This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft File: Om4uf_LHAsirUUn-6nF1mRxzQJw.mft (raw, json) Hash identifier: YeoeixnjL9uOsX+G1gLUNSEv3IWeoQb++lCMWihK8kg= Subject key identifier: 9E:F2:58:87:41:F0:2F:AC:D1:BD:63:46:E9:94:22:B3:4C:74:9A:B8 Authority key identifier: 3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C Certificate issuer: /CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c Certificate serial: 019B3BD8EFBEFEBAA3AD6AB3B47FE8B16A7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft Manifest number: 07A0 Signing time: Sat 20 Dec 2025 13:00:31 +0000 Manifest this update: Sat 20 Dec 2025 13:00:31 +0000 Manifest next update: Sun 21 Dec 2025 13:00:31 +0000 Files and hashes: 1: E1AA5wsyyXbus7X0Ft2PunWAAq0.roa (hash: 04bplHphn9AKJ942980VFz6Kft0zjBNhkRGsxlvrJbg=) 2: Om4uf_LHAsirUUn-6nF1mRxzQJw.crl (hash: aWjlt+C5MSj4el5wCclBl78T8faEoq3F2V9a6I2rf+k=) 3: anOrtlhwnnmjPAi8_6BJOHZxlL4.roa (hash: YCZfQBw4Fjx9AZOlBUf0daMhEFakgdsLR0V2NRN6new=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d8:ef:be:fe:ba:a3:ad:6a:b3:b4:7f:e8:b1:6a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c Validity Not Before: Dec 20 13:00:31 2025 GMT Not After : Dec 21 13:00:31 2025 GMT Subject: CN=9ef2588741f02facd1bd6346e99422b34c749ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:57:a2:4a:33:9f:cd:5c:d9:e6:98:de:9a:45: 4d:e9:67:93:c6:bc:9e:04:1a:a6:5b:a4:8b:9c:14: 22:22:a8:71:36:23:5a:03:38:c1:b4:2a:d6:62:2c: c3:51:1b:5c:a8:42:dd:e7:dd:f6:57:18:23:6a:d7: 6b:4e:c1:ac:0e:35:20:a8:ce:e4:d2:a6:e3:b3:65: cf:5c:26:ce:50:df:a4:29:7f:71:f5:2f:f6:29:0d: 7b:f9:b9:9b:09:4b:3b:e9:e3:43:58:7b:39:31:6e: 9e:39:71:8a:9a:97:39:1f:67:ed:5f:a0:e9:cb:43: 6b:93:92:56:22:c5:22:9e:15:57:b2:b8:72:60:a3: 1a:c2:77:5c:6c:f2:0e:57:c7:33:fd:44:79:14:88: 27:23:c0:f4:85:f3:fe:ee:bb:32:1b:ed:7f:aa:69: 69:de:31:de:53:3b:87:26:8e:5c:f8:ab:4e:f5:ca: fe:14:e5:e5:da:8d:d0:5a:42:c3:29:36:e6:82:74: 10:49:01:cb:38:0c:ea:e8:93:4b:24:65:5d:0c:ae: c7:9d:dd:08:6a:2e:d4:cb:19:5e:34:1b:80:3c:c2: 9c:f6:51:f9:2d:6f:a3:71:f0:bd:70:54:dd:f7:e6: 5f:14:da:e7:cb:e0:e4:2f:55:6c:5f:84:30:f7:7a: 98:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F2:58:87:41:F0:2F:AC:D1:BD:63:46:E9:94:22:B3:4C:74:9A:B8 X509v3 Authority Key Identifier: keyid:3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:d7:e3:c1:e1:57:07:ac:65:af:78:6b:b9:8f:c3:04:08:34: 