This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft File: ojguLlS2Dx9o-FyYTaGmljHFLKg.mft (raw, json) Hash identifier: PGd9t14tnTEM988pnsCTapnXNCxVRimwsA6Nj7CWF4g= Subject key identifier: 92:36:6D:8D:B3:1F:FF:AA:39:F3:22:4B:4F:D8:4A:5B:19:79:47:17 Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8 Certificate issuer: /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8 Certificate serial: 019B44377DAD158CCB9230C4377F08DB911C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft Manifest number: 043C Signing time: Mon 22 Dec 2025 04:00:45 +0000 Manifest this update: Mon 22 Dec 2025 04:00:45 +0000 Manifest next update: Tue 23 Dec 2025 04:00:45 +0000 Files and hashes: 1: ojguLlS2Dx9o-FyYTaGmljHFLKg.crl (hash: n4NzNt1ucjVf7xp2MkrngT7xCl67V0AITuMVJYliecw=) 2: tgYGsGAPJ3naxRJ-JjQBKL1Vj7c.roa (hash: cPWgxwQyZuH/gL73No34Pn5M4vHlmORZov0bMnwx4CM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:7d:ad:15:8c:cb:92:30:c4:37:7f:08:db:91:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8 Validity Not Before: Dec 22 04:00:45 2025 GMT Not After : Dec 23 04:00:45 2025 GMT Subject: CN=92366d8db31fffaa39f3224b4fd84a5b19794717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:53:fa:a2:30:db:e4:ca:05:aa:13:cc:2f:12: 79:01:e5:33:c8:f1:33:41:d1:04:df:3f:8c:6e:92: a0:76:10:5f:e7:9b:b1:72:9d:51:6c:38:79:2e:65: 34:4f:f0:68:56:39:ac:50:57:a8:4c:d8:f6:87:45: 1a:50:dd:ca:03:8c:28:81:c2:99:2d:cc:bb:3e:84: 4b:89:d2:0b:fb:f3:bb:72:9f:59:0c:c8:9c:4c:03: fd:e8:2e:31:3b:70:af:5e:04:40:5b:0d:17:50:6f: e3:58:ae:60:2b:aa:d8:38:f5:93:08:d2:d5:a1:8b: f7:21:2b:73:e7:1b:6a:2a:25:c8:8b:8b:9b:84:10: c0:d3:e4:54:3c:ae:de:8a:0e:13:ad:45:09:3c:36: 12:f6:2f:1d:1e:f4:69:d7:62:16:03:fe:65:b7:06: cf:4d:7f:cc:0e:98:a5:ee:d2:92:04:61:a4:d5:ae: 53:a5:f4:66:0e:eb:b9:f1:88:5b:7c:2a:95:da:4e: 79:eb:52:8c:d5:7b:01:35:6c:f3:1e:8c:ce:88:45: 49:bf:cd:4f:a5:64:88:88:22:be:1e:44:2d:22:4e: 62:34:c0:ce:72:ef:38:34:69:3b:b8:f2:83:66:51: 96:d6:ba:a6:36:01:d3:52:cb:52:2c:9d:ac:08:17: 0b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:36:6D:8D:B3:1F:FF:AA:39:F3:22:4B:4F:D8:4A:5B:19:79:47:17 X509v3 Authority Key Identifier: keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9f:15:6b:96:0c:bd:64:d1:96:a4:89:b7:ba:28:12:84:23: d3:94:ca:35:8e:df:99:b6:b4:5f:cf:af:15:ce:90:ea:0d:fc: 