This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft File: 91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json) Hash identifier: mMJfVRi6aZYyWJ8J5tWP+bkjIcOvhs+gssSF7ioGZOs= Subject key identifier: A5:7F:D4:BB:5F:F2:EF:F6:F8:63:CC:E9:7E:2E:87:57:82:E9:70:EC Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B Certificate issuer: /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b Certificate serial: 019B650CB0DCDEB9FBB79CB3FEC4F6059751 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft Manifest number: 0AAD Signing time: Sun 28 Dec 2025 13:01:28 +0000 Manifest this update: Sun 28 Dec 2025 13:01:28 +0000 Manifest next update: Mon 29 Dec 2025 13:01:28 +0000 Files and hashes: 1: 7DobkB9YDZRCFthUqh8EeCazT9A.roa (hash: wrSSktbEIiruaMGzjyB9HPAsqfXawT4rvBYdbF17ar8=) 2: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: m636jDwfspD+pWMhIQHL3+nNVfvmTn2xK5cdsc4a92o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0c:b0:dc:de:b9:fb:b7:9c:b3:fe:c4:f6:05:97:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b Validity Not Before: Dec 28 13:01:28 2025 GMT Not After : Dec 29 13:01:28 2025 GMT Subject: CN=a57fd4bb5ff2eff6f863cce97e2e875782e970ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:39:7b:8c:52:2b:cf:ed:7a:80:bf:49:88:26: 14:26:67:01:1c:ae:17:22:43:4c:28:96:37:78:b4: 96:a4:d3:e2:e8:52:74:07:f2:18:d5:0c:69:0b:b7: 24:69:21:54:94:d7:9e:c9:e7:9d:6e:a0:b8:b9:9c: 47:4b:9f:ea:dd:9d:e0:d6:ff:00:bc:61:07:aa:07: a4:dc:a6:cc:89:00:b4:ab:c3:1e:b1:dd:45:de:77: 09:1c:a2:11:f4:bd:68:5e:58:81:5b:c0:ce:d8:1a: 14:7c:8e:f7:fd:fd:c0:74:9c:53:40:f9:61:1d:15: e6:5f:91:ef:ac:2b:9e:68:48:d3:77:fb:5d:8f:a3: fb:62:79:1a:a8:29:2d:16:0f:36:b1:ee:1f:54:86: 50:49:67:4c:04:bd:6e:9a:7b:f0:e7:f1:13:46:19: 75:aa:fc:3a:75:5a:cc:79:9d:2d:08:f7:be:53:df: 40:3a:29:d3:8e:27:cc:73:1c:8a:8f:6c:f4:cb:72: 6f:1c:e7:43:d4:fd:64:23:81:17:7e:27:32:c9:25: 07:c9:d0:30:bc:e5:a7:11:ae:a3:3a:33:98:df:21: ec:a3:54:eb:50:96:89:cc:33:4c:1f:40:37:c0:ea: 6e:c1:e4:5d:d5:47:70:04:00:f7:a0:b4:d8:ba:7a: 0b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7F:D4:BB:5F:F2:EF:F6:F8:63:CC:E9:7E:2E:87:57:82:E9:70:EC X509v3 Authority Key Identifier: keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8b:26:7c:17:ea:c0:18:7a:f1:3c:b5:e8:d7:22:6b:fa:07: a5:85:ef:6e:0d:2e:34:e6:dc:54:6b:f3:9e:6d:58:ec:67:8c: 