This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft File: 43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json) Hash identifier: 738/mBRXZn60hbjfVMF6gyuEcv5qaTKVPAB9CgF6fgQ= Subject key identifier: 4E:98:1F:B7:FD:8F:D7:AA:D9:BA:A5:3E:0B:E0:67:94:49:DE:EA:07 Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A Certificate issuer: /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a Certificate serial: 019BAE013A5768850E0462DF5525AF9BD48F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft Manifest number: 1426 Signing time: Sun 11 Jan 2026 17:01:14 +0000 Manifest this update: Sun 11 Jan 2026 17:01:14 +0000 Manifest next update: Mon 12 Jan 2026 17:01:14 +0000 Files and hashes: 1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: uw7oRt3V95qNi9anS23z+B6eQzM9eVUATYB+R+6qn0g=) 2: avNEwpL_11H5YSsomwm0HOp9pcY.roa (hash: W9XdBIvP8KNer4n6RxTSErrCF+Uq5P5iFTsq9VlqdFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:01:3a:57:68:85:0e:04:62:df:55:25:af:9b:d4:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a Validity Not Before: Jan 11 17:01:14 2026 GMT Not After : Jan 12 17:01:14 2026 GMT Subject: CN=4e981fb7fd8fd7aad9baa53e0be0679449deea07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:78:73:a2:ef:17:07:1f:df:19:27:a4:c4:72: a3:0e:ec:56:34:e1:6f:c8:72:ad:09:0f:c1:a7:88: 48:a2:be:c2:92:3d:16:0a:00:40:de:04:6e:95:8f: 84:87:5b:33:33:df:4e:18:ef:c9:e1:31:34:45:eb: 3a:b8:77:ff:8e:a5:60:95:76:a1:83:6a:7a:8f:2f: a4:e6:2c:6f:b1:57:e7:17:bb:e3:8d:0c:81:a5:95: 51:73:67:9e:92:93:35:a3:4c:08:a1:7e:54:a3:5b: 20:f2:2b:3f:9f:15:02:87:69:95:f6:62:ff:28:05: 15:cd:0e:0a:5d:4b:3c:b9:23:bc:3a:c4:e9:48:aa: ee:98:24:cd:f8:56:9f:12:25:16:36:31:3d:38:c6: 46:d3:54:68:df:03:0c:db:08:0f:d1:60:ed:96:a8: 38:fe:14:d3:5c:a0:b1:9c:72:78:77:5a:3f:3a:68: 62:35:f0:3a:1b:91:19:80:61:17:7d:d7:08:0d:66: 4b:82:e1:3b:1e:0a:4e:a4:dd:26:bd:ce:e7:d8:7c: ec:c4:30:d8:07:5d:a9:49:a1:9b:ae:36:8f:02:74: 7e:11:c9:42:2d:0d:59:a6:bd:d4:a8:7a:14:ac:fb: f6:94:66:55:ed:d5:dc:50:da:08:3f:6a:e3:3d:f3: ca:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:98:1F:B7:FD:8F:D7:AA:D9:BA:A5:3E:0B:E0:67:94:49:DE:EA:07 X509v3 Authority Key Identifier: keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:0d:1c:76:25:4d:1a:10:a4:a5:21:43:8d:82:03:33:91:0b: 4d:4d:a5:3d:2b:6f:d3:88:a2:25:6c:f6:bd:77:65:86:89:fa: 9b:77:12:19:69:92:b6:00:44:f8:18:7c:d5:72:45:51:42:e2: 29:3b:ab:77:f6:6c:e3:6e:ce:fb:18:da:83:3c:32:26:5c:e5: 07:e8:47:05:f5:f8:4d:b9:88:bf:63:03:15:c3:9c:e7:5e:9e: 5c:a2:e1:d4:21:0a:2d:e5:07:3b:30:ed:59:63:16:76:a8:b3: 50:46:1f:c4:67:8f:bf:bf:87:86:16:ca:e5:92:2c:0c:c6:9d: f6:8f:e6:8c:fb:59:96:0b:b2:5b:9a:85:b5:47:74:30:44:6e: 9a:5e:aa:15:89:91:c9:ab:83:d0:ae:91:99:da:87:2f:41:76: 1a:6f:d1:b6:cf:9e:04:21:e5:92:75:9a:40:a7:94:a4:c8:b9: 86:bc:17:e5:b2:d8:5e:42:3c:5b:fe:d1:56:5c:83:b1:4f:81: c0:c9:3c:5f:da:3f:75:a8:c9:f0:b4:f9:ca:b9:dd:79:47:b9: 46:75:21:ae:53:dc:7e:11:1c:c5:87:c2:87:d9:35:9e:37:15: e7:f3:62:95:b6:dd:e6:6d:c1:c7:c6:51:c0:bb:a2:58:9d:e1: 42:ac:65:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuuATpXaIUOBGLfVSWvm9SPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2EyMGE3ZjI4YTgyNGY2NzMxNWE1NjZlNTkyNDRhYWE4 YzdkNGEwHhcNMjYwMTExMTcwMTE0WhcNMjYwMTEyMTcwMTE0WjAzMTEwLwYDVQQD Eyg0ZTk4MWZiN2ZkOGZkN2FhZDliYWE1M2UwYmUwNjc5NDQ5ZGVlYTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nhzou8XBx/fGSekxHKjDuxWNOFv yHKtCQ/Bp4hIor7Ckj0WCgBA3gRulY+Eh1szM99OGO/J4TE0Res6uHf/jqVglXah g2p6jy+k5ixvsVfnF7vjjQyBpZVRc2eekpM1o0wIoX5Uo1sg8is/nxUCh2mV9mL/ KAUVzQ4KXUs8uSO8OsTpSKrumCTN+FafEiUWNjE9OMZG01Ro3wMM2wgP0WDtlqg4 /hTTXKCxnHJ4d1o/OmhiNfA6G5EZgGEXfdcIDWZLguE7HgpOpN0mvc7n2HzsxDDY B12pSaGbrjaPAnR+EclCLQ1Zpr3UqHoUrPv2lGZV7dXcUNoIP2rjPfPKWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6YH7f9j9eq2bqlPgvgZ5RJ3uoHMB8GA1UdIwQY MBaAFON6IKfyioJPZzFaVm5ZJEqqjH1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hYzU5OGYtNWY1Mi00MzMwLWIwMTMt NTcwNjllMDgwM2I1LzEvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hYzU5OGYtNWY1Mi00MzMwLWIwMTMtNTcwNjllMDgwM2I1 LzEvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHw0cdiVN GhCkpSFDjYIDM5ELTU2lPStv04iiJWz2vXdlhon6m3cSGWmStgBE+Bh81XJFUULi KTurd/Zs427O+xjagzwyJlzlB+hHBfX4TbmIv2MDFcOc516eXKLh1CEKLeUHOzDt WWMWdqizUEYfxGePv7+HhhbK5ZIsDMad9o/mjPtZlguyW5qFtUd0MERuml6qFYmR yauD0K6RmdqHL0F2Gm/Rts+eBCHlknWaQKeUpMi5hrwX5bLYXkI8W/7RVlyDsU+B wMk8X9o/dajJ8LT5yrndeUe5RnUhrlPcfhEcxYfCh9k1njcV5/Nilbbd5m3Bx8ZR wLuiWJ3hQqxlbg== -----END CERTIFICATE-----Generated at Mon Jan 12 02:56:40 2026 by rpki-client