This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft File: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft (raw, json) Hash identifier: 29usd9Yo/I9x999qZ40c06eeu92KIsJpL1+REcTtDdo= Subject key identifier: 3B:E7:BC:B1:FA:DE:94:50:65:FA:E2:A0:DF:06:95:AB:EB:F1:92:6B Authority key identifier: 3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31 Certificate issuer: /CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031 Certificate serial: 019B67686D5B7AFA066ED8BA6CEBF218F154 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft Manifest number: 169E Signing time: Mon 29 Dec 2025 00:00:55 +0000 Manifest this update: Mon 29 Dec 2025 00:00:55 +0000 Manifest next update: Tue 30 Dec 2025 00:00:55 +0000 Files and hashes: 1: OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl (hash: ZVtyNKIZaGimD7wrR2i2fXQJAA75TT3ocTN37kJ6T90=) 2: hE2ePAizZlQUV6uXdZuzIjMthNQ.roa (hash: +KNuL0RhbzwD+ZdqGTxpdbmElk+6cn62429cYK2AHFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:6d:5b:7a:fa:06:6e:d8:ba:6c:eb:f2:18:f1:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031 Validity Not Before: Dec 29 00:00:55 2025 GMT Not After : Dec 30 00:00:55 2025 GMT Subject: CN=3be7bcb1fade945065fae2a0df0695abebf1926b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2a:74:b5:41:ee:3b:b0:a3:7c:c3:b3:65:44: be:31:92:8b:25:07:2b:68:36:79:1d:6c:c9:72:6c: 18:7f:7f:27:99:2f:c9:1f:62:8a:b9:a8:9a:0a:e9: 42:a0:2b:76:ab:ed:70:a6:2e:bb:b5:ff:b2:25:43: 63:4f:1b:66:38:9a:81:e0:19:14:f3:cc:67:b1:29: dc:17:1f:7f:23:d4:ec:00:bc:12:76:02:f9:8c:03: 0c:1b:f3:1a:8c:98:6d:ef:0a:91:dd:f8:0f:91:f6: 13:32:55:6e:b5:3d:d5:0e:27:15:3c:86:4b:83:cf: 45:69:96:50:47:fc:5b:66:2d:91:e2:f7:1e:4a:58: 89:30:7e:f2:6c:2d:82:21:e0:db:9c:9d:35:f5:5d: 24:ef:f6:56:f1:75:65:12:d8:73:8e:2c:d3:da:32: 88:df:f4:07:b8:ca:fa:78:3e:71:5b:40:f5:b4:c8: 75:24:0c:5a:12:67:be:83:94:a4:74:f4:0a:06:65: d9:40:fe:f1:3b:23:92:89:0b:ce:1e:5e:1c:75:b5: 8a:ae:b4:08:ab:3f:15:a8:72:68:70:65:10:16:c2: 0a:e7:18:6f:11:7a:e0:b7:1a:cb:8a:53:33:2c:24: 95:37:87:09:02:88:e3:ac:c0:8d:0f:ae:4c:d4:63: b4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E7:BC:B1:FA:DE:94:50:65:FA:E2:A0:DF:06:95:AB:EB:F1:92:6B X509v3 Authority Key Identifier: keyid:3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:60:05:bf:cf:70:cd:c9:14:06:71:2e:cc:06:f9:33:14:d3: e6:ea:31:ce:9d:aa:ae:d8:72:00:eb:ba:38:93:e7:f6:0b:77: 