This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft File: ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft (raw, json) Hash identifier: 2mbzge2URt4bFrojeGPluGxz5LlnjcSs+0+iEntXuq0= Subject key identifier: DB:05:2B:C5:4B:A4:43:59:34:7A:C9:09:34:59:66:03:56:72:E7:EE Authority key identifier: A2:02:D6:B1:52:7F:10:59:3A:B5:67:56:90:AF:EE:88:C1:3C:2F:2E Certificate issuer: /CN=a202d6b1527f10593ab5675690afee88c13c2f2e Certificate serial: 019AF2767CC090B534D877A4A840FF276E03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft Manifest number: 13F3 Signing time: Sat 06 Dec 2025 07:00:42 +0000 Manifest this update: Sat 06 Dec 2025 07:00:42 +0000 Manifest next update: Sun 07 Dec 2025 07:00:42 +0000 Files and hashes: 1: ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl (hash: hpDxQe4yPyCLmmPIsjR3d1FmGW5cyIxKwVSzDa+GpWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7c:c0:90:b5:34:d8:77:a4:a8:40:ff:27:6e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a202d6b1527f10593ab5675690afee88c13c2f2e Validity Not Before: Dec 6 07:00:42 2025 GMT Not After : Dec 7 07:00:42 2025 GMT Subject: CN=db052bc54ba44359347ac909345966035672e7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:17:3a:72:aa:00:f6:d8:f2:fa:2a:43:80:cf: d5:38:07:4b:a0:46:6e:e6:6c:9a:54:41:38:48:08: 22:c8:38:c6:18:67:27:74:f3:44:da:85:37:12:be: 08:41:8f:85:53:0a:f7:4c:df:e7:0c:8a:00:2d:b5: 59:14:3b:36:17:64:1c:17:b4:ec:ac:a9:ba:9b:09: 8f:e5:97:10:b1:b4:c5:58:d9:fe:f5:55:f5:03:2c: 38:46:34:05:6e:a3:7a:a5:10:26:13:3e:92:c1:d0: 32:be:96:db:ea:18:76:eb:7c:42:b3:bc:3c:56:c7: 9c:51:54:49:a6:5c:ae:0e:1d:b6:4e:e4:05:e1:33: 8c:75:47:04:57:b7:d0:6c:9b:19:f4:44:e0:6c:f9: 2d:5f:c1:76:cd:68:67:b7:f8:4a:25:93:dd:ea:a2: b8:dd:e8:fa:f6:79:9a:05:27:1c:93:e0:07:b8:da: 4a:a4:86:0a:3a:54:64:d1:fc:c5:3d:bc:1b:14:d0: 30:bb:4c:df:58:bc:03:7c:56:6d:5a:48:1b:61:68: 49:5f:81:f7:40:d3:44:2a:03:65:bc:d3:74:a3:b9: 06:a2:bd:46:3d:4d:45:e1:5d:2b:bb:77:bf:a3:62: 8f:63:01:1b:0a:03:14:38:8c:d3:c2:04:fc:2b:a2: 39:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:05:2B:C5:4B:A4:43:59:34:7A:C9:09:34:59:66:03:56:72:E7:EE X509v3 Authority Key Identifier: keyid:A2:02:D6:B1:52:7F:10:59:3A:B5:67:56:90:AF:EE:88:C1:3C:2F:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:9f:16:f4:65:c5:97:c5:42:50:de:93:d1:47:ca:34:60:63: 5d:c7:38:07:97:f1:a3:e4:52:fe:28:6f:93:e7:c0:d3:86:21: 