This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft File: OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft (raw, json) Hash identifier: Cl1NvwYtWhiw6gyy8ytRGDT1AbElZglU5QIrYme5YXw= Subject key identifier: 2E:DD:B1:C7:28:3B:2F:24:88:3D:3E:95:B4:C7:A6:22:B0:88:3A:09 Authority key identifier: 38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A Certificate issuer: /CN=387b7561d98dacfab863058b3b9807ad823f186a Certificate serial: 019B4FCF9025ED27DD24B6BF56D5D22D9CE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft Manifest number: 0406 Signing time: Wed 24 Dec 2025 10:02:41 +0000 Manifest this update: Wed 24 Dec 2025 10:02:41 +0000 Manifest next update: Thu 25 Dec 2025 10:02:41 +0000 Files and hashes: 1: FtOApP1JK-2eKX_hjEPgWrMZdBM.roa (hash: fFP7Ifph2yQGZ7ICJ/Ang9F4wXqAsOp+daYrJKGw4zs=) 2: OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl (hash: fDOx0i62fVXGnAKvDRg2vnW8pXBO8DAOHtC6D6L6jXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cf:90:25:ed:27:dd:24:b6:bf:56:d5:d2:2d:9c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387b7561d98dacfab863058b3b9807ad823f186a Validity Not Before: Dec 24 10:02:41 2025 GMT Not After : Dec 25 10:02:41 2025 GMT Subject: CN=2eddb1c7283b2f24883d3e95b4c7a622b0883a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:db:d2:a9:53:a9:36:d9:58:09:51:fe:17: 61:08:c8:2e:14:aa:c1:41:7d:42:29:8c:ba:c5:6e: 1c:44:36:3a:bc:a8:5a:e9:2e:7d:f2:d4:cc:bf:82: b1:65:d5:e9:6a:1e:f1:57:e5:68:66:eb:f7:59:ad: 83:dc:6f:13:af:3b:7d:63:c6:ca:37:2f:84:65:34: f0:41:01:24:73:c3:da:db:92:b3:58:ca:a6:c4:e1: 4c:e9:6f:b4:e2:e1:99:55:69:d5:84:fa:c1:bd:ec: 0c:74:b8:e6:ae:fd:ca:11:c9:1d:19:bf:ec:c3:d3: 12:75:66:e9:ec:6f:ec:76:0a:5a:7c:9e:a6:69:b2: bd:15:70:87:60:3c:71:c9:65:e8:4e:36:d4:7a:ed: 61:05:1c:e2:77:f2:02:31:87:da:2f:fb:cd:ec:56: 2e:e9:ba:c5:e0:14:82:cc:86:d7:81:14:fc:2b:ae: 5b:81:08:f3:74:5a:f4:eb:90:90:89:d4:1b:3a:64: 8f:9d:c3:b2:92:a9:ce:3b:88:a4:1f:33:57:ab:4d: 00:dd:9d:11:fa:dd:e3:9f:61:2c:08:f3:95:9c:24: 30:73:48:f5:2f:59:1c:58:f7:9c:51:d7:99:3e:f5: d2:c4:0a:b0:0d:bb:4c:d5:c7:79:c0:13:7a:3c:7c: f6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DD:B1:C7:28:3B:2F:24:88:3D:3E:95:B4:C7:A6:22:B0:88:3A:09 X509v3 Authority Key Identifier: keyid:38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:69:b3:f8:f6:ee:0e:14:e4:3c:9a:9a:d5:21:4d:c2:ec:bc: 