90:bf:e0:59:34:7b:5e:a9:4a:00:33:b3:cf:53:01:e6:49:dc: 19:33:ec:fd:ec:23:e6:20:f9:bb:c8:4a:fa:94:35:81:2c:a9: 70:70:09:55:ad:79:e6:03:14:69:d0:fa:28:3a:3e:e2:73:c1: fc:71:de:8b:b6:31:e7:ea:a2:94:fb:49:f5:d8:a0:e4:0c:47: 96:4f:a0:2d:f3:fb:40:2e:fb:de:13:50:ee:78:00:05:0f:dd: e7:7e:d6:c1:ee:d3:7b:f7:91:03:57:dc:bb:be:9a:2e:16:42: 33:08:52:5d:fc:43:58:80:6b:ac:bf:9b:8e:ce:a9:88:ec:65: ec:47:8c:13:52:df:43:34:85:be:dc:ff:3c:38:a3:c5:3c:27: 98:d8:36:02:9b:4b:d3:6e:84:03:36:b5:23:a4:cb:ef:ee:62: 36:0d:1c:d6:12:3f:8e:fc:eb:19:49:c1:1a:3d:78:e8:4c:56: 64:87:c3:15:86:bd:e4:88:41:97:ac:c0:a3:4b:ea:f3:2e:88: 1b:30:cd:b0:1a:94:7d:3b:0f:60:0f:b0:3e:ed:7d:73:07:aa: 5b:d7:14:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN32tFYzLkjDEN38I25EcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMzgyZTJlNTRiNjBmMWY2OGY4NWM5ODRkYTFhNjk2MzFj NTJjYTgwHhcNMjUxMjIyMDQwMDQ1WhcNMjUxMjIzMDQwMDQ1WjAzMTEwLwYDVQQD Eyg5MjM2NmQ4ZGIzMWZmZmFhMzlmMzIyNGI0ZmQ4NGE1YjE5Nzk0NzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlP6ojDb5MoFqhPMLxJ5AeUzyPEz QdEE3z+MbpKgdhBf55uxcp1RbDh5LmU0T/BoVjmsUFeoTNj2h0UaUN3KA4wogcKZ Lcy7PoRLidIL+/O7cp9ZDMicTAP96C4xO3CvXgRAWw0XUG/jWK5gK6rYOPWTCNLV oYv3IStz5xtqKiXIi4ubhBDA0+RUPK7eig4TrUUJPDYS9i8dHvRp12IWA/5ltwbP TX/MDpil7tKSBGGk1a5TpfRmDuu58YhbfCqV2k5561KM1XsBNWzzHozOiEVJv81P pWSIiCK+HkQtIk5iNMDOcu84NGk7uPKDZlGW1rqmNgHTUstSLJ2sCBcLswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJI2bY2zH/+qOfMiS0/YSlsZeUcXMB8GA1UdIwQY MBaAFKI4Li5Utg8faPhcmE2hppYxxSyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2pndUxsUzJEeDlvLUZ5WVRhR21sakhGTEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NGFhM2EtNDczZC00ZmI1LTkwMzgt ODFkMTMwNGZhZjc2LzEvb2pndUxsUzJEeDlvLUZ5WVRhR21sakhGTEtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83NGFhM2EtNDczZC00ZmI1LTkwMzgtODFkMTMwNGZhZjc2 LzEvb2pndUxsUzJEeDlvLUZ5WVRhR21sakhGTEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJ8Va5YM vWTRlqSJt7ooEoQj05TKNY7fmba0X8+vFc6Q6g38kL/gWTR7XqlKADOzz1MB5knc GTPs/ewj5iD5u8hK+pQ1gSypcHAJVa155gMUadD6KDo+4nPB/HHei7Yx5+qilPtJ 9dig5AxHlk+gLfP7QC773hNQ7ngABQ/d537Wwe7Te/eRA1fcu76aLhZCMwhSXfxD WIBrrL+bjs6piOxl7EeME1LfQzSFvtz/PDijxTwnmNg2AptL026EAza1I6TL7+5i Ng0c1hI/jvzrGUnBGj146ExWZIfDFYa95IhBl6zAo0vq8y6IGzDNsBqUfTsPYA+w Pu19cweqW9cUHw== -----END CERTIFICATE-----Generated at Mon Dec 22 08:07:53 2025 by rpki-client