This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft File: m_OG1KjS4YgyzyP7819iQNuOokI.mft (raw, json) Hash identifier: p1iYTehlroc9DPYT1s1GiRIOhCKHSmECmfEMzsuMmXE= Subject key identifier: 9E:54:96:7E:E8:F2:49:1F:15:FF:2B:EA:C2:A4:8E:45:06:B6:8B:FC Authority key identifier: 9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42 Certificate issuer: /CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242 Certificate serial: 019B488218F62A97C0D8EC9E725DA84B3BC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft Manifest number: 02FE Signing time: Tue 23 Dec 2025 00:00:44 +0000 Manifest this update: Tue 23 Dec 2025 00:00:44 +0000 Manifest next update: Wed 24 Dec 2025 00:00:44 +0000 Files and hashes: 1: m_OG1KjS4YgyzyP7819iQNuOokI.crl (hash: 3X2hnxL2SwNZVA6JdwiqUkTR/uQrqt3Zv3CkcNxOSds=) 2: vvhtwRxSkAUJ1c-M3BxUohEySzg.roa (hash: 5peLctB/1NoUxBRjWB/Eva3roqPmaT0WkPw4865m1uE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:18:f6:2a:97:c0:d8:ec:9e:72:5d:a8:4b:3b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242 Validity Not Before: Dec 23 00:00:44 2025 GMT Not After : Dec 24 00:00:44 2025 GMT Subject: CN=9e54967ee8f2491f15ff2beac2a48e4506b68bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8d:64:bd:79:ee:cb:87:81:79:25:0c:b8:1d: f8:63:db:b0:bf:82:ec:a5:13:48:99:0e:89:06:55: fb:cd:20:4a:4a:5a:c2:5d:6c:88:e0:3c:a5:98:b9: b9:de:de:1a:d2:b3:89:30:e3:75:5b:8e:5a:33:da: be:75:d1:bb:cc:b1:60:cd:6e:2c:de:0b:de:f0:e3: c9:61:10:81:58:d6:cc:c7:33:a3:70:1c:eb:d6:56: 87:79:b3:db:fa:fc:47:58:b6:52:e9:c3:f4:53:4f: 1d:2d:31:db:fa:7e:99:ba:68:06:42:ba:74:49:42: 27:ec:78:eb:77:f1:9b:48:ca:e3:23:f2:5b:f7:9e: f5:85:50:c1:60:ed:16:d8:c7:00:00:16:db:4c:a1: 02:39:06:f8:1f:47:c6:00:d7:ea:5f:b6:8d:19:5c: e5:3b:2c:89:2e:50:04:72:55:12:54:c5:55:d2:80: d3:fb:a9:9b:c1:ca:0e:ea:0a:0e:8a:dd:41:2a:11: 52:e9:05:fe:c4:fe:7a:d9:d4:de:cf:e5:99:c5:4d: 7b:58:7a:eb:33:bd:e6:a2:a7:c6:5f:02:93:30:b3: a1:80:a6:0b:93:c9:2d:58:1f:cb:58:20:66:af:89: fa:65:89:5a:47:5b:f9:3e:72:9d:22:a0:04:86:8f: fb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:54:96:7E:E8:F2:49:1F:15:FF:2B:EA:C2:A4:8E:45:06:B6:8B:FC X509v3 Authority Key Identifier: keyid:9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:da:bd:46:f2:43:3f:00:c7:cc:22:e8:20:fd:79:60:64:5c: 21:54:53:a4:df:68:a0:ec:da:9b:48:9b:22:4b:bf:20:7f:d4: a5:ca:fc:46:0b:5a:6f:b9:95:58:b6:dc:aa:ad:b4:c9:8d:3e: fd:40:39:fd:ab:2a:9a:1b:90:83:10:61:dc:92:80:ad:fb:61: 8c:4f:a3:84:76:69:da:36:8c:fe:90:64:17:be:a8:f7:c4:e4: e6:0c:fc:b9:a8:3c:08:c5:73:d3:b2:b7:85:52:6f:31:4b:d5: 1e:b5:97:32:81:06:40:da:b8:26:d8:9e:d4:78:6e:7a:e2:9b: 7d:73:c0:a7:95:79:23:90:ca:22:6f:3c:b6:e6:cd:07:ce:ab: 56:2b:d3:38:7b:bc:c1:16:79:80:80:e9:a9:3d:54:54:07:61: d2:f6:af:18:b9:ac:3d:5b:62:d0:f1:54:7d:bc:43:82:67:dd: f8:f7:ed:56:3e:17:79:a8:16:0a:75:08:27:7f:0d:16:31:cb: 7f:68:8a:a4:df:d0:52:41:09:09:4c:1c:f0:ac:c9:a4:74:44: c6:5c:8a:73:eb:2a:af:32:fd:e5:1d:58:77:66:01:96:6f:5e: e7:45:4c:87:ab:be:13:1c:a7:e0:74:a4:9f:66:16:e5:12:3d: d0:49:1b:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIghj2KpfA2Oyecl2oSzvBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZjM4NmQ0YThkMmUxODgzMmNmMjNmYmYzNWY2MjQwZGI4 ZWEyNDIwHhcNMjUxMjIzMDAwMDQ0WhcNMjUxMjI0MDAwMDQ0WjAzMTEwLwYDVQQD Eyg5ZTU0OTY3ZWU4ZjI0OTFmMTVmZjJiZWFjMmE0OGU0NTA2YjY4YmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo1kvXnuy4eBeSUMuB34Y9uwv4Ls pRNImQ6JBlX7zSBKSlrCXWyI4DylmLm53t4a0rOJMON1W45aM9q+ddG7zLFgzW4s 3gve8OPJYRCBWNbMxzOjcBzr1laHebPb+vxHWLZS6cP0U08dLTHb+n6ZumgGQrp0 SUIn7Hjrd/GbSMrjI/Jb9571hVDBYO0W2McAABbbTKECOQb4H0fGANfqX7aNGVzl OyyJLlAEclUSVMVV0oDT+6mbwcoO6goOit1BKhFS6QX+xP562dTez+WZxU17WHrr M73moqfGXwKTMLOhgKYLk8ktWB/LWCBmr4n6ZYlaR1v5PnKdIqAEho/7dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5Uln7o8kkfFf8r6sKkjkUGtov8MB8GA1UdIwQY MBaAFJvzhtSo0uGIMs8j+/NfYkDbjqJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbV9PRzFLalM0WWd5enlQNzgxOWlRTnVPb2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82NDhiY2MtMDkxMS00ZjY0LWI2ZDEt MGEyZjI5YWVjZGIzLzEvbV9PRzFLalM0WWd5enlQNzgxOWlRTnVPb2tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi82NDhiY2MtMDkxMS00ZjY0LWI2ZDEtMGEyZjI5YWVjZGIz LzEvbV9PRzFLalM0WWd5enlQNzgxOWlRTnVPb2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9q9RvJD PwDHzCLoIP15YGRcIVRTpN9ooOzam0ibIku/IH/Upcr8Rgtab7mVWLbcqq20yY0+ /UA5/asqmhuQgxBh3JKArfthjE+jhHZp2jaM/pBkF76o98Tk5gz8uag8CMVz07K3 hVJvMUvVHrWXMoEGQNq4Jtie1HhueuKbfXPAp5V5I5DKIm88tubNB86rVivTOHu8 wRZ5gIDpqT1UVAdh0vavGLmsPVti0PFUfbxDgmfd+PftVj4XeagWCnUIJ38NFjHL f2iKpN/QUkEJCUwc8KzJpHRExlyKc+sqrzL95R1Yd2YBlm9e50VMh6u+Exyn4HSk n2YW5RI90EkbTQ== -----END CERTIFICATE-----Generated at Tue Dec 23 06:04:53 2025 by rpki-client