This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft File: ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json) Hash identifier: tipLYbayEJObaifli9nxnGUEbdXmqGB4Nlwk8pSOD8M= Subject key identifier: 84:D9:D8:86:7F:5B:87:3A:85:E2:6E:37:46:1C:D0:D6:C8:06:A7:6D Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56 Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56 Certificate serial: 019B3D59E70AD2DE6010186C61D286591726 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 20:01:00 +0000 Manifest this update: Sat 20 Dec 2025 20:01:00 +0000 Manifest next update: Sun 21 Dec 2025 20:01:00 +0000 Files and hashes: 1: 1xcc1SYILBbx3rhR6psLH4-mx1k.roa (hash: YY5s2ur+NPzr2i2PTIla4YnYnzjA2lNDUiBFlQTWU6s=) 2: DzgRwer0SyfEiMUBymVa3GjZBhc.roa (hash: H6oc5ilH3tnHz0hpCDXzWc1+BWJ5xndGPAgz0hIghPU=) 3: KSs1jOl2vQ2T9aBxS53muqbkeek.roa (hash: k6xoKkAhl7uyLISVfEu/5MO1xlAN4gAUOxN8werJasI=) 4: MOUd9P1Za8GRPdMhCv16TQcZqEA.roa (hash: 8oyYfQSDjCb57ReEl42i/Xt+XFMdZ0eQkDpTIRHnmxA=) 5: TCJElgSSWTdNPCx4HtGVjoR5OHE.roa (hash: qYI1zk90mfrJGyeYZUA0ZHtzOK7fZWd1alNZdeo0gHI=) 6: hzVSMi0KPzevpyomB4cUEWfY6i0.roa (hash: g4+WSmI6cNmxYSAsnD6CO/MARE1+j6J4yksR/5LsuhM=) 7: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: S1ZO3YcCv3utIRfKbpTS/QFifzTI8WqlmIvztidBc9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:e7:0a:d2:de:60:10:18:6c:61:d2:86:59:17:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56 Validity Not Before: Dec 20 20:01:00 2025 GMT Not After : Dec 21 20:01:00 2025 GMT Subject: CN=84d9d8867f5b873a85e26e37461cd0d6c806a76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ec:91:14:35:0f:a3:b2:37:7a:04:a5:15:09: c7:21:49:3f:01:5b:a0:8e:0f:c5:b0:c8:02:7b:d0: 24:47:b0:e6:c6:b5:9d:14:e2:03:2e:60:9f:af:b2: bd:63:74:05:a0:44:a0:c1:a4:10:70:26:15:14:c4: ca:75:9f:32:c6:c2:d2:a4:34:9d:62:0f:14:04:23: 68:9e:47:52:cc:95:e3:f2:74:93:2a:32:9a:6d:4a: a7:7a:fa:5b:4b:0a:cb:63:2d:7a:36:94:c1:ef:1d: f4:16:2b:8c:5a:c7:b6:df:7d:13:1c:9c:59:87:10: 55:1f:3b:ce:0b:8f:92:b2:1b:2f:4d:fa:f2:a1:db: bf:8d:1c:1a:13:0b:dc:7c:30:7b:4d:69:75:b0:d0: 70:30:38:30:07:3b:8b:dc:2b:26:5b:44:1a:57:a6: a5:0f:38:36:71:46:9d:44:af:9b:57:4d:0d:a0:15: e7:b0:14:38:8d:33:0c:cb:01:f6:dc:a1:0e:c9:50: c4:af:cb:41:18:9f:60:58:6d:50:40:e7:f0:3b:a4: 4e:9d:20:e4:1b:ee:72:5b:e3:9e:7e:0e:a8:38:28: 39:84:0f:16:0b:04:43:de:01:9d:86:ff:21:af:83: 57:6c:f2:59:ba:27:ca:f6:98:39:a7:61:d2:32:ad: ce:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D9:D8:86:7F:5B:87:3A:85:E2:6E:37:46:1C:D0:D6:C8:06:A7:6D X509v3 Authority Key Identifier: keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ee:09:31:a6:b6:9b:c7:d4:d5:63:66:45:36:db:15:13:eb: ac:c8:bc:09:71:c6:46:99:8f:3d:44:ae:56:36:85:7b:34:65: 9f:90:7c:cd:5d:ef:12:cc:62:54:d4:e5:8f:dd:6d:a0:40:aa: 0d:14:e9:37:fe:63:d9:81:5e:12:96:5d:63:4d:89:ac:44:dd: 1c:55:b9:60:b0:6f:c2:8f:6d:fa:4f:79:6e:e2:63:b5:62:9c: 47:fa:6b:69:8c:a3:8f:3a:6a:20:af:0a:8d:a8:14:2d:21:e2: fb:67:4c:2c:f6:87:ac:10:40:29:09:3a:2a:9b:43:fb:ba:e8: 68:19:52:d2:44:74:de:f2:c6:71:8e:38:3d:de:de:6f:6c:cc: 8f:bd:e7:ce:f4:63:13:e4:81:88:82:07:f1:eb:83:55:6a:58: ce:78:94:a2:84:af:82:c1:b0:6d:cc:d0:e8:09:20:74:6f:6f: 72:f5:48:2e:a6:94:a6:10:df:7f:6c:1c:e7:b9:17:a4:c0:17: cf:d3:f1:0a:e4:d9:be:06:f7:02:9a:40:d2:7a:8d:2a:7c:2c: 75:10:e6:bc:d0:b4:51:f8:3b:88:bc:a6:e9:b5:69:ab:ba:65: b4:5e:eb:9b:f8:03:d5:01:1d:cd:f9:d2:f8:71:bc:fa:3a:a3: f9:5a:86:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WecK0t5gEBhsYdKGWRcmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDc0MzM5YmIyMTZiODViZGM4M2Q2MTc3ODgyMWFkZjkx NDlkNTYwHhcNMjUxMjIwMjAwMTAwWhcNMjUxMjIxMjAwMTAwWjAzMTEwLwYDVQQD Eyg4NGQ5ZDg4NjdmNWI4NzNhODVlMjZlMzc0NjFjZDBkNmM4MDZhNzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+yRFDUPo7I3egSlFQnHIUk/AVug jg/FsMgCe9AkR7DmxrWdFOIDLmCfr7K9Y3QFoESgwaQQcCYVFMTKdZ8yxsLSpDSd Yg8UBCNonkdSzJXj8nSTKjKabUqnevpbSwrLYy16NpTB7x30FiuMWse2330THJxZ hxBVHzvOC4+SshsvTfryodu/jRwaEwvcfDB7TWl1sNBwMDgwBzuL3CsmW0QaV6al Dzg2cUadRK+bV00NoBXnsBQ4jTMMywH23KEOyVDEr8tBGJ9gWG1QQOfwO6ROnSDk G+5yW+Oefg6oOCg5hA8WCwRD3gGdhv8hr4NXbPJZuifK9pg5p2HSMq3OjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITZ2IZ/W4c6heJuN0Yc0NbIBqdtMB8GA1UdIwQY MBaAFKIHQzm7IWuFvcg9YXeIIa35FJ1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NzFiMzQtYWNmOS00ZWJmLTk4OGIt MGZlYjY2ZTdmMjhhLzEvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81NzFiMzQtYWNmOS00ZWJmLTk4OGItMGZlYjY2ZTdmMjhh LzEvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfO4JMaa2 m8fU1WNmRTbbFRPrrMi8CXHGRpmPPUSuVjaFezRln5B8zV3vEsxiVNTlj91toECq DRTpN/5j2YFeEpZdY02JrETdHFW5YLBvwo9t+k95buJjtWKcR/praYyjjzpqIK8K jagULSHi+2dMLPaHrBBAKQk6KptD+7roaBlS0kR03vLGcY44Pd7eb2zMj73nzvRj E+SBiIIH8euDVWpYzniUooSvgsGwbczQ6AkgdG9vcvVILqaUphDff2wc57kXpMAX z9PxCuTZvgb3AppA0nqNKnwsdRDmvNC0Ufg7iLym6bVpq7pltF7rm/gD1QEdzfnS +HG8+jqj+VqGbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:22 2025 by rpki-client