This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json) Hash identifier: X4UcigVkgNvPkpGKZKRFQgvQ7u39kc9ocssUVzEWybc= Subject key identifier: B4:A3:2D:59:D8:8E:C7:5F:09:90:83:40:64:AC:86:FA:14:15:ED:91 Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61 Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561 Certificate serial: 019B2B8AA9A044181402D12364A8F9EB399D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft Manifest number: 09AC Signing time: Wed 17 Dec 2025 09:01:06 +0000 Manifest this update: Wed 17 Dec 2025 09:01:06 +0000 Manifest next update: Thu 18 Dec 2025 09:01:06 +0000 Files and hashes: 1: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: 1Hg8NQ0KTBPuAPzlSOg8f/X8+6iyySjyjLcC7ypB/Ms=) 2: QLu-t4-kWwjTWD2HUVQ3JUjA93E.roa (hash: wwPcnLN7UsFWJVqWb0xH9PzsYRh1MZUdzN16ZynKLqU=) 3: X9-z3qhXpej4BCNHXlOlwIoxiSI.roa (hash: +XeMFApgKN+wHjuGvI8Wb1xE1s+7UuhIUkYxW35SfdA=) 4: hwkpF7GCiN1Fi1Bf-G_kcCT7lXg.roa (hash: owUDYc5hXMNAaSpXWFyOh6YRLado21xVEXGeqVIdneY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:a9:a0:44:18:14:02:d1:23:64:a8:f9:eb:39:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561 Validity Not Before: Dec 17 09:01:06 2025 GMT Not After : Dec 18 09:01:06 2025 GMT Subject: CN=b4a32d59d88ec75f0990834064ac86fa1415ed91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0c:de:4a:76:46:9d:96:a3:99:de:b8:13:b1: 54:c9:e7:e2:c5:e1:3e:63:b6:5b:c5:15:71:14:41: 57:b0:a1:c9:61:b5:60:4a:fb:e4:03:2e:3a:d3:2f: 36:f3:11:9f:44:d5:ae:25:f8:27:c2:6b:ff:22:02: ac:40:d6:12:50:f4:64:31:1c:23:d2:48:63:1a:1a: b5:e0:e4:5d:53:be:3f:ca:f0:94:c2:6c:62:38:a0: c8:87:c3:ba:86:97:fe:3c:85:49:d9:06:6e:7d:df: 41:90:97:98:69:35:4b:33:ff:1d:7f:8d:d8:b6:28: 2d:93:f7:e5:09:40:8c:9a:38:9b:48:18:5f:33:01: 51:e9:98:63:15:2d:24:e2:f7:26:d3:de:5f:c2:3f: 40:3a:cc:5d:74:9e:c6:3e:df:79:70:41:04:9f:5b: 6e:36:35:67:9b:f0:b9:1d:cb:44:9e:aa:a2:03:43: 33:55:c3:e0:1c:5d:4a:0f:8e:21:d8:a3:60:04:b6: 2f:17:f8:33:28:ad:a7:a4:2c:75:3f:23:e2:35:a9: 55:28:10:1c:ca:4a:9d:82:15:a0:b0:30:51:31:5a: 91:3a:a0:98:db:05:da:48:5c:4a:b5:a4:35:e9:c8: 18:b7:da:53:4d:9d:84:02:85:c4:85:15:3c:f1:a4: 28:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A3:2D:59:D8:8E:C7:5F:09:90:83:40:64:AC:86:FA:14:15:ED:91 X509v3 Authority Key Identifier: keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a7:6f:fd:72:ac:49:1f:56:dd:51:00:e2:27:58:58:35:e4: d1:de:2c:3c:0d:b8:92:07:4c:39:d6:0d:00:bc:8d:b4:ff:6c: 56:ed:d6:31:a0:e3:86:f1:d2:1a:fe:5c:13:e0:23:15:0c:6c: 49:da:74:27:68:e6:ff:47:d9:32:db:7b:8d:2b:c9:63:47:87: 83:50:fb:69:0e:ab:7e:da:8b:3e:98:87:0e:83:4e:83:9b:2c: 6b:72:97:b2:ed:03:f8:c4:e7:5e:3e:23:0d:70:7c:4b:fa:29: d2:6a:f7:a3:52:74:47:48:67:f9:2a:e3:a6:46:3d:18:f4:db: 1f:d9:e1:95:aa:f2:ab:f0:ba:d8:37:5c:4f:5e:09:1d:5b:58: 84:79:f5:f7:b6:a4:d8:5d:72:68:39:6b:a3:5c:b2:ef:dd:ac: 35:b2:57:c0:ce:d0:fc:7c:9c:7b:f0:a7:4f:62:68:f0:08:82: a1:0e:17:22:04:3c:0c:c3:90:f1:f4:4c:c8:22:22:92:12:07: 68:78:25:0a:45:4f:64:ad:59:92:88:27:32:7d:0d:5a:40:c6: 74:f8:14:c2:55:6a:19:86:af:61:94:e0:c8:37:c5:72:7a:ee: dc:2c:e9:22:93:b3:61:a9:0d:a6:52:e0:b6:ac:85:46:a9:3b: 08:58:f5:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriqmgRBgUAtEjZKj56zmdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDQyOWI1YWVjYWM4MzY0NTQ0YmY2MjNmOTRmMTYzYWZk Y2U1NjEwHhcNMjUxMjE3MDkwMTA2WhcNMjUxMjE4MDkwMTA2WjAzMTEwLwYDVQQD EyhiNGEzMmQ1OWQ4OGVjNzVmMDk5MDgzNDA2NGFjODZmYTE0MTVlZDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAzeSnZGnZajmd64E7FUyefixeE+ Y7ZbxRVxFEFXsKHJYbVgSvvkAy460y828xGfRNWuJfgnwmv/IgKsQNYSUPRkMRwj 0khjGhq14ORdU74/yvCUwmxiOKDIh8O6hpf+PIVJ2QZufd9BkJeYaTVLM/8df43Y tigtk/flCUCMmjibSBhfMwFR6ZhjFS0k4vcm095fwj9AOsxddJ7GPt95cEEEn1tu NjVnm/C5HctEnqqiA0MzVcPgHF1KD44h2KNgBLYvF/gzKK2npCx1PyPiNalVKBAc ykqdghWgsDBRMVqROqCY2wXaSFxKtaQ16cgYt9pTTZ2EAoXEhRU88aQoOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSjLVnYjsdfCZCDQGSshvoUFe2RMB8GA1UdIwQY MBaAFDoEKbWuysg2RUS/Yj+U8WOv3OVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEt ODQ3MTJjOWYzNDY0LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEtODQ3MTJjOWYzNDY0 LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKdv/XKs SR9W3VEA4idYWDXk0d4sPA24kgdMOdYNALyNtP9sVu3WMaDjhvHSGv5cE+AjFQxs Sdp0J2jm/0fZMtt7jSvJY0eHg1D7aQ6rftqLPpiHDoNOg5ssa3KXsu0D+MTnXj4j DXB8S/op0mr3o1J0R0hn+SrjpkY9GPTbH9nhlaryq/C62DdcT14JHVtYhHn197ak 2F1yaDlro1yy792sNbJXwM7Q/Hyce/CnT2Jo8AiCoQ4XIgQ8DMOQ8fRMyCIikhIH aHglCkVPZK1ZkognMn0NWkDGdPgUwlVqGYavYZTgyDfFcnru3CzpIpOzYakNplLg tqyFRqk7CFj1uw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:47:58 2025 by rpki-client