This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft File: ogVTc5WopAMDh35p04kDP-N6ZPA.mft (raw, json) Hash identifier: gf7orjdEkbg/50oEJHpiinoq+EtfrZZAeJ/9X6r5dS4= Subject key identifier: E1:20:B7:CC:2D:DD:75:E1:9B:FD:DF:29:C6:2A:84:57:59:A3:A9:D7 Authority key identifier: A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0 Certificate issuer: /CN=a205537395a8a40303877e69d389033fe37a64f0 Certificate serial: 019B3DFE4D147034C89D2CAE8DF06EC0B5BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft Manifest number: 019B Signing time: Sat 20 Dec 2025 23:00:34 +0000 Manifest this update: Sat 20 Dec 2025 23:00:34 +0000 Manifest next update: Sun 21 Dec 2025 23:00:34 +0000 Files and hashes: 1: ZCpl3UyatQkZjsK8z_IxqXu_Sk0.roa (hash: O39VxnKkC8Thbx7rhWEv+PJDcL54U/wq4sE9v+Ry7uQ=) 2: ogVTc5WopAMDh35p04kDP-N6ZPA.crl (hash: gozfeV0/O3PRImjjLk94JxkK5ndRFUklkfa4s9irDVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:4d:14:70:34:c8:9d:2c:ae:8d:f0:6e:c0:b5:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a205537395a8a40303877e69d389033fe37a64f0 Validity Not Before: Dec 20 23:00:34 2025 GMT Not After : Dec 21 23:00:34 2025 GMT Subject: CN=e120b7cc2ddd75e19bfddf29c62a845759a3a9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ee:c5:20:d5:86:7f:f9:f8:b7:96:3d:39:4e: d9:15:b7:bf:f7:9f:5e:98:51:49:f9:4a:8e:a9:b9: ec:5e:6f:a9:9d:1e:29:bc:7d:5f:c2:cc:cf:a1:e2: 35:c4:62:81:33:d4:7e:57:dd:5f:44:34:dc:8e:29: 4c:be:2e:06:3d:4f:68:ac:fc:da:35:87:a8:bd:0a: a5:1d:b6:00:87:19:bb:9c:62:bd:51:7b:c2:95:ae: 19:57:9d:47:5b:9e:19:57:00:92:42:ef:4c:f4:24: f2:6a:39:ea:e1:59:2a:b1:7f:92:0d:9c:e0:4c:c5: e1:24:9f:a2:ac:4e:17:0e:c6:c0:fe:4e:64:0f:dd: c3:45:22:2c:f4:86:f7:01:28:ed:7e:ed:94:83:f9: bc:6f:99:92:dc:62:fa:13:39:04:a8:88:56:c0:9c: a7:85:0d:c5:36:13:17:fa:82:80:4f:f8:eb:f0:8b: 20:fc:41:ac:fd:fc:d7:44:ef:30:35:cf:c7:ee:22: 4b:f5:e6:ef:9b:c8:f7:50:68:db:88:0e:57:1c:de: 46:cc:4d:6d:c6:2f:fd:8c:9a:2c:46:de:82:80:20: b6:2a:3d:0e:a2:7c:6e:ba:66:dc:96:c6:2d:c0:73: 27:bc:51:e7:02:c1:39:8a:fa:f6:5d:9e:61:e9:79: 93:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:20:B7:CC:2D:DD:75:E1:9B:FD:DF:29:C6:2A:84:57:59:A3:A9:D7 X509v3 Authority Key Identifier: keyid:A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:92:2e:71:c1:1c:28:3c:83:0b:1e:15:8f:7f:d5:45:86:b4: 24:ec:cd:7b:46:59:3e:af:8a:6f:ae:df:89:34:4b:3c:44:1b: eb:57:3a:45:20:e8:56:6b:69:91:e4:09:0c:a3:63:dc:f7:88: 13:9f:7c:06:4b:3e:3e:1f:76:45:19:e4:b8:32:40:19:89:60: 15:ed:9c:bf:d3:67:7c:eb:b0:a8:8b:ec:53:79:68:62:00:2f: 6b:9f:14:86:a6:ad:6e:b1:c4:7c:6d:a8:cf:85:e8:1b:ec:6a: e9:af:f7:f1:5c:00:d6:da:12:1b:28:b7:c0:02:c9:65:04:ce: b4:37:5a:20:4b:3d:bd:3c:6a:ec:b6:13:28:4e:ca:04:9f:10: 43:aa:b2:5d:97:79:4f:0e:a2:87:93:8c:f7:3c:85:10:1b:8c: c7:e2:c5:c5:ad:be:e0:11:de:d4:7b:15:ca:e4:de:63:23:2d: dd:95:06:1e:63:03:f9:1c:a9:28:a7:7e:e5:74:59:d6:62:8d: 43:d5:92:84:2c:e8:9b:e0:79:eb:a7:af:69:9d:f2:b3:60:45: 03:07:77:18:55:da:c2:a6:df:e7:94:70:a5:4b:1a:eb:d4:9b: 1a:24:29:6f:1e:60:ea:cd:63:84:a1:a1:38:f9:e7:7d:75:dd: c3:54:15:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/k0UcDTInSyujfBuwLW+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDU1MzczOTVhOGE0MDMwMzg3N2U2OWQzODkwMzNmZTM3 YTY0ZjAwHhcNMjUxMjIwMjMwMDM0WhcNMjUxMjIxMjMwMDM0WjAzMTEwLwYDVQQD EyhlMTIwYjdjYzJkZGQ3NWUxOWJmZGRmMjljNjJhODQ1NzU5YTNhOWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+7FINWGf/n4t5Y9OU7ZFbe/959e mFFJ+UqOqbnsXm+pnR4pvH1fwszPoeI1xGKBM9R+V91fRDTcjilMvi4GPU9orPza NYeovQqlHbYAhxm7nGK9UXvCla4ZV51HW54ZVwCSQu9M9CTyajnq4VkqsX+SDZzg TMXhJJ+irE4XDsbA/k5kD93DRSIs9Ib3ASjtfu2Ug/m8b5mS3GL6EzkEqIhWwJyn hQ3FNhMX+oKAT/jr8Isg/EGs/fzXRO8wNc/H7iJL9ebvm8j3UGjbiA5XHN5GzE1t xi/9jJosRt6CgCC2Kj0OonxuumbclsYtwHMnvFHnAsE5ivr2XZ5h6XmToQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEgt8wt3XXhm/3fKcYqhFdZo6nXMB8GA1UdIwQY MBaAFKIFU3OVqKQDA4d+adOJAz/jemTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dWVGM1V29wQU1EaDM1cDA0a0RQLU42WlBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hYzc0Y2MtYTg5Ni00MzI2LWEwMjEt NmM3NWJjYmZiNGE2LzEvb2dWVGM1V29wQU1EaDM1cDA0a0RQLU42WlBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9hYzc0Y2MtYTg5Ni00MzI2LWEwMjEtNmM3NWJjYmZiNGE2 LzEvb2dWVGM1V29wQU1EaDM1cDA0a0RQLU42WlBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpIuccEc KDyDCx4Vj3/VRYa0JOzNe0ZZPq+Kb67fiTRLPEQb61c6RSDoVmtpkeQJDKNj3PeI E598Bks+Ph92RRnkuDJAGYlgFe2cv9NnfOuwqIvsU3loYgAva58UhqatbrHEfG2o z4XoG+xq6a/38VwA1toSGyi3wALJZQTOtDdaIEs9vTxq7LYTKE7KBJ8QQ6qyXZd5 Tw6ih5OM9zyFEBuMx+LFxa2+4BHe1HsVyuTeYyMt3ZUGHmMD+RypKKd+5XRZ1mKN Q9WShCzom+B566evaZ3ys2BFAwd3GFXawqbf55RwpUsa69SbGiQpbx5g6s1jhKGh OPnnfXXdw1QV5Q== -----END CERTIFICATE-----Generated at Sun Dec 21 08:35:47 2025 by rpki-client