40:d4:75:37:8f:cb:1f:e2:8c:b6:c2:44:06:2b:da:b2:49:b9: 0d:55:d3:ce:43:c1:0c:56:9c:0c:b6:aa:e4:a6:7c:ae:56:31: e1:84:ca:74:ab:6b:7a:9d:a2:ac:11:02:dd:c3:ff:31:26:dc: d2:f3:3b:27:2a:7d:71:d5:b6:41:90:63:aa:c1:72:ee:8c:fe: b2:cf:84:a5:82:a0:b5:fb:a2:69:a3:c9:a5:d9:c5:cd:82:fc: 76:ca:07:88:03:4e:8f:16:60:db:32:f6:3c:3f:2c:76:8f:f3: b8:14:f1:62:72:80:48:e9:34:08:d3:99:b8:f1:73:a5:45:6d: 7a:8c:0f:0f:1e:7d:12:38:80:5a:13:b2:55:dd:4a:7f:75:af: 12:f8:35:e0:e1:70:02:23:dc:ce:74:4e:43:f1:60:1f:8d:24: eb:1c:d9:a6:46:a6:d9:aa:c7:dd:78:74:84:7d:94:37:4d:39: 12:a0:c1:ac:4c:3e:a2:cd:92:81:78:89:b7:76:82:c0:67:86: 47:4f:fe:16:c2:27:70:97:26:0f:41:5c:dc:58:67:a7:0e:28: 3a:c6:c1:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDLDc3rn7t5yz/sT2BZdRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NTNhMTliNWRjZTFkNDE1OTM1MjIyOTQyNmE5ZmRiN2Q5 ZjlhM2IwHhcNMjUxMjI4MTMwMTI4WhcNMjUxMjI5MTMwMTI4WjAzMTEwLwYDVQQD EyhhNTdmZDRiYjVmZjJlZmY2Zjg2M2NjZTk3ZTJlODc1NzgyZTk3MGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTl7jFIrz+16gL9JiCYUJmcBHK4X IkNMKJY3eLSWpNPi6FJ0B/IY1QxpC7ckaSFUlNeeyeedbqC4uZxHS5/q3Z3g1v8A vGEHqgek3KbMiQC0q8Mesd1F3ncJHKIR9L1oXliBW8DO2BoUfI73/f3AdJxTQPlh HRXmX5HvrCueaEjTd/tdj6P7YnkaqCktFg82se4fVIZQSWdMBL1umnvw5/ETRhl1 qvw6dVrMeZ0tCPe+U99AOinTjifMcxyKj2z0y3JvHOdD1P1kI4EXficyySUHydAw vOWnEa6jOjOY3yHso1TrUJaJzDNMH0A3wOpuweRd1UdwBAD3oLTYunoL6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKV/1Ltf8u/2+GPM6X4uh1eC6XDsMB8GA1UdIwQY MBaAFPdToZtdzh1BWTUiKUJqn9t9n5o7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTFPaG0xM09IVUZaTlNJcFFtcWYyMzJmbWpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mZmUwN2MtMTZmMC00OTk5LTg4OTQt MTBmMDA5M2VhYWUwLzEvOTFPaG0xM09IVUZaTlNJcFFtcWYyMzJmbWpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9mZmUwN2MtMTZmMC00OTk5LTg4OTQtMTBmMDA5M2VhYWUw LzEvOTFPaG0xM09IVUZaTlNJcFFtcWYyMzJmbWpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADosmfBfq wBh68Ty16Ncia/oHpYXvbg0uNObcVGvznm1Y7GeMQNR1N4/LH+KMtsJEBivaskm5 DVXTzkPBDFacDLaq5KZ8rlYx4YTKdKtrep2irBEC3cP/MSbc0vM7Jyp9cdW2QZBj qsFy7oz+ss+EpYKgtfuiaaPJpdnFzYL8dsoHiANOjxZg2zL2PD8sdo/zuBTxYnKA SOk0CNOZuPFzpUVteowPDx59EjiAWhOyVd1Kf3WvEvg14OFwAiPcznROQ/FgH40k 6xzZpkam2arH3Xh0hH2UN005EqDBrEw+os2SgXiJt3aCwGeGR0/+FsIncJcmD0Fc 3Fhnpw4oOsbBMQ== -----END CERTIFICATE-----Generated at Sun Dec 28 18:55:22 2025 by rpki-client