This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft File: OhoMABa5sz-T6Kejk9CRkNXhhJk.mft (raw, json) Hash identifier: U/SYXaGHjegqQeAUf6rlRD6vZbI5QMB7igejSnWWzr4= Subject key identifier: F5:0A:86:1F:53:2D:A9:B2:EA:99:FC:6A:19:2F:6B:62:79:D0:9C:63 Authority key identifier: 3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99 Certificate issuer: /CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499 Certificate serial: 019B0E92E7FFA16318BF136F50B45EAF8A63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft Manifest number: 0D47 Signing time: Thu 11 Dec 2025 18:01:07 +0000 Manifest this update: Thu 11 Dec 2025 18:01:07 +0000 Manifest next update: Fri 12 Dec 2025 18:01:07 +0000 Files and hashes: 1: OhoMABa5sz-T6Kejk9CRkNXhhJk.crl (hash: IPi4EibFu2oqIhaRlvmmYjEsFz0JAEvW5icgB1CQN5I=) 2: UG2XZdsSP9vahLS8deUbiGwgM84.roa (hash: H+YkvMLky6FPgjSDWIrs7G2kpfOLt2YF+/59bitetA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:e7:ff:a1:63:18:bf:13:6f:50:b4:5e:af:8a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499 Validity Not Before: Dec 11 18:01:07 2025 GMT Not After : Dec 12 18:01:07 2025 GMT Subject: CN=f50a861f532da9b2ea99fc6a192f6b6279d09c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d3:36:8e:38:14:6b:f3:6a:da:94:53:b5:33: a3:07:1e:9b:91:19:d2:f7:6f:f5:04:cb:96:32:f9: 94:fc:0d:65:10:7b:db:31:f5:22:fb:5c:8e:23:5f: 4c:80:f7:b8:ed:f3:b1:b1:9c:4e:14:e2:9c:a8:5b: bb:d7:23:f5:d9:70:96:d8:5a:69:a1:17:44:3b:6d: b9:88:d5:12:70:d7:dc:45:dd:22:d0:04:25:84:65: 27:7f:bb:ca:25:9e:00:1e:3d:c9:64:e6:ba:58:9f: 4b:5f:cf:a6:7a:f5:da:fa:55:00:f2:20:78:0a:5a: cd:77:fc:fe:65:4f:b4:fe:16:27:0e:05:44:c1:9c: 8e:42:09:51:0d:c9:38:59:29:17:0d:c4:83:68:b8: 34:45:fb:13:67:27:e4:e5:09:97:c9:21:0b:b6:5d: 3b:58:fe:5a:75:04:21:82:fb:24:17:2c:1b:57:3b: 23:1b:2d:69:5e:07:fa:51:e6:09:48:8f:0c:45:8a: db:16:59:4e:1f:d2:94:06:a8:39:9b:5a:e3:d2:09: 54:4a:15:2d:99:ae:51:e8:ab:45:06:a9:7b:94:77: 31:03:76:0c:90:33:47:2d:14:25:43:a7:98:32:e5: 46:07:5b:2b:35:48:53:7c:04:d1:79:e6:4f:cd:75: 77:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0A:86:1F:53:2D:A9:B2:EA:99:FC:6A:19:2F:6B:62:79:D0:9C:63 X509v3 Authority Key Identifier: keyid:3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:07:c6:d2:d1:35:b6:31:82:c9:ba:7a:6a:89:14:58:67:3c: db:c4:17:ff:10:f9:b4:9f:77:a7:f5:ed:e3:fb:f9:d7:ae:25: f6:65:14:5b:18:79:33:77:fb:4c:a0:ba:73:21:ef:29:9b:2f: a3:a6:83:fc:ce:af:92:bc:88:93:cb:ce:9e:3f:11:c6:94:23: a3:22:6f:c6:85:0d:48:73:bc:8f:0e:0a:c0:e3:23:66:cb:db: c0:04:c8:4a:dc:57:4e:62:4e:cd:bf:1c:13:3b:d4:19:d0:6f: 22:fc:b1:5c:14:bc:43:46:86:b2:e5:2f:4f:fb:66:7b:9e:e9: ee:53:31:fb:a2:8f:43:45:c4:49:74:43:1b:fa:4c:4b:e1:85: 46:08:68:9d:cf:7a:2c:0e:ee:fb:82:75:e1:1e:f5:ab:53:a8: 39:c9:d7:66:e8:bb:a8:13:d3:f6:b7:fd:97:41:eb:3f:ab:6e: 2a:00:d1:59:41:7c:0d:fc:d5:c3:f6:ca:df:82:22:76:c8:7f: 69:2b:fe:1d:a7:ec:96:d9:d3:02:d4:f7:8e:99:59:da:d2:29: 5e:a3:be:b3:e9:7f:81:02:c4:fc:44:b5:1d:38:bb:67:ca:d4: 15:4a:02:22:0b:f8:73:d3:9d:26:c2:ff:f9:f4:31:33:f5:c2: 39:81:fd:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkuf/oWMYvxNvULRer4pjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMWEwYzAwMTZiOWIzM2Y5M2U4YTdhMzkzZDA5MTkwZDVl MTg0OTkwHhcNMjUxMjExMTgwMTA3WhcNMjUxMjEyMTgwMTA3WjAzMTEwLwYDVQQD EyhmNTBhODYxZjUzMmRhOWIyZWE5OWZjNmExOTJmNmI2Mjc5ZDA5YzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9M2jjgUa/Nq2pRTtTOjBx6bkRnS 92/1BMuWMvmU/A1lEHvbMfUi+1yOI19MgPe47fOxsZxOFOKcqFu71yP12XCW2Fpp oRdEO225iNUScNfcRd0i0AQlhGUnf7vKJZ4AHj3JZOa6WJ9LX8+mevXa+lUA8iB4 ClrNd/z+ZU+0/hYnDgVEwZyOQglRDck4WSkXDcSDaLg0RfsTZyfk5QmXySELtl07 WP5adQQhgvskFywbVzsjGy1pXgf6UeYJSI8MRYrbFllOH9KUBqg5m1rj0glUShUt ma5R6KtFBql7lHcxA3YMkDNHLRQlQ6eYMuVGB1srNUhTfATReeZPzXV3aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUKhh9TLamy6pn8ahkva2J50JxjMB8GA1UdIwQY MBaAFDoaDAAWubM/k+ino5PQkZDV4YSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2hvTUFCYTVzei1UNktlams5Q1JrTlhoaEprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTU4ODEtMzljZC00MTA0LTliMjkt MGI2NDU5Nzc1YjY0LzEvT2hvTUFCYTVzei1UNktlams5Q1JrTlhoaEprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy85OTU4ODEtMzljZC00MTA0LTliMjktMGI2NDU5Nzc1YjY0 LzEvT2hvTUFCYTVzei1UNktlams5Q1JrTlhoaEprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigfG0tE1 tjGCybp6aokUWGc828QX/xD5tJ93p/Xt4/v5164l9mUUWxh5M3f7TKC6cyHvKZsv o6aD/M6vkryIk8vOnj8RxpQjoyJvxoUNSHO8jw4KwOMjZsvbwATIStxXTmJOzb8c EzvUGdBvIvyxXBS8Q0aGsuUvT/tme57p7lMx+6KPQ0XESXRDG/pMS+GFRghonc96 LA7u+4J14R71q1OoOcnXZui7qBPT9rf9l0HrP6tuKgDRWUF8DfzVw/bK34Iidsh/ aSv+HafsltnTAtT3jplZ2tIpXqO+s+l/gQLE/ES1HTi7Z8rUFUoCIgv4c9OdJsL/ +fQxM/XCOYH99w== -----END CERTIFICATE-----Generated at Fri Dec 12 00:29:27 2025 by rpki-client