0a:ee:e6:44:a4:0c:40:c3:66:0d:7d:b5:3d:b6:77:57:97:89: b3:35:bb:26:cb:27:f2:90:9e:e8:3a:98:59:63:ed:93:eb:10: 5a:39:25:91:59:79:50:07:ea:9f:af:66:5d:9b:c9:38:ee:fa: 36:24:98:2d:79:61:e7:39:d1:fd:1f:d5:15:09:55:ad:30:7d: c4:57:6a:96:a6:2d:5b:ff:f0:c8:53:fa:75:92:b4:0a:22:4c: dd:e2:da:a0:d5:ec:94:02:ea:99:09:9d:e6:05:58:e2:e5:25: d4:f2:7e:45:54:6b:a9:c2:56:a8:f3:60:e1:9e:9d:e5:91:43: 33:f3:25:93:d6:5f:f6:e4:18:fe:2b:53:ea:d7:b4:f5:be:d5: e3:45:ce:d2:48:4a:b2:a6:ed:53:6f:c9:df:3b:e5:fc:d8:43: ed:4a:b6:c5:ea:ce:4e:84:67:4c:ec:93:d9:7a:5c:65:c6:c0: 09:5e:0b:09:f0:6a:c5:bd:8e:ee:92:4e:0c:a7:ad:ed:5a:b9: fb:1c:60:16:ab:92:c1:07:a0:ad:8f:06:92:68:7e:49:7e:d2: c2:df:ba:83:d7:4b:b4:2f:65:da:91:1f:e9:ea:ac:d5:03:d3: 31:c6:97:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72O++/rqjrWqztH/osWp7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNmUyZTdmZjJjNzAyYzhhYjUxNDlmZWVhNzE3NTk5MWM3 MzQwOWMwHhcNMjUxMjIwMTMwMDMxWhcNMjUxMjIxMTMwMDMxWjAzMTEwLwYDVQQD Eyg5ZWYyNTg4NzQxZjAyZmFjZDFiZDYzNDZlOTk0MjJiMzRjNzQ5YWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51eiSjOfzVzZ5pjemkVN6WeTxrye BBqmW6SLnBQiIqhxNiNaAzjBtCrWYizDURtcqELd5932VxgjatdrTsGsDjUgqM7k 0qbjs2XPXCbOUN+kKX9x9S/2KQ17+bmbCUs76eNDWHs5MW6eOXGKmpc5H2ftX6Dp y0Nrk5JWIsUinhVXsrhyYKMawndcbPIOV8cz/UR5FIgnI8D0hfP+7rsyG+1/qmlp 3jHeUzuHJo5c+KtO9cr+FOXl2o3QWkLDKTbmgnQQSQHLOAzq6JNLJGVdDK7Hnd0I ai7UyxleNBuAPMKc9lH5LW+jcfC9cFTd9+ZfFNrny+DkL1VsX4Qw93qY+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7yWIdB8C+s0b1jRumUIrNMdJq4MB8GA1UdIwQY MBaAFDpuLn/yxwLIq1FJ/upxdZkcc0CcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT200dWZfTEhBc2lyVVVuLTZuRjFtUnh6UUp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xODg1NDItZDRmNy00YWEyLWFkYzct Nzc1YTA1Nzg4Y2Y1LzEvT200dWZfTEhBc2lyVVVuLTZuRjFtUnh6UUp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xODg1NDItZDRmNy00YWEyLWFkYzctNzc1YTA1Nzg4Y2Y1 LzEvT200dWZfTEhBc2lyVVVuLTZuRjFtUnh6UUp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNfjweFX B6xlr3hruY/DBAg0Cu7mRKQMQMNmDX21PbZ3V5eJszW7Jssn8pCe6DqYWWPtk+sQ WjklkVl5UAfqn69mXZvJOO76NiSYLXlh5znR/R/VFQlVrTB9xFdqlqYtW//wyFP6 dZK0CiJM3eLaoNXslALqmQmd5gVY4uUl1PJ+RVRrqcJWqPNg4Z6d5ZFDM/Mlk9Zf 9uQY/itT6te09b7V40XO0khKsqbtU2/J3zvl/NhD7Uq2xerOToRnTOyT2XpcZcbA CV4LCfBqxb2O7pJODKet7Vq5+xxgFquSwQegrY8Gkmh+SX7Swt+6g9dLtC9l2pEf 6eqs1QPTMcaXAw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:40:14 2025 by rpki-client