This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft File: ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft (raw, json) Hash identifier: Us7qXxjsr42jVKwLCo8he/uMJwpeLCYGoK0V2bjHrgs= Subject key identifier: 58:4B:3F:49:2E:7F:F5:77:C8:76:7F:12:82:B9:57:9F:6C:24:EB:A7 Authority key identifier: A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF Certificate issuer: /CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf Certificate serial: 019AF50AC930889ED66BC34ABF11B514B300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft Manifest number: 0C95 Signing time: Sat 06 Dec 2025 19:01:55 +0000 Manifest this update: Sat 06 Dec 2025 19:01:55 +0000 Manifest next update: Sun 07 Dec 2025 19:01:55 +0000 Files and hashes: 1: FyzxwbgLSadTJLpy9TRdd9F-gGk.roa (hash: iyPnEDozqJhAVhpqbdklx7ETcR+WTKfp9SYU0Q+jnpE=) 2: ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl (hash: J0jqQDnlGsB6xVeAoETkSNF2Qywyxk98Zkbr5hUOeK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:c9:30:88:9e:d6:6b:c3:4a:bf:11:b5:14:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf Validity Not Before: Dec 6 19:01:55 2025 GMT Not After : Dec 7 19:01:55 2025 GMT Subject: CN=584b3f492e7ff577c8767f1282b9579f6c24eba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:ee:b7:f2:ca:a7:69:69:3d:cf:ec:9e:28: b1:20:a4:ee:42:24:c9:76:53:93:df:e2:91:60:ee: dd:bd:30:c3:72:b9:16:23:81:76:d8:42:95:2c:1e: db:a9:b2:b4:d3:f0:0a:76:f1:1f:67:3f:80:6f:9f: 34:d5:5b:75:30:b1:0e:b7:18:38:b1:c7:29:de:57: 80:12:2c:84:63:22:35:b3:35:0d:dc:6c:25:7c:1d: bc:e3:86:b6:6a:29:59:81:08:7b:e9:8c:4d:5a:a9: 56:43:a0:b0:cd:45:91:ff:51:fd:38:2f:0f:5c:8f: 87:fc:d1:c9:6c:02:75:26:74:a9:e2:f6:e0:34:cf: 59:19:00:5a:01:d1:0b:cc:b1:5b:2f:16:e5:1f:11: 47:e0:af:cf:ac:03:b4:92:4f:db:5d:af:0d:07:20: 55:1b:3f:75:36:76:0c:76:60:2e:a8:86:4c:a9:d1: e1:9c:b0:f9:c7:a3:bc:f9:4f:79:68:b5:a3:10:ec: 55:2e:07:b0:17:33:53:ed:7c:76:ec:fe:9b:21:ae: 00:21:9d:29:05:c7:89:b9:9e:61:71:2f:62:9e:d7: e9:61:46:c7:7d:02:a2:ff:22:3f:ed:59:85:bd:6d: af:bc:30:87:05:e7:80:12:dd:70:34:03:3b:03:9a: 39:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4B:3F:49:2E:7F:F5:77:C8:76:7F:12:82:B9:57:9F:6C:24:EB:A7 X509v3 Authority Key Identifier: keyid:A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:f1:fe:25:aa:7f:83:55:a4:51:e8:c8:9c:84:bb:2e:91:fb: 75:22:22:2c:e9:99:8c:26:e6:eb:0a:db:67:89:01:6f:7f:d9: 6b:43:cc:1e:c9:29:0a:76:f2:4d:cb:8a:5d:87:0c:b1:0b:f6: 43:52:e2:30:21:4f:ca:12:30:cc:37:98:00:4c:60:07:c0:c0: 19:e8:26:07:02:ab:39:b5:9c:ed:16:d6:5e:a7:4b:aa:eb:93: ca:49:3c:73:b4:ac:52:1e:79:3a:2e:10:c5:c5:d7:98:36:d3: bd:a1:8c:c3:36:ac:26:ab:ca:ba:3b:ea:9d:64:25:0a:69:d2: be:95:af:b0:5d:22:1e:fa:64:4d:27:a1:c4:ab:ef:28:30:ca: b0:78:4f:93:d9:70:86:ea:d9:54:44:bc:96:40:0d:74:96:f3: 60:f1:9e:ff:49:3e:1e:1e:cf:83:82:31:0f:10:bc:27:67:72: ec:5d:0d:2f:8e:95:d4:7c:cf:f8:14:c5:38:12:28:56:d0:c2: 6a:01:9c:39:54:36:9c:3b:cd:82:fa:50:5d:ff:a8:75:05:65: d5:ee:d3:f5:c2:71:29:00:4c:86:c2:45:7d:64:a3:38:41:05: 77:94:ba:f7:ec:8f:7f:b2:ce:fc:63:af:18:83:84:72:0c:ef: f5:9a:c9:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CskwiJ7Wa8NKvxG1FLMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDZkZmZmYWIxZDUxOGMxMzJmNmQ1NmQ4ZDRhMzFkOTA1 OWY0YmYwHhcNMjUxMjA2MTkwMTU1WhcNMjUxMjA3MTkwMTU1WjAzMTEwLwYDVQQD Eyg1ODRiM2Y0OTJlN2ZmNTc3Yzg3NjdmMTI4MmI5NTc5ZjZjMjRlYmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYPut/LKp2lpPc/sniixIKTuQiTJ dlOT3+KRYO7dvTDDcrkWI4F22EKVLB7bqbK00/AKdvEfZz+Ab5801Vt1MLEOtxg4 sccp3leAEiyEYyI1szUN3GwlfB2844a2ailZgQh76YxNWqlWQ6CwzUWR/1H9OC8P XI+H/NHJbAJ1JnSp4vbgNM9ZGQBaAdELzLFbLxblHxFH4K/PrAO0kk/bXa8NByBV Gz91NnYMdmAuqIZMqdHhnLD5x6O8+U95aLWjEOxVLgewFzNT7Xx27P6bIa4AIZ0p BceJuZ5hcS9intfpYUbHfQKi/yI/7VmFvW2vvDCHBeeAEt1wNAM7A5o5/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhLP0kuf/V3yHZ/EoK5V59sJOunMB8GA1UdIwQY MBaAFKIG3/+rHVGMEy9tVtjUox2QWfS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mNTkzMWUtMGY4NC00MGJkLWFkMGEt NjcxYTFmMGFmMDU5LzEvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mNTkzMWUtMGY4NC00MGJkLWFkMGEtNjcxYTFmMGFmMDU5 LzEvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvH+Jap/ g1WkUejInIS7LpH7dSIiLOmZjCbm6wrbZ4kBb3/Za0PMHskpCnbyTcuKXYcMsQv2 Q1LiMCFPyhIwzDeYAExgB8DAGegmBwKrObWc7RbWXqdLquuTykk8c7SsUh55Oi4Q xcXXmDbTvaGMwzasJqvKujvqnWQlCmnSvpWvsF0iHvpkTSehxKvvKDDKsHhPk9lw hurZVES8lkANdJbzYPGe/0k+Hh7Pg4IxDxC8J2dy7F0NL46V1HzP+BTFOBIoVtDC agGcOVQ2nDvNgvpQXf+odQVl1e7T9cJxKQBMhsJFfWSjOEEFd5S69+yPf7LO/GOv GIOEcgzv9ZrJmg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:59:54 2025 by rpki-client