This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft File: OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft (raw, json) Hash identifier: 3mB61R/8GBw9OqgNk7JXT/3S8BvVTtZdLQUUV5ffD4U= Subject key identifier: 45:32:6C:07:1B:E2:44:7C:6C:B7:3D:C9:C5:9D:A9:15:DF:9E:32:DD Authority key identifier: 3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48 Certificate issuer: /CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48 Certificate serial: 019AF2402B4D3573A9E3CD241A041D4CB3D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft Manifest number: 17 Signing time: Sat 06 Dec 2025 06:01:22 +0000 Manifest this update: Sat 06 Dec 2025 06:01:22 +0000 Manifest next update: Sun 07 Dec 2025 06:01:22 +0000 Files and hashes: 1: OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl (hash: vxjpMYHjpLXqFxI/4SVtRjpWeCIqJshLVdJhlJZ/vZg=) 2: XNNLmF6xYLzYM5AanU02Pset_Q0.roa (hash: HlxBuNjrBjrN/3xEMV5/reH8Pvrb165mYX7ZjyMcf4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:2b:4d:35:73:a9:e3:cd:24:1a:04:1d:4c:b3:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48 Validity Not Before: Dec 6 06:01:22 2025 GMT Not After : Dec 7 06:01:22 2025 GMT Subject: CN=45326c071be2447c6cb73dc9c59da915df9e32dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b4:d6:7f:52:83:88:4b:78:14:c9:c2:a8:77: 09:c9:0f:6c:35:4a:12:74:be:29:26:ee:3b:c6:a7: 7f:5b:59:fd:cf:a4:3d:52:69:45:ce:d3:5b:ce:60: 30:5f:a4:4d:5e:ed:bf:47:84:a6:d0:69:56:e8:6c: bf:33:3f:25:77:91:12:22:a0:d1:92:31:44:a1:df: c1:5b:d1:6b:31:67:21:e7:f9:88:f4:13:a5:b2:ee: 8f:04:44:4c:2f:af:3f:91:d8:f7:e9:58:c3:90:ed: c2:83:aa:6d:b5:d4:4c:83:50:24:7b:67:39:ca:01: f3:a9:82:ea:07:a3:bc:02:a6:18:2a:b0:65:15:c9: bb:43:52:de:2f:d7:6f:50:8e:aa:4b:ff:a1:b8:58: cf:4b:51:4d:c3:1e:e8:db:02:eb:99:7c:3a:0c:91: 94:bb:1b:48:b3:a4:68:fb:d4:62:bb:bd:18:3b:ed: 8e:78:70:fb:4a:64:33:d8:60:7d:90:63:b4:4d:f6: ac:96:61:20:b1:91:7e:c4:05:a1:d1:d9:a6:2d:e3: 3f:22:eb:c7:c1:7f:32:a8:60:a1:57:15:dc:c4:c9: e6:aa:4b:85:20:a4:a2:1e:be:6d:94:6c:15:80:2d: 85:3a:b5:ff:1d:96:66:d2:50:cd:d0:4b:41:a3:4f: 70:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:32:6C:07:1B:E2:44:7C:6C:B7:3D:C9:C5:9D:A9:15:DF:9E:32:DD X509v3 Authority Key Identifier: keyid:3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:61:49:fc:d9:98:3f:b1:22:04:62:40:ed:18:fe:02:4f:84: 7a:02:86:bb:23:29:45:aa:12:5d:ae:50:a1:d4:59:51:6c:30: ce:8b:7b:34:f8:f8:2c:8b:cf:af:a8:51:f1:76:90:b0:0f:29: 83:4e:85:c5:94:f2:df:e2:e0:08:ac:be:90:a3:44:eb:4e:fb: ca:23:6c:a1:22:a1:ec:00:66:43:9e:c7:a9:fa:5a:3a:1c:bf: 26:8c:f8:a8:1d:4e:eb:1c:e8:95:4c:5d:1e:4e:08:ae:b4:60: 83:f9:99:1f:03:e7:3f:d6:6f:c0:f9:e2:55:8c:f6:39:06:25: d7:25:9b:31:48:6b:af:89:c5:a1:80:0f:4a:12:32:9e:a2:c2: fc:74:89:67:3c:2f:1a:d5:ae:e1:a0:ba:3e:f4:da:e6:f7:37: 9c:47:d7:3d:9d:22:bd:7b:1a:cf:46:c3:f6:6e:69:8b:40:ff: b9:2d:9e:d9:87:36:34:3a:1c:8a:8b:6d:11:d2:05:00:14:68: f8:d3:b1:3d:04:0b:b0:83:de:8f:fd:64:b2:d5:fb:67:27:8a: 5c:10:1d:d5:af:5d:5b:9c:29:7b:8c:d2:fc:50:36:94:9f:72: 23:49:90:e9:fa:2f:60:ab:bd:35:2f:a4:d2:f4:ad:28:34:05: 9d:a4:67:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCtNNXOp480kGgQdTLPVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDNlODg4YzIyM2IzYmZhZTgxOWIyMjBmZmIyNWYyNmYx YzJmNDgwHhcNMjUxMjA2MDYwMTIyWhcNMjUxMjA3MDYwMTIyWjAzMTEwLwYDVQQD Eyg0NTMyNmMwNzFiZTI0NDdjNmNiNzNkYzljNTlkYTkxNWRmOWUzMmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLTWf1KDiEt4FMnCqHcJyQ9sNUoS dL4pJu47xqd/W1n9z6Q9UmlFztNbzmAwX6RNXu2/R4Sm0GlW6Gy/Mz8ld5ESIqDR kjFEod/BW9FrMWch5/mI9BOlsu6PBERML68/kdj36VjDkO3Cg6pttdRMg1Ake2c5 ygHzqYLqB6O8AqYYKrBlFcm7Q1LeL9dvUI6qS/+huFjPS1FNwx7o2wLrmXw6DJGU uxtIs6Ro+9Riu70YO+2OeHD7SmQz2GB9kGO0TfaslmEgsZF+xAWh0dmmLeM/IuvH wX8yqGChVxXcxMnmqkuFIKSiHr5tlGwVgC2FOrX/HZZm0lDN0EtBo09wlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUybAcb4kR8bLc9ycWdqRXfnjLdMB8GA1UdIwQY MBaAFDoD6IjCI7O/roGbIg/7JfJvHC9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dQb2lNSWpzNy11Z1pzaURfc2w4bThjTDBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kOTBiOTctYWYxMC00MmM4LTgyZDIt ODQ4MTA0MmU5YTM1LzEvT2dQb2lNSWpzNy11Z1pzaURfc2w4bThjTDBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9kOTBiOTctYWYxMC00MmM4LTgyZDItODQ4MTA0MmU5YTM1 LzEvT2dQb2lNSWpzNy11Z1pzaURfc2w4bThjTDBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWFJ/NmY P7EiBGJA7Rj+Ak+EegKGuyMpRaoSXa5QodRZUWwwzot7NPj4LIvPr6hR8XaQsA8p g06FxZTy3+LgCKy+kKNE6077yiNsoSKh7ABmQ57HqfpaOhy/Joz4qB1O6xzolUxd Hk4IrrRgg/mZHwPnP9ZvwPniVYz2OQYl1yWbMUhrr4nFoYAPShIynqLC/HSJZzwv GtWu4aC6PvTa5vc3nEfXPZ0ivXsaz0bD9m5pi0D/uS2e2Yc2NDociottEdIFABRo +NOxPQQLsIPej/1kstX7ZyeKXBAd1a9dW5wpe4zS/FA2lJ9yI0mQ6fovYKu9NS+k 0vStKDQFnaRnkg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:55 2025 by rpki-client