This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft File: ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft (raw, json) Hash identifier: NQ6JAiH66LtMKxcZKbpGXQymnE9OJPlTCM4/2A3HMb8= Subject key identifier: 9A:21:26:69:8B:92:62:01:D4:51:18:94:45:58:D0:A3:4B:37:8A:16 Authority key identifier: A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF Certificate issuer: /CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf Certificate serial: 019B38A2293DFAF3E012FBDCE88220E6A5A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft Manifest number: 0CB8 Signing time: Fri 19 Dec 2025 22:01:50 +0000 Manifest this update: Fri 19 Dec 2025 22:01:50 +0000 Manifest next update: Sat 20 Dec 2025 22:01:50 +0000 Files and hashes: 1: FyzxwbgLSadTJLpy9TRdd9F-gGk.roa (hash: iyPnEDozqJhAVhpqbdklx7ETcR+WTKfp9SYU0Q+jnpE=) 2: ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl (hash: g1h3sBdOCucmCWJZxkw+zKy2UbiHwKIUDqA/3yvPIUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:29:3d:fa:f3:e0:12:fb:dc:e8:82:20:e6:a5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf Validity Not Before: Dec 19 22:01:50 2025 GMT Not After : Dec 20 22:01:50 2025 GMT Subject: CN=9a2126698b926201d45118944558d0a34b378a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:64:17:ea:5a:50:b7:a4:b7:5c:34:27:d5:56: 0d:2d:d3:e3:37:6f:db:a2:74:5d:71:f8:e1:7b:94: e4:f0:67:af:ef:70:c7:cf:0f:93:ee:37:d1:17:14: 31:0c:1a:fc:7c:73:f8:59:2b:89:9c:d1:31:35:0a: ab:b3:70:b9:c1:de:b7:4d:3c:56:14:ac:3a:a3:04: 3f:cf:07:33:7c:fb:58:dd:62:71:11:a7:30:7e:18: 63:17:ef:fb:7f:b4:5e:33:a9:a5:06:1f:6b:fc:1a: 31:86:76:40:73:69:91:0a:31:1d:02:a6:7c:ee:0f: 81:bc:a8:94:d2:ac:a2:28:bc:66:98:83:bb:e4:a3: 2b:14:c6:7a:7c:89:9b:30:e8:fc:6d:db:58:3c:b9: 13:03:ac:d3:4a:d3:c6:f0:b6:17:14:58:a9:70:b4: ea:87:24:91:40:27:67:0e:1d:c4:db:96:0d:90:7e: 88:94:28:21:03:96:fa:c8:6b:2b:f8:fa:41:cb:67: 7f:fa:4a:46:01:c3:e0:36:dd:af:dd:39:04:3c:56: 01:39:3e:5b:3b:e2:25:d7:5c:35:5c:ae:c0:02:9a: 76:6f:e1:25:6d:b1:39:a1:8a:c1:68:10:15:70:5c: 5f:62:4d:b2:2e:05:3d:b2:71:33:35:3b:f3:75:35: fe:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:21:26:69:8B:92:62:01:D4:51:18:94:45:58:D0:A3:4B:37:8A:16 X509v3 Authority Key Identifier: keyid:A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:71:85:ec:17:3d:36:cb:f1:f4:98:37:a6:75:c6:0e:88:e2: e9:6f:9f:27:54:46:b4:1f:1a:d6:89:dc:43:00:42:af:78:99: 87:97:02:cc:d5:b8:f1:f1:33:f9:4b:40:d7:97:e9:f2:bd:9f: 8a:21:30:31:c8:84:56:4e:90:a5:be:84:18:12:51:0d:35:df: ec:33:61:bb:91:f7:7b:a3:97:ee:b1:50:a9:6b:ac:d0:8f:02: 4f:b8:3d:2f:03:a9:d0:b2:ac:0b:ed:65:df:f3:c0:87:c2:a3: 06:a9:5e:6d:13:9c:13:a8:b9:3b:ce:d4:70:55:ea:b0:ae:22: a8:27:2d:29:6e:ad:99:71:74:98:9b:26:bd:f8:c2:30:55:3a: de:ba:d6:0f:a7:a2:38:83:b5:24:eb:05:34:06:b5:0b:44:98: ab:7c:5b:f2:9e:c3:31:71:db:e9:4a:ec:7e:08:a8:52:e2:61: e0:20:46:56:61:07:46:a3:2b:d8:dc:a8:d1:11:71:b7:2a:1d: c6:0c:08:81:7f:c3:90:44:d1:fe:14:4a:e2:35:30:20:8d:ae: 32:a2:57:ab:a0:10:34:6d:1c:3e:d9:8f:35:af:4d:71:2b:db: 44:0b:a0:24:ca:bf:17:f2:03:60:51:be:5e:27:a3:64:3b:5d: 69:e4:1e:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oik9+vPgEvvc6IIg5qWiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDZkZmZmYWIxZDUxOGMxMzJmNmQ1NmQ4ZDRhMzFkOTA1 OWY0YmYwHhcNMjUxMjE5MjIwMTUwWhcNMjUxMjIwMjIwMTUwWjAzMTEwLwYDVQQD Eyg5YTIxMjY2OThiOTI2MjAxZDQ1MTE4OTQ0NTU4ZDBhMzRiMzc4YTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmQX6lpQt6S3XDQn1VYNLdPjN2/b onRdcfjhe5Tk8Gev73DHzw+T7jfRFxQxDBr8fHP4WSuJnNExNQqrs3C5wd63TTxW FKw6owQ/zwczfPtY3WJxEacwfhhjF+/7f7ReM6mlBh9r/BoxhnZAc2mRCjEdAqZ8 7g+BvKiU0qyiKLxmmIO75KMrFMZ6fImbMOj8bdtYPLkTA6zTStPG8LYXFFipcLTq hySRQCdnDh3E25YNkH6IlCghA5b6yGsr+PpBy2d/+kpGAcPgNt2v3TkEPFYBOT5b O+Il11w1XK7AApp2b+ElbbE5oYrBaBAVcFxfYk2yLgU9snEzNTvzdTX+EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJohJmmLkmIB1FEYlEVY0KNLN4oWMB8GA1UdIwQY MBaAFKIG3/+rHVGMEy9tVtjUox2QWfS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mNTkzMWUtMGY4NC00MGJkLWFkMGEt NjcxYTFmMGFmMDU5LzEvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mNTkzMWUtMGY4NC00MGJkLWFkMGEtNjcxYTFmMGFmMDU5 LzEvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnGF7Bc9 Nsvx9Jg3pnXGDoji6W+fJ1RGtB8a1oncQwBCr3iZh5cCzNW48fEz+UtA15fp8r2f iiEwMciEVk6Qpb6EGBJRDTXf7DNhu5H3e6OX7rFQqWus0I8CT7g9LwOp0LKsC+1l 3/PAh8KjBqlebROcE6i5O87UcFXqsK4iqCctKW6tmXF0mJsmvfjCMFU63rrWD6ei OIO1JOsFNAa1C0SYq3xb8p7DMXHb6UrsfgioUuJh4CBGVmEHRqMr2Nyo0RFxtyod xgwIgX/DkETR/hRK4jUwII2uMqJXq6AQNG0cPtmPNa9NcSvbRAugJMq/F/IDYFG+ XiejZDtdaeQeHg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:38:48 2025 by rpki-client