This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft File: OjSIklHnyxM-kGxwiRuhoEle2GA.mft (raw, json) Hash identifier: iDOB4Mp6k0oi4lA73j46Fr31YKeyiWkoPN4QjcjvPOo= Subject key identifier: FE:64:1F:41:46:CD:1F:7F:39:25:19:D1:2D:1E:EB:7D:43:1D:87:66 Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60 Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860 Certificate serial: 019AE2280AB9283EBF430CBCCCBAFBCC4B8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft Manifest number: 0EF5 Signing time: Wed 03 Dec 2025 03:01:06 +0000 Manifest this update: Wed 03 Dec 2025 03:01:06 +0000 Manifest next update: Thu 04 Dec 2025 03:01:06 +0000 Files and hashes: 1: E8pnZAwdco6rqZPYbTvktaE1H_E.roa (hash: mJU1Xr9YV7h0pCMVQKe6h9rLN6ylm3PlXlO/99QSzGM=) 2: OjSIklHnyxM-kGxwiRuhoEle2GA.crl (hash: Amd8KRZQzZpyZjcX170LYFaoskiVBvH8zbPbkrA79Ng=) 3: PosgbjBEN3JIZPm6yklNyzwEmB8.roa (hash: LxPaPYdBVWlHlKrzs8JwxQbkpaWJXSY0yo3gaOhFHFk=) 4: iYqIMSLhd13kAtHmsyVRJLCRELQ.roa (hash: Sy2brI825JIDwfnRYmv5+hBpQhClnbRKdRnTs+cKh/c=) 5: trRwMwj1TozbbVDdJBYsUBjss8A.roa (hash: R2jnNGJ/7Zo+ytylzMHKu/XH3p37UtlobvuFEWQLQHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 03:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e2:28:0a:b9:28:3e:bf:43:0c:bc:cc:ba:fb:cc:4b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860 Validity Not Before: Dec 3 03:01:06 2025 GMT Not After : Dec 4 03:01:06 2025 GMT Subject: CN=fe641f4146cd1f7f392519d12d1eeb7d431d8766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:94:b8:e2:eb:b7:b2:55:42:d7:3b:22:93:2e: a3:b6:80:9d:e2:d1:c9:10:fe:8d:6f:4e:8a:ea:c9: fe:3d:90:16:50:f5:b4:61:38:f7:34:96:f9:26:48: c8:6e:46:bc:12:e7:2b:27:d5:ed:4f:41:3a:40:7d: 85:4d:17:51:ac:5f:e6:30:3a:37:42:4c:49:77:cb: 61:37:ba:53:4f:ad:2e:a5:9e:dc:ce:82:4a:59:cd: d4:9d:26:38:7b:ac:20:d6:de:c2:44:aa:e0:79:f5: 72:37:b3:ab:4a:cf:45:dc:63:40:77:c5:1e:23:9c: 68:63:8f:73:10:97:15:54:83:0c:61:b1:cf:38:c7: 3b:c6:93:bc:d7:c5:02:89:39:50:e9:48:b3:82:a8: ca:39:d9:a3:d0:ea:0b:bd:4b:61:0e:3d:78:d0:7c: 3e:13:eb:6b:bc:9a:2c:ae:8b:5a:20:a3:47:9f:a9: 50:f7:3f:02:e7:f6:0d:d0:98:5a:2b:53:69:d9:ed: dd:52:92:69:b6:65:cf:cb:aa:5b:12:1c:e6:ed:8d: cd:f4:e4:b0:64:39:55:37:43:0b:76:32:47:fc:9a: bd:40:b7:0c:93:31:26:2a:46:a2:a6:c5:1d:c1:72: 36:f1:19:a9:bb:d7:76:85:6c:ad:e5:ca:e2:bb:81: 32:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:64:1F:41:46:CD:1F:7F:39:25:19:D1:2D:1E:EB:7D:43:1D:87:66 