This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft File: oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft (raw, json) Hash identifier: lup7Ff1Rcl53JA3puCCYyF7/9Jk5PnzrFedAc/MAYms= Subject key identifier: A7:2B:5C:84:C6:96:75:F6:E2:21:87:D8:25:28:12:F6:42:06:8F:3A Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0 Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0 Certificate serial: 019AC9E9300C3B1B382DB8A5C18D5FF0BD73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft Manifest number: 174B Signing time: Fri 28 Nov 2025 10:01:33 +0000 Manifest this update: Fri 28 Nov 2025 10:01:33 +0000 Manifest next update: Sat 29 Nov 2025 10:01:33 +0000 Files and hashes: 1: oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl (hash: z7soIEmFIzRmCaN3HizeYMAnV7AkT4ttnbaNN9J8f/g=) 2: yDa2dQgeJJIFzKakaTK1-AlXD1I.roa (hash: mJdwofIlP4KR52j+bqtWhT0oD7xOVgPS7SMsHC+21ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:e9:30:0c:3b:1b:38:2d:b8:a5:c1:8d:5f:f0:bd:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0 Validity Not Before: Nov 28 10:01:33 2025 GMT Not After : Nov 29 10:01:33 2025 GMT Subject: CN=a72b5c84c69675f6e22187d8252812f642068f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5e:24:b6:e5:dd:ad:9d:85:dd:77:f8:1a:16: ed:6d:28:9d:36:17:60:3a:b0:18:7c:74:87:ff:de: 51:04:93:34:8c:56:3a:c0:9f:d3:70:43:1d:c4:a5: 90:9f:20:86:bf:8f:bd:ff:12:61:65:bf:4f:1d:b5: 52:f7:11:95:64:28:0f:0a:ee:f9:a0:aa:16:d9:2a: e2:66:1d:a2:df:e8:54:cb:1e:fc:b9:37:85:06:d7: af:94:82:27:58:73:c9:d2:78:15:58:53:67:87:e6: b8:a3:28:a2:27:ad:74:0d:51:1b:a4:46:94:0b:bd: c7:35:b3:94:1a:31:5d:33:83:f1:8c:30:3d:7e:51: 2e:15:ff:89:f7:b9:e3:ce:be:72:84:5e:07:6f:9c: 0b:4b:b7:8a:04:b1:3c:fc:34:25:b8:68:79:7b:ad: 7b:4d:3d:50:40:99:1f:9e:ba:c0:eb:97:54:c2:33: c2:fe:b8:46:99:2c:22:00:7d:e7:de:b9:13:04:31: 8a:af:37:ca:53:f2:ea:d9:e8:d3:7d:bb:ab:a9:78: 52:60:c6:ba:2f:df:36:c9:43:d2:db:b4:80:56:ec: f4:88:be:79:47:f8:ba:6e:9e:64:0f:d4:5a:23:c3: c2:3b:3e:6c:d9:f1:b1:d3:cf:78:3f:6c:a8:7d:3e: e3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2B:5C:84:C6:96:75:F6:E2:21:87:D8:25:28:12:F6:42:06:8F:3A X509v3 Authority Key Identifier: keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:06:40:ec:05:9d:4f:6c:51:c6:a7:a1:b5:20:34:a5:69:09: 93:7f:d0:6b:ed:fd:b0:d4:f6:f6:9c:e2:ef:a9:af:c5:e1:8b: ea:be:22:b8:e8:12:4b:ae:b8:33:0d:2b:1b:75:df:0b:04:32: b1:4a:5a:f5:c2:54:ae:2a:84:c8:f1:84:a9:ce:90:27:ee:95: 00:0f:be:3f:47:42:b5:7e:48:64:f4:e4:f0:4a:da:78:56:cb: a4:8d:1c:40:7d:be:ae:84:96:25:0c:0b:63:fc:b4:a7:5f:74: 80:be:3b:7e:37:49:19:f6:b7:f3:24:00:64:83:01:20:e8:02: e8:4f:d4:e6:ce:24:3f:99:26:0a:c6:80:a2:07:90:50:bd:a0: 92:5a:10:ec:f9:2b:a5:1c:ed:da:2b:7e:a7:36:f6:ce:5b:2a: 19:02:e3:f0:a8:7b:21:87:65:2f:65:ca:6e:25:2f:2b:e3:7d: d8:46:65:df:96:44:8e:4b:dc:ee:9e:6e:6c:29:c8:98:9b:7e: 73:fa:c8:68:f8:3f:84:dd:b2:27:8c:1e:5a:ba:4b:a8:b9:cb: 91:27:12:45:54:ca:71:7a:b2:74:f6:8b:a1:28:0a:17:14:43: 0e:d4:10:4c:6b:fe:da:7c:e9:3f:bd:55:d8:06:1a:a4:2e:ea: a5:29:02:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrJ6TAMOxs4LbilwY1f8L1zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMWViNDA3Zjc2Y2ZhNWM3ZGExNTIxODM5N2IzYzQzMTc3 NjJhYzAwHhcNMjUxMTI4MTAwMTMzWhcNMjUxMTI5MTAwMTMzWjAzMTEwLwYDVQQD EyhhNzJiNWM4NGM2OTY3NWY2ZTIyMTg3ZDgyNTI4MTJmNjQyMDY4ZjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV4ktuXdrZ2F3Xf4GhbtbSidNhdg OrAYfHSH/95RBJM0jFY6wJ/TcEMdxKWQnyCGv4+9/xJhZb9PHbVS9xGVZCgPCu75 oKoW2SriZh2i3+hUyx78uTeFBtevlIInWHPJ0ngVWFNnh+a4oyiiJ610DVEbpEaU C73HNbOUGjFdM4PxjDA9flEuFf+J97njzr5yhF4Hb5wLS7eKBLE8/DQluGh5e617 TT1QQJkfnrrA65dUwjPC/rhGmSwiAH3n3rkTBDGKrzfKU/Lq2ejTfburqXhSYMa6 L982yUPS27SAVuz0iL55R/i6bp5kD9RaI8PCOz5s2fGx0894P2yofT7jeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcrXITGlnX24iGH2CUoEvZCBo86MB8GA1UdIwQY MBaAFKIetAf3bPpcfaFSGDl7PEMXdirAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2g2MEJfZHMtbHg5b1ZJWU9YczhReGQyS3NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85OGIyNzgtMDY4YS00NjhmLWFjZDct MjZjZDM4NzFmMzY1LzEvb2g2MEJfZHMtbHg5b1ZJWU9YczhReGQyS3NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85OGIyNzgtMDY4YS00NjhmLWFjZDctMjZjZDM4NzFmMzY1 LzEvb2g2MEJfZHMtbHg5b1ZJWU9YczhReGQyS3NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAZA7AWd T2xRxqehtSA0pWkJk3/Qa+39sNT29pzi76mvxeGL6r4iuOgSS664Mw0rG3XfCwQy sUpa9cJUriqEyPGEqc6QJ+6VAA++P0dCtX5IZPTk8EraeFbLpI0cQH2+roSWJQwL Y/y0p190gL47fjdJGfa38yQAZIMBIOgC6E/U5s4kP5kmCsaAogeQUL2gkloQ7Pkr pRzt2it+pzb2zlsqGQLj8Kh7IYdlL2XKbiUvK+N92EZl35ZEjkvc7p5ubCnImJt+ c/rIaPg/hN2yJ4weWrpLqLnLkScSRVTKcXqydPaLoSgKFxRDDtQQTGv+2nzpP71V 2AYapC7qpSkCIg== -----END CERTIFICATE-----Generated at Fri Nov 28 14:44:18 2025 by rpki-client