This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: JgTg5Yy7fH5FmA4Kzt+f0BYcL4BOxgI3C1CRR888zgk= Subject key identifier: C7:35:B3:DC:11:E6:59:FD:B2:FB:EE:75:76:53:40:9B:2C:16:F3:8B Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019B06341F7FA530AA7E555EDB98A273D187 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 166C Signing time: Wed 10 Dec 2025 03:00:37 +0000 Manifest this update: Wed 10 Dec 2025 03:00:37 +0000 Manifest next update: Thu 11 Dec 2025 03:00:37 +0000 Files and hashes: 1: 3R71uiQs8A2yEYIuhFU6ltMSdoA.roa (hash: q6Bu6mNsK7g3Ktdy/8WD0fy0JiscBHWIuVXEPQ7F3vc=) 2: 4SmSne42qkJfP_8H235Hb69otEg.roa (hash: Rw2BEcxlO/hT8MVd1GJXC5JIyQ4FgN6SIY1eGGUmqEM=) 3: 81pkNOTzNwT3tYccVz9WH_xBvEM.roa (hash: i9/4g/HQckvFmPe3z7i7AGU3zvyTDUBKjWj3cd7//r4=) 4: 881k6Z9AGsNKmJpB6qBRDMoI5CA.roa (hash: T+h+MOM2xrLeeEk0JPdYNuJ0bYNKkfjCHz2MRRc6zN4=) 5: H0NKaOe5bQ8Q0_5pjno5XSaRBtA.roa (hash: 23YuHYDJK8ztv50Y7XASqWUgok/NgTr64wM7KdMg6xM=) 6: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: 38K0bpj6W5x0pK6FLm5cASMvIdevtArsAtHsQ7BfGe0=) 7: PSgnnJoiSIw5Hv12Voa8VUomZgQ.roa (hash: aSwQ/+jyVOvQ9xtFsxD7WSERWfDCCWFCBTIigVEVgk8=) 8: YFzAJtaEN2OUk02732wPr2MSjTc.roa (hash: t8HA0RY/FulWJBCDF+XMDsn62YqIRGXDMqv2jjU6v40=) 9: _EZYAYWnkWrx8GFoMW8-0cKUYHM.roa (hash: bCRFxl+U0kW3hioIG33Wb/3TS856q+Il3KxpuubGmqA=) 10: p3Y3crt9wWUb6xKtKHwtfKRhpKA.roa (hash: NWTiGaZGuwbETRLnJD5VxxB23JLGGVuboYx2qrcj0Vo=) 11: yNgpBLQm6ELi-mIexk0YaTfXxb4.roa (hash: pd8PpO8asVpf3qyRi+SsT0Kl6uLeF6RLa31NmZBcfSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:34:1f:7f:a5:30:aa:7e:55:5e:db:98:a2:73:d1:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Dec 10 03:00:37 2025 GMT Not After : Dec 11 03:00:37 2025 GMT Subject: CN=c735b3dc11e659fdb2fbee757653409b2c16f38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:be:84:92:13:70:7b:75:c3:c8:b3:9e:f9: 3c:c0:b4:7b:40:78:1e:1e:a9:f5:f5:df:8b:08:8f: 83:e1:85:f1:7c:4d:4a:b9:9c:3c:f0:a2:e2:6b:15: a5:af:f0:52:da:36:9b:6d:ca:ab:1c:c6:f3:70:1c: 27:e9:53:fd:0c:81:f2:f1:c7:00:35:b7:69:99:92: fb:13:22:19:b4:cc:28:c0:c8:5b:1c:6d:30:ee:4b: 2e:b3:f8:bd:92:ac:67:1d:e2:28:38:1e:48:5b:fe: 55:2d:56:8a:38:7c:d2:0f:8f:66:2f:96:8a:99:b5: 76:26:83:cb:94:b5:75:0b:3f:2d:3c:9c:0f:91:d1: e9:a1:e7:8e:f3:45:81:39:f8:d7:8f:ed:30:45:6b: 24:f2:df:36:89:34:56:5a:70:8c:f5:dc:a6:6f:45: d5:26:68:08:cb:04:d6:b6:5c:2b:0d:f2:c4:c8:ff: 