X509v3 Authority Key Identifier: keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:61:b8:f1:f2:f4:93:47:d5:ae:39:04:c4:16:cc:c1:89:de: 7e:11:50:52:0a:53:29:38:e8:e8:83:9a:04:06:9a:92:2d:17: 24:2e:f0:41:36:c8:be:f2:ed:94:fa:d5:1f:9d:87:6c:84:a5: 19:fa:67:1c:90:ce:62:00:80:d2:b8:bd:f1:a4:41:3b:84:b3: d4:bb:91:81:2d:22:59:36:07:15:ac:a4:6e:3f:41:3b:80:d8: 7c:7b:fe:36:1f:06:a0:5a:c8:4c:93:09:43:65:9d:d7:8f:76: 54:d9:1b:f6:5b:e4:89:15:ae:d8:d7:c8:bb:e4:02:c8:3d:43: ff:4d:3b:10:b2:83:1a:7e:2b:9b:90:15:ff:db:c1:86:b0:17: e4:bb:97:56:cd:26:b1:da:7b:0d:24:a0:50:00:a5:54:c9:48: 6e:8e:43:19:0f:a2:53:78:cb:e0:5a:22:46:7f:f3:71:e3:f6: f8:a5:d1:0f:7c:89:a5:03:97:1d:9e:08:2d:d7:35:95:45:e1: b2:12:24:ae:91:f2:06:ae:56:14:a4:74:b4:59:d6:27:db:a4: a1:ef:1a:0d:88:f9:e2:c0:be:a6:c8:ad:e2:d2:05:58:46:ba: 47:6d:ea:c1:00:25:94:d9:cc:c0:32:ee:a8:ed:31:64:14:fc: e9:e6:ea:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZriKAq5KD6/Qwy8zLr7zEuMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMzQ4ODkyNTFlN2NiMTMzZTkwNmM3MDg5MWJhMWEwNDk1 ZWQ4NjAwHhcNMjUxMjAzMDMwMTA2WhcNMjUxMjA0MDMwMTA2WjAzMTEwLwYDVQQD EyhmZTY0MWY0MTQ2Y2QxZjdmMzkyNTE5ZDEyZDFlZWI3ZDQzMWQ4NzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZS44uu3slVC1zsiky6jtoCd4tHJ EP6Nb06K6sn+PZAWUPW0YTj3NJb5JkjIbka8EucrJ9XtT0E6QH2FTRdRrF/mMDo3 QkxJd8thN7pTT60upZ7czoJKWc3UnSY4e6wg1t7CRKrgefVyN7OrSs9F3GNAd8Ue I5xoY49zEJcVVIMMYbHPOMc7xpO818UCiTlQ6UizgqjKOdmj0OoLvUthDj140Hw+ E+trvJosrotaIKNHn6lQ9z8C5/YN0JhaK1Np2e3dUpJptmXPy6pbEhzm7Y3N9OSw ZDlVN0MLdjJH/Jq9QLcMkzEmKkaipsUdwXI28Rmpu9d2hWyt5criu4EyhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5kH0FGzR9/OSUZ0S0e631DHYdmMB8GA1UdIwQY MBaAFDo0iJJR58sTPpBscIkboaBJXthgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMt ODRmOWVkODdhYzMxLzEvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMtODRmOWVkODdhYzMx LzEvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWG48fL0 k0fVrjkExBbMwYnefhFQUgpTKTjo6IOaBAaaki0XJC7wQTbIvvLtlPrVH52HbISl GfpnHJDOYgCA0ri98aRBO4Sz1LuRgS0iWTYHFaykbj9BO4DYfHv+Nh8GoFrITJMJ Q2Wd1492VNkb9lvkiRWu2NfIu+QCyD1D/007ELKDGn4rm5AV/9vBhrAX5LuXVs0m sdp7DSSgUAClVMlIbo5DGQ+iU3jL4FoiRn/zceP2+KXRD3yJpQOXHZ4ILdc1lUXh shIkrpHyBq5WFKR0tFnWJ9ukoe8aDYj54sC+psit4tIFWEa6R23qwQAllNnMwDLu qO0xZBT86ebqGw== -----END CERTIFICATE-----Generated at Wed Dec 3 12:45:57 2025 by rpki-client