This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft File: 43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json) Hash identifier: FWkyshq0RZqJ5/g35WscXqYQwWghsajlVGzz6S2kKNM= Subject key identifier: 44:D1:CB:24:F6:B2:26:FB:77:47:99:21:96:52:53:88:66:F9:AF:0C Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A Certificate issuer: /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a Certificate serial: 019AF50A33DAB3B0E8FCB8D246EA4FEB21FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft Manifest number: 13C6 Signing time: Sat 06 Dec 2025 19:01:17 +0000 Manifest this update: Sat 06 Dec 2025 19:01:17 +0000 Manifest next update: Sun 07 Dec 2025 19:01:17 +0000 Files and hashes: 1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: bYqWaHLzBDuBDJImh7oJnMhTW85aSRFPIAje+0zxnWM=) 2: 9PUwFWX6MI5zmQ2Oq6gL-_qhrj0.roa (hash: 3b0NbUCvSpLrWF4vh/o6Yjp7ddJczpbBr1onafxnYgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:33:da:b3:b0:e8:fc:b8:d2:46:ea:4f:eb:21:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a Validity Not Before: Dec 6 19:01:17 2025 GMT Not After : Dec 7 19:01:17 2025 GMT Subject: CN=44d1cb24f6b226fb774799219652538866f9af0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:17:63:65:8e:58:d1:6a:40:1c:d9:e0:93:01: 5b:fa:0a:50:4e:8a:cf:7e:54:51:31:de:e4:9e:8a: 68:62:2d:a6:ad:cb:f3:9d:ad:66:bc:08:79:11:33: 82:75:41:03:eb:ea:74:ad:bd:88:32:12:38:5d:7e: 27:de:4a:ba:75:f2:08:55:a7:60:d6:96:38:f9:d5: dd:16:bf:44:97:1e:51:4e:61:cc:c2:c2:39:70:55: 43:fb:37:56:c6:5c:aa:15:9a:a4:88:65:b1:25:93: 27:61:bf:ae:4a:8b:d0:ab:5e:f9:8b:45:38:57:cc: 58:8e:46:91:25:6a:18:e7:3f:10:83:3e:fa:4f:63: 78:60:c1:ba:97:5a:be:d6:ea:fa:4a:ec:b4:9e:9c: 23:bf:2c:4f:4c:8c:87:70:a7:a8:d6:69:bc:33:88: fc:0d:57:a5:46:15:bb:31:76:a2:3f:55:54:f9:a6: 0b:a1:ca:11:0b:1a:a0:e2:b5:97:28:cf:fa:33:60: 0e:79:58:d8:2f:21:76:11:18:ed:00:70:dc:ce:1b: 32:ee:44:e7:95:42:32:1b:ac:3c:a3:b9:39:d5:84: aa:0e:87:47:8c:7d:02:6b:a9:a3:87:08:5e:85:fc: c9:5d:18:cc:bb:fb:11:0a:8d:37:62:ca:64:1d:3b: 92:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D1:CB:24:F6:B2:26:FB:77:47:99:21:96:52:53:88:66:F9:AF:0C X509v3 Authority Key Identifier: keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:80:c3:b2:44:c0:7d:66:73:0f:d5:3a:5b:40:ba:58:98:6e: 8d:db:f6:1a:de:95:4e:65:9a:b0:29:3b:5c:2b:78:10:f6:af: 9b:e3:1b:f3:36:d8:ea:16:11:db:31:d2:6c:ef:56:29:cd:0c: 99:ce:29:aa:22:f4:68:fc:0e:1e:1c:93:47:7e:05:5f:64:f9: 0b:53:92:36:7a:ea:e5:fd:75:75:28:f2:42:93:87:cb:21:d5: 8f:6d:f0:86:2d:85:b1:0a:41:2d:1a:2d:fc:cc:f2:c5:90:8d: 38:42:38:38:25:b6:3c:22:ce:33:c1:6e:f3:d9:a2:23:50:02: ee:62:ca:80:9b:c4:f4:bc:1d:34:80:15:06:4f:89:79:b2:38: 80:7b:4c:df:f6:cf:d4:a6:92:08:7b:62:08:c8:81:c5:03:1f: fa:6d:f7:69:69:dc:e9:c2:5d:f0:4d:36:ef:9b:2e:2c:c4:0a: b9:70:eb:8f:72:6a:1c:62:4c:ec:91:5b:1f:ae:b2:90:44:af: 3c:8d:3f:a2:28:02:21:46:c7:91:6b:7c:80:fe:d0:54:16:0d: 0d:04:d6:c8:6f:e2:02:8b:37:81:84:a9:30:02:6c:61:e2:c0: ed:5c:63:27:7c:76:b1:2e:b9:f1:b2:f0:74:18:03:18:2a:8b: 17:db:da:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CjPas7Do/LjSRupP6yH+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2EyMGE3ZjI4YTgyNGY2NzMxNWE1NjZlNTkyNDRhYWE4 YzdkNGEwHhcNMjUxMjA2MTkwMTE3WhcNMjUxMjA3MTkwMTE3WjAzMTEwLwYDVQQD Eyg0NGQxY2IyNGY2YjIyNmZiNzc0Nzk5MjE5NjUyNTM4ODY2ZjlhZjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBdjZY5Y0WpAHNngkwFb+gpQTorP flRRMd7knopoYi2mrcvzna1mvAh5ETOCdUED6+p0rb2IMhI4XX4n3kq6dfIIVadg 1pY4+dXdFr9Elx5RTmHMwsI5cFVD+zdWxlyqFZqkiGWxJZMnYb+uSovQq175i0U4 V8xYjkaRJWoY5z8Qgz76T2N4YMG6l1q+1ur6Suy0npwjvyxPTIyHcKeo1mm8M4j8 DVelRhW7MXaiP1VU+aYLocoRCxqg4rWXKM/6M2AOeVjYLyF2ERjtAHDczhsy7kTn lUIyG6w8o7k51YSqDodHjH0Ca6mjhwhehfzJXRjMu/sRCo03YspkHTuSEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETRyyT2sib7d0eZIZZSU4hm+a8MMB8GA1UdIwQY MBaAFON6IKfyioJPZzFaVm5ZJEqqjH1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hYzU5OGYtNWY1Mi00MzMwLWIwMTMt NTcwNjllMDgwM2I1LzEvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hYzU5OGYtNWY1Mi00MzMwLWIwMTMtNTcwNjllMDgwM2I1 LzEvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4DDskTA fWZzD9U6W0C6WJhujdv2Gt6VTmWasCk7XCt4EPavm+Mb8zbY6hYR2zHSbO9WKc0M mc4pqiL0aPwOHhyTR34FX2T5C1OSNnrq5f11dSjyQpOHyyHVj23whi2FsQpBLRot /MzyxZCNOEI4OCW2PCLOM8Fu89miI1AC7mLKgJvE9LwdNIAVBk+JebI4gHtM3/bP 1KaSCHtiCMiBxQMf+m33aWnc6cJd8E0275suLMQKuXDrj3JqHGJM7JFbH66ykESv PI0/oigCIUbHkWt8gP7QVBYNDQTWyG/iAos3gYSpMAJsYeLA7VxjJ3x2sS658bLw dBgDGCqLF9vaFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:42:33 2025 by rpki-client