This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft File: oheIwIqkN9EWXOy9aP2xlaFd-gg.mft (raw, json) Hash identifier: d93YwN1wTvwgguU52hMWNX4uH5MIzPrQMKRjeljhjvE= Subject key identifier: 78:A5:79:2F:22:F4:30:8A:22:5F:A2:53:A2:3E:16:EC:A2:90:04:EC Authority key identifier: A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08 Certificate issuer: /CN=a21788c08aa437d1165cecbd68fdb195a15dfa08 Certificate serial: 019B34C5AC3A43EA6774B02087299710F57F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 04:02:08 +0000 Manifest this update: Fri 19 Dec 2025 04:02:08 +0000 Manifest next update: Sat 20 Dec 2025 04:02:08 +0000 Files and hashes: 1: 3hcLMvc25IMPdhmKQEHCMZTqIjs.roa (hash: SEybTz+/cd8wiIccvdujur1jHcT09AAEthIXnDu/BtA=) 2: oheIwIqkN9EWXOy9aP2xlaFd-gg.crl (hash: jhkmAL5oucJT2Z/HAZ5CJvjWmu2OZ3SAMVPRaFXLlNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:ac:3a:43:ea:67:74:b0:20:87:29:97:10:f5:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a21788c08aa437d1165cecbd68fdb195a15dfa08 Validity Not Before: Dec 19 04:02:08 2025 GMT Not After : Dec 20 04:02:08 2025 GMT Subject: CN=78a5792f22f4308a225fa253a23e16eca29004ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2f:64:40:f7:10:11:60:8e:de:62:70:6c:9f: aa:fd:b0:ce:71:80:c6:fe:ac:fc:1e:9c:b3:07:ff: 8f:97:18:da:f0:0a:bd:51:ec:2f:06:66:32:44:cc: 0e:08:b3:66:19:c2:6e:e7:18:7f:40:4d:7c:64:35: 70:bd:b0:91:1c:72:e7:8b:7f:e2:47:3c:bd:92:17: bc:0e:6e:a2:91:65:77:e1:52:7f:c1:e4:3e:67:92: 40:8c:5d:dd:6d:9e:3e:51:fd:c7:90:05:d6:ff:94: b5:42:3f:52:f3:f2:f2:18:39:74:ef:12:07:c3:63: 1e:1a:03:e8:b3:da:4d:36:22:33:f3:01:28:1b:19: 61:0c:16:78:0a:c5:78:b5:aa:f1:16:a4:35:0b:ce: af:c3:6a:0b:61:1b:f8:97:1e:6b:12:44:9e:6e:72: 7a:7f:f2:97:f7:14:a2:93:ac:66:1b:65:38:87:a2: 89:f1:23:6e:af:e0:78:15:2a:67:d1:06:b7:54:5c: d6:28:3d:9e:0a:fd:bb:0b:c5:66:08:73:21:01:ad: c9:d7:63:45:85:df:6f:7a:ed:3c:b1:01:ba:b6:19: 87:05:1e:f5:40:ed:be:75:b5:23:31:32:43:1f:ec: 93:68:d4:25:8d:e6:7c:8b:d6:59:a5:e3:10:8b:e2: 3d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A5:79:2F:22:F4:30:8A:22:5F:A2:53:A2:3E:16:EC:A2:90:04:EC X509v3 Authority Key Identifier: keyid:A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:80:c7:e8:fb:7c:ff:e0:30:cd:0b:7b:c1:8f:05:b7:dc:20: ad:6b:f8:bb:21:5d:ad:0f:d6:18:aa:4c:90:30:ca:6a:47:8e: