This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft File: ojguLlS2Dx9o-FyYTaGmljHFLKg.mft (raw, json) Hash identifier: +hHngo1kVqCElOVhv1rJPZeoja3+Gz411L9bsmaZa+U= Subject key identifier: 0C:89:DB:FF:25:39:6A:2C:8B:0A:C2:8E:CC:0D:FB:68:13:9A:53:B1 Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8 Certificate issuer: /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8 Certificate serial: 019AF12CD07D8B41934439634E2C467CAF8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft Manifest number: 0411 Signing time: Sat 06 Dec 2025 01:00:37 +0000 Manifest this update: Sat 06 Dec 2025 01:00:37 +0000 Manifest next update: Sun 07 Dec 2025 01:00:37 +0000 Files and hashes: 1: ojguLlS2Dx9o-FyYTaGmljHFLKg.crl (hash: /mGCKxN9VUm9rxsvj9EFhlAkgPdKbdmV2OB/551NmNE=) 2: tgYGsGAPJ3naxRJ-JjQBKL1Vj7c.roa (hash: cPWgxwQyZuH/gL73No34Pn5M4vHlmORZov0bMnwx4CM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d0:7d:8b:41:93:44:39:63:4e:2c:46:7c:af:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8 Validity Not Before: Dec 6 01:00:37 2025 GMT Not After : Dec 7 01:00:37 2025 GMT Subject: CN=0c89dbff25396a2c8b0ac28ecc0dfb68139a53b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:97:51:b3:ea:1e:5c:e8:da:5c:6a:d8:0f:ee: 51:3b:0e:1c:b8:8c:3a:18:4f:ca:73:09:be:02:fe: 1a:f8:2b:f7:51:89:81:0b:d0:ce:24:2f:43:28:50: 73:7f:28:99:49:e2:61:78:b6:e6:6b:f5:52:40:ad: bd:e8:4d:5f:3d:7a:1c:1f:0d:d9:b2:41:4e:6f:37: 5c:c9:c6:e9:15:3c:21:6d:be:e1:83:8e:10:fd:34: 95:8e:18:c8:4a:c5:31:6c:88:a9:b9:62:2b:9c:49: e6:1f:ac:8a:78:c2:b3:b7:49:39:26:5f:be:dd:96: 61:77:11:ee:95:6a:60:e9:ed:b4:91:cf:df:27:16: ff:b5:9a:f3:f0:d6:e8:1d:aa:73:93:aa:14:2d:dc: 6d:b1:49:fb:b5:74:3a:52:f7:26:99:e0:30:18:13: d8:04:12:84:e6:12:68:be:bf:0c:19:6a:44:3b:5d: d7:77:91:bb:4b:f3:22:87:5e:48:cb:66:29:90:dd: b5:21:59:d8:c1:18:18:3a:94:4e:fb:a3:ef:fd:04: b4:ac:96:53:67:34:ad:f2:2e:d1:62:a2:9b:1f:2e: ff:b4:5b:a7:4b:f1:f1:58:32:aa:f9:97:41:96:28: cb:10:31:6a:06:eb:b5:f8:02:77:a9:f3:c1:74:82: 8d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:89:DB:FF:25:39:6A:2C:8B:0A:C2:8E:CC:0D:FB:68:13:9A:53:B1 X509v3 Authority Key Identifier: keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:62:00:04:54:fe:37:56:57:ee:20:ca:6f:25:df:cb:be:51: 6b:37:d0:87:19:ab:ff:52:d3:aa:1e:7f:76:8a:e4:cc:5c:94: 