This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft File: oGqOPGol1GOfOUWtFszF6Yo6kqY.mft (raw, json) Hash identifier: EIxcDTRV/Ov+Gn6j/i2QpqcCHfpDi8Bvsi1q9vtJae4= Subject key identifier: FA:66:3C:3E:9C:BF:BA:83:F8:17:81:FF:85:52:6E:28:29:23:44:36 Authority key identifier: A0:6A:8E:3C:6A:25:D4:63:9F:39:45:AD:16:CC:C5:E9:8A:3A:92:A6 Certificate issuer: /CN=a06a8e3c6a25d4639f3945ad16ccc5e98a3a92a6 Certificate serial: 019AF31B28B7E75F1CA17592667E168BE7D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 10:00:34 +0000 Manifest this update: Sat 06 Dec 2025 10:00:34 +0000 Manifest next update: Sun 07 Dec 2025 10:00:34 +0000 Files and hashes: 1: oGqOPGol1GOfOUWtFszF6Yo6kqY.crl (hash: 8Lw7a64AYrkrZRsRKO/ypxEbc5Is9/NAtjEL7Cnccm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:28:b7:e7:5f:1c:a1:75:92:66:7e:16:8b:e7:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a06a8e3c6a25d4639f3945ad16ccc5e98a3a92a6 Validity Not Before: Dec 6 10:00:34 2025 GMT Not After : Dec 7 10:00:34 2025 GMT Subject: CN=fa663c3e9cbfba83f81781ff85526e2829234436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:42:7f:0e:c6:7f:2b:cf:46:61:70:af:9c:8d: 27:ac:35:6e:9a:4f:29:5d:94:6a:a8:0d:6d:ab:24: 37:c9:d5:6a:b5:de:c5:22:84:62:4a:29:b0:17:b1: f8:a8:de:53:8a:48:34:20:ea:ca:af:85:a2:c5:35: 32:d1:f5:ab:79:e3:ad:e5:87:39:9d:41:1c:4a:4e: e1:5f:f0:63:18:29:64:0a:5a:e1:7c:a4:0b:94:4d: 0c:99:1c:68:81:33:ba:d2:d9:25:86:d0:33:77:26: ea:dd:7e:a3:5c:d9:bd:0b:91:92:d1:60:e1:48:bb: d9:b7:f5:0c:69:9f:54:10:d7:96:13:c2:5d:99:cc: 9e:29:5b:69:47:3f:7d:c7:25:8e:b0:43:be:82:a0: 8b:36:d2:06:27:4a:a6:1e:81:d6:1a:c1:52:61:ef: 26:e8:c0:16:81:e5:8e:ba:5a:3b:e9:82:6e:2b:e5: 90:79:6c:27:15:d3:cf:fb:02:7c:0e:36:88:89:bc: 32:37:96:39:7c:aa:b8:26:6a:21:bd:b0:c5:c6:e8: 48:2c:40:f4:57:48:0a:4f:b1:0a:f2:6e:ac:fe:2f: 05:04:eb:02:92:94:6a:a2:5d:9c:90:e9:c2:20:ea: f9:74:68:8e:63:f4:14:fd:33:02:0c:c0:9d:87:33: 03:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:66:3C:3E:9C:BF:BA:83:F8:17:81:FF:85:52:6E:28:29:23:44:36 X509v3 Authority Key Identifier: keyid:A0:6A:8E:3C:6A:25:D4:63:9F:39:45:AD:16:CC:C5:E9:8A:3A:92:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:b6:64:58:a8:f3:fd:c9:db:dc:b4:9e:c8:f8:55:43:1a:d9: bd:58:54:02:95:2e:fb:62:88:3c:c3:47:2d:25:b0:e9:46:86: e4:98:7c:f0:4e:32:c1:81:d4:72:bf:19:bf:1e:3e:27:49:49: a5:c7:c9:39:c9:41:09:04:44:75:ff:f7:5f:eb:31:00:18:2c: 95:6d:86:15:a2:48:41:de:e9:c5:64:f9:79:17:51:3a:73:72: a3:09:ac:3b:f9:88:89:ed:38:e4:f5:3c:cb:96:0a:ca:b4:3f: ff:ac:c2:a1:5c:be:e4:09:f3:fd:a1:f7:32:8c:1b:d2:a2:f4: be:2b:c8:9b:f6:8a:09:9b:0c:d7:b6:42:35:96:60:d6:9a:2c: 6a:74:b4:5f:19:f2:cb:79:b2:cf:b4:ef:c9:a5:0a:9a:56:9c: c1:f4:ec:ee:29:c0:33:41:fd:20:f2:1a:b3:bf:ce:47:90:d8: 71:1e:5d:73:7d:44:c5:4a:49:b8:24:f3:73:95:91:c7:ba:14: a7:80:ce:6e:18:81:d8:95:aa:9a:03:1c:a9:99:c5:ee:98:41: cc:4f:8e:06:88:b7:51:53:98:28:13:9a:be:73:5d:34:b1:19: 60:7f:ed:65:85:a6:40:51:b8:18:c0:99:66:90:e6:21:c3:cd: 4c:42:69:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGyi3518coXWSZn4Wi+fYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNmE4ZTNjNmEyNWQ0NjM5ZjM5NDVhZDE2Y2NjNWU5OGEz YTkyYTYwHhcNMjUxMjA2MTAwMDM0WhcNMjUxMjA3MTAwMDM0WjAzMTEwLwYDVQQD EyhmYTY2M2MzZTljYmZiYTgzZjgxNzgxZmY4NTUyNmUyODI5MjM0NDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUJ/DsZ/K89GYXCvnI0nrDVumk8p XZRqqA1tqyQ3ydVqtd7FIoRiSimwF7H4qN5Tikg0IOrKr4WixTUy0fWreeOt5Yc5 nUEcSk7hX/BjGClkClrhfKQLlE0MmRxogTO60tklhtAzdybq3X6jXNm9C5GS0WDh SLvZt/UMaZ9UENeWE8JdmcyeKVtpRz99xyWOsEO+gqCLNtIGJ0qmHoHWGsFSYe8m 6MAWgeWOulo76YJuK+WQeWwnFdPP+wJ8DjaIibwyN5Y5fKq4JmohvbDFxuhILED0 V0gKT7EK8m6s/i8FBOsCkpRqol2ckOnCIOr5dGiOY/QU/TMCDMCdhzMDxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpmPD6cv7qD+BeB/4VSbigpI0Q2MB8GA1UdIwQY MBaAFKBqjjxqJdRjnzlFrRbMxemKOpKmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0dxT1BHb2wxR09mT1VXdEZzekY2WW82a3FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9kMjQzMDUtYzU1MS00NTBkLWI2OTct OWFjMmQ1MzZmMTJkLzEvb0dxT1BHb2wxR09mT1VXdEZzekY2WW82a3FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9kMjQzMDUtYzU1MS00NTBkLWI2OTctOWFjMmQ1MzZmMTJk LzEvb0dxT1BHb2wxR09mT1VXdEZzekY2WW82a3FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrZkWKjz /cnb3LSeyPhVQxrZvVhUApUu+2KIPMNHLSWw6UaG5Jh88E4ywYHUcr8Zvx4+J0lJ pcfJOclBCQREdf/3X+sxABgslW2GFaJIQd7pxWT5eRdROnNyowmsO/mIie045PU8 y5YKyrQ//6zCoVy+5Anz/aH3Mowb0qL0vivIm/aKCZsM17ZCNZZg1posanS0Xxny y3myz7TvyaUKmlacwfTs7inAM0H9IPIas7/OR5DYcR5dc31ExUpJuCTzc5WRx7oU p4DObhiB2JWqmgMcqZnF7phBzE+OBoi3UVOYKBOavnNdNLEZYH/tZYWmQFG4GMCZ ZpDmIcPNTEJpSw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:20 2025 by rpki-client