e7:a2:28:26:da:8d:9b:65:b3:1c:db:71:3a:bc:b3:47:3b:42: 1d:82:65:14:ce:bf:8e:93:19:9c:73:cf:18:87:a8:e3:72:e4: 4b:6a:5e:05:44:f1:26:fd:d4:b0:9f:9c:42:a1:fc:87:f0:82: d7:98:6d:11:59:0d:6a:1d:f1:04:27:32:33:43:f9:12:f4:28: 75:2b:16:b6:a2:14:d0:43:d4:ee:4c:8d:e2:e0:95:31:72:fc: e9:66:93:e7:84:ab:31:c8:02:54:79:78:ed:bc:04:63:d3:7a: 69:f7:8b:8c:3a:7b:71:8b:3f:c9:b2:bf:dd:81:5d:bc:39:b8: 29:2e:28:63:16:2b:cc:fb:8a:3f:f3:39:96:5f:1f:57:44:4b: 89:82:11:09:da:4a:79:86:cf:6c:0c:50:2d:1e:ef:8b:22:f8: ca:7e:d3:63:2a:50:ff:03:1b:22:d5:d0:df:ad:fc:e5:24:c0: 7a:5b:1f:2e:60:16:9a:22:11:87:a9:e9:97:a4:2c:cc:aa:8f: 0b:c9:84:3e:11:2e:14:b9:3a:f1:f3:a0:53:e8:ea:86:ab:c3: fb:3e:99:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xaw6Q+pndLAghymXEPV/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMTc4OGMwOGFhNDM3ZDExNjVjZWNiZDY4ZmRiMTk1YTE1 ZGZhMDgwHhcNMjUxMjE5MDQwMjA4WhcNMjUxMjIwMDQwMjA4WjAzMTEwLwYDVQQD Eyg3OGE1NzkyZjIyZjQzMDhhMjI1ZmEyNTNhMjNlMTZlY2EyOTAwNGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC9kQPcQEWCO3mJwbJ+q/bDOcYDG /qz8HpyzB/+Plxja8Aq9UewvBmYyRMwOCLNmGcJu5xh/QE18ZDVwvbCRHHLni3/i Rzy9khe8Dm6ikWV34VJ/weQ+Z5JAjF3dbZ4+Uf3HkAXW/5S1Qj9S8/LyGDl07xIH w2MeGgPos9pNNiIz8wEoGxlhDBZ4CsV4tarxFqQ1C86vw2oLYRv4lx5rEkSebnJ6 f/KX9xSik6xmG2U4h6KJ8SNur+B4FSpn0Qa3VFzWKD2eCv27C8VmCHMhAa3J12NF hd9veu08sQG6thmHBR71QO2+dbUjMTJDH+yTaNQljeZ8i9ZZpeMQi+I9twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHileS8i9DCKIl+iU6I+FuyikATsMB8GA1UdIwQY MBaAFKIXiMCKpDfRFlzsvWj9sZWhXfoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2hlSXdJcWtOOUVXWE95OWFQMnhsYUZkLWdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTBjN2MtZjJjYS00YWE5LTg3YzUt NzdmNGZkNTM0MjVlLzEvb2hlSXdJcWtOOUVXWE95OWFQMnhsYUZkLWdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTBjN2MtZjJjYS00YWE5LTg3YzUtNzdmNGZkNTM0MjVl LzEvb2hlSXdJcWtOOUVXWE95OWFQMnhsYUZkLWdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4DH6Pt8 /+AwzQt7wY8Ft9wgrWv4uyFdrQ/WGKpMkDDKakeO56IoJtqNm2WzHNtxOryzRztC HYJlFM6/jpMZnHPPGIeo43LkS2peBUTxJv3UsJ+cQqH8h/CC15htEVkNah3xBCcy M0P5EvQodSsWtqIU0EPU7kyN4uCVMXL86WaT54SrMcgCVHl47bwEY9N6afeLjDp7 cYs/ybK/3YFdvDm4KS4oYxYrzPuKP/M5ll8fV0RLiYIRCdpKeYbPbAxQLR7viyL4 yn7TYypQ/wMbItXQ36385STAelsfLmAWmiIRh6npl6QszKqPC8mEPhEuFLk68fOg U+jqhqvD+z6ZKQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:47:16 2025 by rpki-client