This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft File: ogiOBtVTz_KT0nf012w6cQvYsvc.mft (raw, json) Hash identifier: MhOaq7R+SkukrHzEZ3BimgKDGnnXJegWMu6OT0oQDdM= Subject key identifier: 03:08:54:3B:2D:C3:40:23:38:C2:09:6C:1F:14:2E:C8:4E:54:3F:47 Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Certificate serial: 019AF0F5E9F78F01B8D20A816A9A5263E88B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft Manifest number: 17BB Signing time: Sat 06 Dec 2025 00:00:39 +0000 Manifest this update: Sat 06 Dec 2025 00:00:39 +0000 Manifest next update: Sun 07 Dec 2025 00:00:39 +0000 Files and hashes: 1: 0TAxxPi4zjMfURtgArfTlTlJzoY.roa (hash: DkfnTLoQSnkxMFDufCf4Tzi91pyg3D/dKfjoKdkuvnc=) 2: 2Fz3gDQO1Ko4Uhz-WKqbPvSyHuY.roa (hash: qDVXlglB84tjlEcwlG5YSSXNovaEgcbeYtxfS2oty2U=) 3: 4en9va8jCZNwuV4bW7NKxVamz54.roa (hash: sNZVLTVL9KoD1p+QjvV2CcAfu43CsFx04jNm3+y7/uc=) 4: 9L6AVjkValDZgShbyHFIglFK-vU.roa (hash: vufq8Mys/rVjB7A0Cd1ttX4gkVYJG8tMhOrBmJ6rqrA=) 5: Jb1qAtrQRHkWR9yqePpnXV6kF-U.roa (hash: opwZoEWtUaeMsOhsAkDVCLoxpYSLW7EC/weSdnXl3hU=) 6: RnQlmWewYcD_0IYUAev31XaR7bM.roa (hash: /LH5202pepZD0I2qOYltd4lGFUEFOBGQjgBfXeqrh7Y=) 7: T3TYQGzkIt875WMcJue8Tlu8qcE.roa (hash: zrjAaYCf4QNugLTCHzX4Z7vGYzZPktrc0+f+lzFF6qE=) 8: edWAVfkKeL_p4SOqKwWgAG9qG9o.roa (hash: eesAWNHbi/a4/dOuceKDaMTobB00ZxoBZJAUv+VOUbI=) 9: hK2pPH3ZYk_AItgBUx4QKhNRZjc.roa (hash: AeA5HrCOsn36XUB8ugwlHBVS3Vap/ykOrDhcE11vYXU=) 10: ogiOBtVTz_KT0nf012w6cQvYsvc.crl (hash: fSC4TzUU5vF0EAoaet3gW71gJzb82HbDYR3bbOAZYKk=) 11: wt3LwVWmMnxdQ_1hnrE0QvYmwGo.roa (hash: 78DCmBR5KDCiWcDQ81Kjee3QnK4jQ7nQ69rTiAmxiSU=) 12: yS4gxCiyxv-6Eo_qaFTdHS-1_f0.roa (hash: 4bv1Fv/+FlNMdg4hH2LqipPwgjlMt4gTsStcEknTXUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e9:f7:8f:01:b8:d2:0a:81:6a:9a:52:63:e8:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Validity Not Before: Dec 6 00:00:39 2025 GMT Not After : Dec 7 00:00:39 2025 GMT Subject: CN=0308543b2dc3402338c2096c1f142ec84e543f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:a9:51:90:b9:a8:d4:3c:03:ba:26:7c:94: 2d:87:21:59:08:54:a9:37:36:c8:5c:42:51:1b:af: 6e:3f:34:ac:8d:98:22:db:70:7b:e4:af:7c:7e:28: 7e:37:d1:7e:71:1c:f3:5c:16:8d:7c:a6:a6:ff:b0: a5:6a:55:b5:cc:3c:d6:93:74:c6:91:0c:28:26:c8: d2:8e:33:7f:5a:ef:ab:67:b7:60:99:12:7b:7f:2f: 49:82:ac:22:65:21:70:ec:98:f0:7c:13:93:14:77: 3e:26:5a:31:db:68:98:00:ab:68:7c:e9:09:40:1a: ef:52:dd:42:ca:0a:75:f6:fc:2b:be:b5:32:4d:41: 01:6a:1a:db:89:33:4b:76:3d:40:c7:22:44:bd:9a: 2b:0c:63:65:46:07:c0:dc:5e:6f:d5:07:a9:80:20: c2:67:0a:62:5b:91:41:4f:d3:d1:cd:e0:58:67:0c: 