This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft File: ogiOBtVTz_KT0nf012w6cQvYsvc.mft (raw, json) Hash identifier: ofAudRV6rD0597yj3eM3ahjA17egpsbvr12rSBwoJO4= Subject key identifier: 5D:88:BC:94:51:64:6E:2A:DB:E0:78:AB:42:10:9D:D1:89:9C:5E:FC Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Certificate serial: 019B06341026A844DEE98E05A37143705F5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft Manifest number: 17C6 Signing time: Wed 10 Dec 2025 03:00:33 +0000 Manifest this update: Wed 10 Dec 2025 03:00:33 +0000 Manifest next update: Thu 11 Dec 2025 03:00:33 +0000 Files and hashes: 1: 0TAxxPi4zjMfURtgArfTlTlJzoY.roa (hash: DkfnTLoQSnkxMFDufCf4Tzi91pyg3D/dKfjoKdkuvnc=) 2: 2Fz3gDQO1Ko4Uhz-WKqbPvSyHuY.roa (hash: qDVXlglB84tjlEcwlG5YSSXNovaEgcbeYtxfS2oty2U=) 3: 4en9va8jCZNwuV4bW7NKxVamz54.roa (hash: sNZVLTVL9KoD1p+QjvV2CcAfu43CsFx04jNm3+y7/uc=) 4: 9L6AVjkValDZgShbyHFIglFK-vU.roa (hash: vufq8Mys/rVjB7A0Cd1ttX4gkVYJG8tMhOrBmJ6rqrA=) 5: Jb1qAtrQRHkWR9yqePpnXV6kF-U.roa (hash: opwZoEWtUaeMsOhsAkDVCLoxpYSLW7EC/weSdnXl3hU=) 6: RnQlmWewYcD_0IYUAev31XaR7bM.roa (hash: /LH5202pepZD0I2qOYltd4lGFUEFOBGQjgBfXeqrh7Y=) 7: T3TYQGzkIt875WMcJue8Tlu8qcE.roa (hash: zrjAaYCf4QNugLTCHzX4Z7vGYzZPktrc0+f+lzFF6qE=) 8: edWAVfkKeL_p4SOqKwWgAG9qG9o.roa (hash: eesAWNHbi/a4/dOuceKDaMTobB00ZxoBZJAUv+VOUbI=) 9: hK2pPH3ZYk_AItgBUx4QKhNRZjc.roa (hash: AeA5HrCOsn36XUB8ugwlHBVS3Vap/ykOrDhcE11vYXU=) 10: ogiOBtVTz_KT0nf012w6cQvYsvc.crl (hash: nOPeZb826IJf2g14WnA22u3XsVF62gHZUU1s5kxd0RE=) 11: wt3LwVWmMnxdQ_1hnrE0QvYmwGo.roa (hash: 78DCmBR5KDCiWcDQ81Kjee3QnK4jQ7nQ69rTiAmxiSU=) 12: yS4gxCiyxv-6Eo_qaFTdHS-1_f0.roa (hash: 4bv1Fv/+FlNMdg4hH2LqipPwgjlMt4gTsStcEknTXUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:34:10:26:a8:44:de:e9:8e:05:a3:71:43:70:5f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Validity Not Before: Dec 10 03:00:33 2025 GMT Not After : Dec 11 03:00:33 2025 GMT Subject: CN=5d88bc9451646e2adbe078ab42109dd1899c5efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8b:fe:39:c3:04:f3:1d:0c:3a:3d:54:d8:0a: fb:31:76:26:85:19:28:46:2a:04:da:66:8d:43:30: bf:97:1f:0b:8e:00:ed:2d:a9:5f:d7:4d:cc:6f:be: 48:f8:82:ed:c6:bc:f2:af:0e:90:d7:ee:b7:06:c2: ac:45:80:f8:39:b2:3e:b8:76:c7:b2:09:0d:99:52: 91:86:d3:c4:25:34:1a:c2:27:84:be:19:5d:0e:eb: 73:79:c2:d0:7f:44:a5:01:6a:13:27:7e:b2:0f:d2: 28:29:92:04:b5:66:d4:89:15:5c:e7:23:5c:9e:35: 93:41:dd:b9:be:07:80:d3:f3:b1:c6:c6:38:17:a5: e9:9b:92:ff:7a:ce:15:07:d9:13:9b:67:01:32:4d: 82:aa:ce:5f:9e:7b:51:e6:69:45:1e:42:e2:ca:b4: e1:fe:02:2a:46:1e:43:90:5b:5b:01:a2:7e:15:74: df:77:55:f9:73:37:ce:07:04:62:05:fe:9c:f2:7b: db:99:ea:ab:08:9f:7a:ae:b2:a0:a2:aa:db:c9:81: f5:a9:fa:60:2b:5a:4e:6f:9c:55:f3:20:b2:3a:a3: 7a:cd:d8:36:e8:c2:9e:19:bb:14:42:66:76:27:6b: a2:65:e9:29:2e:7a:75:61:7d:c8:35:75:99:23:6a: 9b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:88:BC:94:51:64:6E:2A:DB:E0:78:AB:42:10:9D:D1:89:9C:5E:FC X509v3 Authority Key Identifier: keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a2:2d:4f:f2:93:04:cf:32:1f:ab:74:1f:71:64:35:68:3d: 96:ea:8d:6a:73:a8:51:d8:31:7b:3b:74:86:44:cd:ac:30:db: 5d:f4:44:49:ee:c6:19:51:97:fc:78:4f:fd:9c:4b:49:ed:dd: 45:37:c6:9e:83:3b:cc:10:29:39:9d:b9:52:76:df:df:9d:94: 07:3d:df:db:5f:3d:bc:ea:88:a8:57:5a:3c:bf:c9:6e:0a:11: f4:1e:a2:12:a3:c5:de:4c:dc:1d:6f:01:56:28:b8:5e:7e:18: 42:c8:2d:6f:e2:6f:7b:c5:6e:f5:94:28:57:50:54:80:55:61: 76:c7:cc:a6:bc:e5:3a:9a:ff:ac:5c:23:cb:1f:bb:b1:de:8a: a6:de:b4:08:1c:9b:46:43:bc:94:e5:c8:44:28:e7:4e:d5:f4: 9f:85:f6:7a:ca:0b:8f:c2:3c:b4:d7:c3:a0:60:32:b0:ef:49: 30:47:64:8c:1b:0b:72:c5:83:73:e5:41:4c:3f:82:97:02:dd: 68:93:20:a5:92:fd:8e:ae:1c:25:ab:39:cc:37:d2:34:ce:40: c8:3f:8b:d9:fe:28:a9:97:a0:a9:31:77:e5:cf:45:b3:06:f6: b1:7e:38:4a:c9:66:e7:f3:2e:ff:c5:47:ed:87:67:a6:40:20: 48:56:c1:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGNBAmqETe6Y4Fo3FDcF9aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk OGIyZjcwHhcNMjUxMjEwMDMwMDMzWhcNMjUxMjExMDMwMDMzWjAzMTEwLwYDVQQD Eyg1ZDg4YmM5NDUxNjQ2ZTJhZGJlMDc4YWI0MjEwOWRkMTg5OWM1ZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4v+OcME8x0MOj1U2Ar7MXYmhRko RioE2maNQzC/lx8LjgDtLalf103Mb75I+ILtxrzyrw6Q1+63BsKsRYD4ObI+uHbH sgkNmVKRhtPEJTQawieEvhldDutzecLQf0SlAWoTJ36yD9IoKZIEtWbUiRVc5yNc njWTQd25vgeA0/OxxsY4F6Xpm5L/es4VB9kTm2cBMk2Cqs5fnntR5mlFHkLiyrTh /gIqRh5DkFtbAaJ+FXTfd1X5czfOBwRiBf6c8nvbmeqrCJ96rrKgoqrbyYH1qfpg K1pOb5xV8yCyOqN6zdg26MKeGbsUQmZ2J2uiZekpLnp1YX3INXWZI2qbpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2IvJRRZG4q2+B4q0IQndGJnF78MB8GA1UdIwQY MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct YmJlYTI5MThlMTAyLzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6ItT/KT BM8yH6t0H3FkNWg9luqNanOoUdgxezt0hkTNrDDbXfRESe7GGVGX/HhP/ZxLSe3d RTfGnoM7zBApOZ25Unbf352UBz3f2189vOqIqFdaPL/JbgoR9B6iEqPF3kzcHW8B Vii4Xn4YQsgtb+Jve8Vu9ZQoV1BUgFVhdsfMprzlOpr/rFwjyx+7sd6Kpt60CByb RkO8lOXIRCjnTtX0n4X2esoLj8I8tNfDoGAysO9JMEdkjBsLcsWDc+VBTD+ClwLd aJMgpZL9jq4cJas5zDfSNM5AyD+L2f4oqZegqTF35c9Fswb2sX44Sslm5/Mu/8VH 7YdnpkAgSFbBug== -----END CERTIFICATE-----Generated at Wed Dec 10 09:01:48 2025 by rpki-client