This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft File: OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft (raw, json) Hash identifier: rnR8roz+BYOeutfBv3ei0qfRilzTudgeiaHDlreEbHk= Subject key identifier: 4F:7C:CF:CD:D9:04:6D:36:50:92:77:3F:07:90:B3:26:9D:D2:CF:5B Authority key identifier: 38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58 Certificate issuer: /CN=386ab970bfb6947597e97cefb916ec76a0c56858 Certificate serial: 019AF23F7DEED1F05811F8A9BF20D99C1433 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 06:00:38 +0000 Manifest this update: Sat 06 Dec 2025 06:00:38 +0000 Manifest next update: Sun 07 Dec 2025 06:00:38 +0000 Files and hashes: 1: I01Lo7qwhvaLI2U54ucZ10pkExs.roa (hash: mTrGRc4f1Skt/0lHfZ3XZbVEvrQ9mBUuWZXJpIXORz4=) 2: OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl (hash: by/Q93SaZdtxW/j9tqIILqOLm4OFHWFFZhnts6lzrKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7d:ee:d1:f0:58:11:f8:a9:bf:20:d9:9c:14:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=386ab970bfb6947597e97cefb916ec76a0c56858 Validity Not Before: Dec 6 06:00:38 2025 GMT Not After : Dec 7 06:00:38 2025 GMT Subject: CN=4f7ccfcdd9046d365092773f0790b3269dd2cf5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:80:ea:5b:1a:57:69:52:c8:16:43:78:65:97: 09:0d:2f:86:b5:71:25:fb:e0:ac:d8:8e:d3:00:9a: b7:a5:3f:84:3a:4c:6d:56:a7:3b:5b:3b:53:8d:bb: 38:c7:4f:d7:5b:42:e5:61:25:24:08:2b:ac:4b:6c: 8b:6c:fe:c4:95:f5:3c:a7:96:07:1e:68:cf:2f:7d: 61:db:17:d3:fa:2c:22:6a:fa:85:1b:6c:51:9c:1e: f8:17:85:71:56:16:49:34:37:55:33:7b:f0:37:30: 96:96:59:02:c5:52:10:ed:89:65:41:ef:3a:e6:25: bc:33:91:f7:d7:16:39:f3:31:90:36:1e:4f:d9:12: 0a:fd:ac:2c:80:e7:98:26:91:1a:5c:3c:42:75:5a: 5b:f0:5c:a0:b0:9d:57:0a:69:fb:40:ca:99:be:4f: 54:46:ea:2d:ee:84:6d:52:d9:39:9b:56:54:09:b9: 2f:da:f9:1c:78:06:7c:70:8a:2b:02:b0:29:8e:74: 2e:62:ec:1a:b1:1a:ac:33:7e:7c:a2:30:e1:5a:a7: dc:b2:63:2d:71:05:ae:5d:43:68:24:be:ff:1e:27: 9e:2b:be:32:d5:92:33:6e:b2:d0:61:44:b4:52:64: 6b:11:99:eb:c0:7d:30:43:f1:29:86:d6:1c:68:a4: 6f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7C:CF:CD:D9:04:6D:36:50:92:77:3F:07:90:B3:26:9D:D2:CF:5B X509v3 Authority Key Identifier: keyid:38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:c1:65:f2:06:d8:e9:b5:cd:1f:88:1b:26:d4:af:a8:a0:db: ff:cf:6b:ce:7d:52:ff:0f:2f:c4:71:a7:64:56:80:66:e4:a8: 