This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft File: OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft (raw, json) Hash identifier: RC4ge1vQM2uh/eJK/8xOJZL+Z3dazOGOqYlRDFu7Fs4= Subject key identifier: 73:E8:3F:D5:14:23:32:05:3C:AD:FD:FF:76:E8:D5:D8:DC:D6:23:64 Authority key identifier: 38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58 Certificate issuer: /CN=386ab970bfb6947597e97cefb916ec76a0c56858 Certificate serial: 019B3D90842D6B2B97616B4A881CF7818F8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 21:00:39 +0000 Manifest this update: Sat 20 Dec 2025 21:00:39 +0000 Manifest next update: Sun 21 Dec 2025 21:00:39 +0000 Files and hashes: 1: I01Lo7qwhvaLI2U54ucZ10pkExs.roa (hash: mTrGRc4f1Skt/0lHfZ3XZbVEvrQ9mBUuWZXJpIXORz4=) 2: OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl (hash: sbgXq5qwbOxlLYPO7XbQ3neUvaaB2NehwDMda6gU3L8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:84:2d:6b:2b:97:61:6b:4a:88:1c:f7:81:8f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=386ab970bfb6947597e97cefb916ec76a0c56858 Validity Not Before: Dec 20 21:00:39 2025 GMT Not After : Dec 21 21:00:39 2025 GMT Subject: CN=73e83fd5142332053cadfdff76e8d5d8dcd62364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:21:52:9f:2f:6a:a7:bf:4a:fb:b7:10:fe:fe: 09:77:9c:61:11:97:4c:26:3a:80:22:f8:ee:ea:e2: cf:a7:ce:e5:10:2d:ba:5e:f5:4d:e7:28:b8:19:06: bb:fe:9b:59:e2:c4:dd:43:0a:be:42:34:24:68:75: 47:04:91:53:c1:bf:87:95:db:ab:0e:ef:7f:83:5a: 70:4c:77:51:ad:69:93:13:33:b9:93:03:67:e1:31: 65:5b:8d:5c:dc:4c:35:8c:1f:0c:19:82:cf:dc:a1: 7d:fa:a3:28:f5:dd:5e:3a:c7:09:cb:d1:29:da:6d: ad:6d:85:70:69:78:ae:62:39:aa:bb:5e:d6:59:78: 46:18:4e:98:0f:6d:90:d9:c2:c7:9a:1b:77:ba:95: 63:52:0f:50:cd:b7:2e:8e:ce:38:0d:01:67:4e:f3: e9:84:39:e2:3e:42:a6:17:34:75:ae:9f:2e:99:2b: d0:89:e9:0e:2a:b1:15:73:21:cb:9e:39:c6:23:4e: 4b:c7:08:09:14:ae:9c:fa:e1:fb:b3:cd:70:2e:91: df:8a:c2:29:f2:a7:81:33:e4:d7:ae:e6:72:2e:a2: 71:4d:77:a9:55:a1:57:53:e1:58:3c:33:a1:45:f9: 2b:28:fa:a9:3f:12:41:63:ea:b9:23:45:8e:8b:60: e7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E8:3F:D5:14:23:32:05:3C:AD:FD:FF:76:E8:D5:D8:DC:D6:23:64 X509v3 Authority Key Identifier: keyid:38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:93:9a:31:22:5a:f7:db:14:bc:7f:15:28:1b:8e:ff:9c:29: 88:ce:30:14:97:1e:7f:10:71:8b:14:79:1c:4f:ac:4a:a7:7c: 