This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json) Hash identifier: xKW2zyY5nBK4f9HuztYrskGbFgflze/oVCkRepPyWMM= Subject key identifier: 14:93:B4:D9:96:7F:78:56:D3:44:33:20:D8:17:63:20:71:FB:66:EC Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd Certificate serial: 019B5486D8570B711889F1B76F684BAB636E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 08:01:21 +0000 Manifest this update: Thu 25 Dec 2025 08:01:21 +0000 Manifest next update: Fri 26 Dec 2025 08:01:21 +0000 Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: 3QGJz8Q70ZgYSHbeFTHh8tGcOt4G1h1NZqLmftvt52w=) 2: pDgcJBf96EMv4X7AtJpEDVK25IM.roa (hash: Ar5Gw+93T25Y1llBxZfk1/rjZ4JNjjhQm1mEv32a/os=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 08:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:d8:57:0b:71:18:89:f1:b7:6f:68:4b:ab:63:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd Validity Not Before: Dec 25 08:01:21 2025 GMT Not After : Dec 26 08:01:21 2025 GMT Subject: CN=1493b4d9967f7856d3443320d817632071fb66ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f0:5e:47:55:52:5b:4a:54:c7:2e:d2:8d:80: 9f:22:c7:5f:64:0c:1f:92:f6:c3:78:a3:ed:a1:fa: ba:37:8e:ac:7d:94:59:0a:f1:0c:cd:c6:71:16:ab: 90:57:44:bd:73:c5:21:30:1d:83:4b:71:b3:14:aa: bd:a1:44:af:7c:9c:67:06:8a:98:38:cf:47:58:86: 94:6a:cc:4f:99:d7:46:8d:1e:23:6f:ae:aa:a0:85: e8:ad:73:6b:90:7c:4e:89:19:d9:f9:af:71:3c:8e: 79:15:a9:81:4d:df:fe:06:e2:84:1b:91:72:b6:4d: f7:c6:5d:96:16:93:ca:a9:0c:fb:29:5a:d6:a2:a4: 17:c7:95:c7:a1:46:26:01:9f:53:22:cd:ae:00:22: 2a:4b:e9:00:af:19:78:94:e1:b6:6d:d1:d3:12:08: 38:71:20:ae:35:54:2b:b0:cc:3a:cf:85:16:d6:5b: bc:67:51:a6:05:3d:b9:ed:b8:cf:b2:92:e1:d6:bd: 48:c4:94:56:1b:6d:5b:46:72:a2:a6:2f:ed:af:e1: 4b:59:76:cd:77:72:85:b4:35:73:ce:92:fe:4d:bf: 08:f5:c4:a5:aa:c0:ac:b1:db:01:ab:35:96:f5:25: 81:e4:67:4b:85:ef:fa:f0:5c:f4:17:78:04:68:0b: e8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:93:B4:D9:96:7F:78:56:D3:44:33:20:D8:17:63:20:71:FB:66:EC X509v3 Authority Key Identifier: keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:21:52:10:4e:06:f2:ab:70:e9:56:f7:31:12:e7:8c:3d:15: b1:31:dc:85:3d:4c:63:9c:4e:34:62:11:0f:a6:e9:1a:24:0f: 3a:58:3f:6c:00:8a:9a:18:53:4e:fb:89:4a:b4:67:97:34:aa: fc:06:a2:db:b6:5d:c1:88:27:46:09:87:5c:51:4c:7c:e7:f6: 71:6d:1f:a5:5e:f8:ca:dc:79:1f:e7:93:12:93:ac:8b:2b:67: 3e:6c:48:80:44:64:ca:39:7a:88:a9:94:31:e1:42:65:93:df: 5e:98:6f:77:36:6a:e1:4d:19:1f:99:86:68:c9:63:85:fa:55: c1:1b:cf:aa:51:ed:d0:5b:67:a2:d5:e3:79:59:c8:54:e8:3f: 4d:6b:1d:d5:4c:aa:96:b4:de:fc:4f:d4:f8:e9:46:19:a2:ba: 00:56:e0:db:11:11:47:8e:ce:d8:91:7d:54:a3:ab:5f:d1:74: 15:ae:19:1c:98:e6:72:0e:d2:f5:c3:7b:4d:99:15:be:02:20: 4e:af:8f:7f:c7:6f:48:01:85:5e:db:6a:c1:fa:72:69:e0:b9: 90:aa:ae:ad:0a:fa:f6:ed:1e:13:82:2e:ae:0b:50:4d:d4:e8: 2b:4e:89:b2:eb:a3:30:1e:8c:58:9f:b5:d8:51:b0:6d:d1:56: db:4b:62:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhthXC3EYifG3b2hLq2NuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YTZmNTRkMjFmNTM3YTlkZTI0Nzg3ZGQwZThmYmE0MDZh OWNhZGQwHhcNMjUxMjI1MDgwMTIxWhcNMjUxMjI2MDgwMTIxWjAzMTEwLwYDVQQD EygxNDkzYjRkOTk2N2Y3ODU2ZDM0NDMzMjBkODE3NjMyMDcxZmI2NmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvBeR1VSW0pUxy7SjYCfIsdfZAwf kvbDeKPtofq6N46sfZRZCvEMzcZxFquQV0S9c8UhMB2DS3GzFKq9oUSvfJxnBoqY OM9HWIaUasxPmddGjR4jb66qoIXorXNrkHxOiRnZ+a9xPI55FamBTd/+BuKEG5Fy tk33xl2WFpPKqQz7KVrWoqQXx5XHoUYmAZ9TIs2uACIqS+kArxl4lOG2bdHTEgg4 cSCuNVQrsMw6z4UW1lu8Z1GmBT257bjPspLh1r1IxJRWG21bRnKipi/tr+FLWXbN d3KFtDVzzpL+Tb8I9cSlqsCssdsBqzWW9SWB5GdLhe/68Fz0F3gEaAvo8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSTtNmWf3hW00QzINgXYyBx+2bsMB8GA1UdIwQY MBaAFDmm9U0h9Tep3iR4fdDo+6QGqcrdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jOThmYjUtZGM5NC00YjdkLWE5ODkt NmMyZmFiNWE0MDg1LzEvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jOThmYjUtZGM5NC00YjdkLWE5ODktNmMyZmFiNWE0MDg1 LzEvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYiFSEE4G 8qtw6Vb3MRLnjD0VsTHchT1MY5xONGIRD6bpGiQPOlg/bACKmhhTTvuJSrRnlzSq /Aai27ZdwYgnRgmHXFFMfOf2cW0fpV74ytx5H+eTEpOsiytnPmxIgERkyjl6iKmU MeFCZZPfXphvdzZq4U0ZH5mGaMljhfpVwRvPqlHt0FtnotXjeVnIVOg/TWsd1Uyq lrTe/E/U+OlGGaK6AFbg2xERR47O2JF9VKOrX9F0Fa4ZHJjmcg7S9cN7TZkVvgIg Tq+Pf8dvSAGFXttqwfpyaeC5kKqurQr69u0eE4IurgtQTdToK06JsuujMB6MWJ+1 2FGwbdFW20tiqQ== -----END CERTIFICATE-----Generated at Thu Dec 25 17:09:39 2025 by rpki-client