This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft File: oGqOPGol1GOfOUWtFszF6Yo6kqY.mft (raw, json) Hash identifier: 4EeQcyDCh+gdxuc/6dTB/Bjd+ibsYgf6iyijVdbfiVs= Subject key identifier: 79:3A:77:DC:D0:1B:B4:DE:9C:78:DD:93:A7:74:76:9A:98:DD:C6:F8 Authority key identifier: A0:6A:8E:3C:6A:25:D4:63:9F:39:45:AD:16:CC:C5:E9:8A:3A:92:A6 Certificate issuer: /CN=a06a8e3c6a25d4639f3945ad16ccc5e98a3a92a6 Certificate serial: 019B3C7F5EAE934D38A6B1AC3AB857A4C701 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 16:02:18 +0000 Manifest this update: Sat 20 Dec 2025 16:02:18 +0000 Manifest next update: Sun 21 Dec 2025 16:02:18 +0000 Files and hashes: 1: oGqOPGol1GOfOUWtFszF6Yo6kqY.crl (hash: gUCDyvhDqy4osEooM+h/0DMxOqSXnOXuEgT8umQZhO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:5e:ae:93:4d:38:a6:b1:ac:3a:b8:57:a4:c7:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a06a8e3c6a25d4639f3945ad16ccc5e98a3a92a6 Validity Not Before: Dec 20 16:02:18 2025 GMT Not After : Dec 21 16:02:18 2025 GMT Subject: CN=793a77dcd01bb4de9c78dd93a774769a98ddc6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:26:03:3a:24:2b:ce:a1:0c:a0:b6:e7:d4:75: 08:ff:95:29:eb:00:64:b9:d4:3f:ab:11:8f:3f:ec: c2:cb:49:6b:69:08:71:28:0f:49:0d:5c:47:fd:57: e4:88:65:5f:fb:b6:08:cf:1d:f4:91:6f:9a:49:5a: 28:2a:2f:f0:93:dc:b5:62:fd:13:13:84:d4:2f:2a: 1b:85:3d:29:ce:35:7a:cc:a1:c5:a8:4d:a6:22:cf: 90:b7:6b:b8:82:19:bc:21:7a:e3:3f:1d:bd:3e:55: b2:7b:bc:bb:8f:22:e8:be:6b:56:6e:62:28:92:dd: cd:00:55:48:f5:78:f3:a6:af:76:29:09:3e:09:15: 16:c8:33:7a:3c:fa:bb:b4:52:1f:69:dd:10:66:ad: 60:5c:ad:19:f1:31:a8:2d:b8:4e:1c:83:49:c5:a8: 4b:ca:37:f7:a0:2d:a3:e7:cb:b6:f9:eb:91:82:50: a4:d5:04:f3:f7:5c:f2:f8:fd:ce:bf:02:77:25:04: 6d:0e:b6:94:d6:88:18:f0:36:56:84:57:23:c1:38: bf:17:77:62:7b:45:d7:80:17:7c:85:22:25:c5:42: 1b:76:9d:3b:db:dc:1b:7e:73:47:c2:2e:f7:22:7e: cd:f4:aa:e5:78:1c:56:d2:15:0a:e7:c8:b1:ca:3b: 19:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3A:77:DC:D0:1B:B4:DE:9C:78:DD:93:A7:74:76:9A:98:DD:C6:F8 X509v3 Authority Key Identifier: keyid:A0:6A:8E:3C:6A:25:D4:63:9F:39:45:AD:16:CC:C5:E9:8A:3A:92:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0e:c3:3e:81:aa:d5:b3:57:1a:9a:ea:de:85:d5:86:7f:6a: ec:0b:20:93:b4:50:0e:c0:6f:fb:b4:76:f1:32:88:ba:54:df: f7:f1:65:11:d0:cf:e8:b6:96:52:b1:48:f5:26:c5:16:ce:e5: 