This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft File: ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft (raw, json) Hash identifier: kkU22pbXRnttQPhJNxIfTEOzoORV3QXW397Y2dXY7FU= Subject key identifier: F3:FC:C3:B4:69:FF:64:A6:42:D9:8E:BA:1A:12:95:DE:E6:D9:9E:E8 Authority key identifier: A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF Certificate issuer: /CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf Certificate serial: 019B3C7EEBC08C15DD71BA5F7E196788F284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft Manifest number: 0CBA Signing time: Sat 20 Dec 2025 16:01:49 +0000 Manifest this update: Sat 20 Dec 2025 16:01:49 +0000 Manifest next update: Sun 21 Dec 2025 16:01:49 +0000 Files and hashes: 1: FyzxwbgLSadTJLpy9TRdd9F-gGk.roa (hash: iyPnEDozqJhAVhpqbdklx7ETcR+WTKfp9SYU0Q+jnpE=) 2: ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl (hash: nFpXFQTlToOWbQADRPbgHrZvDfBExrYAqIE8P4snLvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:eb:c0:8c:15:dd:71:ba:5f:7e:19:67:88:f2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf Validity Not Before: Dec 20 16:01:49 2025 GMT Not After : Dec 21 16:01:49 2025 GMT Subject: CN=f3fcc3b469ff64a642d98eba1a1295dee6d99ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:39:aa:c0:dd:51:d6:12:e8:20:c6:05:7c:ae: 9c:f9:5b:0c:74:d4:dc:7f:eb:2c:d6:6d:7f:85:a8: 74:b1:84:cb:04:9c:88:4e:ab:23:99:87:ad:37:fa: ef:e7:9e:a7:2c:e6:2e:e5:4b:f7:cf:d3:d6:69:fa: 21:1e:d7:5e:9b:2c:51:d5:c5:e9:96:a6:c0:6e:d7: 22:ad:d7:65:96:ee:69:d3:81:4c:d9:c7:d3:8e:ad: d9:ae:84:50:fe:2c:89:34:ca:36:d1:9b:bc:72:cf: 06:0a:a8:e0:ef:d3:ce:6c:04:f8:5b:5f:6c:63:c6: fd:5c:e5:42:15:94:45:59:31:37:00:83:3d:bc:3b: 00:1e:5a:4d:74:76:fc:8f:9c:6a:58:9f:46:90:f9: 60:a3:eb:95:68:45:60:42:ca:f5:85:4c:79:5d:f4: 3a:29:d9:d2:a5:ef:e5:83:7a:97:5b:12:78:08:85: ea:b9:5f:20:fd:8d:82:16:91:63:ac:c3:ba:f8:2d: 7f:67:46:b2:1e:22:67:65:a3:96:a4:c3:6e:63:c3: c4:18:62:2b:29:41:6d:8b:94:46:00:9f:23:4a:84: f9:5a:1f:3e:1f:41:44:19:7b:09:bc:85:1f:db:b1: a3:ce:7a:8e:62:13:ad:bb:a7:d9:b6:66:eb:76:fe: 98:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FC:C3:B4:69:FF:64:A6:42:D9:8E:BA:1A:12:95:DE:E6:D9:9E:E8 X509v3 Authority Key Identifier: keyid:A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:d9:b7:57:3f:22:9a:9b:4a:5f:4c:a3:0d:d0:16:2b:f4:f9: 13:cf:25:98:f8:c0:02:31:79:6d:2a:8e:5b:b9:82:2f:df:05: 2e:03:ea:5c:f9:1d:1c:00:08:3b:e6:67:27:c1:a7:77:96:f4: b6:20:f3:3d:81:fb:9b:c2:8a:22:62:ed:2d:6f:49:30:f0:84: ce:ce:dc:d8:ca:c5:0a:88:1f:b5:de:d3:40:6a:4f:cf:56:46: e0:c8:f7:fb:b9:20:82:74:99:bc:e6:45:82:d1:f9:e1:48:b2: 69:e9:6f:c9:83:e0:f9:ed:84:9f:3d:36:f0:37:cd:4a:42:34: e3:88:58:f0:a4:26:03:c0:04:ef:88:98:9c:b2:b1:96:9a:da: 1a:32:cf:70:0a:0c:08:ac:a3:df:bc:d5:31:8a:a8:9c:f6:73: 4b:1c:a7:9d:49:ce:49:b2:3a:03:a7:4c:4a:b2:8e:c7:31:cd: 20:a4:8b:a4:ae:37:ce:04:28:ca:7e:b6:ac:91:08:76:27:b5: 33:8a:d7:0c:b6:b7:44:c6:9f:47:29:73:2c:c8:40:17:2f:a6: af:fc:7b:b9:6f:94:e6:b2:45:64:f5:05:d2:1b:86:af:6c:ab: 34:79:63:7a:6e:f0:1f:8b:8f:38:59:fd:ae:d5:35:d1:1c:e3: a3:5c:01:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fuvAjBXdcbpffhlniPKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDZkZmZmYWIxZDUxOGMxMzJmNmQ1NmQ4ZDRhMzFkOTA1 OWY0YmYwHhcNMjUxMjIwMTYwMTQ5WhcNMjUxMjIxMTYwMTQ5WjAzMTEwLwYDVQQD EyhmM2ZjYzNiNDY5ZmY2NGE2NDJkOThlYmExYTEyOTVkZWU2ZDk5ZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjmqwN1R1hLoIMYFfK6c+VsMdNTc f+ss1m1/hah0sYTLBJyITqsjmYetN/rv556nLOYu5Uv3z9PWafohHtdemyxR1cXp lqbAbtcirddllu5p04FM2cfTjq3ZroRQ/iyJNMo20Zu8cs8GCqjg79PObAT4W19s Y8b9XOVCFZRFWTE3AIM9vDsAHlpNdHb8j5xqWJ9GkPlgo+uVaEVgQsr1hUx5XfQ6 KdnSpe/lg3qXWxJ4CIXquV8g/Y2CFpFjrMO6+C1/Z0ayHiJnZaOWpMNuY8PEGGIr KUFti5RGAJ8jSoT5Wh8+H0FEGXsJvIUf27GjznqOYhOtu6fZtmbrdv6YDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPP8w7Rp/2SmQtmOuhoSld7m2Z7oMB8GA1UdIwQY MBaAFKIG3/+rHVGMEy9tVtjUox2QWfS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mNTkzMWUtMGY4NC00MGJkLWFkMGEt NjcxYTFmMGFmMDU5LzEvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mNTkzMWUtMGY4NC00MGJkLWFkMGEtNjcxYTFmMGFmMDU5 LzEvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNm3Vz8i mptKX0yjDdAWK/T5E88lmPjAAjF5bSqOW7mCL98FLgPqXPkdHAAIO+ZnJ8Gnd5b0 tiDzPYH7m8KKImLtLW9JMPCEzs7c2MrFCogftd7TQGpPz1ZG4Mj3+7kggnSZvOZF gtH54UiyaelvyYPg+e2Enz028DfNSkI044hY8KQmA8AE74iYnLKxlpraGjLPcAoM CKyj37zVMYqonPZzSxynnUnOSbI6A6dMSrKOxzHNIKSLpK43zgQoyn62rJEIdie1 M4rXDLa3RMafRylzLMhAFy+mr/x7uW+U5rJFZPUF0huGr2yrNHljem7wH4uPOFn9 rtU10Rzjo1wBGA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:47:30 2025 by rpki-client