This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft File: OYhH9wo15xCETpu4omK-3bQLfMk.mft (raw, json) Hash identifier: mkbu6sMIMe1W5A3DWIK//rxFdTT3PXY3DUuC6lk75yc= Subject key identifier: A1:BC:B5:B4:34:C9:0C:19:B3:91:DF:D6:70:48:0C:5A:72:19:9E:4E Authority key identifier: 39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9 Certificate issuer: /CN=398847f70a35e710844e9bb8a262beddb40b7cc9 Certificate serial: 019AF276ED40A302776BBBDE4C149432F0E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft Manifest number: 0525 Signing time: Sat 06 Dec 2025 07:01:11 +0000 Manifest this update: Sat 06 Dec 2025 07:01:11 +0000 Manifest next update: Sun 07 Dec 2025 07:01:11 +0000 Files and hashes: 1: AKsS4j3-VaOHBWSMj23g7vx6Zz4.roa (hash: U4YaSKjxHoIRGGCP7ydVCxsh9Cu5QYl71iaS4zOmA2c=) 2: OYhH9wo15xCETpu4omK-3bQLfMk.crl (hash: EbGOG6uLAwTsR1rk4mNM2Oy2fii41xTSaF1YH0iDZJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ed:40:a3:02:77:6b:bb:de:4c:14:94:32:f0:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=398847f70a35e710844e9bb8a262beddb40b7cc9 Validity Not Before: Dec 6 07:01:11 2025 GMT Not After : Dec 7 07:01:11 2025 GMT Subject: CN=a1bcb5b434c90c19b391dfd670480c5a72199e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:12:3e:4c:d0:99:1d:77:11:65:dd:3f:fe:34: 84:14:0e:c6:1f:53:03:f7:af:4e:39:f9:fc:97:a5: 68:6c:e4:6d:4b:96:31:8e:33:33:37:67:0b:c7:b7: ae:25:6c:c2:6d:b1:99:23:61:f0:46:6a:fa:b1:f5: 46:f8:6b:65:26:8f:83:2c:ee:d9:90:1b:1b:fd:32: 7e:49:97:ef:9c:5f:aa:5c:15:c0:7a:e0:a2:ef:f6: 63:3a:2b:0e:8a:dd:bb:7b:3c:49:b8:c6:ff:f6:20: d1:71:01:65:48:1e:6a:a1:ea:a9:bb:7b:42:a3:45: fd:c6:33:5c:21:f5:6f:5e:0e:5d:10:06:59:cc:d2: b0:25:22:a1:99:30:80:c1:8f:b1:02:b3:bd:c9:12: d8:0a:b0:07:c2:9b:4d:7a:b3:8f:76:d5:b4:ae:51: 1a:3b:d7:ef:69:c0:18:d1:0e:cd:a1:f6:e8:0d:db: 51:cd:70:18:b0:67:36:2b:b3:df:64:fc:30:8e:f2: 36:28:ba:60:03:37:e9:a5:47:83:6d:3b:4c:7e:1d: a4:31:95:33:af:d6:59:90:0a:00:35:c2:42:bb:a5: 99:cb:8b:6f:d4:95:a4:a1:ef:98:ec:12:c6:91:f2: cb:9d:73:ad:5c:ec:90:44:e3:e2:9d:7b:9e:5b:9d: 5e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BC:B5:B4:34:C9:0C:19:B3:91:DF:D6:70:48:0C:5A:72:19:9E:4E X509v3 Authority Key Identifier: keyid:39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:9f:62:8d:93:dc:92:5f:69:82:74:17:04:48:86:67:e1:a2: 86:91:57:41:ad:ec:9b:a8:39:f3:8a:6f:f9:7e:f1:56:1c:72: d3:53:f9:fb:29:83:95:b5:2e:7a:b7:c1:77:59:b5:50:5d:cf: 15:72:47:df:59:26:3d:fc:30:23:f4:11:4e:90:03:b9:b2:52: 47:75:a8:05:68:ba:06:3b:11:78:d0:66:0f:a1:cf:f9:bc:0f: e5:b2:c1:b6:96:7c:69:bb:b4:7e:c3:8c:f3:20:35:a2:ce:f9: c6:3e:06:eb:14:c6:af:ba:74:fb:05:95:8a:6f:1c:aa:2a:8f: 1c:97:54:30:22:1c:b8:ef:67:ed:68:ec:48:c9:90:3d:6c:7d: 2c:60:5c:58:bc:ae:60:30:61:a7:4e:55:e0:b1:4b:22:58:f2: 24:36:6a:a6:b7:1e:29:f5:b1:fd:27:26:09:3b:8b:d0:b8:b9: b6:b5:12:ed:f1:27:4e:80:30:90:dd:29:9c:73:38:ed:da:ea: 79:f5:d0:0e:f9:a7:43:e6:cc:32:89:8e:5d:54:6c:29:2e:d6: 44:ba:e4:f3:8a:cb:e0:97:7f:fd:24:3e:43:6c:35:c4:40:8d: 2a:95:88:af:5d:61:bd:f1:56:03:bb:ee:85:f4:cf:02:1d:49: 2e:c9:f8:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydu1AowJ3a7veTBSUMvDiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ODg0N2Y3MGEzNWU3MTA4NDRlOWJiOGEyNjJiZWRkYjQw YjdjYzkwHhcNMjUxMjA2MDcwMTExWhcNMjUxMjA3MDcwMTExWjAzMTEwLwYDVQQD EyhhMWJjYjViNDM0YzkwYzE5YjM5MWRmZDY3MDQ4MGM1YTcyMTk5ZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhI+TNCZHXcRZd0//jSEFA7GH1MD 969OOfn8l6VobORtS5YxjjMzN2cLx7euJWzCbbGZI2HwRmr6sfVG+GtlJo+DLO7Z kBsb/TJ+SZfvnF+qXBXAeuCi7/ZjOisOit27ezxJuMb/9iDRcQFlSB5qoeqpu3tC o0X9xjNcIfVvXg5dEAZZzNKwJSKhmTCAwY+xArO9yRLYCrAHwptNerOPdtW0rlEa O9fvacAY0Q7NofboDdtRzXAYsGc2K7PfZPwwjvI2KLpgAzfppUeDbTtMfh2kMZUz r9ZZkAoANcJCu6WZy4tv1JWkoe+Y7BLGkfLLnXOtXOyQROPinXueW51eFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKG8tbQ0yQwZs5Hf1nBIDFpyGZ5OMB8GA1UdIwQY MBaAFDmIR/cKNecQhE6buKJivt20C3zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1loSDl3bzE1eENFVHB1NG9tSy0zYlFMZk1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9mYzc2NTctMDYzZS00YWY3LTg5ZTYt ZjlmZWEzNGI2YjAxLzEvT1loSDl3bzE1eENFVHB1NG9tSy0zYlFMZk1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9mYzc2NTctMDYzZS00YWY3LTg5ZTYtZjlmZWEzNGI2YjAx LzEvT1loSDl3bzE1eENFVHB1NG9tSy0zYlFMZk1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq59ijZPc kl9pgnQXBEiGZ+GihpFXQa3sm6g584pv+X7xVhxy01P5+ymDlbUuerfBd1m1UF3P FXJH31kmPfwwI/QRTpADubJSR3WoBWi6BjsReNBmD6HP+bwP5bLBtpZ8abu0fsOM 8yA1os75xj4G6xTGr7p0+wWVim8cqiqPHJdUMCIcuO9n7WjsSMmQPWx9LGBcWLyu YDBhp05V4LFLIljyJDZqprceKfWx/ScmCTuL0Li5trUS7fEnToAwkN0pnHM47drq efXQDvmnQ+bMMomOXVRsKS7WRLrk84rL4Jd//SQ+Q2w1xECNKpWIr11hvfFWA7vu hfTPAh1JLsn4BA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:31 2025 by rpki-client