This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft File: Om4uf_LHAsirUUn-6nF1mRxzQJw.mft (raw, json) Hash identifier: WRRrf2RyW7nkUb2l6Nrb84FaXx6F5ADMlXDg+Ux6d0Y= Subject key identifier: 11:BA:A3:9A:06:42:5F:EC:DF:6B:01:9E:09:56:5C:B8:E6:AC:D4:CF Authority key identifier: 3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C Certificate issuer: /CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c Certificate serial: 019B6FFD62D87943E40EA8677A51AB2B5BBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft Manifest number: 07BB Signing time: Tue 30 Dec 2025 16:00:35 +0000 Manifest this update: Tue 30 Dec 2025 16:00:35 +0000 Manifest next update: Wed 31 Dec 2025 16:00:35 +0000 Files and hashes: 1: E1AA5wsyyXbus7X0Ft2PunWAAq0.roa (hash: 04bplHphn9AKJ942980VFz6Kft0zjBNhkRGsxlvrJbg=) 2: Om4uf_LHAsirUUn-6nF1mRxzQJw.crl (hash: QsIsu/hyyviqtWnP5YcHe9KTsxZekzfFgXELMcOPoUY=) 3: anOrtlhwnnmjPAi8_6BJOHZxlL4.roa (hash: YCZfQBw4Fjx9AZOlBUf0daMhEFakgdsLR0V2NRN6new=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:fd:62:d8:79:43:e4:0e:a8:67:7a:51:ab:2b:5b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c Validity Not Before: Dec 30 16:00:35 2025 GMT Not After : Dec 31 16:00:35 2025 GMT Subject: CN=11baa39a06425fecdf6b019e09565cb8e6acd4cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d8:1e:0d:48:02:0b:5f:69:84:b7:74:12:de: 93:2b:06:dd:d1:1f:b3:55:ed:81:cd:8b:69:2e:03: ba:da:d3:c9:ac:d3:f8:fe:f6:63:86:82:77:c6:27: 89:0d:1f:65:26:f3:5c:66:e1:94:d2:1f:e2:3e:41: 42:55:2a:01:84:30:e7:04:d3:42:07:ab:b2:a8:1b: b7:f6:3d:62:24:13:5e:d2:cd:2e:69:04:de:7c:f6: 45:6a:92:95:b2:b0:52:0d:37:8e:d6:2e:38:a5:b3: f7:57:ac:24:56:03:28:b4:12:eb:bc:1d:f9:77:53: 8f:84:10:e4:88:ec:c9:3b:bb:c6:a8:d6:e8:12:b3: 1f:23:ae:12:01:fd:fd:44:de:c2:5f:a0:56:44:3b: f6:03:0b:7f:84:f2:a0:73:d0:9e:e5:88:f7:99:8d: 86:b0:99:36:c7:61:b4:17:0e:75:17:d7:8a:87:dc: 51:0e:f8:fc:99:7b:2d:6a:2e:12:db:1d:9f:0a:ee: e2:8b:ee:dc:9b:47:ab:41:57:dd:0b:96:5e:8b:3e: ff:9e:ec:3c:e0:10:98:09:2c:23:4b:e6:1c:ef:7b: f2:f7:19:04:6a:25:99:ac:6e:3f:95:7e:20:99:02: ab:c8:69:ee:5a:09:e3:b5:f5:ac:75:b9:8e:4a:14: 8c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BA:A3:9A:06:42:5F:EC:DF:6B:01:9E:09:56:5C:B8:E6:AC:D4:CF X509v3 Authority Key Identifier: keyid:3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:72:4b:b4:a3:da:be:61:f7:88:aa:a7:65:aa:18:f8:c3:a8: 