This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft File: ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json) Hash identifier: 2/MLSQk8Rar0zJc2HYtpqF1L2PF7N3DQpBHu+jlCj3o= Subject key identifier: B6:2D:66:D0:59:4B:35:94:24:CC:B9:47:6D:A1:2F:35:BA:D0:03:3B Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1 Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1 Certificate serial: 019B48F0214BA79E272C87714FE772E4EB43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft Manifest number: 0497 Signing time: Tue 23 Dec 2025 02:00:55 +0000 Manifest this update: Tue 23 Dec 2025 02:00:55 +0000 Manifest next update: Wed 24 Dec 2025 02:00:55 +0000 Files and hashes: 1: Hg_LuWwF2PqnDP--QEmiR8s_JMw.roa (hash: pTVkg9vcSnhojGDdhaJdcSnTn9EzuAwvN69LeVjj+eI=) 2: ZyIFjDXNoQmTUrQTfRFil604EkI.roa (hash: w5vJh9LGNygfKftlkH12Umx5kIPwjNAoWDXEhQaobKc=) 3: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: 2udu4da98vnuo/b3dHf399Og2/VPXM9/AKvwO0Q0hsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:21:4b:a7:9e:27:2c:87:71:4f:e7:72:e4:eb:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1 Validity Not Before: Dec 23 02:00:55 2025 GMT Not After : Dec 24 02:00:55 2025 GMT Subject: CN=b62d66d0594b359424ccb9476da12f35bad0033b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:d5:e3:e2:e1:7b:1e:89:56:3f:79:c3:aa: 08:a5:1d:13:55:5e:ba:16:f5:b9:b7:e4:56:7c:c0: 01:97:35:6d:a7:bb:03:28:91:b8:14:d5:a8:d2:16: d2:b6:6a:78:06:ff:59:48:ad:32:8c:a1:9a:3a:e4: 5f:5b:e5:9f:d5:46:36:d2:e9:8d:dd:af:cb:69:16: ee:84:c6:91:03:0c:cf:9e:33:8a:92:bc:30:43:34: 69:69:4d:2c:6a:36:2e:4c:8f:4a:2f:75:4c:1f:9e: 04:5c:aa:66:da:49:46:8b:19:c2:15:63:db:f5:1e: d4:f4:99:bf:67:fc:1a:b3:ab:c0:d4:cd:9c:a8:f4: 61:65:0e:9d:64:f0:5e:4c:06:14:13:e9:13:54:d3: 2b:00:9d:93:9a:a4:61:03:f8:f8:bb:86:25:90:52: 17:e4:00:d5:e6:b4:bb:0c:5f:19:b5:96:8f:cb:9c: 75:fb:55:07:f9:e9:4a:d1:f1:b4:13:fc:46:e8:48: 3a:57:a6:8e:1c:aa:6b:f9:de:41:ec:9e:00:48:4d: e7:59:4f:f4:8a:53:13:29:f3:07:2f:3b:f1:f2:f7: f8:c5:df:eb:90:75:9d:02:e3:d4:c8:ba:48:cb:56: 48:2f:6a:9c:85:08:a6:00:fb:a5:e5:6d:53:5b:82: 14:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2D:66:D0:59:4B:35:94:24:CC:B9:47:6D:A1:2F:35:BA:D0:03:3B X509v3 Authority Key Identifier: keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:d2:ff:f6:9c:c4:4d:e7:c1:1a:bd:df:94:e1:40:ab:9e:4c: 39:01:bb:e7:c3:95:69:6b:de:6c:a1:d0:2e:e6:c6:e9:18:76: 