This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft File: OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft (raw, json) Hash identifier: SyB4CwbL8ORE2OWLX9kJ5h9FZzKgQL1KSB2xy37QUXI= Subject key identifier: E2:BF:88:CE:CD:2C:12:FA:CC:06:08:CA:0C:B7:CB:F1:5F:B7:05:C3 Authority key identifier: 3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F Certificate issuer: /CN=3a07318a1314233f5623c0f835fae18f9126412f Certificate serial: 019AFAD5BE10185F8B879EF02BE6BBCD9FF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft Manifest number: 0137 Signing time: Sun 07 Dec 2025 22:01:43 +0000 Manifest this update: Sun 07 Dec 2025 22:01:43 +0000 Manifest next update: Mon 08 Dec 2025 22:01:43 +0000 Files and hashes: 1: OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl (hash: 4tLgHlQqfrIvYv5COrK0PkRrXVP7PfokmOt3E/Ea2Ng=) 2: d_S_LiTn-5JZ6QbYkJGNQlQwd5g.roa (hash: wiJdaTKeLOoOD2ZMe+ZN1Wuh3uVVfGMcp7ArG5upMbk=) 3: qBjHDY2sXPfYcFMAdrqZb0wk3qo.roa (hash: YJdVl/jAdNP388MpdOeTC60bm9oxrdjXPgN1Q6k8CnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 22:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:d5:be:10:18:5f:8b:87:9e:f0:2b:e6:bb:cd:9f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a07318a1314233f5623c0f835fae18f9126412f Validity Not Before: Dec 7 22:01:43 2025 GMT Not After : Dec 8 22:01:43 2025 GMT Subject: CN=e2bf88cecd2c12facc0608ca0cb7cbf15fb705c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6c:b2:05:42:18:c2:3f:cf:9f:cc:eb:c4:87: 5c:3c:f1:51:b9:a8:d0:0f:6b:58:03:a9:3d:c1:6b: 50:25:62:22:dd:42:58:28:e6:95:bd:13:eb:86:af: fe:c6:00:de:5b:35:28:e6:21:f6:4b:ec:65:26:34: ee:b3:7b:90:56:df:cf:4f:ff:5c:76:71:0b:ab:1b: 00:f7:53:94:89:a8:85:46:99:13:84:f4:c1:ae:be: fc:fb:16:f7:d5:e7:9f:75:e9:47:56:9f:9b:d6:75: bf:a5:75:46:38:6e:a9:7c:06:fd:28:a1:0b:b7:1b: 21:28:f7:0a:f0:b4:c3:fe:fd:6f:2c:fe:6a:cd:d2: 24:ea:28:55:ff:f7:9f:00:06:a0:6c:da:8a:34:57: cf:03:2b:92:bf:38:3d:75:b7:45:21:80:32:ef:a0: 6e:c4:35:10:8c:71:fe:ce:0a:07:b3:4d:b5:e9:10: 51:fb:5d:70:7d:9f:ba:a5:a9:18:91:38:eb:59:73: 05:f5:1e:9f:a7:1a:d7:64:da:f4:84:6b:13:c9:29: b1:88:e4:a9:5c:bd:90:5a:29:36:96:6f:ea:a3:17: 0b:6e:10:8a:65:c4:b3:c4:0c:15:df:39:d7:da:1f: 32:94:da:c8:ca:ec:1c:01:f9:69:76:fd:a0:d6:65: d5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BF:88:CE:CD:2C:12:FA:CC:06:08:CA:0C:B7:CB:F1:5F:B7:05:C3 X509v3 Authority Key Identifier: keyid:3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:09:d2:f5:dd:7c:9a:f6:f9:7f:80:92:5d:99:55:b5:60:22: 