This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft File: Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft (raw, json) Hash identifier: SdjQ+t9lv3V5TJnaYuc3bxoUvi52qVVgNRDexbtLtFY= Subject key identifier: 23:EF:E4:AF:CE:7F:92:EA:6B:78:A1:61:7F:5B:FC:11:F5:FE:B2:76 Authority key identifier: 3A:19:35:B3:CB:C2:52:7E:AF:16:7D:69:B2:07:8D:33:E4:C4:DA:20 Certificate issuer: /CN=3a1935b3cbc2527eaf167d69b2078d33e4c4da20 Certificate serial: 019B41DB3BDA80A542F4813C19D7062DCE4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft Manifest number: 08D1 Signing time: Sun 21 Dec 2025 17:00:45 +0000 Manifest this update: Sun 21 Dec 2025 17:00:45 +0000 Manifest next update: Mon 22 Dec 2025 17:00:45 +0000 Files and hashes: 1: M82sfYNUsyqK13nZZfstvwDd7Fs.roa (hash: Pwd9phO+f2VaYBcGPbgT8icjGcqdGdD4Q6fe+fixav0=) 2: Ohk1s8vCUn6vFn1psgeNM-TE2iA.crl (hash: 9qZOCgMtDpDxvaQ31Tdl6j5usyPd4DeHNKDrfZ28QyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:3b:da:80:a5:42:f4:81:3c:19:d7:06:2d:ce:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1935b3cbc2527eaf167d69b2078d33e4c4da20 Validity Not Before: Dec 21 17:00:45 2025 GMT Not After : Dec 22 17:00:45 2025 GMT Subject: CN=23efe4afce7f92ea6b78a1617f5bfc11f5feb276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:14:fc:8b:5e:56:87:1c:dd:57:09:d7:44:3c: e6:3f:6c:ba:6b:12:9c:3f:05:bf:30:21:76:12:03: f4:05:a3:15:a8:02:cd:2a:52:d3:89:0d:74:a7:76: b3:41:2a:c2:d7:93:88:c6:4d:ac:61:4b:a3:e7:50: 22:b5:a4:52:bd:b6:e7:d5:9e:3d:18:cf:61:8a:5d: 8b:85:e8:7e:d2:10:51:e2:2b:fe:23:52:6e:d4:6d: b6:e4:ad:5f:d5:bc:dc:32:3f:55:76:68:f5:48:83: 66:16:a9:84:d3:85:49:2e:28:8e:e9:fe:7c:13:95: 30:d9:c3:8c:18:3f:d6:d1:e6:a3:a1:32:37:c3:8e: c7:ba:23:0b:1a:82:a8:5a:8a:c3:2d:fe:a0:53:df: b8:eb:62:72:ba:1f:69:e6:71:ee:b8:c6:60:8b:0e: f2:17:b8:e8:98:73:9b:a7:53:7f:0f:8d:bc:24:c9: f9:43:71:67:a1:0a:ad:8f:b8:0d:66:be:88:b2:14: ac:3b:d9:f6:a4:17:7e:95:a4:ee:e7:ff:d0:55:dd: 11:aa:37:9b:aa:21:3a:09:3c:85:1a:5c:26:61:7c: 3b:90:d6:f8:35:aa:3a:54:a3:40:5e:08:68:2a:70: 11:39:90:d2:33:68:79:bb:93:4f:c1:79:f3:63:3e: d1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:EF:E4:AF:CE:7F:92:EA:6B:78:A1:61:7F:5B:FC:11:F5:FE:B2:76 X509v3 Authority Key Identifier: keyid:3A:19:35:B3:CB:C2:52:7E:AF:16:7D:69:B2:07:8D:33:E4:C4:DA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:bc:81:4f:32:13:30:d1:62:7b:9d:06:8a:1a:2d:6a:83:93: 