This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft File: oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json) Hash identifier: Zid6qyle+K3JihTZZB9yBIkF36YKtT5exTlqfAxw8aM= Subject key identifier: AF:3C:86:D1:1D:5B:15:2B:60:1C:A4:D9:53:1A:89:E7:EC:71:0D:F8 Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9 Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9 Certificate serial: 019B6957377155CBE1CAF976392ED53E0A95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft Manifest number: 17A3 Signing time: Mon 29 Dec 2025 09:01:22 +0000 Manifest this update: Mon 29 Dec 2025 09:01:22 +0000 Manifest next update: Tue 30 Dec 2025 09:01:22 +0000 Files and hashes: 1: O8JzFk1PWBgx-tr4EXZtg8jcmlQ.asa (hash: NgGatJmK3hx1VDzLByDMsWijy7WzJx6KU+I3UEmcdSE=) 2: h0m6chw4hn4GtvHmpEWAbKAv404.asa (hash: VSF4u2R2+TQgBabpqWZM+QC/fWsj+qMNZ83t4AFvT7c=) 3: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: 2dhICAeGDFVduv2Sn4CBALB+dRFHsBLz8oppE5P+7Cw=) 4: qOEolEE9uMcBNXoTUw5TLrPNiDM.roa (hash: MYoK4dnDI+q5Om3y0iVNPCH+9cmGDl4Z1Ew7BNHE8zg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 09:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:57:37:71:55:cb:e1:ca:f9:76:39:2e:d5:3e:0a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9 Validity Not Before: Dec 29 09:01:22 2025 GMT Not After : Dec 30 09:01:22 2025 GMT Subject: CN=af3c86d11d5b152b601ca4d9531a89e7ec710df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8f:14:20:4a:05:02:83:cb:4b:34:87:d3:8a: 5f:88:8e:b0:2c:92:ae:99:2f:3e:e1:67:c4:a4:51: d3:95:5f:5e:8c:b6:e5:5a:b9:34:b7:ac:d8:00:b6: de:51:01:db:7f:88:9e:e3:d0:6d:fb:d4:cd:e6:9a: 19:41:c9:00:0c:04:05:69:b5:84:92:a2:2e:d5:06: 26:8f:12:4a:f6:2c:60:fd:53:fb:76:8a:75:36:66: a2:ae:49:26:ba:43:28:99:a7:ec:f2:ac:a1:00:d5: 06:44:b6:a8:2d:eb:c5:54:8f:9d:06:c4:2a:eb:92: d0:89:63:b1:fc:fc:e8:95:d2:27:a5:ab:17:ec:0e: ef:3a:7c:f3:d4:99:2d:70:c0:78:68:5b:d3:25:65: e2:e1:52:2a:92:f9:86:45:0b:2d:29:32:2b:20:40: 3a:2f:09:64:51:2c:ae:e2:8e:62:b7:3d:5d:a3:f4: 85:a3:de:31:63:92:7d:85:6f:64:a2:83:01:59:2c: 29:73:64:78:3f:18:02:27:87:c4:d4:99:52:d3:c8: fc:4a:84:a6:0e:6d:2d:02:c5:2d:3a:5e:2e:b9:68: 06:37:56:c4:26:6c:81:c3:47:ad:a4:c3:8f:07:a7: 45:cd:ed:61:f6:2a:75:d3:90:c9:8d:81:0e:14:e2: c9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3C:86:D1:1D:5B:15:2B:60:1C:A4:D9:53:1A:89:E7:EC:71:0D:F8 X509v3 Authority Key Identifier: keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b0:06:bb:c6:fb:25:51:5f:a0:38:14:c3:c2:44:57:51:63: 52:a1:c5:a7:6d:92:d4:25:5d:d2:fc:a7:62:de:ac:79:c2:c0: 7f:0c:a2:05:be:c6:6e:47:8c:e3:69:5e:ac:05:34:01:64:c1: fb:a3:c5:9a:8b:d6:e4:81:a1:97:fe:0d:66:d4:60:12:f5:70: 77:74:77:ff:11:41:d4:a8:32:8a:f6:4b:78:2d:8e:16:bd:87: 35:ed:af:86:87:87:81:96:c6:ff:c2:d8:0a:bb:58:a7:84:7d: 30:5c:1c:1b:6e:75:61:cc:f9:49:72:6b:03:73:64:23:f5:a3: 57:6a:ab:ab:63:d6:13:12:e2:97:60:b4:1b:eb:8c:c0:19:ef: f0:34:5c:88:3b:b6:f9:38:f1:1f:62:27:39:38:0d:61:96:54: ee:7b:60:74:2a:4e:ca:15:8f:da:6a:0b:6a:d7:39:4a:8a:e4: 91:d0:9c:fd:a6:40:ee:0b:8b:bc:00:e5:73:bf:c5:2c:ad:29: d6:be:84:43:16:9e:88:61:c3:2c:b5:6e:9c:5b:fb:d8:ee:8f: ed:a6:13:40:35:a0:e8:5b:3b:8d:b3:a1:b7:98:66:85:71:96: 51:a6:9d:9b:7c:bb:92:3b:e7:ec:2c:49:c1:98:6a:c9:0e:9c: b5:27:60:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpVzdxVcvhyvl2OS7VPgqVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNjM5YWRmMWUwYjg0YjlmZjY0ZTRmOGViZTYzOGViYmY1 ZDI3YjkwHhcNMjUxMjI5MDkwMTIyWhcNMjUxMjMwMDkwMTIyWjAzMTEwLwYDVQQD EyhhZjNjODZkMTFkNWIxNTJiNjAxY2E0ZDk1MzFhODllN2VjNzEwZGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy48UIEoFAoPLSzSH04pfiI6wLJKu mS8+4WfEpFHTlV9ejLblWrk0t6zYALbeUQHbf4ie49Bt+9TN5poZQckADAQFabWE kqIu1QYmjxJK9ixg/VP7dop1NmairkkmukMomafs8qyhANUGRLaoLevFVI+dBsQq 65LQiWOx/PzoldInpasX7A7vOnzz1JktcMB4aFvTJWXi4VIqkvmGRQstKTIrIEA6 LwlkUSyu4o5itz1do/SFo94xY5J9hW9kooMBWSwpc2R4PxgCJ4fE1JlS08j8SoSm Dm0tAsUtOl4uuWgGN1bEJmyBw0etpMOPB6dFze1h9ip105DJjYEOFOLJDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK88htEdWxUrYByk2VMaiefscQ34MB8GA1UdIwQY MBaAFKBjmt8eC4S5/2Tk+OvmOOu/XSe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjIt ODEzYzVhYWI3ODNlLzEvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjItODEzYzVhYWI3ODNl LzEvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7AGu8b7 JVFfoDgUw8JEV1FjUqHFp22S1CVd0vynYt6secLAfwyiBb7GbkeM42lerAU0AWTB +6PFmovW5IGhl/4NZtRgEvVwd3R3/xFB1KgyivZLeC2OFr2HNe2vhoeHgZbG/8LY CrtYp4R9MFwcG251Ycz5SXJrA3NkI/WjV2qrq2PWExLil2C0G+uMwBnv8DRciDu2 +TjxH2InOTgNYZZU7ntgdCpOyhWP2moLatc5SorkkdCc/aZA7guLvADlc7/FLK0p 1r6EQxaeiGHDLLVunFv72O6P7aYTQDWg6Fs7jbOht5hmhXGWUaadm3y7kjvn7CxJ wZhqyQ6ctSdgSQ== -----END CERTIFICATE-----Generated at Mon Dec 29 14:54:03 2025 by rpki-client