83:60:61:c9:cf:a9:ac:61:94:8f:c1:85:3c:02:06:6b:47:96: ea:78:01:d2:2d:d3:09:a5:cc:8f:35:b3:bb:66:05:10:ed:d0: 84:13:70:b6:2c:f2:0c:14:91:8b:f8:2f:58:b6:22:08:ac:54: 3a:44:78:dd:39:49:2c:d0:7e:02:05:b6:e6:29:3f:8f:83:ca: 60:58:82:01:ac:5f:fc:3a:28:5f:e0:c1:e7:6c:63:7d:fa:fb: c3:5c:67:0d:f7:ba:b5:f8:c1:bc:51:21:63:e8:38:b9:54:42: 2e:a4:04:eb:76:49:5f:6d:06:46:47:87:38:6e:96:62:91:49: 9c:72:84:76:71:c3:f3:ef:65:ed:99:a3:b3:38:86:e8:91:3a: d2:6f:97:98:36:fe:20:a7:2c:a2:28:2d:64:81:23:de:1f:d1: 7c:03:29:ef:e8:ae:12:9c:4f:b9:84:a9:0e:58:32:d4:c4:2a: d3:dc:39:65:18:2a:e9:2c:5f:f5:7f:0e:b8:fc:39:b2:86:e4: c1:68:6f:29:74:f7:dc:78:78:80:58:93:ad:ca:29:66:36:bf: 35:69:b4:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaG1bevoGbti6bOvyGPFUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMTI4NTRhODQwMGQ4Yzg3ZWE0ZGU3YTIyZmRmMWJmNTc0 YTkwMzEwHhcNMjUxMjI5MDAwMDU1WhcNMjUxMjMwMDAwMDU1WjAzMTEwLwYDVQQD EygzYmU3YmNiMWZhZGU5NDUwNjVmYWUyYTBkZjA2OTVhYmViZjE5MjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yp0tUHuO7CjfMOzZUS+MZKLJQcr aDZ5HWzJcmwYf38nmS/JH2KKuaiaCulCoCt2q+1wpi67tf+yJUNjTxtmOJqB4BkU 88xnsSncFx9/I9TsALwSdgL5jAMMG/MajJht7wqR3fgPkfYTMlVutT3VDicVPIZL g89FaZZQR/xbZi2R4vceSliJMH7ybC2CIeDbnJ019V0k7/ZW8XVlEthzjizT2jKI 3/QHuMr6eD5xW0D1tMh1JAxaEme+g5SkdPQKBmXZQP7xOyOSiQvOHl4cdbWKrrQI qz8VqHJocGUQFsIK5xhvEXrgtxrLilMzLCSVN4cJAojjrMCND65M1GO0dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvnvLH63pRQZfrioN8Glavr8ZJrMB8GA1UdIwQY MBaAFDoShUqEANjIfqTeeiL98b9XSpAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2hLRlNvUUEyTWgtcE41Nkl2M3h2MWRLa0RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yYjZlMTYtOWNlOC00OWRhLTllZDMt NjgyOWQ2OGUyYTU0LzEvT2hLRlNvUUEyTWgtcE41Nkl2M3h2MWRLa0RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8yYjZlMTYtOWNlOC00OWRhLTllZDMtNjgyOWQ2OGUyYTU0 LzEvT2hLRlNvUUEyTWgtcE41Nkl2M3h2MWRLa0RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGAFv89w zckUBnEuzAb5MxTT5uoxzp2qrthyAOu6OJPn9gt3g2Bhyc+prGGUj8GFPAIGa0eW 6ngB0i3TCaXMjzWzu2YFEO3QhBNwtizyDBSRi/gvWLYiCKxUOkR43TlJLNB+AgW2 5ik/j4PKYFiCAaxf/DooX+DB52xjffr7w1xnDfe6tfjBvFEhY+g4uVRCLqQE63ZJ X20GRkeHOG6WYpFJnHKEdnHD8+9l7ZmjsziG6JE60m+XmDb+IKcsoigtZIEj3h/R fAMp7+iuEpxPuYSpDlgy1MQq09w5ZRgq6Sxf9X8OuPw5sobkwWhvKXT33Hh4gFiT rcopZja/NWm0Yg== -----END CERTIFICATE-----Generated at Mon Dec 29 10:13:38 2025 by rpki-client