11:19:7f:61:9e:dd:61:6a:4d:4a:a6:d0:1c:57:87:ba:f7:97: 92:e2:91:e8:34:aa:b8:eb:b7:9d:31:a0:9d:55:e1:ae:a0:1a: 6f:64:21:9a:ab:f0:c4:98:96:c4:4d:56:35:8f:73:e9:fc:23: 03:39:28:d2:3c:ea:74:18:f1:05:ea:6a:79:a5:21:21:42:b6: b4:6f:90:31:18:36:f7:95:e5:e4:f8:e1:12:c7:b8:79:24:92: 20:83:3a:29:8a:66:71:55:20:99:3b:d2:38:ed:12:ba:9c:04: 7e:98:54:c1:9f:bb:00:de:24:f5:31:fa:fd:40:0a:32:9a:91: 28:ba:2a:5d:c2:4c:93:20:e4:a4:44:72:40:c6:92:5d:2c:e0: b6:84:41:1b:8b:91:54:4e:f5:ee:39:3d:e5:74:3f:40:1f:d0: f1:fe:af:07:70:ff:a2:34:32:3f:ac:35:5c:01:fe:56:13:ca: 95:6f:90:d1:1f:6c:c7:7c:cd:72:e2:ba:1a:92:b6:5b:58:2b: f8:13:73:d0:3a:43:38:7b:97:fd:c7:db:29:ae:a2:ff:5b:84: 67:b3:a2:57:15:f7:30:6f:bc:5e:ec:32:d8:db:bc:31:d3:47: 74:e1:76:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr61b4QGF+Lh57wK+a7zZ/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDczMThhMTMxNDIzM2Y1NjIzYzBmODM1ZmFlMThmOTEy NjQxMmYwHhcNMjUxMjA3MjIwMTQzWhcNMjUxMjA4MjIwMTQzWjAzMTEwLwYDVQQD EyhlMmJmODhjZWNkMmMxMmZhY2MwNjA4Y2EwY2I3Y2JmMTVmYjcwNWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2yyBUIYwj/Pn8zrxIdcPPFRuajQ D2tYA6k9wWtQJWIi3UJYKOaVvRPrhq/+xgDeWzUo5iH2S+xlJjTus3uQVt/PT/9c dnELqxsA91OUiaiFRpkThPTBrr78+xb31eefdelHVp+b1nW/pXVGOG6pfAb9KKEL txshKPcK8LTD/v1vLP5qzdIk6ihV//efAAagbNqKNFfPAyuSvzg9dbdFIYAy76Bu xDUQjHH+zgoHs0216RBR+11wfZ+6pakYkTjrWXMF9R6fpxrXZNr0hGsTySmxiOSp XL2QWik2lm/qoxcLbhCKZcSzxAwV3znX2h8ylNrIyuwcAflpdv2g1mXVoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOK/iM7NLBL6zAYIygy3y/FftwXDMB8GA1UdIwQY MBaAFDoHMYoTFCM/ViPA+DX64Y+RJkEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2djeGloTVVJejlXSThENE5mcmhqNUVtUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yYjUzNzQtZDQwNS00ZmYxLTg1NjMt MDI2YTdiNjU0Zjg4LzEvT2djeGloTVVJejlXSThENE5mcmhqNUVtUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8yYjUzNzQtZDQwNS00ZmYxLTg1NjMtMDI2YTdiNjU0Zjg4 LzEvT2djeGloTVVJejlXSThENE5mcmhqNUVtUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQnS9d18 mvb5f4CSXZlVtWAiERl/YZ7dYWpNSqbQHFeHuveXkuKR6DSquOu3nTGgnVXhrqAa b2QhmqvwxJiWxE1WNY9z6fwjAzko0jzqdBjxBepqeaUhIUK2tG+QMRg295Xl5Pjh Ese4eSSSIIM6KYpmcVUgmTvSOO0SupwEfphUwZ+7AN4k9TH6/UAKMpqRKLoqXcJM kyDkpERyQMaSXSzgtoRBG4uRVE717jk95XQ/QB/Q8f6vB3D/ojQyP6w1XAH+VhPK lW+Q0R9sx3zNcuK6GpK2W1gr+BNz0DpDOHuX/cfbKa6i/1uEZ7OiVxX3MG+8Xuwy 2Nu8MdNHdOF2Cg== -----END CERTIFICATE-----Generated at Mon Dec 8 07:39:07 2025 by rpki-client