This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft File: oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft (raw, json) Hash identifier: jTJGQXxSsKGovI09WQ8miDQHTJGN14HE2GB85wh3+gw= Subject key identifier: 76:AA:0A:CF:14:31:4D:26:9A:28:47:0F:25:18:31:4A:85:C1:A6:7F Authority key identifier: A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14 Certificate issuer: /CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814 Certificate serial: 019B0F378CF4EA25BAB4A94681AEE63FA2AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft Manifest number: 08E3 Signing time: Thu 11 Dec 2025 21:00:57 +0000 Manifest this update: Thu 11 Dec 2025 21:00:57 +0000 Manifest next update: Fri 12 Dec 2025 21:00:57 +0000 Files and hashes: 1: RgkGs56a3wBSH0Yhny04eNJEX3I.roa (hash: 1WUdRWIGnTtyys0okmGp0iV2hIZohfzABaDiV/G7uDo=) 2: oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl (hash: QlABTfJ5HkLn7G2AGTqrPmWXevdwICv1OX8mCCZ01Lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:8c:f4:ea:25:ba:b4:a9:46:81:ae:e6:3f:a2:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814 Validity Not Before: Dec 11 21:00:57 2025 GMT Not After : Dec 12 21:00:57 2025 GMT Subject: CN=76aa0acf14314d269a28470f2518314a85c1a67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:13:2c:b6:31:10:39:1c:de:71:d9:40:04:5c: 7f:32:10:65:f9:6c:b6:77:7c:5e:5b:c1:1b:26:46: 7f:76:3c:09:b9:98:d9:49:84:d7:8a:65:69:c0:9d: 25:32:b2:1b:80:58:b0:ff:9e:d8:63:d1:92:b9:ab: f1:47:b4:f4:76:77:b9:74:a8:81:2d:3f:8d:13:c4: 72:80:a2:17:cd:d5:8b:34:de:7f:6f:53:fa:29:1c: ce:c4:90:ca:15:8a:b5:ae:2b:d2:b4:1d:59:fd:12: dd:a8:c2:62:3c:10:fa:31:9f:1d:b1:06:d3:95:21: 9e:b3:74:f3:54:c1:01:6a:95:a7:28:3a:d0:6a:e6: ee:22:1e:96:e6:9d:ed:87:02:1b:05:b3:b0:82:22: 8e:b9:3b:c7:7d:18:1b:84:2c:14:f0:eb:05:a5:49: 69:de:6b:25:43:11:bf:a0:c8:b9:2a:51:ac:f6:2c: f1:05:a5:a5:cc:9f:65:8a:ab:1f:60:67:2a:dc:07: 9e:f3:d6:d8:d3:0e:0e:ef:ed:e9:c8:fa:a1:3b:63: da:ff:a1:77:d7:f9:5e:d2:be:05:5b:77:dd:0e:cb: 01:b6:09:85:46:4e:e8:5a:6e:0e:51:a5:4e:8c:26: 65:d5:7f:e8:93:1f:35:c2:57:65:b1:df:8b:a0:f7: 2c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AA:0A:CF:14:31:4D:26:9A:28:47:0F:25:18:31:4A:85:C1:A6:7F X509v3 Authority Key Identifier: keyid:A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:13:1a:4f:be:e5:81:d0:9a:79:94:94:34:b7:24:92:89:0f: 2d:6e:9b:44:63:03:85:12:15:08:7e:69:16:16:1b:bd:29:68: e5:5d:fa:63:82:d8:15:53:6c:7c:63:d9:b1:78:a8:a1:e2:66: a8:15:dc:59:09:87:04:5a:8a:fe:a2:31:84:99:a8:4d:a0:0a: 42:f4:e0:c5:47:a1:db:90:c5:32:8f:1c:f8:15:b8:99:34:c1: 14:24:e3:d2:b8:6d:84:e7:3e:7b:bf:b5:3e:a3:ae:7d:e2:8a: 61:03:b5:c5:61:36:d4:ca:8d:be:44:0f:63:c9:9a:9d:03:5b: 02:08:e8:84:e7:08:2e:13:7d:d6:c5:44:03:40:f7:2a:c9:e7: bf:82:8f:15:ff:54:95:04:2c:44:24:3d:96:ec:64:ac:48:af: 4a:87:75:ac:14:39:56:09:ac:a3:27:37:9f:9e:9c:85:d5:cc: 1b:ca:98:c3:a2:52:51:a3:55:18:20:db:8d:f8:8b:dc:5c:b7: ab:3e:8d:58:24:6c:4b:d0:00:c4:93:c1:c6:f4:6e:09:f6:42: 7e:6d:1f:09:38:ba:98:84:80:d8:4e:86:0a:c7:4b:41:af:dd: 52:48:a6:39:8d:7f:c6:99:58:cb:a6:2e:78:c6:71:96:d6:19: be:1e:ce:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN4z06iW6tKlGga7mP6KsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZTMxMjhmZDA5ZGMxOGU2NmVlNDIxMmE3ZTY0ZjNlNGU3 NGE4MTQwHhcNMjUxMjExMjEwMDU3WhcNMjUxMjEyMjEwMDU3WjAzMTEwLwYDVQQD Eyg3NmFhMGFjZjE0MzE0ZDI2OWEyODQ3MGYyNTE4MzE0YTg1YzFhNjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRMstjEQORzecdlABFx/MhBl+Wy2 d3xeW8EbJkZ/djwJuZjZSYTXimVpwJ0lMrIbgFiw/57YY9GSuavxR7T0dne5dKiB LT+NE8RygKIXzdWLNN5/b1P6KRzOxJDKFYq1rivStB1Z/RLdqMJiPBD6MZ8dsQbT lSGes3TzVMEBapWnKDrQaubuIh6W5p3thwIbBbOwgiKOuTvHfRgbhCwU8OsFpUlp 3mslQxG/oMi5KlGs9izxBaWlzJ9liqsfYGcq3Aee89bY0w4O7+3pyPqhO2Pa/6F3 1/le0r4FW3fdDssBtgmFRk7oWm4OUaVOjCZl1X/okx81wldlsd+LoPcsZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaqCs8UMU0mmihHDyUYMUqFwaZ/MB8GA1UdIwQY MBaAFKDjEo/QncGOZu5CEqfmTz5OdKgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb09NU2o5Q2R3WTVtN2tJU3AtWlBQazUwcUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wYjRlNzMtYTE1NC00MDU5LWI2MjIt OGZkNWNhYmE1NGU5LzEvb09NU2o5Q2R3WTVtN2tJU3AtWlBQazUwcUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wYjRlNzMtYTE1NC00MDU5LWI2MjItOGZkNWNhYmE1NGU5 LzEvb09NU2o5Q2R3WTVtN2tJU3AtWlBQazUwcUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxMaT77l gdCaeZSUNLckkokPLW6bRGMDhRIVCH5pFhYbvSlo5V36Y4LYFVNsfGPZsXiooeJm qBXcWQmHBFqK/qIxhJmoTaAKQvTgxUeh25DFMo8c+BW4mTTBFCTj0rhthOc+e7+1 PqOufeKKYQO1xWE21MqNvkQPY8manQNbAgjohOcILhN91sVEA0D3Ksnnv4KPFf9U lQQsRCQ9luxkrEivSod1rBQ5Vgmsoyc3n56chdXMG8qYw6JSUaNVGCDbjfiL3Fy3 qz6NWCRsS9AAxJPBxvRuCfZCfm0fCTi6mISA2E6GCsdLQa/dUkimOY1/xplYy6Yu eMZxltYZvh7OFQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:02:11 2025 by rpki-client