This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json) Hash identifier: IIDOS1VXfEwFcgT9u19TdQTx3htgi3MJPyz1Pzu35B8= Subject key identifier: 1C:AA:40:85:21:9F:86:75:54:54:17:D3:F7:69:E4:46:24:C2:67:C9 Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61 Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561 Certificate serial: 019B2D790FF2B3195D3A788B469A3453BC51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft Manifest number: 09AD Signing time: Wed 17 Dec 2025 18:01:07 +0000 Manifest this update: Wed 17 Dec 2025 18:01:07 +0000 Manifest next update: Thu 18 Dec 2025 18:01:07 +0000 Files and hashes: 1: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: QYUZ8hyrMS4eXyXD3e++oQnd5GhQ8LafxVpY+CDzLNY=) 2: QLu-t4-kWwjTWD2HUVQ3JUjA93E.roa (hash: wwPcnLN7UsFWJVqWb0xH9PzsYRh1MZUdzN16ZynKLqU=) 3: X9-z3qhXpej4BCNHXlOlwIoxiSI.roa (hash: +XeMFApgKN+wHjuGvI8Wb1xE1s+7UuhIUkYxW35SfdA=) 4: hwkpF7GCiN1Fi1Bf-G_kcCT7lXg.roa (hash: owUDYc5hXMNAaSpXWFyOh6YRLado21xVEXGeqVIdneY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:79:0f:f2:b3:19:5d:3a:78:8b:46:9a:34:53:bc:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561 Validity Not Before: Dec 17 18:01:07 2025 GMT Not After : Dec 18 18:01:07 2025 GMT Subject: CN=1caa4085219f8675545417d3f769e44624c267c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6c:31:61:5f:86:72:5f:05:ae:a0:d9:6b:61: e4:cb:d9:d7:b9:69:40:a5:49:37:af:08:4e:1e:a4: 50:b4:d3:59:5d:4b:ea:15:f2:46:d4:66:80:4d:87: 46:c1:3a:08:5f:1a:31:5a:5d:74:58:39:63:81:ae: d5:67:6c:84:e2:92:8e:f1:15:cf:ea:f9:bb:83:e2: 48:1e:82:57:14:54:3f:44:3e:82:86:82:ba:e9:c4: af:fe:ab:b6:4e:7a:1b:c6:db:03:d7:d8:b6:d0:fc: 9e:66:40:59:ea:3e:3b:c1:33:01:2f:93:f0:76:b0: f2:9b:d5:96:7a:4e:aa:51:d4:f4:ab:32:c3:5f:2d: 79:99:f3:37:ad:3b:f7:dd:f8:ab:05:92:c3:88:bb: e6:b8:ec:fa:ed:5f:3a:8a:eb:0c:82:16:ae:15:d0: 44:dc:0e:c7:b1:db:5f:cc:77:38:74:40:fe:54:d4: 7b:15:5c:54:26:f0:4e:38:82:b0:f1:06:81:19:84: da:38:dd:04:d6:f2:21:97:46:dd:42:8c:34:bf:91: 83:03:00:05:a6:35:16:f3:f1:04:f5:60:2e:48:5c: b4:1d:44:72:fa:63:ea:39:61:6b:1c:fd:87:04:2d: db:f4:65:73:f6:88:12:da:5c:07:bc:5d:53:85:8e: c9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AA:40:85:21:9F:86:75:54:54:17:D3:F7:69:E4:46:24:C2:67:C9 X509v3 Authority Key Identifier: keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b2:81:96:82:ac:49:8d:97:e2:07:ec:e1:64:4d:fa:05:46: 10:b1:5f:54:05:78:84:da:d8:a3:db:c4:89:85:b5:70:5e:ea: 5d:50:eb:8b:f4:9d:48:29:ad:d2:2f:40:10:7d:80:d5:53:35: 17:b4:89:99:18:e7:6a:0a:6f:17:bd:c5:c0:16:86:5f:e1:6a: 2f:b6:12:b1:58:00:05:90:de:d6:99:64:15:8c:7f:60:b1:c9: f0:cf:61:03:8a:75:d0:df:06:2f:64:48:bb:4e:25:5e:bb:5a: 76:b9:16:b8:0f:ba:ce:20:11:5e:84:e5:eb:72:c0:09:4e:2a: b6:42:94:5e:70:7c:3a:3c:5a:ba:c3:c6:e8:d0:32:0a:f4:5a: 78:09:e4:1e:1f:1e:db:80:f9:f2:c1:71:0f:29:6e:6f:15:b5: 63:83:a6:81:f7:3d:6e:11:7b:6e:94:c6:eb:de:8f:84:d1:c9: da:dc:75:7e:7a:2c:66:a7:a4:54:6c:82:dd:56:b0:9a:2e:64: 0b:8e:e3:cb:e7:1a:3e:2d:23:20:90:6c:35:d9:66:39:f2:ee: 7a:b7:d1:10:29:b6:74:9f:00:c1:1c:8c:8b:27:58:9f:06:04: e1:aa:ff:1f:d9:6a:16:ec:4e:90:37:66:3c:05:95:73:5c:3c: 6c:99:a5:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteQ/ysxldOniLRpo0U7xRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDQyOWI1YWVjYWM4MzY0NTQ0YmY2MjNmOTRmMTYzYWZk Y2U1NjEwHhcNMjUxMjE3MTgwMTA3WhcNMjUxMjE4MTgwMTA3WjAzMTEwLwYDVQQD EygxY2FhNDA4NTIxOWY4Njc1NTQ1NDE3ZDNmNzY5ZTQ0NjI0YzI2N2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGwxYV+Gcl8FrqDZa2Hky9nXuWlA pUk3rwhOHqRQtNNZXUvqFfJG1GaATYdGwToIXxoxWl10WDljga7VZ2yE4pKO8RXP 6vm7g+JIHoJXFFQ/RD6ChoK66cSv/qu2TnobxtsD19i20PyeZkBZ6j47wTMBL5Pw drDym9WWek6qUdT0qzLDXy15mfM3rTv33firBZLDiLvmuOz67V86iusMghauFdBE 3A7HsdtfzHc4dED+VNR7FVxUJvBOOIKw8QaBGYTaON0E1vIhl0bdQow0v5GDAwAF pjUW8/EE9WAuSFy0HURy+mPqOWFrHP2HBC3b9GVz9ogS2lwHvF1ThY7JcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByqQIUhn4Z1VFQX0/dp5EYkwmfJMB8GA1UdIwQY MBaAFDoEKbWuysg2RUS/Yj+U8WOv3OVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEt ODQ3MTJjOWYzNDY0LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEtODQ3MTJjOWYzNDY0 LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsbKBloKs SY2X4gfs4WRN+gVGELFfVAV4hNrYo9vEiYW1cF7qXVDri/SdSCmt0i9AEH2A1VM1 F7SJmRjnagpvF73FwBaGX+FqL7YSsVgABZDe1plkFYx/YLHJ8M9hA4p10N8GL2RI u04lXrtadrkWuA+6ziARXoTl63LACU4qtkKUXnB8OjxausPG6NAyCvRaeAnkHh8e 24D58sFxDylubxW1Y4Omgfc9bhF7bpTG696PhNHJ2tx1fnosZqekVGyC3Vawmi5k C47jy+caPi0jIJBsNdlmOfLuerfRECm2dJ8AwRyMiydYnwYE4ar/H9lqFuxOkDdm PAWVc1w8bJmlRA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:39:26 2025 by rpki-client