63:8d:26:d0:8a:29:a6:53:e9:f1:0e:86:28:a8:be:c7:0b:7a: 80:ce:84:1a:f6:81:d6:da:97:3b:9b:63:15:9f:c1:e4:4e:8d: f5:62:af:86:d0:68:e9:b3:87:1e:6d:27:19:bb:e0:77:56:43: b5:cb:ce:f7:47:64:7c:d2:2b:29:5d:9d:34:03:5d:4b:74:db: 76:79:7e:7b:b8:0a:ee:25:94:09:d7:90:8f:85:62:b0:1d:a6: 65:5f:97:26:77:3e:77:cc:2d:d3:bd:19:e5:56:11:a8:5d:fc: 90:6d:24:41:4c:34:83:98:1d:9f:f0:ae:30:08:9f:ef:37:20: 1f:95:79:54:c6:96:3c:a6:cd:0c:10:16:ec:d5:ec:19:4f:68: cc:13:af:81:2b:ba:ff:1e:dd:d5:b2:90:7a:d3:01:e5:28:6d: 6e:d7:4a:69:e1:50:fd:da:17:b8:d5:c7:fb:c9:17:de:e4:9e: 0f:ba:48:1f:4a:43:18:01:91:bb:4b:be:bc:95:68:70:02:1e: 95:cc:e3:8a:89:1b:ca:67:1e:a2:01:a2:2a:c1:33:0a:b8:a9: ee:5d:f0:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnzAkLU02HekqED/J24DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDJkNmIxNTI3ZjEwNTkzYWI1Njc1NjkwYWZlZTg4YzEz YzJmMmUwHhcNMjUxMjA2MDcwMDQyWhcNMjUxMjA3MDcwMDQyWjAzMTEwLwYDVQQD EyhkYjA1MmJjNTRiYTQ0MzU5MzQ3YWM5MDkzNDU5NjYwMzU2NzJlN2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhc6cqoA9tjy+ipDgM/VOAdLoEZu 5myaVEE4SAgiyDjGGGcndPNE2oU3Er4IQY+FUwr3TN/nDIoALbVZFDs2F2QcF7Ts rKm6mwmP5ZcQsbTFWNn+9VX1Ayw4RjQFbqN6pRAmEz6SwdAyvpbb6hh263xCs7w8 VsecUVRJplyuDh22TuQF4TOMdUcEV7fQbJsZ9ETgbPktX8F2zWhnt/hKJZPd6qK4 3ej69nmaBScck+AHuNpKpIYKOlRk0fzFPbwbFNAwu0zfWLwDfFZtWkgbYWhJX4H3 QNNEKgNlvNN0o7kGor1GPU1F4V0ru3e/o2KPYwEbCgMUOIzTwgT8K6I5jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsFK8VLpENZNHrJCTRZZgNWcufuMB8GA1UdIwQY MBaAFKIC1rFSfxBZOrVnVpCv7ojBPC8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dMV3NWSl9FRms2dFdkV2tLX3VpTUU4THk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMzY5NzMtMjZlMC00OTRmLThhMTIt MWE1YmU5MmFiYTNlLzEvb2dMV3NWSl9FRms2dFdkV2tLX3VpTUU4THk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMzY5NzMtMjZlMC00OTRmLThhMTItMWE1YmU5MmFiYTNl LzEvb2dMV3NWSl9FRms2dFdkV2tLX3VpTUU4THk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJ8W9GXF l8VCUN6T0UfKNGBjXcc4B5fxo+RS/ihvk+fA04YhY40m0IopplPp8Q6GKKi+xwt6 gM6EGvaB1tqXO5tjFZ/B5E6N9WKvhtBo6bOHHm0nGbvgd1ZDtcvO90dkfNIrKV2d NANdS3Tbdnl+e7gK7iWUCdeQj4VisB2mZV+XJnc+d8wt070Z5VYRqF38kG0kQUw0 g5gdn/CuMAif7zcgH5V5VMaWPKbNDBAW7NXsGU9ozBOvgSu6/x7d1bKQetMB5Sht btdKaeFQ/doXuNXH+8kX3uSeD7pIH0pDGAGRu0u+vJVocAIelczjiokbymceogGi KsEzCrip7l3w3g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:29:09 2025 by rpki-client