This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft File: OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft (raw, json) Hash identifier: /eKKYPEiQIv36AzfC5qOii4pF1MbBK8Gb5qfuLGM/OI= Subject key identifier: A0:18:F9:6D:7D:EC:4A:10:A6:85:6A:6D:B4:CE:23:A2:19:0A:AD:73 Authority key identifier: 3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F Certificate issuer: /CN=3a07318a1314233f5623c0f835fae18f9126412f Certificate serial: 019AF12EEA2AAE3A7EE969DAD5D3393F523F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft Manifest number: 0132 Signing time: Sat 06 Dec 2025 01:02:54 +0000 Manifest this update: Sat 06 Dec 2025 01:02:54 +0000 Manifest next update: Sun 07 Dec 2025 01:02:54 +0000 Files and hashes: 1: OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl (hash: ARN40jmoSywPeYDbZRsM6dVxqiHKqp695mFOiRFbX8E=) 2: d_S_LiTn-5JZ6QbYkJGNQlQwd5g.roa (hash: wiJdaTKeLOoOD2ZMe+ZN1Wuh3uVVfGMcp7ArG5upMbk=) 3: qBjHDY2sXPfYcFMAdrqZb0wk3qo.roa (hash: YJdVl/jAdNP388MpdOeTC60bm9oxrdjXPgN1Q6k8CnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ea:2a:ae:3a:7e:e9:69:da:d5:d3:39:3f:52:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a07318a1314233f5623c0f835fae18f9126412f Validity Not Before: Dec 6 01:02:54 2025 GMT Not After : Dec 7 01:02:54 2025 GMT Subject: CN=a018f96d7dec4a10a6856a6db4ce23a2190aad73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:73:1d:25:bd:ac:95:60:12:9a:c4:40:f8:53: 3c:e5:64:ce:e1:0c:b8:cb:d9:42:0d:0b:dd:62:40: b6:8f:94:9e:c1:a0:6f:00:79:25:16:4f:87:04:b8: 88:81:bc:09:b5:52:18:4e:e0:81:9f:78:4d:59:fb: 5b:0d:e8:81:cf:2f:f3:f2:85:05:d9:0a:86:0c:23: 8c:53:25:27:6a:d4:7b:90:e3:9b:8f:cf:a3:d4:7e: f3:5f:e0:d7:33:95:a7:17:d7:5b:27:ca:24:76:5b: 40:57:0c:e7:ee:8b:db:29:2d:6f:bb:e8:d4:e0:72: d2:cd:a8:aa:1a:7a:eb:27:99:5d:60:b8:26:da:53: 65:b8:9b:d2:ac:ab:d7:29:c8:ac:36:17:78:76:a1: 22:30:78:01:cc:80:1e:b8:61:09:bf:41:54:1b:56: 74:1d:78:de:d3:82:af:d5:1d:85:70:1b:1c:90:7a: 73:31:82:18:d2:55:3b:e3:80:61:f5:3b:1c:e6:74: f1:26:0f:91:c9:9f:31:6a:70:4b:9e:6d:f7:44:e0: d8:1f:a9:ef:99:d7:78:f6:92:f2:16:ef:6d:40:f8: c2:96:fd:bc:a4:39:8b:f5:37:d0:ea:69:a1:ca:2f: b9:e0:d2:b0:93:c0:56:6d:2d:86:99:ea:36:81:e3: 90:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:18:F9:6D:7D:EC:4A:10:A6:85:6A:6D:B4:CE:23:A2:19:0A:AD:73 X509v3 Authority Key Identifier: keyid:3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:56:34:e9:0a:09:4e:ba:f1:2c:91:6c:f0:bc:69:1f:f4:cc: 