This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft File: ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json) Hash identifier: 8AJb+ZPtTbuUCh/IPVU1KuX09xwGFgxOLuHI3UAMcxk= Subject key identifier: 54:47:C9:5C:C7:C8:08:8F:14:47:8A:A4:67:A0:CB:99:64:2F:DD:FC Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56 Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56 Certificate serial: 019B413682D1F71A011BC9502D8F15C07183 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft Manifest number: 178F Signing time: Sun 21 Dec 2025 14:00:49 +0000 Manifest this update: Sun 21 Dec 2025 14:00:49 +0000 Manifest next update: Mon 22 Dec 2025 14:00:49 +0000 Files and hashes: 1: 1xcc1SYILBbx3rhR6psLH4-mx1k.roa (hash: YY5s2ur+NPzr2i2PTIla4YnYnzjA2lNDUiBFlQTWU6s=) 2: DzgRwer0SyfEiMUBymVa3GjZBhc.roa (hash: H6oc5ilH3tnHz0hpCDXzWc1+BWJ5xndGPAgz0hIghPU=) 3: KSs1jOl2vQ2T9aBxS53muqbkeek.roa (hash: k6xoKkAhl7uyLISVfEu/5MO1xlAN4gAUOxN8werJasI=) 4: MOUd9P1Za8GRPdMhCv16TQcZqEA.roa (hash: 8oyYfQSDjCb57ReEl42i/Xt+XFMdZ0eQkDpTIRHnmxA=) 5: TCJElgSSWTdNPCx4HtGVjoR5OHE.roa (hash: qYI1zk90mfrJGyeYZUA0ZHtzOK7fZWd1alNZdeo0gHI=) 6: hzVSMi0KPzevpyomB4cUEWfY6i0.roa (hash: g4+WSmI6cNmxYSAsnD6CO/MARE1+j6J4yksR/5LsuhM=) 7: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: oxKtQE6x5G6I1PUPaURhH4teEOn9MZFtWPuG5c7EOkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:82:d1:f7:1a:01:1b:c9:50:2d:8f:15:c0:71:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56 Validity Not Before: Dec 21 14:00:49 2025 GMT Not After : Dec 22 14:00:49 2025 GMT Subject: CN=5447c95cc7c8088f14478aa467a0cb99642fddfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:78:1a:08:4c:70:96:35:16:50:bf:04:b9:f6: 21:b0:14:95:d7:6f:82:b1:aa:d4:5e:b1:2d:0a:c8: 6b:73:bf:0a:01:b9:7c:d6:8e:96:a2:97:8f:4f:34: fe:46:3d:cb:6b:34:10:0f:34:83:25:7f:b0:8a:39: ab:6c:6f:ce:a4:aa:f0:f5:e6:4b:8c:d8:dd:e4:d1: 42:96:c1:56:88:2e:9a:db:b6:fa:d4:61:1b:56:b5: 10:6c:95:72:87:55:cc:9b:59:ff:0c:8d:92:4c:c6: 77:bc:f0:0d:99:83:ea:fe:be:a5:48:51:68:47:9f: d4:89:e5:0b:c5:74:3d:00:47:84:b5:dc:4d:a5:42: df:dd:b5:f3:71:df:7e:f9:a4:b9:cd:95:86:91:3b: 4f:a3:82:3e:2a:42:d5:76:10:78:e8:fb:32:27:7a: 34:61:a1:07:9d:21:22:37:5b:69:a4:f1:23:ca:a5: f2:31:a4:35:d2:55:44:b6:6f:66:9f:56:5b:70:c2: ee:95:70:18:87:96:38:fd:b6:19:09:f4:7b:3b:d1: cb:b9:a0:30:4e:7f:34:03:00:2b:ee:75:69:4a:4e: 25:af:b9:81:91:6a:d5:3a:4c:b7:d1:7a:ec:4a:5e: d8:f5:3d:a8:f2:97:80:aa:d3:98:aa:1d:a9:d4:c4: 27:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:47:C9:5C:C7:C8:08:8F:14:47:8A:A4:67:A0:CB:99:64:2F:DD:FC X509v3 Authority Key Identifier: keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ff:52:5b:8d:73:4f:e7:97:80:8d:cd:ec:16:8c:0a:55:15: 90:a0:f1:96:b8:7a:2b:99:a4:0c:5a:d7:05:af:4f:1e:a7:64: 1d:9d:91:f4:4f:ce:c2:4c:4b:14:6b:55:61:76:35:e6:45:82: 74:df:aa:69:2e:8a:57:49:94:49:90:74:e3:6d:60:24:26:14: db:2e:a0:56:2a:0e:e1:b3:57:dd:7d:3e:ae:3e:0d:b5:a0:99: 14:80:32:9b:38:bb:91:60:b9:fd:e4:30:5f:6c:fa:12:08:7f: 1e:a7:d9:89:87:d6:0c:fb:e0:4f:9d:a6:b0:2e:ef:d9:ca:12: 2b:64:9c:f5:24:17:f5:29:27:f3:39:7f:0c:ab:86:98:42:ae: 46:98:77:ca:4f:52:93:22:a0:a2:3e:4e:17:bd:c2:f9:5e:c5: 11:b3:07:f8:11:24:03:ab:66:a5:06:55:d9:d9:37:cf:cd:83: 9c:f5:cf:83:c0:38:95:d8:e5:3a:09:2d:75:64:67:78:93:6d: 23:96:3e:bf:1d:59:54:90:40:37:9d:4b:ad:c9:09:f4:39:22: f0:01:ff:e9:6d:f6:9a:69:42:33:6d:5d:8a:8e:7f:9a:de:33: 4a:d3:44:f6:44:76:76:2b:b3:44:1f:01:da:04:7f:bd:64:15: 9d:5e:fa:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNoLR9xoBG8lQLY8VwHGDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDc0MzM5YmIyMTZiODViZGM4M2Q2MTc3ODgyMWFkZjkx NDlkNTYwHhcNMjUxMjIxMTQwMDQ5WhcNMjUxMjIyMTQwMDQ5WjAzMTEwLwYDVQQD Eyg1NDQ3Yzk1Y2M3YzgwODhmMTQ0NzhhYTQ2N2EwY2I5OTY0MmZkZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHgaCExwljUWUL8EufYhsBSV12+C sarUXrEtCshrc78KAbl81o6WopePTzT+Rj3LazQQDzSDJX+wijmrbG/OpKrw9eZL jNjd5NFClsFWiC6a27b61GEbVrUQbJVyh1XMm1n/DI2STMZ3vPANmYPq/r6lSFFo R5/UieULxXQ9AEeEtdxNpULf3bXzcd9++aS5zZWGkTtPo4I+KkLVdhB46PsyJ3o0 YaEHnSEiN1tppPEjyqXyMaQ10lVEtm9mn1ZbcMLulXAYh5Y4/bYZCfR7O9HLuaAw Tn80AwAr7nVpSk4lr7mBkWrVOky30XrsSl7Y9T2o8peAqtOYqh2p1MQnuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRHyVzHyAiPFEeKpGegy5lkL938MB8GA1UdIwQY MBaAFKIHQzm7IWuFvcg9YXeIIa35FJ1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NzFiMzQtYWNmOS00ZWJmLTk4OGIt MGZlYjY2ZTdmMjhhLzEvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81NzFiMzQtYWNmOS00ZWJmLTk4OGItMGZlYjY2ZTdmMjhh LzEvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGv9SW41z T+eXgI3N7BaMClUVkKDxlrh6K5mkDFrXBa9PHqdkHZ2R9E/OwkxLFGtVYXY15kWC dN+qaS6KV0mUSZB0421gJCYU2y6gVioO4bNX3X0+rj4NtaCZFIAymzi7kWC5/eQw X2z6Egh/HqfZiYfWDPvgT52msC7v2coSK2Sc9SQX9Skn8zl/DKuGmEKuRph3yk9S kyKgoj5OF73C+V7FEbMH+BEkA6tmpQZV2dk3z82DnPXPg8A4ldjlOgktdWRneJNt I5Y+vx1ZVJBAN51LrckJ9Dki8AH/6W32mmlCM21dio5/mt4zStNE9kR2diuzRB8B 2gR/vWQVnV767A== -----END CERTIFICATE-----Generated at Sun Dec 21 21:13:36 2025 by rpki-client