This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft File: 0OgEFLlH8ZMfIrych4wXt9IweOs.mft (raw, json) Hash identifier: 0WQVI7ac17OomGgLwNZV7rIoZNa0jBBkbVWIh4mlsvs= Subject key identifier: 68:73:74:97:5F:9A:77:D9:2E:2C:0B:07:2E:33:2B:53:98:53:1C:68 Authority key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB Certificate issuer: /CN=d0e80414b947f1931f22bc9c878c17b7d23078eb Certificate serial: 019AF54077461410CD44CFC9F41DE1D43933 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft Manifest number: 1628 Signing time: Sat 06 Dec 2025 20:00:33 +0000 Manifest this update: Sat 06 Dec 2025 20:00:33 +0000 Manifest next update: Sun 07 Dec 2025 20:00:33 +0000 Files and hashes: 1: 0OgEFLlH8ZMfIrych4wXt9IweOs.crl (hash: yl/Hj3Le7KgrO/TEWd5S0584xeJx82EpjCGiLdOzaOM=) 2: SEFQEUahukCO25CLynieJYFwZgg.roa (hash: X7nkM3WeHmcxHA7JwfIjXwagYEA1ZAkZsVPWtjQPu3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:77:46:14:10:cd:44:cf:c9:f4:1d:e1:d4:39:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb Validity Not Before: Dec 6 20:00:33 2025 GMT Not After : Dec 7 20:00:33 2025 GMT Subject: CN=687374975f9a77d92e2c0b072e332b5398531c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:58:8a:e1:9f:c2:8d:4f:42:ea:b9:4b:93:6b: d0:58:1f:0a:c2:c4:bd:fc:59:f3:56:b3:11:aa:ba: 51:c9:bd:f9:17:a6:a8:ab:d9:42:63:72:0e:58:15: 6a:2c:6c:9b:be:ee:78:3c:66:f0:bd:c7:fd:ed:4d: 9c:d2:77:b8:a3:be:f6:3e:1f:3e:70:bd:9d:9a:68: 94:af:16:b5:5f:09:65:d5:12:f7:e4:78:3d:ca:74: 03:0f:22:02:66:ae:33:2d:79:8b:7a:c0:dc:e8:ce: 0e:54:f3:18:26:0d:f9:eb:bc:d8:6e:0f:a8:46:b9: 02:2a:13:ae:85:21:06:c1:9b:ad:44:8c:8c:37:21: 43:81:f6:f0:3d:a0:e3:ae:bb:cb:62:7d:22:a9:6b: fa:7e:fc:a1:ca:2e:54:2e:f2:2c:1a:cc:ef:cc:14: bb:ee:27:62:15:13:cf:60:12:7f:fa:2a:5b:b3:6e: 49:66:53:e4:b6:94:39:11:a4:da:ad:51:f7:41:60: 76:bc:36:0e:91:63:79:93:6f:f9:0a:94:a7:ea:d4: 62:11:87:aa:f6:3d:99:2c:e1:96:f9:81:90:9c:29: ab:ac:8c:e8:b9:ee:fd:47:e7:78:e4:f0:98:0a:16: 13:c5:0e:ab:f8:e1:df:b1:5d:64:89:64:6e:d1:b0: f9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:73:74:97:5F:9A:77:D9:2E:2C:0B:07:2E:33:2B:53:98:53:1C:68 X509v3 Authority Key Identifier: keyid:D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:4a:08:55:9a:bc:5e:e5:c3:bc:97:54:18:bd:29:08:d9:37: 1c:e7:cf:74:a2:b9:22:08:5b:8f:6b:03:94:fe:7a:ed:ae:15: f2:1a:a5:e6:6e:b2:fa:7f:8b:02:70:95:d6:36:b7:75:8d:81: f5:57:79:5e:aa:a3:f9:01:53:42:97:6b:04:4b:d7:2d:97:b1: 9f:29:2c:b7:d1:b4:5f:27:88:03:0f:db:23:a3:7c:6b:93:3f: 8c:28:d2:5e:40:b9:8d:81:a2:45:40:c3:10:20:cf:da:26:e4: b8:86:ce:10:e2:70:4d:c4:42:c2:a7:f3:5e:e5:2d:e7:1e:61: ac:20:ee:fd:3a:50:8b:d3:0b:a4:18:5c:b3:af:2e:0f:7a:52: 14:de:86:d0:0b:f6:b4:63:b3:1f:bd:2a:15:ed:1e:c9:4b:61: 4e:ab:a6:9a:47:d5:0a:e0:d7:87:4f:c6:b5:f4:6f:f5:82:a7: 14:26:f5:6e:34:80:44:d7:72:88:29:62:4a:a1:d8:3b:bc:50: a7:46:5f:f0:8f:7e:89:0a:78:35:ce:b3:02:49:a3:3b:f5:32: c4:53:99:dd:e7:d4:51:46:d4:f6:ca:e4:4e:71:f1:c9:9c:d8: b6:72:b7:ad:92:60:d8:a1:0c:40:2b:13:2d:91:7a:c1:fb:1b: ea:8e:ba:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QHdGFBDNRM/J9B3h1DkzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZTgwNDE0Yjk0N2YxOTMxZjIyYmM5Yzg3OGMxN2I3ZDIz MDc4ZWIwHhcNMjUxMjA2MjAwMDMzWhcNMjUxMjA3MjAwMDMzWjAzMTEwLwYDVQQD Eyg2ODczNzQ5NzVmOWE3N2Q5MmUyYzBiMDcyZTMzMmI1Mzk4NTMxYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApliK4Z/CjU9C6rlLk2vQWB8KwsS9 /FnzVrMRqrpRyb35F6aoq9lCY3IOWBVqLGybvu54PGbwvcf97U2c0ne4o772Ph8+ cL2dmmiUrxa1Xwll1RL35Hg9ynQDDyICZq4zLXmLesDc6M4OVPMYJg3567zYbg+o RrkCKhOuhSEGwZutRIyMNyFDgfbwPaDjrrvLYn0iqWv6fvyhyi5ULvIsGszvzBS7 7idiFRPPYBJ/+ipbs25JZlPktpQ5EaTarVH3QWB2vDYOkWN5k2/5CpSn6tRiEYeq 9j2ZLOGW+YGQnCmrrIzoue79R+d45PCYChYTxQ6r+OHfsV1kiWRu0bD5SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhzdJdfmnfZLiwLBy4zK1OYUxxoMB8GA1UdIwQY MBaAFNDoBBS5R/GTHyK8nIeMF7fSMHjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME9nRUZMbEg4Wk1mSXJ5Y2g0d1h0OUl3ZU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8zNmZkNDMtYjVmMy00MGNmLTg2MzEt NTE4ZTdhMzU2NjBhLzEvME9nRUZMbEg4Wk1mSXJ5Y2g0d1h0OUl3ZU9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8zNmZkNDMtYjVmMy00MGNmLTg2MzEtNTE4ZTdhMzU2NjBh LzEvME9nRUZMbEg4Wk1mSXJ5Y2g0d1h0OUl3ZU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0oIVZq8 XuXDvJdUGL0pCNk3HOfPdKK5Ighbj2sDlP567a4V8hql5m6y+n+LAnCV1ja3dY2B 9Vd5Xqqj+QFTQpdrBEvXLZexnykst9G0XyeIAw/bI6N8a5M/jCjSXkC5jYGiRUDD ECDP2ibkuIbOEOJwTcRCwqfzXuUt5x5hrCDu/TpQi9MLpBhcs68uD3pSFN6G0Av2 tGOzH70qFe0eyUthTqummkfVCuDXh0/GtfRv9YKnFCb1bjSARNdyiCliSqHYO7xQ p0Zf8I9+iQp4Nc6zAkmjO/UyxFOZ3efUUUbU9srkTnHxyZzYtnK3rZJg2KEMQCsT LZF6wfsb6o66GQ== -----END CERTIFICATE-----Generated at Sun Dec 7 05:20:07 2025 by rpki-client