This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft File: Oeh-8DzxcaQLor7InmiLudOCWHM.mft (raw, json) Hash identifier: 0VPppI39Sr9f2XpgPoecvOo5yqA05V0RgW4xNQCcAro= Subject key identifier: BC:29:23:76:5D:8A:77:7E:AC:7B:CD:7F:C3:79:86:F1:58:AA:89:29 Authority key identifier: 39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73 Certificate issuer: /CN=39e87ef03cf171a40ba2bec89e688bb9d3825873 Certificate serial: 019B0E5C1DAD2C25ACBB935E98825D8FDBFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft Manifest number: 176E Signing time: Thu 11 Dec 2025 17:01:16 +0000 Manifest this update: Thu 11 Dec 2025 17:01:16 +0000 Manifest next update: Fri 12 Dec 2025 17:01:16 +0000 Files and hashes: 1: Oeh-8DzxcaQLor7InmiLudOCWHM.crl (hash: LwjA/g2SeOI08GkNglO+Qhuvv4cJj8BcEtHjEFXCvC0=) 2: n5SYr_9AWl7ry045zaGcqL0nDKk.roa (hash: T+InoEanLxjmmolVeMM0w1zQ5q4vdK0ebBhDTbrVjAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5c:1d:ad:2c:25:ac:bb:93:5e:98:82:5d:8f:db:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39e87ef03cf171a40ba2bec89e688bb9d3825873 Validity Not Before: Dec 11 17:01:16 2025 GMT Not After : Dec 12 17:01:16 2025 GMT Subject: CN=bc2923765d8a777eac7bcd7fc37986f158aa8929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f3:2c:af:8b:84:a9:75:ed:9b:15:23:9b:57: 90:b3:95:70:dc:d8:24:0a:fb:32:07:c3:a8:e2:44: c8:df:03:79:ad:55:12:e1:d3:1a:f3:bc:a6:d8:0e: 91:30:2d:4a:2d:e5:89:9b:a4:8e:56:11:77:44:2f: 14:ba:90:1e:9c:7f:c4:eb:8e:fc:13:18:f4:75:ce: 87:45:5b:63:60:fc:7e:89:b8:a3:45:5e:a8:2e:f0: 6f:79:14:48:cb:d7:5b:19:91:b7:ec:45:5e:b4:93: a8:30:4f:3d:dd:60:b3:b5:18:8f:4d:4c:6f:c6:17: bd:4c:e3:cd:03:a6:53:2d:b0:b7:55:c4:5e:92:a1: 9e:64:80:58:4f:21:45:70:cb:c5:50:95:33:10:8f: 0f:26:69:3b:65:71:9d:c0:91:51:ed:d6:01:e1:2a: 9b:80:a3:32:20:93:df:fe:56:19:33:5f:04:89:0e: 17:c3:a1:bd:b1:7f:71:81:6e:b9:22:03:82:17:82: b6:14:97:fe:ed:c5:e1:2a:cb:f3:c9:7a:77:0f:6a: 2f:a2:b0:29:82:a1:89:db:94:41:72:ea:bc:53:1d: 0f:d2:6a:2a:94:16:f8:f7:7b:b0:6a:0b:af:19:a3: af:26:ec:7b:12:fc:55:44:1f:a9:d5:39:4a:be:1e: a6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:29:23:76:5D:8A:77:7E:AC:7B:CD:7F:C3:79:86:F1:58:AA:89:29 X509v3 Authority Key Identifier: keyid:39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b9:0d:56:4d:d6:ab:2c:4c:0d:45:b6:52:c2:93:fa:f4:d4: 7d:25:ec:c7:f0:40:87:a9:a4:9c:5b:24:89:74:ac:43:24:51: 