This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft File: oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft (raw, json) Hash identifier: GZgPTksr2RfVkJyTlz7aO/uX7B1jeSD9dWpJk9jFwiY= Subject key identifier: 09:B4:2B:DE:78:B7:8F:49:B6:FF:10:21:B4:C6:DE:75:6B:0B:DA:0A Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0 Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0 Certificate serial: 019B3DC7E4D6723F7D72CDC97DC6FB7DE32B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 22:01:08 +0000 Manifest this update: Sat 20 Dec 2025 22:01:08 +0000 Manifest next update: Sun 21 Dec 2025 22:01:08 +0000 Files and hashes: 1: oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl (hash: 4epCJX9NGd0O6Rud3Qq7ExNA3cucoEjeb2DAkFYKPj0=) 2: yDa2dQgeJJIFzKakaTK1-AlXD1I.roa (hash: mJdwofIlP4KR52j+bqtWhT0oD7xOVgPS7SMsHC+21ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:e4:d6:72:3f:7d:72:cd:c9:7d:c6:fb:7d:e3:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0 Validity Not Before: Dec 20 22:01:08 2025 GMT Not After : Dec 21 22:01:08 2025 GMT Subject: CN=09b42bde78b78f49b6ff1021b4c6de756b0bda0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:15:0b:a7:d8:4f:eb:a4:26:6a:8c:07:69:61: 78:73:22:b7:1d:48:7b:0e:25:4e:17:50:60:9b:d4: 62:99:10:ed:d6:08:3b:4f:ab:b5:ec:3b:ee:81:a2: c2:6d:c3:59:18:65:d1:84:95:d5:00:34:58:5c:93: ca:04:d1:e6:cd:fa:9b:59:a1:b9:21:cf:79:64:8d: c3:ef:63:fc:7a:68:78:2d:92:33:fe:db:09:b6:6b: c0:26:55:e0:ab:e8:f0:b6:16:18:c3:84:e2:d1:57: 2a:d3:79:d5:aa:75:b4:ba:a4:6f:3a:23:9a:f5:62: ad:d0:cf:93:dc:3d:9d:d0:85:8c:8c:48:43:1f:6b: 63:e2:c2:0b:ea:ca:dc:15:3e:a4:77:b0:1c:f7:98: 5e:f4:b6:47:ee:3f:eb:63:9f:db:31:43:2a:0e:97: af:ad:f6:85:7d:e1:90:0e:67:c6:ab:ce:6b:4a:69: 1e:4b:76:2c:82:cb:94:e8:55:2e:84:44:58:0e:0c: a2:a7:57:81:b6:6a:33:38:76:9d:38:9e:e4:8d:2b: f1:f8:d2:a3:92:2e:6b:d4:67:f7:24:32:50:61:2e: 4b:23:68:fd:ab:da:bd:d0:05:cb:d5:cb:90:27:04: 5e:d9:d5:11:9e:18:47:01:55:34:28:99:d1:0c:e2: 44:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B4:2B:DE:78:B7:8F:49:B6:FF:10:21:B4:C6:DE:75:6B:0B:DA:0A X509v3 Authority Key Identifier: keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:46:c5:5f:f5:c0:85:48:83:46:a5:7c:e1:53:cc:0c:bd:5d: 3f:d8:da:e3:0c:97:80:7e:f3:4f:e8:12:6e:93:aa:8a:fd:ec: c9:90:d4:6d:30:08:d2:3b:08:9a:5c:9d:c4:06:9a:62:9c:81: 9b:40:52:e0:cc:bb:ed:0f:a9:32:b6:db:e3:10:5e:6b:9d:d4: af:7f:3c:2d:40:ce:50:0d:d1:5f:e2:b5:20:cd:8d:bf:93:05: c2:88:93:10:e7:41:8f:a8:79:de:97:25:0a:1c:8f:45:c3:7f: a1:12:67:e7:2f:63:d2:b4:3a:d8:84:27:9a:df:da:e1:1b:b0: 07:d5:c5:51:c6:72:b0:3a:72:b9:95:3f:80:33:ed:e7:a1:69: b9:99:b7:42:c4:c8:ee:f2:e1:0f:c8:ed:a6:87:b3:dd:d4:38: 9f:df:cb:c5:fd:10:2a:58:b7:f4:72:25:7a:9f:d1:d1:e6:71: 37:fa:26:57:06:17:f8:8f:d9:fa:68:87:2d:d1:9f:df:49:1b: 72:32:49:ac:41:29:6b:7f:83:ca:5e:43:86:b2:48:03:77:57: 0f:ba:21:11:ae:00:52:95:1e:26:49:b2:52:49:8d:cf:b4:c7: ca:81:30:0d:97:f8:d5:50:a7:29:ce:fd:70:f4:ad:7b:ec:fb: 11:da:6a:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x+TWcj99cs3Jfcb7feMrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMWViNDA3Zjc2Y2ZhNWM3ZGExNTIxODM5N2IzYzQzMTc3 NjJhYzAwHhcNMjUxMjIwMjIwMTA4WhcNMjUxMjIxMjIwMTA4WjAzMTEwLwYDVQQD EygwOWI0MmJkZTc4Yjc4ZjQ5YjZmZjEwMjFiNGM2ZGU3NTZiMGJkYTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhULp9hP66QmaowHaWF4cyK3HUh7 DiVOF1Bgm9RimRDt1gg7T6u17DvugaLCbcNZGGXRhJXVADRYXJPKBNHmzfqbWaG5 Ic95ZI3D72P8emh4LZIz/tsJtmvAJlXgq+jwthYYw4Ti0Vcq03nVqnW0uqRvOiOa 9WKt0M+T3D2d0IWMjEhDH2tj4sIL6srcFT6kd7Ac95he9LZH7j/rY5/bMUMqDpev rfaFfeGQDmfGq85rSmkeS3YsgsuU6FUuhERYDgyip1eBtmozOHadOJ7kjSvx+NKj ki5r1Gf3JDJQYS5LI2j9q9q90AXL1cuQJwRe2dURnhhHAVU0KJnRDOJEawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAm0K954t49Jtv8QIbTG3nVrC9oKMB8GA1UdIwQY MBaAFKIetAf3bPpcfaFSGDl7PEMXdirAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2g2MEJfZHMtbHg5b1ZJWU9YczhReGQyS3NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85OGIyNzgtMDY4YS00NjhmLWFjZDct MjZjZDM4NzFmMzY1LzEvb2g2MEJfZHMtbHg5b1ZJWU9YczhReGQyS3NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85OGIyNzgtMDY4YS00NjhmLWFjZDctMjZjZDM4NzFmMzY1 LzEvb2g2MEJfZHMtbHg5b1ZJWU9YczhReGQyS3NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakbFX/XA hUiDRqV84VPMDL1dP9ja4wyXgH7zT+gSbpOqiv3syZDUbTAI0jsImlydxAaaYpyB m0BS4My77Q+pMrbb4xBea53Ur388LUDOUA3RX+K1IM2Nv5MFwoiTEOdBj6h53pcl ChyPRcN/oRJn5y9j0rQ62IQnmt/a4RuwB9XFUcZysDpyuZU/gDPt56FpuZm3QsTI 7vLhD8jtpoez3dQ4n9/Lxf0QKli39HIlep/R0eZxN/omVwYX+I/Z+miHLdGf30kb cjJJrEEpa3+Dyl5DhrJIA3dXD7ohEa4AUpUeJkmyUkmNz7THyoEwDZf41VCnKc79 cPSte+z7EdpqEA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:45:44 2025 by rpki-client