9c:14:ee:ee:62:33:e9:79:7a:af:11:2b:bf:ac:74: d6:38:24:19:4d:e0:0a:2b:24:f4:5a:84:03:e8:c8: 31:06:72:94:a9:87:dd:a0:88:47:6b:6a:43:74:c2: 40:c9:6f:92:02:e0:aa:c0:9b:42:3b:89:7b:ef:ab: b0:cb:e9:54:1f:0f:99:5e:cb:47:b2:f1:f4:fe:4c: d4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:35:B3:DC:11:E6:59:FD:B2:FB:EE:75:76:53:40:9B:2C:16:F3:8B X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:52:61:c9:69:cf:f5:32:a4:b0:ce:d1:b9:8f:8d:de:06:15: dc:20:3e:99:84:b5:78:d9:ea:df:b1:7b:b4:b4:98:a1:70:49: 30:82:ba:2b:d4:19:5b:2c:95:ff:6d:ed:4e:9f:9d:ea:8a:c0: 9b:3b:b8:28:1b:f4:26:93:41:0a:5b:2a:2d:4d:f6:8c:2b:e3: a2:20:dc:03:0d:0b:fe:31:f4:28:fd:27:ae:5e:ba:70:60:85: d9:da:d7:69:88:1c:10:00:98:05:1b:7f:0b:3d:20:8c:5f:f5: 79:49:1a:bb:34:e5:da:e6:1f:92:fa:a2:9c:e5:46:0c:c1:48: f5:0c:9f:27:0b:5b:c7:2d:e5:c4:35:d6:c5:23:c5:79:21:0d: 53:c1:66:33:2f:04:3a:d9:ac:63:51:f1:9d:01:76:73:86:4c: c2:f1:86:4a:8e:4f:8d:c6:5a:8c:05:76:17:a0:44:d3:1f:fa: a6:f4:20:ac:a8:cf:84:31:4a:82:4e:d8:5b:a8:7d:48:45:6b: 61:97:8b:ee:88:c7:dd:1c:de:7c:c8:e1:bb:44:b0:19:05:41: 50:a6:86:1f:42:f5:85:49:e7:7f:ec:eb:ba:4b:85:bf:2d:52: 1b:a0:c8:40:79:55:03:b6:eb:2e:80:08:4a:7b:42:e8:4c:0d: e8:3f:91:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGNB9/pTCqflVe25iic9GHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjUxMjEwMDMwMDM3WhcNMjUxMjExMDMwMDM3WjAzMTEwLwYDVQQD EyhjNzM1YjNkYzExZTY1OWZkYjJmYmVlNzU3NjUzNDA5YjJjMTZmMzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8O+hJITcHt1w8iznvk8wLR7QHge Hqn19d+LCI+D4YXxfE1KuZw88KLiaxWlr/BS2jabbcqrHMbzcBwn6VP9DIHy8ccA NbdpmZL7EyIZtMwowMhbHG0w7ksus/i9kqxnHeIoOB5IW/5VLVaKOHzSD49mL5aK mbV2JoPLlLV1Cz8tPJwPkdHpoeeO80WBOfjXj+0wRWsk8t82iTRWWnCM9dymb0XV JmgIywTWtlwrDfLEyP+cFO7uYjPpeXqvESu/rHTWOCQZTeAKKyT0WoQD6MgxBnKU qYfdoIhHa2pDdMJAyW+SAuCqwJtCO4l776uwy+lUHw+ZXstHsvH0/kzUgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMc1s9wR5ln9svvudXZTQJssFvOLMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVJhyWnP 9TKksM7RuY+N3gYV3CA+mYS1eNnq37F7tLSYoXBJMIK6K9QZWyyV/23tTp+d6orA mzu4KBv0JpNBClsqLU32jCvjoiDcAw0L/jH0KP0nrl66cGCF2drXaYgcEACYBRt/ Cz0gjF/1eUkauzTl2uYfkvqinOVGDMFI9QyfJwtbxy3lxDXWxSPFeSENU8FmMy8E OtmsY1HxnQF2c4ZMwvGGSo5PjcZajAV2F6BE0x/6pvQgrKjPhDFKgk7YW6h9SEVr YZeL7ojH3RzefMjhu0SwGQVBUKaGH0L1hUnnf+zrukuFvy1SG6DIQHlVA7brLoAI SntC6EwN6D+RBA== -----END CERTIFICATE-----Generated at Wed Dec 10 08:37:45 2025 by rpki-client