This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft File: mOGPra73Iy0xYYhqy-qKsyPPNXA.mft (raw, json) Hash identifier: wcGuzxnUzlNBLjCQPyvBprjqgwLKtUG0mfeKeqPPedg= Subject key identifier: 47:AB:44:F1:10:B4:E5:63:6F:E0:A9:DD:8B:68:36:5A:85:EC:51:C2 Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70 Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570 Certificate serial: 019B39467856CD7548A420E8A27E83C78A4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft Manifest number: 04D9 Signing time: Sat 20 Dec 2025 01:01:18 +0000 Manifest this update: Sat 20 Dec 2025 01:01:18 +0000 Manifest next update: Sun 21 Dec 2025 01:01:18 +0000 Files and hashes: 1: VpkCsO4Sj1kfftcY5G5XJmTJEG0.roa (hash: ETNkYiblCUpkwdU3IL2iumD+BXzDHtOGaGe3dN4NhPg=) 2: erMk5yuryhZB_ZV-dGn9yf-aRpI.roa (hash: g/Q0NWNaVho78aB7txRveS1/ldgfqH8Be/gkNubWJao=) 3: mOGPra73Iy0xYYhqy-qKsyPPNXA.crl (hash: jOe73IqXPt5MqDQfvXB5J5dry6OeYdXV2yeV+AX/f6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:78:56:cd:75:48:a4:20:e8:a2:7e:83:c7:8a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570 Validity Not Before: Dec 20 01:01:18 2025 GMT Not After : Dec 21 01:01:18 2025 GMT Subject: CN=47ab44f110b4e5636fe0a9dd8b68365a85ec51c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c9:b3:da:9c:72:f9:a9:0f:38:04:74:73:bd: 6d:07:d7:d3:3a:5e:91:a5:46:ca:82:f6:77:6e:be: b5:57:6f:fb:d2:cc:46:9c:01:83:30:c1:d6:82:de: 13:f1:74:68:c1:f4:57:cc:d3:36:27:7d:23:24:ba: 3b:26:2a:be:75:ce:79:7b:a2:99:d4:1f:60:94:b1: a4:aa:f2:a2:c5:8a:5d:a1:14:88:9e:a0:1f:af:f9: ee:e5:53:57:a8:74:df:70:57:c8:5a:29:c5:a2:df: 8c:67:ca:6f:d4:99:9d:05:33:2b:ba:1f:b2:96:97: 36:ca:39:f8:4b:28:61:79:84:07:37:e1:65:0e:25: ae:f7:bc:8f:de:4b:14:1d:db:81:cf:7c:b5:19:23: c7:37:72:6b:29:ad:54:d6:17:89:3a:52:65:bb:ba: b8:ba:31:7a:ea:4e:57:b9:47:e1:23:a9:2e:3b:ab: 2a:cd:4b:c1:d8:46:41:3e:09:78:ab:98:2e:37:2b: dd:c3:58:11:ff:0f:6d:51:30:ab:18:e6:ee:43:32: 57:9d:17:5c:d8:c1:f1:91:fb:65:7a:26:95:4b:54: 05:6a:31:b2:58:5c:f1:db:9b:60:b1:54:9d:8a:f8: 2e:11:db:ab:33:14:5c:7e:e8:29:b1:fb:7f:7e:cd: 22:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AB:44:F1:10:B4:E5:63:6F:E0:A9:DD:8B:68:36:5A:85:EC:51:C2 X509v3 Authority Key Identifier: keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d1:5c:44:86:21:77:b0:db:ea:6d:02:21:5c:a1:b2:a5:71: bd:2d:7a:43:22:9e:f4:39:6e:09:b7:23:e3:e1:7f:b5:b8:fa: fe:f8:93:f6:27:27:7e:cb:75:13:c8:d1:dc:2a:d8:6f:22:89: 2d:43:55:8c:65:4e:2c:87:34:0b:84:1a:63:6d:80:67:87:07: 20:01:23:86:b5:06:f0:7d:a7:0d:e9:41:52:f3:20:ad:51:9d: 49:d2:a8:33:7a:c1:c5:32:9f:ea:7e:15:9e:23:f1:3d:39:6a: 45:33:18:52:fd:93:17:ac:8e:70:f1:a6:8f:6a:0d:0d:f1:95: c1:5d:16:d0:79:2c:f2:8b:77:e7:75:ab:a6:1c:32:34:1b:f6: 47:a9:87:54:f6:20:2f:81:e9:b1:89:ea:24:93:d3:c8:3e:bd: 3a:f1:d4:2f:a1:18:cd:8c:2f:72:ee:79:d5:1e:01:9d:8c:e7: ce:92:f5:91:22:e6:96:44:ad:ec:9f:c1:1c:71:66:e9:61:81: 92:1d:5b:59:6b:90:35:76:90:f2:72:86:f1:a3:bd:74:05:1c: 02:d6:ac:97:43:32:fc:ab:18:6c:70:5d:be:50:79:c5:60:a5: 91:d5:eb:12:af:59:0b:77:d2:04:cb:16:c6:7b:2b:cc:92:b7: 98:da:46:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RnhWzXVIpCDoon6Dx4pNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZTE4ZmFkYWVmNzIzMmQzMTYxODg2YWNiZWE4YWIzMjNj ZjM1NzAwHhcNMjUxMjIwMDEwMTE4WhcNMjUxMjIxMDEwMTE4WjAzMTEwLwYDVQQD Eyg0N2FiNDRmMTEwYjRlNTYzNmZlMGE5ZGQ4YjY4MzY1YTg1ZWM1MWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMmz2pxy+akPOAR0c71tB9fTOl6R pUbKgvZ3br61V2/70sxGnAGDMMHWgt4T8XRowfRXzNM2J30jJLo7Jiq+dc55e6KZ 1B9glLGkqvKixYpdoRSInqAfr/nu5VNXqHTfcFfIWinFot+MZ8pv1JmdBTMruh+y lpc2yjn4SyhheYQHN+FlDiWu97yP3ksUHduBz3y1GSPHN3JrKa1U1heJOlJlu7q4 ujF66k5XuUfhI6kuO6sqzUvB2EZBPgl4q5guNyvdw1gR/w9tUTCrGObuQzJXnRdc 2MHxkftleiaVS1QFajGyWFzx25tgsVSdivguEdurMxRcfugpsft/fs0igQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEerRPEQtOVjb+Cp3YtoNlqF7FHCMB8GA1UdIwQY MBaAFJjhj62u9yMtMWGIasvqirMjzzVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wZjE4ZGYtMjZlZi00ZWM2LTg2Njct NzIxODg1NTY0NmUzLzEvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8wZjE4ZGYtMjZlZi00ZWM2LTg2NjctNzIxODg1NTY0NmUz LzEvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdFcRIYh d7Db6m0CIVyhsqVxvS16QyKe9DluCbcj4+F/tbj6/viT9icnfst1E8jR3CrYbyKJ LUNVjGVOLIc0C4QaY22AZ4cHIAEjhrUG8H2nDelBUvMgrVGdSdKoM3rBxTKf6n4V niPxPTlqRTMYUv2TF6yOcPGmj2oNDfGVwV0W0Hks8ot353WrphwyNBv2R6mHVPYg L4HpsYnqJJPTyD69OvHUL6EYzYwvcu551R4BnYznzpL1kSLmlkSt7J/BHHFm6WGB kh1bWWuQNXaQ8nKG8aO9dAUcAtasl0My/KsYbHBdvlB5xWClkdXrEq9ZC3fSBMsW xnsrzJK3mNpG/A== -----END CERTIFICATE-----Generated at Sat Dec 20 06:08:40 2025 by rpki-client