55:8c:b0:f8:a8:ee:b4:c9:15:6b:b6:b5:d0:ba:f0:1b:3d:c2: 9a:f3:42:cc:a0:66:a1:ee:1f:94:9d:7c:c2:e6:44:a5:52:92: b5:9a:48:6d:38:93:64:0b:cb:cf:4b:4a:8a:35:5c:f4:49:fd: d6:36:b7:e6:d3:8c:4a:dd:a7:d2:63:33:00:14:9b:4a:3e:27: 78:c9:bf:1b:da:e1:76:4d:33:49:17:5e:e2:3d:de:e3:4c:15: b0:57:7f:f4:dc:56:ec:22:8f:ed:f0:f4:c4:86:d5:3b:f9:4b: b8:d3:66:8a:d0:4f:f9:c0:be:00:f4:fc:51:e0:0f:84:c2:87: 66:d8:b5:ee:10:f3:77:31:08:d2:a8:ce:d3:fc:6a:8c:78:a4: b1:d7:38:06:85:44:12:16:8f:a9:13:ec:29:1e:eb:80:76:13: 9b:82:35:f7:a7:6f:a8:4b:4a:f7:87:5b:2e:3e:0a:ad:50:e3: ef:ec:7c:57:f5:52:f1:ab:22:31:2a:ae:7c:2a:71:cf:4b:64: 63:ab:97:78:2e:4a:0d:fe:40:3d:bd:6d:7c:50:4d:92:a5:36: a4:49:15:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNB9i0GTRDljTixGfK+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMzgyZTJlNTRiNjBmMWY2OGY4NWM5ODRkYTFhNjk2MzFj NTJjYTgwHhcNMjUxMjA2MDEwMDM3WhcNMjUxMjA3MDEwMDM3WjAzMTEwLwYDVQQD EygwYzg5ZGJmZjI1Mzk2YTJjOGIwYWMyOGVjYzBkZmI2ODEzOWE1M2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpdRs+oeXOjaXGrYD+5ROw4cuIw6 GE/Kcwm+Av4a+Cv3UYmBC9DOJC9DKFBzfyiZSeJheLbma/VSQK296E1fPXocHw3Z skFObzdcycbpFTwhbb7hg44Q/TSVjhjISsUxbIipuWIrnEnmH6yKeMKzt0k5Jl++ 3ZZhdxHulWpg6e20kc/fJxb/tZrz8NboHapzk6oULdxtsUn7tXQ6UvcmmeAwGBPY BBKE5hJovr8MGWpEO13Xd5G7S/Mih15Iy2YpkN21IVnYwRgYOpRO+6Pv/QS0rJZT ZzSt8i7RYqKbHy7/tFunS/HxWDKq+ZdBlijLEDFqBuu1+AJ3qfPBdIKNTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyJ2/8lOWosiwrCjswN+2gTmlOxMB8GA1UdIwQY MBaAFKI4Li5Utg8faPhcmE2hppYxxSyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2pndUxsUzJEeDlvLUZ5WVRhR21sakhGTEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NGFhM2EtNDczZC00ZmI1LTkwMzgt ODFkMTMwNGZhZjc2LzEvb2pndUxsUzJEeDlvLUZ5WVRhR21sakhGTEtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83NGFhM2EtNDczZC00ZmI1LTkwMzgtODFkMTMwNGZhZjc2 LzEvb2pndUxsUzJEeDlvLUZ5WVRhR21sakhGTEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmIABFT+ N1ZX7iDKbyXfy75RazfQhxmr/1LTqh5/dorkzFyUVYyw+KjutMkVa7a10LrwGz3C mvNCzKBmoe4flJ18wuZEpVKStZpIbTiTZAvLz0tKijVc9En91ja35tOMSt2n0mMz ABSbSj4neMm/G9rhdk0zSRde4j3e40wVsFd/9NxW7CKP7fD0xIbVO/lLuNNmitBP +cC+APT8UeAPhMKHZti17hDzdzEI0qjO0/xqjHiksdc4BoVEEhaPqRPsKR7rgHYT m4I196dvqEtK94dbLj4KrVDj7+x8V/VS8asiMSqufCpxz0tkY6uXeC5KDf5APb1t fFBNkqU2pEkVAw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:48 2025 by rpki-client