This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json) Hash identifier: hWTY98IFqhPKtV6iGpsGqUQxGDEdSs54JmBBx8ptegs= Subject key identifier: 7D:DA:B8:7D:16:E2:B6:AD:1D:36:22:93:A7:1D:B7:1B:45:C6:41:87 Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61 Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561 Certificate serial: 019AF19B4167220B3FA639CEEF874B0F2681 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft Manifest number: 098E Signing time: Sat 06 Dec 2025 03:01:15 +0000 Manifest this update: Sat 06 Dec 2025 03:01:15 +0000 Manifest next update: Sun 07 Dec 2025 03:01:15 +0000 Files and hashes: 1: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: 58xtRN+TinJz4f/O3DtbdgPi3x0HamGmPY2hiU/2WKM=) 2: QLu-t4-kWwjTWD2HUVQ3JUjA93E.roa (hash: wwPcnLN7UsFWJVqWb0xH9PzsYRh1MZUdzN16ZynKLqU=) 3: X9-z3qhXpej4BCNHXlOlwIoxiSI.roa (hash: +XeMFApgKN+wHjuGvI8Wb1xE1s+7UuhIUkYxW35SfdA=) 4: hwkpF7GCiN1Fi1Bf-G_kcCT7lXg.roa (hash: owUDYc5hXMNAaSpXWFyOh6YRLado21xVEXGeqVIdneY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:41:67:22:0b:3f:a6:39:ce:ef:87:4b:0f:26:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561 Validity Not Before: Dec 6 03:01:15 2025 GMT Not After : Dec 7 03:01:15 2025 GMT Subject: CN=7ddab87d16e2b6ad1d362293a71db71b45c64187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8d:d9:da:02:ce:33:ae:44:49:d5:4c:5c:33: 5a:c4:7c:0d:5f:fd:1d:3c:f0:2d:06:fd:6a:34:86: 84:4e:da:51:14:e1:89:50:54:32:f3:bc:8d:d8:ff: bc:08:f5:d3:29:71:8b:e1:57:22:79:3b:a9:ec:5a: e0:6c:2a:16:a3:07:b9:11:c7:a5:6d:e8:ef:a0:cd: ee:51:e8:83:27:66:bc:0e:d4:18:e0:fc:c3:d1:ca: 46:d9:67:34:e5:43:66:0c:d2:84:2d:10:1d:ba:b5: d7:12:b4:71:be:c1:a3:f8:69:b3:04:af:3f:08:ba: 75:db:39:d4:4f:61:a1:5f:01:08:ea:e8:dd:4f:d6: 02:fb:eb:db:dc:fc:d6:77:ec:6a:fb:48:f2:be:1a: 94:05:f1:5a:e4:7d:60:09:75:23:c6:61:3f:d7:36: b6:b0:6a:a4:dc:d5:30:81:44:f2:bd:ae:3a:20:93: 5e:87:74:2b:31:3f:67:19:49:db:a2:c8:84:50:e0: 46:d1:6d:6e:db:34:84:27:ab:e3:f8:e6:b8:d9:4d: b0:4c:61:16:47:88:9f:1d:90:57:01:6d:35:02:cc: 3f:fd:73:06:c5:85:91:37:4e:27:e2:d3:11:3d:d2: ea:4f:83:4e:b5:41:e4:3e:31:02:ed:2a:1a:86:f6: dd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DA:B8:7D:16:E2:B6:AD:1D:36:22:93:A7:1D:B7:1B:45:C6:41:87 X509v3 Authority Key Identifier: keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:6c:2c:2b:18:87:ee:34:35:8d:34:79:90:f0:d2:5f:51:b8: ed:2b:11:f2:dc:a9:58:26:61:02:59:c0:01:fd:f3:e2:9e:e9: 69:1f:03:ae:a6:db:d6:43:c3:03:d8:76:f3:f0:f9:58:d5:0d: 3c:2c:a3:b8:b9:ce:d5:ca:43:5a:99:cc:cd:ff:e4:23:c4:ac: 34:b4:12:9d:0a:f4:1d:9f:a8:42:fb:d9:dd:e0:11:51:42:f1: 08:da:f7:b6:13:8f:72:b5:84:3d:69:5d:2c:91:5b:d7:29:5f: 94:8b:66:d0:ed:67:fc:f0:5f:3a:c7:dd:f2:27:0b:6e:0e:ab: 25:7b:fa:b7:e4:52:d6:07:c8:54:f6:3f:2a:fc:3d:fe:ff:bf: b9:ff:83:df:90:c9:36:6d:cb:95:90:ca:8c:0a:c1:3c:b0:02: ac:33:d2:55:01:c8:7a:1b:3e:bf:28:b4:8a:fd:d5:39:b1:13: af:fa:6e:3a:df:5b:e4:96:d5:03:5d:22:a8:35:5f:1f:02:06: d2:3d:3f:1b:66:95:6b:fd:a5:f3:70:94:87:45:83:3e:79:77: 85:22:83:5f:29:09:2b:46:72:89:06:49:62:0e:55:18:f5:8e: 95:df:27:57:41:52:16:7b:34:9e:09:77:84:b6:70:15:bb:4f: ad:c8:f1:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0FnIgs/pjnO74dLDyaBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDQyOWI1YWVjYWM4MzY0NTQ0YmY2MjNmOTRmMTYzYWZk Y2U1NjEwHhcNMjUxMjA2MDMwMTE1WhcNMjUxMjA3MDMwMTE1WjAzMTEwLwYDVQQD Eyg3ZGRhYjg3ZDE2ZTJiNmFkMWQzNjIyOTNhNzFkYjcxYjQ1YzY0MTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw43Z2gLOM65ESdVMXDNaxHwNX/0d PPAtBv1qNIaETtpRFOGJUFQy87yN2P+8CPXTKXGL4VcieTup7FrgbCoWowe5Ecel bejvoM3uUeiDJ2a8DtQY4PzD0cpG2Wc05UNmDNKELRAdurXXErRxvsGj+GmzBK8/ CLp12znUT2GhXwEI6ujdT9YC++vb3PzWd+xq+0jyvhqUBfFa5H1gCXUjxmE/1za2 sGqk3NUwgUTyva46IJNeh3QrMT9nGUnbosiEUOBG0W1u2zSEJ6vj+Oa42U2wTGEW R4ifHZBXAW01Asw//XMGxYWRN04n4tMRPdLqT4NOtUHkPjEC7SoahvbdjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3auH0W4ratHTYik6cdtxtFxkGHMB8GA1UdIwQY MBaAFDoEKbWuysg2RUS/Yj+U8WOv3OVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEt ODQ3MTJjOWYzNDY0LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEtODQ3MTJjOWYzNDY0 LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyGwsKxiH 7jQ1jTR5kPDSX1G47SsR8typWCZhAlnAAf3z4p7paR8Drqbb1kPDA9h28/D5WNUN PCyjuLnO1cpDWpnMzf/kI8SsNLQSnQr0HZ+oQvvZ3eARUULxCNr3thOPcrWEPWld LJFb1ylflItm0O1n/PBfOsfd8icLbg6rJXv6t+RS1gfIVPY/Kvw9/v+/uf+D35DJ Nm3LlZDKjArBPLACrDPSVQHIehs+vyi0iv3VObETr/puOt9b5JbVA10iqDVfHwIG 0j0/G2aVa/2l83CUh0WDPnl3hSKDXykJK0ZyiQZJYg5VGPWOld8nV0FSFns0ngl3 hLZwFbtPrcjx6g== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:06 2025 by rpki-client