This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft File: oGBriq1VPwlIx6iU1oZxhw64LLA.mft (raw, json) Hash identifier: XbTkuk5OHk/GKOpmtYrsYlR3aABArHFHLmXFCKPpUwI= Subject key identifier: 0D:DC:B3:44:BC:AF:BB:61:7E:C7:9D:94:DD:7C:9E:4B:47:FE:9A:66 Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0 Certificate issuer: /CN=a0606b8aad553f0948c7a894d68671870eb82cb0 Certificate serial: 019AF208BC259AB1BA3709D17ACFB2460965 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft Manifest number: 1567 Signing time: Sat 06 Dec 2025 05:00:49 +0000 Manifest this update: Sat 06 Dec 2025 05:00:49 +0000 Manifest next update: Sun 07 Dec 2025 05:00:49 +0000 Files and hashes: 1: KrIvvgvNcbldjoVbc0aYd49MKLk.roa (hash: Efb7XeSs1Qr2rRr6o/FWnq95UEV78aFPxWcZg4DCWHc=) 2: ZkYwAX8sFU0tx7MlmzFWDuReNoo.roa (hash: 1bC+YhGSYAmLg99m2lBrTp2m6aERC4TuVMQpOPNQzNM=) 3: coBIhj-g7a4t_QkFPEnA3t3TN8U.roa (hash: FMtCmhYv8BwdhkKpNroPbCbepJ79NGcx+1J9x7kaHKA=) 4: oGBriq1VPwlIx6iU1oZxhw64LLA.crl (hash: yBAk0XaISwq1aAM6NqB2MROHwmGptC3I8Sy8ZhDs9/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:bc:25:9a:b1:ba:37:09:d1:7a:cf:b2:46:09:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0 Validity Not Before: Dec 6 05:00:49 2025 GMT Not After : Dec 7 05:00:49 2025 GMT Subject: CN=0ddcb344bcafbb617ec79d94dd7c9e4b47fe9a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2f:97:77:9c:ad:30:d8:26:46:df:1c:74:ee: 30:03:8b:ed:cf:ce:c4:57:76:2f:c4:f4:12:a4:19: 2e:f0:90:d4:ba:a9:ae:08:62:1b:ed:e3:aa:b7:77: 38:29:3b:07:a2:32:13:5d:92:d6:fe:1b:fd:56:d3: 6f:7a:b2:09:75:b2:eb:3b:77:8d:1d:e1:11:22:e1: aa:c1:3d:74:f7:82:6b:22:e0:f7:e1:e4:65:2a:d6: a1:c0:9e:82:af:39:f0:43:83:db:d0:3f:5b:0c:b0: c0:02:b3:4c:c4:93:0d:f0:a6:4b:8c:2a:4d:5b:99: 87:d4:81:12:c7:d8:cb:f5:c0:b6:e8:74:b5:d1:a4: 8f:de:45:f7:d7:3a:87:6d:c7:74:e0:20:f4:47:4e: a9:72:4a:f3:d6:5e:22:e5:84:02:fc:5c:4e:d9:12: ca:d3:19:19:66:7e:35:84:9e:35:28:ac:bd:30:97: 95:eb:af:a9:77:22:d1:d9:51:4c:72:eb:3a:7a:fc: 1b:bd:6b:35:b6:26:99:0a:db:4c:a0:f3:40:1b:00: e7:33:27:3e:a8:6a:94:32:46:c4:1b:04:22:33:5d: 46:d7:81:6f:62:33:fa:38:7f:6e:f4:b6:32:e3:c5: 07:44:85:c9:35:71:cd:dd:96:c3:05:39:9e:90:50: f1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DC:B3:44:BC:AF:BB:61:7E:C7:9D:94:DD:7C:9E:4B:47:FE:9A:66 X509v3 Authority Key Identifier: keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:6d:2c:e9:ee:c3:76:b3:47:98:f0:f9:81:fd:15:2a:30:76: 52:30:a0:72:3e:d2:61:1f:a4:44:60:6e:a0:0a:60:79:34:cc: 4e:60:14:69:a6:38:e8:7b:eb:9b:ff:66:86:1c:02:6a:13:df: a6:a3:12:a2:12:f8:91:2a:e3:8b:17:ca:4f:a6:e6:53:69:a4: b8:d2:b2:f9:c0:2d:c3:fe:05:a2:88:fc:4a:d2:3b:ae:4b:ca: de:7f:8a:8a:17:3f:09:74:db:40:1f:21:e6:24:8e:0b:14:d7: ca:f2:d4:de:49:ed:f2:f3:de:34:48:0d:13:2d:91:13:f8:9b: 26:d1:c3:07:6a:cb:7e:0e:03:77:fe:f1:82:66:4e:d4:cf:02: b6:a3:f1:ae:29:69:f7:8f:86:97:42:ea:4a:b7:6f:bd:3a:a3: b6:15:9e:85:a7:90:9e:11:07:a7:4d:74:ca:9a:51:8b:f6:31: 0a:bc:86:cb:81:2c:ed:9e:19:e3:6d:ad:2a:71:a7:e2:b9:76: 3c:12:3b:67:fc:2f:20:93:31:d6:4c:86:e9:ba:96:f7:d2:9e: f7:67:00:bf:95:b0:6b:9a:dd:0e:4c:b2:98:93:72:7e:12:8b: 2c:66:dc:7f:1c:85:c5:0c:77:7b:e4:d7:23:9e:87:a3:a2:9e: 10:b0:5a:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLwlmrG6NwnRes+yRgllMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNjA2YjhhYWQ1NTNmMDk0OGM3YTg5NGQ2ODY3MTg3MGVi ODJjYjAwHhcNMjUxMjA2MDUwMDQ5WhcNMjUxMjA3MDUwMDQ5WjAzMTEwLwYDVQQD EygwZGRjYjM0NGJjYWZiYjYxN2VjNzlkOTRkZDdjOWU0YjQ3ZmU5YTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C+Xd5ytMNgmRt8cdO4wA4vtz87E V3YvxPQSpBku8JDUuqmuCGIb7eOqt3c4KTsHojITXZLW/hv9VtNverIJdbLrO3eN HeERIuGqwT1094JrIuD34eRlKtahwJ6CrznwQ4Pb0D9bDLDAArNMxJMN8KZLjCpN W5mH1IESx9jL9cC26HS10aSP3kX31zqHbcd04CD0R06pckrz1l4i5YQC/FxO2RLK 0xkZZn41hJ41KKy9MJeV66+pdyLR2VFMcus6evwbvWs1tiaZCttMoPNAGwDnMyc+ qGqUMkbEGwQiM11G14FvYjP6OH9u9LYy48UHRIXJNXHN3ZbDBTmekFDxlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3cs0S8r7thfsedlN18nktH/ppmMB8GA1UdIwQY MBaAFKBga4qtVT8JSMeolNaGcYcOuCywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85ZTJkZmQtZjJlOS00MTZkLThmMWYt YmIzNDMxZmUwMjg1LzEvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85ZTJkZmQtZjJlOS00MTZkLThmMWYtYmIzNDMxZmUwMjg1 LzEvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAam0s6e7D drNHmPD5gf0VKjB2UjCgcj7SYR+kRGBuoApgeTTMTmAUaaY46Hvrm/9mhhwCahPf pqMSohL4kSrjixfKT6bmU2mkuNKy+cAtw/4Fooj8StI7rkvK3n+Kihc/CXTbQB8h 5iSOCxTXyvLU3knt8vPeNEgNEy2RE/ibJtHDB2rLfg4Dd/7xgmZO1M8CtqPxrilp 94+Gl0LqSrdvvTqjthWehaeQnhEHp010yppRi/YxCryGy4Es7Z4Z422tKnGn4rl2 PBI7Z/wvIJMx1kyG6bqW99Ke92cAv5Wwa5rdDkyymJNyfhKLLGbcfxyFxQx3e+TX I56Ho6KeELBaZw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:07 2025 by rpki-client