This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft File: ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft (raw, json) Hash identifier: szOEmb2bQ8X0juvc6EQkw3l5dvBvJYfWZE3a8vY6+dg= Subject key identifier: 29:31:1F:EB:0B:4F:DE:D8:EC:6C:DC:10:74:BA:C9:57:B5:15:14:65 Authority key identifier: A2:33:A6:AF:5F:68:84:32:87:9C:7E:0C:07:72:CD:DD:8F:17:6D:B5 Certificate issuer: /CN=a233a6af5f688432879c7e0c0772cddd8f176db5 Certificate serial: 019B6C2105C56932C10BDAC2399E9572ED16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft Manifest number: 179E Signing time: Mon 29 Dec 2025 22:01:02 +0000 Manifest this update: Mon 29 Dec 2025 22:01:02 +0000 Manifest next update: Tue 30 Dec 2025 22:01:02 +0000 Files and hashes: 1: ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl (hash: qqOmBfJeCPEDmfcYrbMUUEY5xDwEk0/e8F+B19O+FUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 22:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:21:05:c5:69:32:c1:0b:da:c2:39:9e:95:72:ed:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a233a6af5f688432879c7e0c0772cddd8f176db5 Validity Not Before: Dec 29 22:01:02 2025 GMT Not After : Dec 30 22:01:02 2025 GMT Subject: CN=29311feb0b4fded8ec6cdc1074bac957b5151465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c6:b7:8d:4f:dd:a4:e6:95:ec:92:13:5d:73: f8:a3:ef:4f:5d:08:4c:61:22:a1:60:73:c0:aa:94: 8b:09:38:de:70:b9:f7:be:0d:76:68:77:cc:07:aa: 2f:9e:cf:f8:a0:20:27:c2:64:1b:f7:5e:fb:9f:2d: 9b:51:4e:03:7d:2c:f3:a4:26:4c:5a:ac:e8:92:d2: 29:8b:e5:ed:7e:24:d4:a1:1d:a3:a2:ac:30:a9:02: 78:d2:6c:f2:b4:29:dd:0d:7c:8e:31:46:73:a9:95: d5:7f:1b:23:c6:f8:f7:43:f3:56:3a:ed:fc:e8:e5: db:ad:9c:79:03:11:a3:21:2e:45:c0:90:74:fc:17: cc:43:b3:e6:9e:7f:68:f1:0e:b4:47:f0:90:4a:26: 07:78:ba:58:61:c0:ac:c2:0f:b3:1e:c0:2e:2c:c9: c7:64:36:34:e6:02:cd:f7:c5:8a:7f:98:95:ea:f7: b0:d4:33:1e:6d:78:03:b0:41:24:b9:97:fb:23:75: 1e:52:3a:0c:60:a2:f3:83:ac:6f:c0:f5:f6:40:0a: 39:32:9a:2f:36:88:f4:9d:e8:c7:57:24:7f:6b:cf: ea:f5:ee:b9:58:12:07:2b:51:55:1a:96:9e:7d:23: 38:32:cf:35:7a:67:97:67:3c:6e:8e:95:7f:d6:eb: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:31:1F:EB:0B:4F:DE:D8:EC:6C:DC:10:74:BA:C9:57:B5:15:14:65 X509v3 Authority Key Identifier: keyid:A2:33:A6:AF:5F:68:84:32:87:9C:7E:0C:07:72:CD:DD:8F:17:6D:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:43:d5:11:52:f3:92:cc:8d:55:33:93:5b:47:80:fc:61:7f: e4:f4:53:51:a1:39:a2:ed:c3:d5:79:cb:5b:93:65:03:93:79: 51:08:ba:45:73:81:37:6b:23:27:1f:44:7f:af:bd:84:24:57: 1e:41:07:f6:04:50:d5:d9:24:46:10:30:8d:b1:71:03:69:38: ff:41:84:0f:b4:c8:2a:ff:1a:e0:eb:83:a8:7d:5f:38:c3:51: f0:b5:15:f3:2c:4f:ee:5b:48:58:36:43:77:22:bb:cc:4c:1a: 12:0a:f8:2b:b6:00:a8:e5:8c:b1:7f:b3:57:d7:e8:42:43:b9: 9a:6f:25:54:4e:16:57:02:ad:0a:9b:d7:9c:7f:c7:41:26:69: 08:b4:78:40:23:ef:c2:ce:b6:19:5a:dd:fe:b0:19:45:fa:81: e5:c2:20:7e:50:f6:41:48:d5:e9:d8:1f:f9:bf:d4:9e:75:c3: 72:06:ae:b3:0c:f8:37:e0:08:05:ac:4d:f0:31:97:6b:31:10: c1:d4:84:d9:f2:87:69:2d:88:f0:5c:40:5c:39:95:41:18:18: a3:79:74:f3:57:28:3b:60:4f:10:fe:57:f3:5a:da:63:08:71: 4d:87:f9:e0:44:76:16:9d:46:01:b0:81:6e:93:34:7f:78:c3: 59:45:5e:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsIQXFaTLBC9rCOZ6Vcu0WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMzNhNmFmNWY2ODg0MzI4NzljN2UwYzA3NzJjZGRkOGYx NzZkYjUwHhcNMjUxMjI5MjIwMTAyWhcNMjUxMjMwMjIwMTAyWjAzMTEwLwYDVQQD EygyOTMxMWZlYjBiNGZkZWQ4ZWM2Y2RjMTA3NGJhYzk1N2I1MTUxNDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsa3jU/dpOaV7JITXXP4o+9PXQhM YSKhYHPAqpSLCTjecLn3vg12aHfMB6ovns/4oCAnwmQb9177ny2bUU4DfSzzpCZM WqzoktIpi+XtfiTUoR2joqwwqQJ40mzytCndDXyOMUZzqZXVfxsjxvj3Q/NWOu38 6OXbrZx5AxGjIS5FwJB0/BfMQ7Pmnn9o8Q60R/CQSiYHeLpYYcCswg+zHsAuLMnH ZDY05gLN98WKf5iV6vew1DMebXgDsEEkuZf7I3UeUjoMYKLzg6xvwPX2QAo5Mpov Noj0nejHVyR/a8/q9e65WBIHK1FVGpaefSM4Ms81emeXZzxujpV/1uuUXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkxH+sLT97Y7GzcEHS6yVe1FRRlMB8GA1UdIwQY MBaAFKIzpq9faIQyh5x+DAdyzd2PF221MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2pPbXIxOW9oREtIbkg0TUIzTE4zWThYYmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81NGQzOGUtYzkwYi00YjcxLWI3MWEt M2U0MjQwNTY5NDhmLzEvb2pPbXIxOW9oREtIbkg0TUIzTE4zWThYYmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81NGQzOGUtYzkwYi00YjcxLWI3MWEtM2U0MjQwNTY5NDhm LzEvb2pPbXIxOW9oREtIbkg0TUIzTE4zWThYYmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEPVEVLz ksyNVTOTW0eA/GF/5PRTUaE5ou3D1XnLW5NlA5N5UQi6RXOBN2sjJx9Ef6+9hCRX HkEH9gRQ1dkkRhAwjbFxA2k4/0GED7TIKv8a4OuDqH1fOMNR8LUV8yxP7ltIWDZD dyK7zEwaEgr4K7YAqOWMsX+zV9foQkO5mm8lVE4WVwKtCpvXnH/HQSZpCLR4QCPv ws62GVrd/rAZRfqB5cIgflD2QUjV6dgf+b/UnnXDcgauswz4N+AIBaxN8DGXazEQ wdSE2fKHaS2I8FxAXDmVQRgYo3l081coO2BPEP5X81raYwhxTYf54ER2Fp1GAbCB bpM0f3jDWUVe1g== -----END CERTIFICATE-----Generated at Tue Dec 30 06:20:51 2025 by rpki-client