49:38:05:b2:c4:84:ce:29:af:89:81:5b:1f:85:d2:45:7e:62: 2b:e0:41:7a:5e:41:a0:8e:22:d0:84:4f:cd:9b:2a:7e:86:e1: d5:9a:3a:de:b4:af:ed:35:98:47:97:07:5d:ab:0b:a7:e7:e5: 4c:fb:4d:93:8a:64:fb:75:95:bb:5a:c4:bd:84:87:37:60:b8: 42:46:5f:e4:75:27:ce:53:d7:cb:9c:34:5d:80:b6:ec:8c:2d: be:eb:19:97:62:62:7e:bc:81:a4:71:2d:e2:45:05:77:c1:27: 99:99:ef:3f:f6:d9:58:0d:94:57:ba:f3:7f:78:be:ff:59:71: 73:d0:37:27:72:25:b1:d6:d0:cb:27:8f:e4:c1:66:8d:29:f0: 61:ba:e6:3d:41:e4:9d:45:fc:b0:92:aa:d2:3a:1c:0f:f3:a0: d6:89:cd:6f:3c:04:23:c8:37:50:48:c8:52:0e:e1:2d:05:8d: 44:7e:b8:3d:f7:58:2f:25:83:ca:d4:12:04:96:27:b5:c7:06: 94:8c:f1:ff:d7:e2:94:4a:e7:fc:57:e3:83:ff:78:bd:d8:47: 5c:25:dd:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8CFLp54nLIdxT+dy5OtDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDAxODY0OGM3YWZhMTQ0NDY0ZDQ3YmIxZTJjYjJiYTc4 NmViYjEwHhcNMjUxMjIzMDIwMDU1WhcNMjUxMjI0MDIwMDU1WjAzMTEwLwYDVQQD EyhiNjJkNjZkMDU5NGIzNTk0MjRjY2I5NDc2ZGExMmYzNWJhZDAwMzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudfV4+Lhex6JVj95w6oIpR0TVV66 FvW5t+RWfMABlzVtp7sDKJG4FNWo0hbStmp4Bv9ZSK0yjKGaOuRfW+Wf1UY20umN 3a/LaRbuhMaRAwzPnjOKkrwwQzRpaU0sajYuTI9KL3VMH54EXKpm2klGixnCFWPb 9R7U9Jm/Z/was6vA1M2cqPRhZQ6dZPBeTAYUE+kTVNMrAJ2TmqRhA/j4u4YlkFIX 5ADV5rS7DF8ZtZaPy5x1+1UH+elK0fG0E/xG6Eg6V6aOHKpr+d5B7J4ASE3nWU/0 ilMTKfMHLzvx8vf4xd/rkHWdAuPUyLpIy1ZIL2qchQimAPul5W1TW4IUXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYtZtBZSzWUJMy5R22hLzW60AM7MB8GA1UdIwQY MBaAFKIAGGSMevoURGTUe7HiyyunhuuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dBWVpJeDYtaFJFWk5SN3NlTExLNmVHNjdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84M2E3N2QtOWNhZC00MGRlLWFiZWQt YzRkNDJiN2Y2MjcwLzEvb2dBWVpJeDYtaFJFWk5SN3NlTExLNmVHNjdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS84M2E3N2QtOWNhZC00MGRlLWFiZWQtYzRkNDJiN2Y2Mjcw LzEvb2dBWVpJeDYtaFJFWk5SN3NlTExLNmVHNjdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAztL/9pzE TefBGr3flOFAq55MOQG758OVaWvebKHQLubG6Rh2STgFssSEzimviYFbH4XSRX5i K+BBel5BoI4i0IRPzZsqfobh1Zo63rSv7TWYR5cHXasLp+flTPtNk4pk+3WVu1rE vYSHN2C4QkZf5HUnzlPXy5w0XYC27IwtvusZl2JifryBpHEt4kUFd8EnmZnvP/bZ WA2UV7rzf3i+/1lxc9A3J3IlsdbQyyeP5MFmjSnwYbrmPUHknUX8sJKq0jocD/Og 1onNbzwEI8g3UEjIUg7hLQWNRH64PfdYLyWDytQSBJYntccGlIzx/9filErn/Ffj g/94vdhHXCXdaQ== -----END CERTIFICATE-----Generated at Tue Dec 23 10:49:57 2025 by rpki-client