This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft File: OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft (raw, json) Hash identifier: whF69wr/k1zNUIjSoQJZED3WzN3ig0oVBEcGz8OPFr8= Subject key identifier: 4C:08:E7:66:78:14:B5:16:15:7C:51:46:2D:7C:D1:58:AF:DD:4B:15 Authority key identifier: 3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C Certificate issuer: /CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c Certificate serial: 019B0F0115641A4E170ED1A1D073BDF9EE71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 20:01:27 +0000 Manifest this update: Thu 11 Dec 2025 20:01:27 +0000 Manifest next update: Fri 12 Dec 2025 20:01:27 +0000 Files and hashes: 1: OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl (hash: 2wpIn6a86eKb6oIDlUh1o0kO1HxXbYQp5pFjOTsnZBk=) 2: n8MWvNRKO36sf1pxZSj8cGYzibI.roa (hash: 1WbDvWw9T3omYw1SSZsXT4FxvvF0ZRhs3TvSkgmyWAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:01:15:64:1a:4e:17:0e:d1:a1:d0:73:bd:f9:ee:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c Validity Not Before: Dec 11 20:01:27 2025 GMT Not After : Dec 12 20:01:27 2025 GMT Subject: CN=4c08e7667814b516157c51462d7cd158afdd4b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:db:cc:ae:3c:98:38:c3:66:74:9f:6d:d8:06: 1a:07:95:1b:7b:b8:41:59:a7:78:13:8d:6a:b1:7e: a8:15:59:b9:6a:1e:30:8a:8c:e8:b4:4f:3d:e3:94: 81:e6:e7:80:42:2c:68:af:4a:21:fa:c5:ed:da:de: 5a:39:f2:d9:ca:b3:d6:e7:ec:00:06:da:e7:e5:07: df:fc:33:4a:43:52:03:1d:db:1f:6d:c2:dd:3b:6b: bd:06:5a:c8:0c:a2:39:e2:1e:ee:44:60:b3:9c:7e: 31:fc:8a:ec:6a:ac:dc:35:2a:38:78:3a:2f:a6:53: dd:d0:65:fc:f5:c2:37:28:41:6c:b8:d3:a4:b5:b7: 0a:4d:95:03:14:72:3b:7e:cc:92:f2:89:ae:55:e5: c3:f6:e8:73:3c:20:ec:3e:e5:fb:7d:ce:c5:e7:27: b7:86:d0:1a:82:04:7e:c9:92:17:44:e3:47:ba:bb: 2d:fa:7d:96:a0:68:62:ac:fa:84:e8:b4:db:78:14: 00:01:ab:26:f0:b2:26:67:c9:43:21:4a:05:8e:ea: c2:ba:bd:1f:88:40:86:a5:b3:32:80:27:b1:e9:70: 0e:7c:26:d6:08:ac:53:ac:22:dd:67:9b:4d:10:3f: da:de:2d:ce:08:ab:4b:9b:e4:97:dd:71:35:a3:07: ba:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:08:E7:66:78:14:B5:16:15:7C:51:46:2D:7C:D1:58:AF:DD:4B:15 X509v3 Authority Key Identifier: keyid:3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:96:76:42:0f:d6:47:10:48:23:1e:51:13:f2:06:84:cb:07: a3:36:3e:52:c8:ac:07:90:d3:f0:4c:74:77:27:c3:16:24:7e: 80:45:60:7d:1c:e5:79:ff:3e:ca:80:a5:0c:95:4e:1f:0d:80: 9c:00:ed:1a:f0:07:e8:d1:d3:c3:f9:68:5c:f3:42:95:f0:80: 1b:dc:1a:65:5f:61:6d:b8:45:9d:73:34:72:d8:bb:68:7f:a1: cb:07:9c:8f:21:b9:eb:71:af:3d:4e:93:ac:e7:e4:9c:e3:04: d5:cb:3b:b9:07:68:46:62:eb:cd:91:42:24:05:06:c3:87:b5: e7:d8:2e:3d:19:1e:f2:59:c4:e3:e9:f9:bb:82:fa:9b:7e:4f: 33:c4:fe:60:2f:0a:aa:42:8b:9d:f6:ff:87:e6:c3:a0:49:a5: e1:87:56:5a:ad:34:85:8e:a3:f2:56:81:5a:bf:51:eb:92:7c: ef:fc:92:55:02:35:6e:de:7d:a3:ef:55:3d:83:f3:9e:1e:60: ca:0c:ae:22:be:22:03:7d:0f:43:72:b6:c7:8a:76:e0:6d:94: c1:a9:62:9e:da:e0:a5:ae:26:7b:c6:22:2c:5c:7e:eb:b3:eb: dc:36:d5:43:e4:ad:2e:db:78:cc:a5:31:44:e4:35:ef:29:7e: f0:bf:7d:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPARVkGk4XDtGh0HO9+e5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNmM2MDZmMjBjZWNmZTMxMmNjNmM4MTRkZWM5OTA0YjZk YjdjM2MwHhcNMjUxMjExMjAwMTI3WhcNMjUxMjEyMjAwMTI3WjAzMTEwLwYDVQQD Eyg0YzA4ZTc2Njc4MTRiNTE2MTU3YzUxNDYyZDdjZDE1OGFmZGQ0YjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtvMrjyYOMNmdJ9t2AYaB5Ube7hB Wad4E41qsX6oFVm5ah4wiozotE8945SB5ueAQixor0oh+sXt2t5aOfLZyrPW5+wA Btrn5Qff/DNKQ1IDHdsfbcLdO2u9BlrIDKI54h7uRGCznH4x/IrsaqzcNSo4eDov plPd0GX89cI3KEFsuNOktbcKTZUDFHI7fsyS8omuVeXD9uhzPCDsPuX7fc7F5ye3 htAaggR+yZIXRONHurst+n2WoGhirPqE6LTbeBQAAasm8LImZ8lDIUoFjurCur0f iECGpbMygCex6XAOfCbWCKxTrCLdZ5tNED/a3i3OCKtLm+SX3XE1owe6+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwI52Z4FLUWFXxRRi180Viv3UsVMB8GA1UdIwQY MBaAFDpsYG8gzs/jEsxsgU3smQS223w8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT214Z2J5RE96LU1Tekd5QlRleVpCTGJiZkR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi84YzNmNmYtNWFlOS00OTJlLTlkM2Et NzUwZDYyZTllNTNhLzEvT214Z2J5RE96LU1Tekd5QlRleVpCTGJiZkR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi84YzNmNmYtNWFlOS00OTJlLTlkM2EtNzUwZDYyZTllNTNh LzEvT214Z2J5RE96LU1Tekd5QlRleVpCTGJiZkR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZZ2Qg/W RxBIIx5RE/IGhMsHozY+UsisB5DT8Ex0dyfDFiR+gEVgfRzlef8+yoClDJVOHw2A nADtGvAH6NHTw/loXPNClfCAG9waZV9hbbhFnXM0cti7aH+hywecjyG563GvPU6T rOfknOME1cs7uQdoRmLrzZFCJAUGw4e159guPRke8lnE4+n5u4L6m35PM8T+YC8K qkKLnfb/h+bDoEml4YdWWq00hY6j8laBWr9R65J87/ySVQI1bt59o+9VPYPznh5g ygyuIr4iA30PQ3K2x4p24G2Uwalintrgpa4me8YiLFx+67Pr3DbVQ+StLtt4zKUx ROQ17yl+8L998w== -----END CERTIFICATE-----Generated at Fri Dec 12 04:02:08 2025 by rpki-client