3a:20:e5:2b:14:8c:a2:3d:30:f2:d9:2f:21:1d:b7:d9:8d:ea: 2b:f5:f5:b4:fe:f2:ac:56:09:d4:e6:39:e3:f1:0b:5d:ff:35: ba:ac:7d:1a:d0:ce:df:fc:b4:9d:b5:f6:47:84:3a:a2:9a:ed: 01:69:8a:63:1d:7a:18:11:54:65:f3:cf:16:01:3b:33:0d:ff: 6a:46:e7:c8:fe:d0:0e:56:73:e2:58:54:88:02:ed:6e:f0:c1: aa:c5:67:2c:79:57:72:86:2a:3d:3a:9a:fd:13:29:47:0f:6c: fe:22:d7:ed:31:21:aa:4f:dc:da:2b:6e:fe:10:4e:9d:d5:85: f2:92:4b:8c:21:6b:1d:70:f8:89:18:ef:29:b1:36:ce:5c:c2: 01:ca:53:f4:94:6b:6b:05:34:69:a1:f3:86:57:b0:c9:75:9c: d5:a9:df:fe:4b:f5:ed:7a:98:89:0a:ba:ff:aa:56:b3:c6:1e: 4e:67:94:5c:92:1a:78:b2:3d:ac:39:4f:a0:e6:71:50:e7:72: 70:91:62:01:72:ce:a0:09:8b:9c:15:38:aa:8a:ea:f6:13:3e: 82:90:9f:a6:f0:a8:0e:28:f1:2b:f6:f2:19:ce:60:4b:38:e7: 90:bc:f5:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB2zvagKVC9IE8GdcGLc5LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMTkzNWIzY2JjMjUyN2VhZjE2N2Q2OWIyMDc4ZDMzZTRj NGRhMjAwHhcNMjUxMjIxMTcwMDQ1WhcNMjUxMjIyMTcwMDQ1WjAzMTEwLwYDVQQD EygyM2VmZTRhZmNlN2Y5MmVhNmI3OGExNjE3ZjViZmMxMWY1ZmViMjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RT8i15WhxzdVwnXRDzmP2y6axKc PwW/MCF2EgP0BaMVqALNKlLTiQ10p3azQSrC15OIxk2sYUuj51AitaRSvbbn1Z49 GM9hil2Lheh+0hBR4iv+I1Ju1G225K1f1bzcMj9Vdmj1SINmFqmE04VJLiiO6f58 E5Uw2cOMGD/W0eajoTI3w47HuiMLGoKoWorDLf6gU9+462Jyuh9p5nHuuMZgiw7y F7jomHObp1N/D428JMn5Q3FnoQqtj7gNZr6IshSsO9n2pBd+laTu5//QVd0Rqjeb qiE6CTyFGlwmYXw7kNb4Nao6VKNAXghoKnAROZDSM2h5u5NPwXnzYz7RMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPv5K/Of5Lqa3ihYX9b/BH1/rJ2MB8GA1UdIwQY MBaAFDoZNbPLwlJ+rxZ9abIHjTPkxNogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2hrMXM4dkNVbjZ2Rm4xcHNnZU5NLVRFMmlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9mZmZiYTQtMmVmYS00NjVmLWFmOTYt YWJmODM3YWNlOGU0LzEvT2hrMXM4dkNVbjZ2Rm4xcHNnZU5NLVRFMmlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9mZmZiYTQtMmVmYS00NjVmLWFmOTYtYWJmODM3YWNlOGU0 LzEvT2hrMXM4dkNVbjZ2Rm4xcHNnZU5NLVRFMmlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaryBTzIT MNFie50GihotaoOTOiDlKxSMoj0w8tkvIR232Y3qK/X1tP7yrFYJ1OY54/ELXf81 uqx9GtDO3/y0nbX2R4Q6oprtAWmKYx16GBFUZfPPFgE7Mw3/akbnyP7QDlZz4lhU iALtbvDBqsVnLHlXcoYqPTqa/RMpRw9s/iLX7TEhqk/c2itu/hBOndWF8pJLjCFr HXD4iRjvKbE2zlzCAcpT9JRrawU0aaHzhlewyXWc1anf/kv17XqYiQq6/6pWs8Ye TmeUXJIaeLI9rDlPoOZxUOdycJFiAXLOoAmLnBU4qorq9hM+gpCfpvCoDijxK/by Gc5gSzjnkLz1Mg== -----END CERTIFICATE-----Generated at Sun Dec 21 20:34:48 2025 by rpki-client