This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft File: Og6YCIquzFusI9Wg5intsMVT5y4.mft (raw, json) Hash identifier: uEa3/gD7fP44Yv7FFZa71jpEcecqMdBt7HoRRWpYyak= Subject key identifier: 5F:0A:F5:04:9E:45:19:80:ED:D5:98:FC:39:F2:AA:F5:8F:81:4E:AF Authority key identifier: 3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E Certificate issuer: /CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e Certificate serial: 019B32D6EBF87D7CACEA11515A644057D944 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft Manifest number: 139F Signing time: Thu 18 Dec 2025 19:01:44 +0000 Manifest this update: Thu 18 Dec 2025 19:01:44 +0000 Manifest next update: Fri 19 Dec 2025 19:01:44 +0000 Files and hashes: 1: Og6YCIquzFusI9Wg5intsMVT5y4.crl (hash: SSCaPvQKLWRJ1Kzt5ZvO8ANWQ1XqwJFGljw7n00CQtY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:eb:f8:7d:7c:ac:ea:11:51:5a:64:40:57:d9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e Validity Not Before: Dec 18 19:01:44 2025 GMT Not After : Dec 19 19:01:44 2025 GMT Subject: CN=5f0af5049e451980edd598fc39f2aaf58f814eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2f:eb:e7:20:b7:f8:da:49:8b:ea:5c:69:7f: 64:11:e5:82:0f:ff:b8:1d:f6:47:1d:68:a2:fb:e8: 0a:8d:3c:8f:9f:68:f8:fe:0f:b0:9a:be:a4:eb:49: 27:6e:4e:1f:9c:3b:3d:e7:ea:91:b4:0d:9f:6d:18: 48:e3:ca:8a:6d:a5:58:28:fa:ec:1d:32:e3:e1:ee: 09:b3:1e:16:6a:7f:0f:f1:4b:bb:00:30:24:18:b7: 3c:ff:ec:cd:f8:51:01:95:38:1a:ef:88:99:35:2d: f2:ec:a0:39:48:79:51:c8:4e:49:4a:91:89:07:6b: 90:2b:87:17:2b:db:a4:b5:1e:5a:41:45:e5:84:17: 1a:f0:a9:d5:9c:71:e6:57:97:6b:6f:3e:c8:b9:e3: 0b:ee:fe:7e:48:da:ea:c6:42:4e:1a:89:dd:53:b2: e9:ce:ea:c5:99:7b:2c:75:dc:55:7a:61:5c:73:69: b1:74:cc:28:43:4d:4a:d7:cf:23:ec:eb:45:6e:4f: 81:ac:96:c1:88:ea:60:5a:1d:38:31:42:e9:8c:16: 84:5c:e1:01:69:db:ba:89:ab:21:21:77:b5:e2:f7: 64:af:c7:20:92:ab:d6:bf:bf:b5:fc:ca:db:0d:66: d4:82:f1:c2:db:b9:c4:c1:d8:a0:47:33:2f:f1:8a: 27:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0A:F5:04:9E:45:19:80:ED:D5:98:FC:39:F2:AA:F5:8F:81:4E:AF X509v3 Authority Key Identifier: keyid:3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:33:2a:5d:49:6a:15:3a:f8:15:6d:72:77:50:0b:a4:87:c9: 2a:ef:c8:35:cf:be:04:ab:58:04:af:17:81:0c:93:a9:fb:ce: b6:e6:1e:7e:62:3a:16:67:79:f1:d1:2b:fb:da:c5:33:dc:47: 9f:16:73:b4:82:70:ef:b0:b1:83:d9:27:57:93:ad:d3:7b:6a: 53:23:27:b3:24:f6:f6:c5:ea:fe:30:09:bd:2b:21:cd:06:bf: 27:8c:71:08:9f:62:de:e9:c5:6b:b9:aa:66:5f:43:f4:d5:ac: 97:0b:a9:26:3d:7a:a9:f7:0f:d4:b1:47:a6:0e:5b:6f:9c:6d: 0e:14:df:64:1d:17:82:f7:74:35:c9:e0:ab:86:f8:35:ff:6b: 3d:e3:23:01:b6:a3:80:2e:f9:30:5a:3c:a1:b1:e4:18:b5:99: 93:91:ce:f0:bf:ba:1d:53:d9:0d:7c:a3:74:29:70:c5:b8:c5: 71:63:77:84:f9:77:cd:93:27:a0:17:3a:e5:95:e7:3d:0d:fb: b7:09:6f:90:6d:06:34:a9:62:7c:dc:a7:83:cc:bc:8a:83:d3: 35:ed:49:c2:e0:9d:3e:41:39:77:32:22:d0:38:7f:3d:6a:4e: 4b:b3:95:b5:e7:da:b9:39:16:d6:05:82:29:dc:79:f0:8a:14: 16:b4:93:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1uv4fXys6hFRWmRAV9lEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGU5ODA4OGFhZWNjNWJhYzIzZDVhMGU2MjllZGIwYzU1 M2U3MmUwHhcNMjUxMjE4MTkwMTQ0WhcNMjUxMjE5MTkwMTQ0WjAzMTEwLwYDVQQD Eyg1ZjBhZjUwNDllNDUxOTgwZWRkNTk4ZmMzOWYyYWFmNThmODE0ZWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC/r5yC3+NpJi+pcaX9kEeWCD/+4 HfZHHWii++gKjTyPn2j4/g+wmr6k60knbk4fnDs95+qRtA2fbRhI48qKbaVYKPrs HTLj4e4Jsx4Wan8P8Uu7ADAkGLc8/+zN+FEBlTga74iZNS3y7KA5SHlRyE5JSpGJ B2uQK4cXK9uktR5aQUXlhBca8KnVnHHmV5drbz7IueML7v5+SNrqxkJOGondU7Lp zurFmXssddxVemFcc2mxdMwoQ01K188j7OtFbk+BrJbBiOpgWh04MULpjBaEXOEB adu6iashIXe14vdkr8cgkqvWv7+1/MrbDWbUgvHC27nEwdigRzMv8YonqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8K9QSeRRmA7dWY/DnyqvWPgU6vMB8GA1UdIwQY MBaAFDoOmAiKrsxbrCPVoOYp7bDFU+cuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2c2WUNJcXV6RnVzSTlXZzVpbnRzTVZUNXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85YmEzODUtNmM3Yy00MzA3LTk5NDYt YTVjZDhlMjIxNDZiLzEvT2c2WUNJcXV6RnVzSTlXZzVpbnRzTVZUNXk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS85YmEzODUtNmM3Yy00MzA3LTk5NDYtYTVjZDhlMjIxNDZi LzEvT2c2WUNJcXV6RnVzSTlXZzVpbnRzTVZUNXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALzMqXUlq FTr4FW1yd1ALpIfJKu/INc++BKtYBK8XgQyTqfvOtuYefmI6Fmd58dEr+9rFM9xH nxZztIJw77Cxg9knV5Ot03tqUyMnsyT29sXq/jAJvSshzQa/J4xxCJ9i3unFa7mq Zl9D9NWslwupJj16qfcP1LFHpg5bb5xtDhTfZB0Xgvd0Ncngq4b4Nf9rPeMjAbaj gC75MFo8obHkGLWZk5HO8L+6HVPZDXyjdClwxbjFcWN3hPl3zZMnoBc65ZXnPQ37 twlvkG0GNKlifNyng8y8ioPTNe1JwuCdPkE5dzIi0Dh/PWpOS7OVtefauTkW1gWC Kdx58IoUFrST4w== -----END CERTIFICATE-----Generated at Fri Dec 19 01:22:29 2025 by rpki-client