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:ee:80:04:78:a1:5b:96:a7:20:3d:0d:24:6e:de:95:d4:25: cb:c3:0c:b6:24:c3:bf:1e:77:e8:18:ec:4b:9e:f5:6d:23:5f: 74:f4:b5:a1:b3:e0:e7:5f:d9:3a:0c:36:e7:2f:94:00:55:8c: 2e:10:09:e3:30:0d:e3:a3:3b:9a:c1:72:46:8e:82:2a:9e:f1: 0f:e3:af:49:a3:be:fa:a8:ab:bd:ae:75:11:34:25:ef:25:29: 48:0e:76:00:f6:69:72:98:59:bb:e2:66:45:a4:30:11:ed:9f: eb:21:ee:f1:8d:31:9a:34:1e:06:ff:9d:75:b0:24:b1:fc:b8: 4b:b1:e5:4f:74:d6:01:5c:54:00:e5:da:d6:f2:fc:24:80:ed: 3e:6f:68:89:6c:21:26:ad:03:0a:97:f8:40:3f:c9:70:d9:1f: 4f:d7:0f:d0:47:99:b5:c9:e4:16:99:b5:ad:35:83:c8:9b:a1: 8a:46:52:e3:7e:ff:7e:18:d7:95:06:3b:a8:f8:c9:8a:e7:01: a2:c0:b1:ba:63:82:26:a4:12:84:f1:bf:9d:eb:f4:20:8e:e1: 78:58:14:78:7e:f9:61:03:4a:5c:e7:8f:f5:7e:25:f8:53:2c: 0f:89:3f:02:12:1c:68:23:64:74:08:20:59:80:5c:56:0b:48: 39:a5:2f:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9rflWgr/IQQ+7wTZYWFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NzI4ZTliZDM3Mzk5ZGY5ZmZhZTU4N2JkMDY4ODRiMzUw YTY1YjcwHhcNMjUxMjA2MDIwMDQ0WhcNMjUxMjA3MDIwMDQ0WjAzMTEwLwYDVQQD EyhhNjc4OGM3Njk4NTZmNWFiY2RlN2FmNTIwYTI1YjMwMWFmMWI4N2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxJi8AgeG1k3pyKK4xEk792U5njv KyHoJakVMYf7T7gcLWJGYBNUik1FFxm1AjL2aRhgXO6n7nBGENHVoER7v9LKTp+p qDHNluNHGBLWYVExeCPcE3mwVaF9xMplnnyKFFWTlGI78FlTwFZfwjQFM3kf+lbG ADDiKObuZe6/pmG04e6yBLY7A9uXk5R5g5pkY4YtSghUw350cITh/sSLh46Jrn5M bJ+jA0MCgg/JIsAbX2g7eVRTVimJFOl2pux9adgNrsZzNr6x6ECJs6IVrh2ObiB9 q/hi4U2kxXBnZCq2ZZ+TQSZ5TUcPAco3AouHd3/631W/TAql1lTI3dkNgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZ4jHaYVvWrzeevUgolswGvG4ewMB8GA1UdIwQY MBaAFDhyjpvTc5nfn/rlh70GiEs1CmW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0hLT205TnptZC1mLXVXSHZRYUlTelVLWmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iZTNlMjUtODgxYy00YWVjLWE5MzIt ZjhjZmEzM2Q2ODRlLzEvT0hLT205TnptZC1mLXVXSHZRYUlTelVLWmJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iZTNlMjUtODgxYy00YWVjLWE5MzItZjhjZmEzM2Q2ODRl LzEvT0hLT205TnptZC1mLXVXSHZRYUlTelVLWmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxO6ABHih W5anID0NJG7eldQly8MMtiTDvx536BjsS571bSNfdPS1obPg51/ZOgw25y+UAFWM LhAJ4zAN46M7msFyRo6CKp7xD+OvSaO++qirva51ETQl7yUpSA52APZpcphZu+Jm RaQwEe2f6yHu8Y0xmjQeBv+ddbAksfy4S7HlT3TWAVxUAOXa1vL8JIDtPm9oiWwh Jq0DCpf4QD/JcNkfT9cP0EeZtcnkFpm1rTWDyJuhikZS437/fhjXlQY7qPjJiucB osCxumOCJqQShPG/nev0II7heFgUeH75YQNKXOeP9X4l+FMsD4k/AhIcaCNkdAgg WYBcVgtIOaUv5w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:33 2025 by rpki-client