This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft File: Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft (raw, json) Hash identifier: LIuuKpjsgFngDxWSp5cJl+Zb9gCWBMegGGDL1UZpX9s= Subject key identifier: 9D:0F:10:A0:B1:CA:61:53:FA:71:0E:9E:72:BA:C5:3B:91:FA:77:C8 Authority key identifier: 3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E Certificate issuer: /CN=3a1d8225b27122794bc82e91b967bb25dbe4508e Certificate serial: 019B41DB7322C32E834FB80759DCD4D3F99A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft Manifest number: 1107 Signing time: Sun 21 Dec 2025 17:00:59 +0000 Manifest this update: Sun 21 Dec 2025 17:00:59 +0000 Manifest next update: Mon 22 Dec 2025 17:00:59 +0000 Files and hashes: 1: Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl (hash: j7Ev8eKStgGiRTSMtR33c3kFhgZSzN8oX+o2FPg40RQ=) 2: X2ZWwlq5JgdZCBhrE-skZo9Zodk.roa (hash: jm4EeR/8LyEqdFtytjbhKQG8mWbwHJBMpiLCK8D6HPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:73:22:c3:2e:83:4f:b8:07:59:dc:d4:d3:f9:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1d8225b27122794bc82e91b967bb25dbe4508e Validity Not Before: Dec 21 17:00:59 2025 GMT Not After : Dec 22 17:00:59 2025 GMT Subject: CN=9d0f10a0b1ca6153fa710e9e72bac53b91fa77c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5a:c6:f3:34:4f:4e:e1:b7:65:71:e0:8b:b2: e6:91:b0:a6:f8:7d:ab:eb:46:0d:5f:27:ac:d8:12: 62:f4:43:e9:72:ec:27:34:a8:75:d1:fc:34:19:d7: 7c:1a:d6:23:d4:9a:05:a1:f8:94:98:02:d2:e9:1b: f4:79:d7:14:1e:1d:39:c5:83:a9:91:05:11:c6:39: d2:93:25:cd:a4:eb:8c:41:34:d4:3f:a4:ed:e3:f1: 04:6c:89:3b:63:f9:1f:74:d7:b0:cc:19:c7:09:1e: d9:7b:f2:a5:69:60:39:5a:cb:34:2c:84:69:8f:78: 1d:b5:c1:4b:d0:2b:b9:ca:76:1e:12:f7:29:03:05: b7:14:24:cc:67:a1:e6:ee:b9:5b:87:7f:40:03:d3: a6:f2:f4:d6:6e:e3:15:73:88:51:d3:90:46:36:fc: fe:57:07:37:c5:04:ec:d7:c2:05:c9:dd:0c:af:c0: ae:89:93:4d:72:37:18:5d:82:74:06:43:2a:57:33: b6:cd:4e:21:4b:ec:65:87:02:ed:0f:24:b8:61:c9: 8d:45:44:42:1e:ed:77:7f:a0:9a:22:ee:0e:f8:18: 8b:fc:b4:e9:fe:0c:43:b9:44:56:29:dd:1f:4e:31: 20:30:a0:db:a7:24:3a:8a:5f:8c:4e:73:59:33:b3: 1e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0F:10:A0:B1:CA:61:53:FA:71:0E:9E:72:BA:C5:3B:91:FA:77:C8 X509v3 Authority Key Identifier: keyid:3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e9:03:96:a0:75:4f:6b:d8:c1:f5:d8:a2:9e:4a:9c:74:18: 62:01:df:58:1b:cf:3f:32:42:1a:42:21:e5:89:4a:26:7a:c4: 