8f:01:be:34:85:d0:12:fa:5d:41:44:96:fb:63:4c:9a:a7:f1: c0:af:30:97:da:55:a4:a0:33:04:18:84:8f:ea:36:a2:51:29: 76:c3:e6:1f:50:0e:ff:d0:c6:1d:78:81:b1:ae:b3:2c:fe:16: 0c:e0:f9:1a:6b:2e:e3:74:be:2c:e7:b9:9e:32:76:85:61:66: 54:a8:33:26:06:ce:c0:37:35:91:80:03:74:bf:6d:73:91:65: b1:ed:4c:0f:6b:11:e6:a8:fa:3c:ce:31:f3:c5:22:b5:07:2e: ee:fd:7d:b5:94:91:39:cc:76:c6:15:da:06:73:30:b2:7b:72: b1:1b:00:d0:af:52:71:ab:d9:c6:44:79:03:84:57:76:51:77: 52:f0:ee:a4:b2:64:3b:f1:ad:d0:30:d7:8e:0e:98:19:1b:fa: 2e:c9:cd:67:6a:fa:3f:de:fb:04:cc:4d:5a:cb:29:ee:7c:4c: 7d:3d:c7:d8:c3:55:5f:ca:45:07:8b:69:c8:90:0f:5c:8d:8c: 06:1a:dd:2f:54:cc:f7:33:40:6f:f0:12:9e:79:25:22:9d:f9: 0a:c0:fb:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP33u0fBYEfipvyDZnBQzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NmFiOTcwYmZiNjk0NzU5N2U5N2NlZmI5MTZlYzc2YTBj NTY4NTgwHhcNMjUxMjA2MDYwMDM4WhcNMjUxMjA3MDYwMDM4WjAzMTEwLwYDVQQD Eyg0ZjdjY2ZjZGQ5MDQ2ZDM2NTA5Mjc3M2YwNzkwYjMyNjlkZDJjZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIDqWxpXaVLIFkN4ZZcJDS+GtXEl ++Cs2I7TAJq3pT+EOkxtVqc7WztTjbs4x0/XW0LlYSUkCCusS2yLbP7ElfU8p5YH HmjPL31h2xfT+iwiavqFG2xRnB74F4VxVhZJNDdVM3vwNzCWllkCxVIQ7YllQe86 5iW8M5H31xY58zGQNh5P2RIK/awsgOeYJpEaXDxCdVpb8FygsJ1XCmn7QMqZvk9U Ruot7oRtUtk5m1ZUCbkv2vkceAZ8cIorArApjnQuYuwasRqsM358ojDhWqfcsmMt cQWuXUNoJL7/HieeK74y1ZIzbrLQYUS0UmRrEZnrwH0wQ/EphtYcaKRvVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE98z83ZBG02UJJ3PweQsyad0s9bMB8GA1UdIwQY MBaAFDhquXC/tpR1l+l877kW7HagxWhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0dxNWNMLTJsSFdYNlh6dnVSYnNkcURGYUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC80MWZkYTktOTcwMi00NThkLTk4MmYt OGQxMTI1N2Q0YWY2LzEvT0dxNWNMLTJsSFdYNlh6dnVSYnNkcURGYUZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC80MWZkYTktOTcwMi00NThkLTk4MmYtOGQxMTI1N2Q0YWY2 LzEvT0dxNWNMLTJsSFdYNlh6dnVSYnNkcURGYUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1MFl8gbY 6bXNH4gbJtSvqKDb/89rzn1S/w8vxHGnZFaAZuSojwG+NIXQEvpdQUSW+2NMmqfx wK8wl9pVpKAzBBiEj+o2olEpdsPmH1AO/9DGHXiBsa6zLP4WDOD5Gmsu43S+LOe5 njJ2hWFmVKgzJgbOwDc1kYADdL9tc5Flse1MD2sR5qj6PM4x88UitQcu7v19tZSR Ocx2xhXaBnMwsntysRsA0K9ScavZxkR5A4RXdlF3UvDupLJkO/Gt0DDXjg6YGRv6 LsnNZ2r6P977BMxNWssp7nxMfT3H2MNVX8pFB4tpyJAPXI2MBhrdL1TM9zNAb/AS nnklIp35CsD7Ag== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:23 2025 by rpki-client