40:c5:17:bf:e2:07:22:80:95:b8:96:b9:3f:9a:fa:9f:49:ac: 61:a7:4a:01:3d:d7:55:a4:b0:67:bf:6e:c5:c3:8b:44:91:26: 87:e2:56:65:0d:47:4b:85:61:ea:31:73:7d:74:69:fe:dc:01: 71:63:14:a1:c8:89:22:34:3e:f9:84:af:42:2d:6d:7a:bb:86: d2:0f:63:67:30:25:1e:2c:1d:c5:a5:be:0c:a1:e2:46:81:53: 13:0b:a8:cc:df:43:dc:bc:c9:a2:00:b5:fb:c6:a8:73:c7:09: f8:1d:51:b7:b6:c8:8b:9c:9e:88:ac:2a:5e:8a:45:78:6b:d6: 55:4b:70:c4:52:de:28:f2:3b:16:5a:05:d6:82:75:83:eb:8c: a0:3c:dc:11:09:96:ca:81:f9:08:81:3a:7d:47:89:ff:15:94: 38:3a:82:3c:c6:9b:b0:37:93:68:4a:32:8b:ec:b6:cf:40:bc: 2e:92:2b:16:53:89:83:89:9c:63:1c:d4:30:b9:e5:10:ec:35: a2:ba:2e:da:e0:fe:f3:45:19:b7:e8:a1:48:3c:4f:33:ea:b0: 02:c8:16:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kIQtayuXYWtKiBz3gY+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NmFiOTcwYmZiNjk0NzU5N2U5N2NlZmI5MTZlYzc2YTBj NTY4NTgwHhcNMjUxMjIwMjEwMDM5WhcNMjUxMjIxMjEwMDM5WjAzMTEwLwYDVQQD Eyg3M2U4M2ZkNTE0MjMzMjA1M2NhZGZkZmY3NmU4ZDVkOGRjZDYyMzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SFSny9qp79K+7cQ/v4Jd5xhEZdM JjqAIvju6uLPp87lEC26XvVN5yi4GQa7/ptZ4sTdQwq+QjQkaHVHBJFTwb+Hldur Du9/g1pwTHdRrWmTEzO5kwNn4TFlW41c3Ew1jB8MGYLP3KF9+qMo9d1eOscJy9Ep 2m2tbYVwaXiuYjmqu17WWXhGGE6YD22Q2cLHmht3upVjUg9Qzbcujs44DQFnTvPp hDniPkKmFzR1rp8umSvQiekOKrEVcyHLnjnGI05LxwgJFK6c+uH7s81wLpHfisIp 8qeBM+TXruZyLqJxTXepVaFXU+FYPDOhRfkrKPqpPxJBY+q5I0WOi2DnwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPoP9UUIzIFPK39/3bo1djc1iNkMB8GA1UdIwQY MBaAFDhquXC/tpR1l+l877kW7HagxWhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0dxNWNMLTJsSFdYNlh6dnVSYnNkcURGYUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC80MWZkYTktOTcwMi00NThkLTk4MmYt OGQxMTI1N2Q0YWY2LzEvT0dxNWNMLTJsSFdYNlh6dnVSYnNkcURGYUZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC80MWZkYTktOTcwMi00NThkLTk4MmYtOGQxMTI1N2Q0YWY2 LzEvT0dxNWNMLTJsSFdYNlh6dnVSYnNkcURGYUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJOaMSJa 99sUvH8VKBuO/5wpiM4wFJcefxBxixR5HE+sSqd8QMUXv+IHIoCVuJa5P5r6n0ms YadKAT3XVaSwZ79uxcOLRJEmh+JWZQ1HS4Vh6jFzfXRp/twBcWMUociJIjQ++YSv Qi1teruG0g9jZzAlHiwdxaW+DKHiRoFTEwuozN9D3LzJogC1+8aoc8cJ+B1Rt7bI i5yeiKwqXopFeGvWVUtwxFLeKPI7FloF1oJ1g+uMoDzcEQmWyoH5CIE6fUeJ/xWU ODqCPMabsDeTaEoyi+y2z0C8LpIrFlOJg4mcYxzUMLnlEOw1orou2uD+80UZt+ih SDxPM+qwAsgWoA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:03:10 2025 by rpki-client