78:ad:b0:3b:8e:99:41:14:73:75:c9:3d:56:6a:28:9b:28:0d: 79:b1:89:d2:bf:bc:a5:d1:e8:f5:ea:c7:5e:e3:fc:4b:55:00: 36:c4:a3:e1:c9:4b:ae:3b:16:6a:bb:ab:d6:ba:56:d5:73:80: 0c:03:53:9b:fa:bf:eb:13:9c:e4:e6:3f:f0:69:22:1c:a4:83: 08:c5:0a:a6:ba:8a:ec:50:f5:0e:be:c3:27:9f:9f:5d:c4:18: d4:9b:15:a2:0a:05:52:7e:c1:75:85:a3:14:1c:b2:91:4f:65: 2e:a1:be:f3:f2:44:81:65:16:fa:94:17:b4:2a:36:54:ab:d5: 21:4c:29:37:bb:3b:12:55:45:9b:25:ff:0d:ab:97:ab:bc:a0: eb:20:72:e5:c8:aa:82:0e:a6:61:af:d5:3b:4c:e9:71:9c:35: 42:67:c6:e1:ff:36:3a:32:c3:3c:80:a6:93:95:88:18:a4:27: cd:27:1c:94:6a:15:7c:b8:d2:11:4e:e6:05:2c:e6:c6:0d:b9: 94:39:3b:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f16uk004prGsOrhXpMcBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNmE4ZTNjNmEyNWQ0NjM5ZjM5NDVhZDE2Y2NjNWU5OGEz YTkyYTYwHhcNMjUxMjIwMTYwMjE4WhcNMjUxMjIxMTYwMjE4WjAzMTEwLwYDVQQD Eyg3OTNhNzdkY2QwMWJiNGRlOWM3OGRkOTNhNzc0NzY5YTk4ZGRjNmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yYDOiQrzqEMoLbn1HUI/5Up6wBk udQ/qxGPP+zCy0lraQhxKA9JDVxH/VfkiGVf+7YIzx30kW+aSVooKi/wk9y1Yv0T E4TULyobhT0pzjV6zKHFqE2mIs+Qt2u4ghm8IXrjPx29PlWye7y7jyLovmtWbmIo kt3NAFVI9Xjzpq92KQk+CRUWyDN6PPq7tFIfad0QZq1gXK0Z8TGoLbhOHINJxahL yjf3oC2j58u2+euRglCk1QTz91zy+P3OvwJ3JQRtDraU1ogY8DZWhFcjwTi/F3di e0XXgBd8hSIlxUIbdp0729wbfnNHwi73In7N9KrleBxW0hUK58ixyjsZ7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHk6d9zQG7TenHjdk6d0dpqY3cb4MB8GA1UdIwQY MBaAFKBqjjxqJdRjnzlFrRbMxemKOpKmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0dxT1BHb2wxR09mT1VXdEZzekY2WW82a3FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9kMjQzMDUtYzU1MS00NTBkLWI2OTct OWFjMmQ1MzZmMTJkLzEvb0dxT1BHb2wxR09mT1VXdEZzekY2WW82a3FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9kMjQzMDUtYzU1MS00NTBkLWI2OTctOWFjMmQ1MzZmMTJk LzEvb0dxT1BHb2wxR09mT1VXdEZzekY2WW82a3FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGg7DPoGq 1bNXGprq3oXVhn9q7Asgk7RQDsBv+7R28TKIulTf9/FlEdDP6LaWUrFI9SbFFs7l eK2wO46ZQRRzdck9VmoomygNebGJ0r+8pdHo9erHXuP8S1UANsSj4clLrjsWarur 1rpW1XOADANTm/q/6xOc5OY/8GkiHKSDCMUKprqK7FD1Dr7DJ5+fXcQY1JsVogoF Un7BdYWjFByykU9lLqG+8/JEgWUW+pQXtCo2VKvVIUwpN7s7ElVFmyX/DauXq7yg 6yBy5ciqgg6mYa/VO0zpcZw1QmfG4f82OjLDPICmk5WIGKQnzScclGoVfLjSEU7m BSzmxg25lDk7kg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:25:55 2025 by rpki-client