0a:f1:a6:24:8f:5d:38:6c:4f:68:cf:c5:06:9d:fb:d9:23:ed: a8:31:f4:a6:36:2a:27:85:fe:49:27:49:df:32:7c:7b:9f:c0: 24:62:29:12:47:a4:33:a5:af:6b:6b:a4:48:e0:4c:2f:af:93: ea:2b:f3:13:ba:e8:f1:1e:53:2f:1a:77:40:31:1c:d2:21:91: 1d:a0:97:c7:6e:f7:c8:53:97:b3:5c:05:19:ca:8b:d2:de:cc: 27:3b:6a:46:db:50:1f:38:4a:36:6b:dc:29:28:c5:d7:47:c5: 5a:85:7c:92:81:ff:df:8c:ce:93:8d:fb:e3:61:81:0c:f6:91: 10:5a:1e:9e:63:01:cf:5c:18:f7:2e:4f:ff:2c:6e:1d:a9:77: 4c:97:32:e9:db:11:e1:3f:62:78:8c:56:ec:3d:59:42:33:4d: 50:07:58:0b:5a:f8:ca:c2:e9:66:31:a0:df:44:c1:06:ab:0a: 94:17:c0:d0:0c:26:db:da:3c:08:5b:9d:a4:2d:86:20:96:7a: dd:51:02:e4:4f:3a:b7:ea:7d:af:ce:73:a6:6d:48:6d:41:89: 36:f6:31:6f:bf:57:09:54:49:77:b0:37:27:18:90:6d:92:71: bc:ff:ad:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPz5Al7SfdJLa/VtXSLZzjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2I3NTYxZDk4ZGFjZmFiODYzMDU4YjNiOTgwN2FkODIz ZjE4NmEwHhcNMjUxMjI0MTAwMjQxWhcNMjUxMjI1MTAwMjQxWjAzMTEwLwYDVQQD EygyZWRkYjFjNzI4M2IyZjI0ODgzZDNlOTViNGM3YTYyMmIwODgzYTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiDb0qlTqTbZWAlR/hdhCMguFKrB QX1CKYy6xW4cRDY6vKha6S598tTMv4KxZdXpah7xV+VoZuv3Wa2D3G8Trzt9Y8bK Ny+EZTTwQQEkc8Pa25KzWMqmxOFM6W+04uGZVWnVhPrBvewMdLjmrv3KEckdGb/s w9MSdWbp7G/sdgpafJ6mabK9FXCHYDxxyWXoTjbUeu1hBRzid/ICMYfaL/vN7FYu 6brF4BSCzIbXgRT8K65bgQjzdFr065CQidQbOmSPncOykqnOO4ikHzNXq00A3Z0R +t3jn2EsCPOVnCQwc0j1L1kcWPecUdeZPvXSxAqwDbtM1cd5wBN6PHz2cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7dsccoOy8kiD0+lbTHpiKwiDoJMB8GA1UdIwQY MBaAFDh7dWHZjaz6uGMFizuYB62CPxhqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0h0MVlkbU5yUHE0WXdXTE81Z0hyWUlfR0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hMTQ2NGEtMjQxMS00Y2M4LWExMDEt MGFlY2RjNTE3NWZhLzEvT0h0MVlkbU5yUHE0WXdXTE81Z0hyWUlfR0dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9hMTQ2NGEtMjQxMS00Y2M4LWExMDEtMGFlY2RjNTE3NWZh LzEvT0h0MVlkbU5yUHE0WXdXTE81Z0hyWUlfR0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2mz+Pbu DhTkPJqa1SFNwuy8CvGmJI9dOGxPaM/FBp372SPtqDH0pjYqJ4X+SSdJ3zJ8e5/A JGIpEkekM6Wva2ukSOBML6+T6ivzE7ro8R5TLxp3QDEc0iGRHaCXx273yFOXs1wF GcqL0t7MJztqRttQHzhKNmvcKSjF10fFWoV8koH/34zOk43742GBDPaREFoenmMB z1wY9y5P/yxuHal3TJcy6dsR4T9ieIxW7D1ZQjNNUAdYC1r4ysLpZjGg30TBBqsK lBfA0Awm29o8CFudpC2GIJZ63VEC5E86t+p9r85zpm1IbUGJNvYxb79XCVRJd7A3 JxiQbZJxvP+tmQ== -----END CERTIFICATE-----Generated at Wed Dec 24 13:40:08 2025 by rpki-client