95:98:43:04:c0:d4:a0:cd:05:54:7e:21:cb:5f:8a: 19:33:db:51:5c:eb:ad:89:8f:21:97:1e:cf:d9:6b: 3c:3f:83:8c:83:ff:ff:62:ba:81:f0:9a:29:7a:1b: f9:d5:28:d3:04:1e:3d:56:f4:8b:34:47:bf:fe:44: 58:18:43:bb:20:23:1a:70:63:d6:5a:2e:26:32:c1: 3a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:08:54:3B:2D:C3:40:23:38:C2:09:6C:1F:14:2E:C8:4E:54:3F:47 X509v3 Authority Key Identifier: keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:85:bd:ae:c2:c9:3e:45:b8:57:ed:18:48:9f:1c:3b:a1:f9: f9:57:87:fa:1d:c0:a3:97:56:b8:e1:ba:3b:5a:40:34:59:be: 71:a7:fc:bb:b9:66:55:0b:ae:23:c1:88:4b:34:d5:1f:de:f9: da:68:12:5b:1f:20:87:3d:56:80:d2:0e:03:db:d9:fe:a1:c5: 22:74:23:8d:d4:89:eb:7d:0d:a4:04:52:b4:b6:7d:79:05:5f: 6c:89:c4:64:6a:b3:58:54:bb:49:94:51:78:ea:5d:60:bc:6c: de:03:3b:c0:de:d7:3e:21:d0:67:98:59:cf:1f:e4:03:e7:b0: 32:66:da:4a:97:99:0d:84:13:ba:31:6a:e2:4e:2a:f7:67:a4: a1:09:97:b3:cb:3d:e2:13:f6:a6:4b:d2:90:8c:85:ef:cc:02: a0:d3:72:37:d9:d9:f3:00:0d:78:9d:d2:d2:6b:b4:2c:8f:73: 97:98:4e:77:02:82:a5:c1:4a:87:3e:a1:4c:db:ff:fc:bc:5b: 53:55:43:87:85:77:1c:64:d8:c7:66:d1:b0:ea:d1:16:f0:72: a8:9b:2e:d5:fb:55:50:e8:c5:01:61:f6:b4:35:7e:db:7f:a6: 97:b3:ff:b4:ef:92:26:4d:49:e2:72:e4:6f:e2:b2:a8:38:20: e0:74:88:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9en3jwG40gqBappSY+iLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk OGIyZjcwHhcNMjUxMjA2MDAwMDM5WhcNMjUxMjA3MDAwMDM5WjAzMTEwLwYDVQQD EygwMzA4NTQzYjJkYzM0MDIzMzhjMjA5NmMxZjE0MmVjODRlNTQzZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSKpUZC5qNQ8A7omfJQthyFZCFSp NzbIXEJRG69uPzSsjZgi23B75K98fih+N9F+cRzzXBaNfKam/7ClalW1zDzWk3TG kQwoJsjSjjN/Wu+rZ7dgmRJ7fy9JgqwiZSFw7JjwfBOTFHc+Jlox22iYAKtofOkJ QBrvUt1Cygp19vwrvrUyTUEBahrbiTNLdj1AxyJEvZorDGNlRgfA3F5v1QepgCDC ZwpiW5FBT9PRzeBYZwyVmEMEwNSgzQVUfiHLX4oZM9tRXOutiY8hlx7P2Ws8P4OM g///YrqB8Jopehv51SjTBB49VvSLNEe//kRYGEO7ICMacGPWWi4mMsE6cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMIVDstw0AjOMIJbB8ULshOVD9HMB8GA1UdIwQY MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct YmJlYTI5MThlMTAyLzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYW9rsLJ PkW4V+0YSJ8cO6H5+VeH+h3Ao5dWuOG6O1pANFm+caf8u7lmVQuuI8GISzTVH975 2mgSWx8ghz1WgNIOA9vZ/qHFInQjjdSJ630NpARStLZ9eQVfbInEZGqzWFS7SZRR eOpdYLxs3gM7wN7XPiHQZ5hZzx/kA+ewMmbaSpeZDYQTujFq4k4q92ekoQmXs8s9 4hP2pkvSkIyF78wCoNNyN9nZ8wANeJ3S0mu0LI9zl5hOdwKCpcFKhz6hTNv//Lxb U1VDh4V3HGTYx2bRsOrRFvByqJsu1ftVUOjFAWH2tDV+23+ml7P/tO+SJk1J4nLk b+KyqDgg4HSIhA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:13 2025 by rpki-client