35:98:fa:cb:0f:29:7e:9f:ea:81:20:a4:2e:6d:c8:9e:c0:fe: 05:ef:62:75:a6:f9:84:64:3b:63:e9:43:6b:e0:db:eb:28:44: 4f:3a:1d:d1:17:68:22:df:a2:96:0a:8c:f0:8f:17:91:09:c6: 53:92:b9:fb:8d:7f:e1:10:31:56:a9:04:cf:1a:62:df:8e:2e: 09:24:26:65:c0:10:4a:c9:46:ec:47:28:a1:73:3c:40:c9:b2: ef:fb:e4:3a:8b:4a:2b:91:21:a2:c0:d4:20:d7:81:5b:1e:09: 78:d1:83:8f:89:f2:16:f9:20:e1:9a:2d:ed:e4:d4:12:0f:91: 4e:09:b6:66:3b:fb:69:40:5b:b4:2b:8d:a9:62:4e:e4:5e:9d: b8:e9:cf:22:fa:55:a0:bd:7f:14:f0:88:33:be:d9:77:f7:cc: de:ac:ab:94:ae:a6:6f:c0:1f:aa:61:b2:57:60:a9:aa:50:11: 74:f1:c2:4c:e1:59:cf:5f:24:6c:3c:a1:3b:fc:44:06:b8:6b: a3:ed:a4:d8:51:cd:83:77:ea:07:14:da:06:a3:bb:1e:21:c2: 88:09:96:d6:68:da:53:dc:10:38:cf:28:30:e8:d0:07:7d:5a: 13:2b:8e:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtv/WLYeUPkDqhnelGrK1u9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNmUyZTdmZjJjNzAyYzhhYjUxNDlmZWVhNzE3NTk5MWM3 MzQwOWMwHhcNMjUxMjMwMTYwMDM1WhcNMjUxMjMxMTYwMDM1WjAzMTEwLwYDVQQD EygxMWJhYTM5YTA2NDI1ZmVjZGY2YjAxOWUwOTU2NWNiOGU2YWNkNGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNgeDUgCC19phLd0Et6TKwbd0R+z Ve2BzYtpLgO62tPJrNP4/vZjhoJ3xieJDR9lJvNcZuGU0h/iPkFCVSoBhDDnBNNC B6uyqBu39j1iJBNe0s0uaQTefPZFapKVsrBSDTeO1i44pbP3V6wkVgMotBLrvB35 d1OPhBDkiOzJO7vGqNboErMfI64SAf39RN7CX6BWRDv2Awt/hPKgc9Ce5Yj3mY2G sJk2x2G0Fw51F9eKh9xRDvj8mXstai4S2x2fCu7ii+7cm0erQVfdC5Zeiz7/nuw8 4BCYCSwjS+Yc73vy9xkEaiWZrG4/lX4gmQKryGnuWgnjtfWsdbmOShSMvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBG6o5oGQl/s32sBnglWXLjmrNTPMB8GA1UdIwQY MBaAFDpuLn/yxwLIq1FJ/upxdZkcc0CcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT200dWZfTEhBc2lyVVVuLTZuRjFtUnh6UUp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xODg1NDItZDRmNy00YWEyLWFkYzct Nzc1YTA1Nzg4Y2Y1LzEvT200dWZfTEhBc2lyVVVuLTZuRjFtUnh6UUp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xODg1NDItZDRmNy00YWEyLWFkYzctNzc1YTA1Nzg4Y2Y1 LzEvT200dWZfTEhBc2lyVVVuLTZuRjFtUnh6UUp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnJLtKPa vmH3iKqnZaoY+MOoNZj6yw8pfp/qgSCkLm3InsD+Be9idab5hGQ7Y+lDa+Db6yhE Tzod0RdoIt+ilgqM8I8XkQnGU5K5+41/4RAxVqkEzxpi344uCSQmZcAQSslG7Eco oXM8QMmy7/vkOotKK5EhosDUINeBWx4JeNGDj4nyFvkg4Zot7eTUEg+RTgm2Zjv7 aUBbtCuNqWJO5F6duOnPIvpVoL1/FPCIM77Zd/fM3qyrlK6mb8AfqmGyV2CpqlAR dPHCTOFZz18kbDyhO/xEBrhro+2k2FHNg3fqBxTaBqO7HiHCiAmW1mjaU9wQOM8o MOjQB31aEyuOPA== -----END CERTIFICATE-----Generated at Tue Dec 30 18:40:31 2025 by rpki-client