This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft File: OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft (raw, json) Hash identifier: CvsU7j9n89PBqj8jldrw+R40G5r55tmuY24Dpx3mIvU= Subject key identifier: EA:F6:ED:31:7E:08:61:5B:17:F8:20:FF:1C:6D:8F:33:E2:D9:D0:8C Authority key identifier: 3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48 Certificate issuer: /CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48 Certificate serial: 019B39B45B4B30FBAE20EFBB1841F5357700 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft Manifest number: 3C Signing time: Sat 20 Dec 2025 03:01:19 +0000 Manifest this update: Sat 20 Dec 2025 03:01:19 +0000 Manifest next update: Sun 21 Dec 2025 03:01:19 +0000 Files and hashes: 1: OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl (hash: qhCJCCkDS+arONYgZM0lXjJEL3dQxEfrAiNe/+jJ7qc=) 2: XNNLmF6xYLzYM5AanU02Pset_Q0.roa (hash: HlxBuNjrBjrN/3xEMV5/reH8Pvrb165mYX7ZjyMcf4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:5b:4b:30:fb:ae:20:ef:bb:18:41:f5:35:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48 Validity Not Before: Dec 20 03:01:19 2025 GMT Not After : Dec 21 03:01:19 2025 GMT Subject: CN=eaf6ed317e08615b17f820ff1c6d8f33e2d9d08c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3a:b7:8a:49:79:86:e2:a7:49:75:bd:bf:0c: ff:0e:19:1d:c8:7d:f7:86:76:42:50:6c:3e:b7:ce: 08:27:5e:7e:eb:e7:65:96:07:bd:4a:dd:db:a4:fb: f5:81:e3:ae:b6:e7:91:84:ba:c2:6c:72:d4:57:81: 57:da:5d:bd:ba:c3:54:47:50:cd:c8:09:05:16:53: 93:a7:34:df:a5:b2:d1:99:6d:45:db:d6:4e:c3:70: 77:3d:ff:66:9a:bc:45:62:73:02:36:d2:eb:06:ed: ae:13:63:82:fc:5e:dd:34:c2:4b:da:79:47:12:58: 3e:4f:44:79:4d:c9:da:39:b7:2e:f1:c7:1f:4a:25: 5a:10:bf:5b:9d:48:86:80:dc:72:b7:e9:b6:01:f5: 87:b2:07:3f:e4:f0:ae:77:9e:5d:80:c9:b0:ef:15: d8:c9:6a:be:24:36:72:16:78:8a:24:f0:3b:7f:af: 47:da:31:cd:12:e2:e1:91:b0:5f:00:07:b8:0c:87: c2:20:45:c1:23:98:86:5e:a2:d5:42:af:d5:96:ad: 17:c5:78:9a:d1:2e:fc:4a:1b:05:aa:89:a1:7d:7c: 01:77:c9:6d:ec:27:88:54:f5:98:b3:8b:e8:cc:e9: 7a:29:d7:b3:c2:c5:68:87:cf:f0:55:96:4f:f6:d3: d0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F6:ED:31:7E:08:61:5B:17:F8:20:FF:1C:6D:8F:33:E2:D9:D0:8C X509v3 Authority Key Identifier: keyid:3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:07:75:29:a4:e9:6b:17:f3:d4:9b:51:4b:c9:2a:d4:d4:c4: 57:0b:1e:23:04:e8:80:66:71:bb:51:4f:2a:90:70:a4:f6:ac: 05:9f:c2:fe:5d:cb:67:82:97:d3:b9:a5:02:36:a7:e2:09:af: 31:8e:20:de:3c:88:d1:2b:b5:82:d1:93:06:82:c1:85:b2:b5: aa:1c:ba:1f:e9:40:08:97:f3:87:d7:1e:f3:df:4e:8b:1e:d8: 0f:0c:21:96:37:99:6e:94:27:8c:d2:85:bc:8e:85:f9:a1:cb: 54:7a:90:0c:7e:73:01:4c:95:22:ef:1d:ba:64:f6:a4:cd:ae: a1:8b:d3:c9:c6:e9:ed:af:b5:18:fe:1c:aa:23:41:45:23:d0: 7e:f4:43:43:9c:a1:5a:6d:17:a3:29:84:8c:79:24:05:f3:57: c9:fe:18:36:8d:65:82:d0:c9:c1:cd:50:fd:47:82:e7:fa:81: fc:49:fa:ce:15:1c:82:fc:e2:f8:36:89:38:b5:a2:99:07:18: 34:2b:08:b1:14:e3:4a:43:3b:8c:2f:13:b9:76:f8:4a:9a:44: d3:f5:41:61:f0:fe:ed:58:2c:7a:06:8a:73:c4:f1:0a:0d:1f: f0:f3:3f:bb:5f:4f:0e:dc:4a:20:ca:81:4b:06:67:4d:5c:31: ac:67:71:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tFtLMPuuIO+7GEH1NXcAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDNlODg4YzIyM2IzYmZhZTgxOWIyMjBmZmIyNWYyNmYx YzJmNDgwHhcNMjUxMjIwMDMwMTE5WhcNMjUxMjIxMDMwMTE5WjAzMTEwLwYDVQQD EyhlYWY2ZWQzMTdlMDg2MTViMTdmODIwZmYxYzZkOGYzM2UyZDlkMDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jq3ikl5huKnSXW9vwz/DhkdyH33 hnZCUGw+t84IJ15+6+dllge9St3bpPv1geOutueRhLrCbHLUV4FX2l29usNUR1DN yAkFFlOTpzTfpbLRmW1F29ZOw3B3Pf9mmrxFYnMCNtLrBu2uE2OC/F7dNMJL2nlH Elg+T0R5TcnaObcu8ccfSiVaEL9bnUiGgNxyt+m2AfWHsgc/5PCud55dgMmw7xXY yWq+JDZyFniKJPA7f69H2jHNEuLhkbBfAAe4DIfCIEXBI5iGXqLVQq/Vlq0XxXia 0S78ShsFqomhfXwBd8lt7CeIVPWYs4vozOl6KdezwsVoh8/wVZZP9tPQGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOr27TF+CGFbF/gg/xxtjzPi2dCMMB8GA1UdIwQY MBaAFDoD6IjCI7O/roGbIg/7JfJvHC9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dQb2lNSWpzNy11Z1pzaURfc2w4bThjTDBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kOTBiOTctYWYxMC00MmM4LTgyZDIt ODQ4MTA0MmU5YTM1LzEvT2dQb2lNSWpzNy11Z1pzaURfc2w4bThjTDBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9kOTBiOTctYWYxMC00MmM4LTgyZDItODQ4MTA0MmU5YTM1 LzEvT2dQb2lNSWpzNy11Z1pzaURfc2w4bThjTDBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzAd1KaTp axfz1JtRS8kq1NTEVwseIwTogGZxu1FPKpBwpPasBZ/C/l3LZ4KX07mlAjan4gmv MY4g3jyI0Su1gtGTBoLBhbK1qhy6H+lACJfzh9ce899Oix7YDwwhljeZbpQnjNKF vI6F+aHLVHqQDH5zAUyVIu8dumT2pM2uoYvTycbp7a+1GP4cqiNBRSPQfvRDQ5yh Wm0XoymEjHkkBfNXyf4YNo1lgtDJwc1Q/UeC5/qB/En6zhUcgvzi+DaJOLWimQcY NCsIsRTjSkM7jC8TuXb4SppE0/VBYfD+7VgsegaKc8TxCg0f8PM/u19PDtxKIMqB SwZnTVwxrGdx8w== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:09 2025 by rpki-client