4d:9b:c9:09:b4:76:f7:ab:da:61:c6:33:f8:65:88:71:9a:a3: ca:c3:25:63:05:4e:1f:03:a4:bf:d6:16:e9:40:94:98:fb:f4: 1c:e5:a5:35:6e:1f:51:5d:d3:eb:5b:f5:07:b4:a1:51:9d:64: 68:97:11:de:15:2f:c7:76:53:9e:f4:a4:f7:a0:05:13:47:ff: 47:a7:93:fb:ef:4f:38:f0:03:db:31:02:1b:9d:2e:01:be:99: 0b:94:74:08:50:7d:23:fb:da:5a:55:3d:e3:07:75:ab:5a:86: ea:5c:0f:e8:09:4e:5e:e4:ed:64:15:06:73:50:ea:c1:df:86: 41:c8:2a:bd:2e:9c:b4:49:42:c4:4b:42:15:e9:bc:22:a0:2a: c3:8e:b4:d1:ad:8f:c3:d5:ee:1f:95:1e:09:67:61:58:61:d9: 3b:f1:a9:80:00:d5:55:47:bf:62:fb:a2:3e:8d:ce:dd:61:2d: 30:e2:ae:07:1c:e9:15:1c:d8:45:fc:88:e9:4e:2b:69:c6:eb: d1:9f:04:7f:b9:10:c9:e9:06:3c:1f:42:33:16:c6:75:da:71: 6d:15:54:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOXB2tLCWsu5NemIJdj9v8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZTg3ZWYwM2NmMTcxYTQwYmEyYmVjODllNjg4YmI5ZDM4 MjU4NzMwHhcNMjUxMjExMTcwMTE2WhcNMjUxMjEyMTcwMTE2WjAzMTEwLwYDVQQD EyhiYzI5MjM3NjVkOGE3NzdlYWM3YmNkN2ZjMzc5ODZmMTU4YWE4OTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/Msr4uEqXXtmxUjm1eQs5Vw3Ngk CvsyB8Oo4kTI3wN5rVUS4dMa87ym2A6RMC1KLeWJm6SOVhF3RC8UupAenH/E6478 Exj0dc6HRVtjYPx+ibijRV6oLvBveRRIy9dbGZG37EVetJOoME893WCztRiPTUxv xhe9TOPNA6ZTLbC3VcRekqGeZIBYTyFFcMvFUJUzEI8PJmk7ZXGdwJFR7dYB4Sqb gKMyIJPf/lYZM18EiQ4Xw6G9sX9xgW65IgOCF4K2FJf+7cXhKsvzyXp3D2ovorAp gqGJ25RBcuq8Ux0P0moqlBb493uwaguvGaOvJux7EvxVRB+p1TlKvh6mpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwpI3Zdind+rHvNf8N5hvFYqokpMB8GA1UdIwQY MBaAFDnofvA88XGkC6K+yJ5oi7nTglhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2VoLThEenhjYVFMb3I3SW5taUx1ZE9DV0hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81MWE2MGMtY2Y2My00NDNkLTllMDIt MDRkZDU2ZjcwZmUzLzEvT2VoLThEenhjYVFMb3I3SW5taUx1ZE9DV0hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy81MWE2MGMtY2Y2My00NDNkLTllMDItMDRkZDU2ZjcwZmUz LzEvT2VoLThEenhjYVFMb3I3SW5taUx1ZE9DV0hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbkNVk3W qyxMDUW2UsKT+vTUfSXsx/BAh6mknFskiXSsQyRRTZvJCbR296vaYcYz+GWIcZqj ysMlYwVOHwOkv9YW6UCUmPv0HOWlNW4fUV3T61v1B7ShUZ1kaJcR3hUvx3ZTnvSk 96AFE0f/R6eT++9POPAD2zECG50uAb6ZC5R0CFB9I/vaWlU94wd1q1qG6lwP6AlO XuTtZBUGc1Dqwd+GQcgqvS6ctElCxEtCFem8IqAqw4600a2Pw9XuH5UeCWdhWGHZ O/GpgADVVUe/YvuiPo3O3WEtMOKuBxzpFRzYRfyI6U4racbr0Z8Ef7kQyekGPB9C MxbGddpxbRVUrw== -----END CERTIFICATE-----Generated at Fri Dec 12 02:16:51 2025 by rpki-client