This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft File: mOGPra73Iy0xYYhqy-qKsyPPNXA.mft (raw, json) Hash identifier: xht5DapX8KTwhwYf+fuu+ajw2NpR2rTUZGCaxlvv3/Y= Subject key identifier: 6A:0B:6D:88:97:AA:5A:6C:C7:65:0A:9F:91:1E:94:A7:84:B0:B1:FB Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70 Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570 Certificate serial: 019AF1D20482402012DB3E635D4ECC4983DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft Manifest number: 04B4 Signing time: Sat 06 Dec 2025 04:01:03 +0000 Manifest this update: Sat 06 Dec 2025 04:01:03 +0000 Manifest next update: Sun 07 Dec 2025 04:01:03 +0000 Files and hashes: 1: VpkCsO4Sj1kfftcY5G5XJmTJEG0.roa (hash: ETNkYiblCUpkwdU3IL2iumD+BXzDHtOGaGe3dN4NhPg=) 2: erMk5yuryhZB_ZV-dGn9yf-aRpI.roa (hash: g/Q0NWNaVho78aB7txRveS1/ldgfqH8Be/gkNubWJao=) 3: mOGPra73Iy0xYYhqy-qKsyPPNXA.crl (hash: gKufoTysNG4kz2ClSuQg7OhFD/NpKh8D8nzwWopVuQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:04:82:40:20:12:db:3e:63:5d:4e:cc:49:83:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570 Validity Not Before: Dec 6 04:01:03 2025 GMT Not After : Dec 7 04:01:03 2025 GMT Subject: CN=6a0b6d8897aa5a6cc7650a9f911e94a784b0b1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:26:9c:05:cc:d3:0f:40:4e:2a:8c:c7:ce:c8: 73:7d:36:f0:9f:ab:81:27:d0:1e:20:98:00:d4:ff: 81:8a:78:4a:ad:63:4e:af:f9:42:0e:6c:e8:49:ea: 18:c3:b8:ce:d3:ea:04:7e:72:05:4b:bc:46:1b:30: f9:36:98:bc:f4:f9:6f:1c:5e:b3:57:76:ae:c6:90: 0f:f4:d7:13:b7:15:41:c4:8f:49:3a:2d:b7:a8:3d: e6:fe:ee:d4:76:91:ed:37:ab:eb:d3:f0:68:a6:d7: c1:23:36:ba:98:13:cb:fb:b5:de:73:fb:12:6b:58: 62:e5:ce:b4:99:29:78:0c:3b:22:4c:4d:23:5a:e2: ae:93:5f:2e:9e:dd:9b:f1:f2:b6:ce:15:75:42:4b: 52:3a:d0:62:ea:43:dd:9d:1a:ef:ce:37:67:b4:c1: 74:69:4e:a7:f9:ca:53:27:f7:4f:12:6f:24:fa:4d: a6:27:48:2c:55:ad:16:74:40:6e:40:30:b1:25:f8: 8d:89:50:78:7e:13:cc:ad:dd:18:25:ae:94:82:ce: 47:89:f3:6a:5f:6b:69:63:b6:04:08:2f:d4:1b:ae: f1:58:c3:e5:cb:11:5c:aa:3f:91:03:f6:1b:23:43: 28:60:b5:b8:df:87:7f:bc:e9:22:70:df:fc:3e:dc: 66:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0B:6D:88:97:AA:5A:6C:C7:65:0A:9F:91:1E:94:A7:84:B0:B1:FB X509v3 Authority Key Identifier: keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:9f:8a:29:19:ac:57:63:44:43:3d:dd:8e:39:e0:c6:17:c4: f9:aa:e3:34:c8:48:43:9b:0d:c7:d4:c6:a2:e3:9e:73:1a:12: 37:27:46:49:ec:5e:72:ef:38:2d:b1:16:ee:42:b6:91:28:00: 22:db:0f:42:64:36:56:b6:ec:10:b7:80:17:68:ea:b1:f4:23: 43:e4:01:a5:84:8c:28:5a:95:36:bb:1e:68:0b:26:24:1b:65: 18:f7:5b:70:38:3b:dd:00:cc:36:b9:64:66:5b:0b:23:09:3b: 90:41:5e:c6:66:1c:05:8f:8f:ff:29:52:17:45:b3:b6:3b:97: ec:5a:32:80:d1:61:bc:fc:13:df:9b:5f:12:2c:20:88:34:59: aa:21:de:95:33:8a:b8:a6:5d:da:54:f6:4b:a2:14:04:15:22: 75:9b:7d:60:a5:94:25:95:76:04:2a:54:3f:32:1f:c3:11:d9: 43:2c:d4:32:1e:71:7c:b3:b2:53:fe:d1:4b:94:e8:c3:02:c5: 0e:75:90:e4:8c:aa:f9:90:62:c6:6d:a6:7a:75:7e:8e:bc:3c: 94:85:c7:6c:8d:99:11:74:23:ab:f3:52:fb:38:46:08:52:df: 4d:00:4e:bb:9e:fe:bb:3f:27:cd:d1:e6:1c:60:7a:38:b5:44: 50:16:8e:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gSCQCAS2z5jXU7MSYPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZTE4ZmFkYWVmNzIzMmQzMTYxODg2YWNiZWE4YWIzMjNj ZjM1NzAwHhcNMjUxMjA2MDQwMTAzWhcNMjUxMjA3MDQwMTAzWjAzMTEwLwYDVQQD Eyg2YTBiNmQ4ODk3YWE1YTZjYzc2NTBhOWY5MTFlOTRhNzg0YjBiMWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SacBczTD0BOKozHzshzfTbwn6uB J9AeIJgA1P+BinhKrWNOr/lCDmzoSeoYw7jO0+oEfnIFS7xGGzD5Npi89PlvHF6z V3auxpAP9NcTtxVBxI9JOi23qD3m/u7UdpHtN6vr0/BoptfBIza6mBPL+7Xec/sS a1hi5c60mSl4DDsiTE0jWuKuk18unt2b8fK2zhV1QktSOtBi6kPdnRrvzjdntMF0 aU6n+cpTJ/dPEm8k+k2mJ0gsVa0WdEBuQDCxJfiNiVB4fhPMrd0YJa6Ugs5HifNq X2tpY7YECC/UG67xWMPlyxFcqj+RA/YbI0MoYLW434d/vOkicN/8Ptxm8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoLbYiXqlpsx2UKn5EelKeEsLH7MB8GA1UdIwQY MBaAFJjhj62u9yMtMWGIasvqirMjzzVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wZjE4ZGYtMjZlZi00ZWM2LTg2Njct NzIxODg1NTY0NmUzLzEvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8wZjE4ZGYtMjZlZi00ZWM2LTg2NjctNzIxODg1NTY0NmUz LzEvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZ+KKRms V2NEQz3djjngxhfE+arjNMhIQ5sNx9TGouOecxoSNydGSexecu84LbEW7kK2kSgA ItsPQmQ2VrbsELeAF2jqsfQjQ+QBpYSMKFqVNrseaAsmJBtlGPdbcDg73QDMNrlk ZlsLIwk7kEFexmYcBY+P/ylSF0WztjuX7FoygNFhvPwT35tfEiwgiDRZqiHelTOK uKZd2lT2S6IUBBUidZt9YKWUJZV2BCpUPzIfwxHZQyzUMh5xfLOyU/7RS5TowwLF DnWQ5Iyq+ZBixm2menV+jrw8lIXHbI2ZEXQjq/NS+zhGCFLfTQBOu57+uz8nzdHm HGB6OLVEUBaORA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:32 2025 by rpki-client