5c:6a:a0:27:e0:0e:d5:4f:47:cf:3a:4f:59:71:5c:3c:e4:83: 27:2a:e5:c9:63:ad:6d:f7:23:20:cd:10:11:49:4d:83:dd:fe: 74:89:9e:8e:e2:a1:e3:c9:9c:b4:cd:6d:4f:d0:ba:76:9e:ff: a9:b8:97:71:ee:5e:f5:b7:8f:6e:8d:25:ac:32:24:40:34:1b: b8:8b:1d:58:b6:6f:b5:05:22:5f:34:fd:19:06:33:74:e4:b5: 4a:b0:71:bd:73:90:18:96:9b:c4:11:ec:4d:b0:16:40:6a:e5: 90:0b:a8:5f:ff:28:7b:28:9d:c9:26:62:e0:9e:ba:16:cc:75: 30:66:09:2c:7e:55:d7:a5:72:cb:b9:26:d4:79:75:99:1f:84: 4b:21:a8:d0:fb:ff:be:d0:a3:1a:0f:a1:d1:2f:ff:f8:0e:ac: a3:b1:fb:e4:65:30:e7:84:81:d3:6f:81:80:ee:0e:7f:4c:bd: 52:9b:21:e4:a8:d2:55:24:9c:c9:02:07:2f:35:45:84:28:01: ca:13:d5:7d:25:02:39:b8:55:c2:33:6f:fe:a2:85:9a:86:b4: 02:72:af:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB23Miwy6DT7gHWdzU0/maMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMWQ4MjI1YjI3MTIyNzk0YmM4MmU5MWI5NjdiYjI1ZGJl NDUwOGUwHhcNMjUxMjIxMTcwMDU5WhcNMjUxMjIyMTcwMDU5WjAzMTEwLwYDVQQD Eyg5ZDBmMTBhMGIxY2E2MTUzZmE3MTBlOWU3MmJhYzUzYjkxZmE3N2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVrG8zRPTuG3ZXHgi7LmkbCm+H2r 60YNXyes2BJi9EPpcuwnNKh10fw0Gdd8GtYj1JoFofiUmALS6Rv0edcUHh05xYOp kQURxjnSkyXNpOuMQTTUP6Tt4/EEbIk7Y/kfdNewzBnHCR7Ze/KlaWA5Wss0LIRp j3gdtcFL0Cu5ynYeEvcpAwW3FCTMZ6Hm7rlbh39AA9Om8vTWbuMVc4hR05BGNvz+ Vwc3xQTs18IFyd0Mr8CuiZNNcjcYXYJ0BkMqVzO2zU4hS+xlhwLtDyS4YcmNRURC Hu13f6CaIu4O+BiL/LTp/gxDuURWKd0fTjEgMKDbpyQ6il+MTnNZM7MeswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0PEKCxymFT+nEOnnK6xTuR+nfIMB8GA1UdIwQY MBaAFDodgiWycSJ5S8gukblnuyXb5FCOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2gyQ0piSnhJbmxMeUM2UnVXZTdKZHZrVUk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi81OWQ0ZWUtNDYxMy00NjQ5LWFkMmMt NzQ5ZTJiY2E3M2NlLzEvT2gyQ0piSnhJbmxMeUM2UnVXZTdKZHZrVUk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi81OWQ0ZWUtNDYxMy00NjQ5LWFkMmMtNzQ5ZTJiY2E3M2Nl LzEvT2gyQ0piSnhJbmxMeUM2UnVXZTdKZHZrVUk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOkDlqB1 T2vYwfXYop5KnHQYYgHfWBvPPzJCGkIh5YlKJnrEXGqgJ+AO1U9HzzpPWXFcPOSD JyrlyWOtbfcjIM0QEUlNg93+dImejuKh48mctM1tT9C6dp7/qbiXce5e9bePbo0l rDIkQDQbuIsdWLZvtQUiXzT9GQYzdOS1SrBxvXOQGJabxBHsTbAWQGrlkAuoX/8o eyidySZi4J66Fsx1MGYJLH5V16Vyy7km1Hl1mR+ESyGo0Pv/vtCjGg+h0S//+A6s o7H75GUw54SB02+BgO4Of0y9Upsh5KjSVSScyQIHLzVFhCgByhPVfSUCObhVwjNv /qKFmoa0AnKvVQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:34:46 2025 by rpki-client