This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft File: ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft (raw, json) Hash identifier: FSwRj1gzzTfQRLXsKcYoH5Y1r9KtKGN9iU3iLFrOTqI= Subject key identifier: 8C:71:A7:4D:08:9C:43:C6:33:50:34:C0:56:B3:57:AF:4E:83:8B:4B Authority key identifier: A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F Certificate issuer: /CN=a214fabfef203a8ee08ccb47dd6473fce799a28f Certificate serial: 019AEFAC6E162C36F2160E82467E62B99B4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft Manifest number: 1103 Signing time: Fri 05 Dec 2025 18:00:46 +0000 Manifest this update: Fri 05 Dec 2025 18:00:46 +0000 Manifest next update: Sat 06 Dec 2025 18:00:46 +0000 Files and hashes: 1: ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl (hash: R5zXOZ8AZ2dgrs12Iu05NZ9OPtsfBEbhLwK1YleXwNg=) 2: thsd_2EivTS0FbZ7b83mqFkVBNo.roa (hash: Pv1XY8/swMxg7QqZhkFzX8BQKAWTTZrU7LwKowVl3tU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:ac:6e:16:2c:36:f2:16:0e:82:46:7e:62:b9:9b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a214fabfef203a8ee08ccb47dd6473fce799a28f Validity Not Before: Dec 5 18:00:46 2025 GMT Not After : Dec 6 18:00:46 2025 GMT Subject: CN=8c71a74d089c43c6335034c056b357af4e838b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:24:8e:54:e6:d8:59:b7:c7:3a:1a:d3:79:3e: e3:ee:cf:19:fc:96:2c:17:fb:63:a2:62:81:8d:4e: 84:ae:82:c7:22:40:77:67:d6:c3:f6:5c:a5:6e:e7: e8:ea:c0:7b:0e:6d:09:2c:f5:fc:ab:52:d9:f0:b2: af:ec:b3:88:04:77:2f:13:74:92:26:fc:9e:ea:15: 81:53:33:59:a1:e5:a3:0f:df:10:f5:74:e9:f4:0d: 37:cd:60:59:d8:72:cf:76:1d:be:50:2f:65:b3:a8: 31:80:98:0a:0b:6d:82:25:88:7b:fb:ca:ea:52:7e: 6c:8e:0c:0d:32:f7:7b:f1:41:48:f3:b0:4d:05:64: 01:6e:db:21:68:60:d6:60:69:36:34:24:61:ff:41: a3:05:4a:4d:30:74:54:ce:cf:4e:de:cf:18:14:bc: d9:8a:96:45:9b:52:9c:94:29:9a:b7:df:71:b4:ee: 34:b3:7c:98:bc:4b:00:55:49:1a:d3:5d:b0:b9:6e: 99:f5:c3:32:59:6a:ed:ff:3f:7b:b8:fd:a1:98:d4: 28:a3:92:f9:d5:10:12:fe:96:33:62:90:72:4f:04: 16:91:de:ad:4c:15:a6:5a:58:74:65:6c:7e:8e:9a: 0d:2c:e0:68:69:4e:53:7c:98:25:5b:74:4f:59:0f: 4b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:71:A7:4D:08:9C:43:C6:33:50:34:C0:56:B3:57:AF:4E:83:8B:4B X509v3 Authority Key Identifier: keyid:A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a7:93:60:40:c2:af:88:d0:2b:5e:ed:db:fa:0b:e8:42:c7: 5a:49:ee:0d:1d:a2:10:0b:11:bd:22:ec:bc:4d:85:4f:cc:0f: 56:51:43:ac:ad:a8:56:52:32:05:e1:9b:c2:71:81:39:cd:1a: aa:e7:0c:5b:fa:fb:e7:5c:b7:d5:1e:29:99:20:56:65:03:71: 23:de:93:40:24:05:4f:64:40:f7:d7:62:73:24:99:2e:7d:86: 6f:45:01:dc:e3:e7:19:d7:78:88:72:0f:23:e9:37:90:e9:d2: 76:0f:ac:83:1c:fe:9b:75:0f:6e:c6:e9:9f:55:1e:8b:af:72: 25:7a:49:67:31:bc:71:96:12:84:65:72:e6:b7:7e:7d:fe:74: 79:85:00:b0:de:bc:c5:dc:4d:96:d5:c6:4c:67:ad:2f:36:ee: a3:17:ce:3b:99:1c:40:39:97:b5:0a:72:ca:48:4c:72:65:01: df:7b:6b:19:98:e0:a8:07:f7:7d:86:28:28:4c:36:95:90:ab: a0:5b:04:bc:1c:c9:85:0d:29:f1:d5:9a:b2:59:42:c1:a4:9d: c5:33:1d:d0:97:fe:48:83:0a:c3:77:9d:23:17:36:0d:ca:05: e8:e6:34:b1:5f:74:0e:1a:a0:8f:58:a3:5c:8d:bc:25:9f:9b: db:01:26:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvrG4WLDbyFg6CRn5iuZtMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMTRmYWJmZWYyMDNhOGVlMDhjY2I0N2RkNjQ3M2ZjZTc5 OWEyOGYwHhcNMjUxMjA1MTgwMDQ2WhcNMjUxMjA2MTgwMDQ2WjAzMTEwLwYDVQQD Eyg4YzcxYTc0ZDA4OWM0M2M2MzM1MDM0YzA1NmIzNTdhZjRlODM4YjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiSOVObYWbfHOhrTeT7j7s8Z/JYs F/tjomKBjU6EroLHIkB3Z9bD9lylbufo6sB7Dm0JLPX8q1LZ8LKv7LOIBHcvE3SS Jvye6hWBUzNZoeWjD98Q9XTp9A03zWBZ2HLPdh2+UC9ls6gxgJgKC22CJYh7+8rq Un5sjgwNMvd78UFI87BNBWQBbtshaGDWYGk2NCRh/0GjBUpNMHRUzs9O3s8YFLzZ ipZFm1KclCmat99xtO40s3yYvEsAVUka012wuW6Z9cMyWWrt/z97uP2hmNQoo5L5 1RAS/pYzYpByTwQWkd6tTBWmWlh0ZWx+jpoNLOBoaU5TfJglW3RPWQ9LJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxxp00InEPGM1A0wFazV69Og4tLMB8GA1UdIwQY MBaAFKIU+r/vIDqO4IzLR91kc/znmaKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9lYmE0NTktMDNkMy00Y2Q1LTg2MDYt MjVjNWY3MTIzZTM1LzEvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9lYmE0NTktMDNkMy00Y2Q1LTg2MDYtMjVjNWY3MTIzZTM1 LzEvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKeTYEDC r4jQK17t2/oL6ELHWknuDR2iEAsRvSLsvE2FT8wPVlFDrK2oVlIyBeGbwnGBOc0a qucMW/r751y31R4pmSBWZQNxI96TQCQFT2RA99dicySZLn2Gb0UB3OPnGdd4iHIP I+k3kOnSdg+sgxz+m3UPbsbpn1Uei69yJXpJZzG8cZYShGVy5rd+ff50eYUAsN68 xdxNltXGTGetLzbuoxfOO5kcQDmXtQpyykhMcmUB33trGZjgqAf3fYYoKEw2lZCr oFsEvBzJhQ0p8dWasllCwaSdxTMd0Jf+SIMKw3edIxc2DcoF6OY0sV90Dhqgj1ij XI28JZ+b2wEmxw== -----END CERTIFICATE-----Generated at Fri Dec 5 19:33:36 2025 by rpki-client