This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft File: ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json) Hash identifier: vkfeiOLMCfi52tjX2/w4K7zcGSK2srdpqbVI6QyMIDs= Subject key identifier: 36:0E:69:80:B4:46:34:D4:8B:9B:48:27:BC:69:2B:F3:42:8F:73:EB Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56 Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56 Certificate serial: 019B262DE6C9A0464871B21CC2F2EED99C73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft Manifest number: 1781 Signing time: Tue 16 Dec 2025 08:01:40 +0000 Manifest this update: Tue 16 Dec 2025 08:01:40 +0000 Manifest next update: Wed 17 Dec 2025 08:01:40 +0000 Files and hashes: 1: 1xcc1SYILBbx3rhR6psLH4-mx1k.roa (hash: YY5s2ur+NPzr2i2PTIla4YnYnzjA2lNDUiBFlQTWU6s=) 2: DzgRwer0SyfEiMUBymVa3GjZBhc.roa (hash: H6oc5ilH3tnHz0hpCDXzWc1+BWJ5xndGPAgz0hIghPU=) 3: KSs1jOl2vQ2T9aBxS53muqbkeek.roa (hash: k6xoKkAhl7uyLISVfEu/5MO1xlAN4gAUOxN8werJasI=) 4: MOUd9P1Za8GRPdMhCv16TQcZqEA.roa (hash: 8oyYfQSDjCb57ReEl42i/Xt+XFMdZ0eQkDpTIRHnmxA=) 5: TCJElgSSWTdNPCx4HtGVjoR5OHE.roa (hash: qYI1zk90mfrJGyeYZUA0ZHtzOK7fZWd1alNZdeo0gHI=) 6: hzVSMi0KPzevpyomB4cUEWfY6i0.roa (hash: g4+WSmI6cNmxYSAsnD6CO/MARE1+j6J4yksR/5LsuhM=) 7: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: ah276++yCGKxHRLmMZX5KgeNUr0iSz/YEBEpU1SKIIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:e6:c9:a0:46:48:71:b2:1c:c2:f2:ee:d9:9c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56 Validity Not Before: Dec 16 08:01:40 2025 GMT Not After : Dec 17 08:01:40 2025 GMT Subject: CN=360e6980b44634d48b9b4827bc692bf3428f73eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:a4:12:db:33:ac:6b:73:ec:d5:0c:14:3b: 8f:85:5c:43:69:86:64:05:1f:72:c5:43:2a:2a:db: 05:9a:2a:ed:63:9e:05:07:0f:36:6d:ef:7d:6e:0c: e9:cd:5d:ed:51:2f:ff:56:67:35:3f:88:d3:9a:49: b3:7f:8f:c3:f3:6d:85:7d:b2:df:56:2f:1f:1f:5b: f5:c9:39:7f:73:51:64:5a:46:f6:37:b3:56:53:f6: 9a:ab:5d:d1:13:b2:bb:b8:cb:12:f9:0e:08:97:2e: f6:26:54:3e:ae:d5:70:6a:56:ac:07:b2:93:d6:9e: eb:6b:75:cd:3c:de:b3:8d:88:ac:7c:11:eb:6f:b5: 23:f3:6f:03:93:92:e2:d2:d0:ea:7d:00:3d:fc:ec: 92:17:5d:91:47:e4:25:eb:f0:43:69:7c:68:25:37: c4:0c:31:53:3b:ca:0e:be:98:cb:d9:0f:bf:c3:5d: a2:7a:7e:c0:98:35:31:5e:af:50:82:68:12:95:9c: 77:84:a2:0f:4f:36:2f:e5:6a:6f:a4:d9:60:c2:e4: 99:ab:ce:29:48:74:f1:69:7d:77:0d:b9:86:c3:72: 38:14:da:50:97:83:c5:c7:57:ea:1b:51:a9:91:ca: 6c:dd:72:23:31:ef:12:95:7a:90:e8:73:8f:74:ea: c2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0E:69:80:B4:46:34:D4:8B:9B:48:27:BC:69:2B:F3:42:8F:73:EB X509v3 Authority Key Identifier: keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d5:ad:46:9e:67:5b:ac:2a:ab:a1:c0:69:59:25:0a:60:55: 95:59:25:06:40:4f:2e:6f:a0:e0:ef:66:c3:1b:ca:e0:8b:4a: 61:68:6b:77:8d:75:f4:eb:ac:d9:1b:99:10:9f:fd:a7:9f:fc: 63:45:5e:33:74:99:1e:34:97:2c:d9:9e:fb:16:99:cf:6e:62: 14:09:27:ba:61:14:19:6f:0d:73:30:b2:ad:ca:a0:9c:83:91: ae:40:4c:d6:76:ce:88:65:c6:a0:b0:dc:8e:20:b8:0f:51:bb: 92:ce:98:f7:b1:98:2b:36:26:bb:d5:41:24:46:90:c7:52:89: 0d:ce:3e:41:f0:01:37:cc:ea:0a:dc:46:c9:dd:27:d5:48:4c: 29:ef:e7:a9:ef:6d:4b:9b:29:a7:34:41:d4:28:19:32:c6:32: f4:7b:03:dd:e5:ff:ca:27:e0:1e:46:df:82:53:59:33:88:9e: e9:98:cc:00:56:17:17:47:b3:b7:a2:68:ff:06:f5:65:d0:a8: bd:0a:92:2c:f2:34:2b:28:a9:68:59:60:ba:5f:67:32:6a:57: 16:2e:f1:8d:10:46:a0:cb:bd:a1:70:3c:e1:19:b8:bb:4c:f3: bb:4a:ac:8a:86:4b:84:3b:f0:e6:71:83:da:51:c0:8d:aa:91: eb:e2:7a:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLebJoEZIcbIcwvLu2ZxzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDc0MzM5YmIyMTZiODViZGM4M2Q2MTc3ODgyMWFkZjkx NDlkNTYwHhcNMjUxMjE2MDgwMTQwWhcNMjUxMjE3MDgwMTQwWjAzMTEwLwYDVQQD EygzNjBlNjk4MGI0NDYzNGQ0OGI5YjQ4MjdiYzY5MmJmMzQyOGY3M2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rGkEtszrGtz7NUMFDuPhVxDaYZk BR9yxUMqKtsFmirtY54FBw82be99bgzpzV3tUS//Vmc1P4jTmkmzf4/D822FfbLf Vi8fH1v1yTl/c1FkWkb2N7NWU/aaq13RE7K7uMsS+Q4Ily72JlQ+rtVwalasB7KT 1p7ra3XNPN6zjYisfBHrb7Uj828Dk5Li0tDqfQA9/OySF12RR+Ql6/BDaXxoJTfE DDFTO8oOvpjL2Q+/w12ien7AmDUxXq9QgmgSlZx3hKIPTzYv5WpvpNlgwuSZq84p SHTxaX13DbmGw3I4FNpQl4PFx1fqG1Gpkcps3XIjMe8SlXqQ6HOPdOrCNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYOaYC0RjTUi5tIJ7xpK/NCj3PrMB8GA1UdIwQY MBaAFKIHQzm7IWuFvcg9YXeIIa35FJ1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NzFiMzQtYWNmOS00ZWJmLTk4OGIt MGZlYjY2ZTdmMjhhLzEvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81NzFiMzQtYWNmOS00ZWJmLTk4OGItMGZlYjY2ZTdmMjhh LzEvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItWtRp5n W6wqq6HAaVklCmBVlVklBkBPLm+g4O9mwxvK4ItKYWhrd4119Ous2RuZEJ/9p5/8 Y0VeM3SZHjSXLNme+xaZz25iFAknumEUGW8NczCyrcqgnIORrkBM1nbOiGXGoLDc jiC4D1G7ks6Y97GYKzYmu9VBJEaQx1KJDc4+QfABN8zqCtxGyd0n1UhMKe/nqe9t S5sppzRB1CgZMsYy9HsD3eX/yifgHkbfglNZM4ie6ZjMAFYXF0ezt6Jo/wb1ZdCo vQqSLPI0KyipaFlgul9nMmpXFi7xjRBGoMu9oXA84Rm4u0zzu0qsioZLhDvw5nGD 2lHAjaqR6+J6CQ== -----END CERTIFICATE-----Generated at Tue Dec 16 10:39:59 2025 by rpki-client