42:e5:27:ed:aa:61:81:44:78:51:70:bb:a8:6a:35:f2:37:6f: 64:74:af:87:3f:82:9c:74:40:b7:8c:a3:b7:c4:0c:58:2d:7f: e6:06:d8:40:89:ca:81:af:84:cd:f8:ea:23:21:a7:3e:c4:e3: 21:fa:cc:2c:eb:0b:03:1f:22:6b:24:64:19:5c:1d:35:fe:60: 38:5e:7a:8a:b3:4e:43:65:c9:b4:fe:60:f3:e7:db:3c:5a:f1: bb:9d:a4:d1:ec:d5:d6:91:ba:dc:bd:41:cb:61:d1:60:81:ba: d7:f4:43:62:40:bc:43:0a:40:84:ad:98:b8:40:dd:69:a2:0f: 19:bc:f2:83:de:9b:5a:d6:ed:92:08:8b:0c:f6:da:62:30:45: f0:05:97:99:6f:27:b0:fd:db:37:8f:a5:8e:5a:fd:8a:b6:c7: 50:8e:02:18:d0:9d:05:ec:3f:e0:74:70:82:d9:fd:ab:f7:6d: 03:50:45:8c:28:62:bc:ce:c4:eb:ee:96:42:9b:09:5f:bd:9b: bd:20:11:de:f3:ce:40:0a:fb:ef:5f:c9:7e:de:6a:5c:d0:72: 8e:4f:cd:03:f8:dc:14:a9:f4:21:0e:20:41:4a:cd:41:60:7e: 71:2b:01:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLuoqrjp+6Wna1dM5P1I/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDczMThhMTMxNDIzM2Y1NjIzYzBmODM1ZmFlMThmOTEy NjQxMmYwHhcNMjUxMjA2MDEwMjU0WhcNMjUxMjA3MDEwMjU0WjAzMTEwLwYDVQQD EyhhMDE4Zjk2ZDdkZWM0YTEwYTY4NTZhNmRiNGNlMjNhMjE5MGFhZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3MdJb2slWASmsRA+FM85WTO4Qy4 y9lCDQvdYkC2j5SewaBvAHklFk+HBLiIgbwJtVIYTuCBn3hNWftbDeiBzy/z8oUF 2QqGDCOMUyUnatR7kOObj8+j1H7zX+DXM5WnF9dbJ8okdltAVwzn7ovbKS1vu+jU 4HLSzaiqGnrrJ5ldYLgm2lNluJvSrKvXKcisNhd4dqEiMHgBzIAeuGEJv0FUG1Z0 HXje04Kv1R2FcBsckHpzMYIY0lU744Bh9Tsc5nTxJg+RyZ8xanBLnm33RODYH6nv mdd49pLyFu9tQPjClv28pDmL9TfQ6mmhyi+54NKwk8BWbS2Gmeo2geOQCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAY+W197EoQpoVqbbTOI6IZCq1zMB8GA1UdIwQY MBaAFDoHMYoTFCM/ViPA+DX64Y+RJkEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2djeGloTVVJejlXSThENE5mcmhqNUVtUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yYjUzNzQtZDQwNS00ZmYxLTg1NjMt MDI2YTdiNjU0Zjg4LzEvT2djeGloTVVJejlXSThENE5mcmhqNUVtUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8yYjUzNzQtZDQwNS00ZmYxLTg1NjMtMDI2YTdiNjU0Zjg4 LzEvT2djeGloTVVJejlXSThENE5mcmhqNUVtUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElY06QoJ TrrxLJFs8LxpH/TMQuUn7aphgUR4UXC7qGo18jdvZHSvhz+CnHRAt4yjt8QMWC1/ 5gbYQInKga+EzfjqIyGnPsTjIfrMLOsLAx8iayRkGVwdNf5gOF56irNOQ2XJtP5g 8+fbPFrxu52k0ezV1pG63L1By2HRYIG61/RDYkC8QwpAhK2YuEDdaaIPGbzyg96b WtbtkgiLDPbaYjBF8AWXmW8nsP3bN4+ljlr9irbHUI4CGNCdBew/4HRwgtn9q/dt A1BFjChivM7E6+6WQpsJX72bvSAR3vPOQAr771/Jft5qXNByjk/NA/jcFKn0IQ4g QUrNQWB+cSsB6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:02 2025 by rpki-client