This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft File: oGqOPGol1GOfOUWtFszF6Yo6kqY.mft (raw, json) Hash identifier: wKQ5goO69+FXp1KtOp5xcBKjo0b56bJ8Kx7kdePc37k= Subject key identifier: 12:94:58:FA:2E:55:6C:2A:C2:AB:AB:A1:65:C9:A8:7E:69:D9:EC:6E Authority key identifier: A0:6A:8E:3C:6A:25:D4:63:9F:39:45:AD:16:CC:C5:E9:8A:3A:92:A6 Certificate issuer: /CN=a06a8e3c6a25d4639f3945ad16ccc5e98a3a92a6 Certificate serial: 019B38A21458FE904F243AC64A5B0D1C5D3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 22:01:44 +0000 Manifest this update: Fri 19 Dec 2025 22:01:44 +0000 Manifest next update: Sat 20 Dec 2025 22:01:44 +0000 Files and hashes: 1: oGqOPGol1GOfOUWtFszF6Yo6kqY.crl (hash: fcvj72uFGEe8GadEG2U3wkqjFY46u2okN4/pp27NJ2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:14:58:fe:90:4f:24:3a:c6:4a:5b:0d:1c:5d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a06a8e3c6a25d4639f3945ad16ccc5e98a3a92a6 Validity Not Before: Dec 19 22:01:44 2025 GMT Not After : Dec 20 22:01:44 2025 GMT Subject: CN=129458fa2e556c2ac2ababa165c9a87e69d9ec6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6f:15:6c:18:d3:4e:7d:ec:19:03:31:f8:24: 63:4f:e8:4a:07:72:1e:80:7c:d6:38:35:1f:62:65: 46:eb:91:41:dc:69:25:3b:eb:2c:c8:97:1a:ee:82: 2b:ce:e0:29:a4:5d:9b:25:a9:3d:58:20:49:41:c4: 3e:ae:6f:2d:fb:75:4f:7f:bd:8b:17:e8:4d:bf:ed: 11:fb:9d:60:0f:b9:88:02:97:b6:53:bb:0e:f1:51: d0:91:92:58:3d:df:98:a2:02:db:32:a5:6e:c1:f5: 84:4d:2b:16:34:5c:8f:69:61:b1:bd:0b:65:38:a4: 39:71:09:5b:58:4e:a2:f0:31:e9:14:25:27:79:a0: df:59:1f:39:99:68:0a:57:a6:89:89:59:90:21:6e: 7d:22:d6:01:34:10:0d:63:b2:16:7e:9d:b3:9a:ea: 0a:50:a0:29:fe:84:e2:38:90:22:06:8b:2c:43:c7: fe:28:c3:1c:b5:5f:4e:9c:3a:d8:ca:c0:3b:dc:5b: 9c:ef:a6:1d:cb:43:10:62:a8:97:a7:1a:e7:0a:72: 7e:f3:64:82:46:0c:4b:66:ff:a9:75:3c:d8:30:84: cd:e2:2b:62:d3:76:50:31:1a:e5:b3:c3:cc:f1:33: 8e:57:15:f2:bc:85:86:de:13:d0:57:72:f6:82:b1: a9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:94:58:FA:2E:55:6C:2A:C2:AB:AB:A1:65:C9:A8:7E:69:D9:EC:6E X509v3 Authority Key Identifier: keyid:A0:6A:8E:3C:6A:25:D4:63:9F:39:45:AD:16:CC:C5:E9:8A:3A:92:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ca:46:49:4e:72:e5:21:ea:00:4b:d3:40:b6:38:36:b4:e5: 85:23:82:a1:47:82:e4:a6:63:ea:95:80:5a:1a:c2:a5:0e:3f: a3:c8:9a:f1:5c:47:f7:70:aa:60:4e:f2:75:7f:2c:ba:96:08: 24:55:58:30:11:1a:95:3f:24:01:c4:34:45:d7:4f:15:49:6a: d9:12:30:9e:80:31:ca:98:19:36:4c:da:22:5e:c1:fa:59:56: 85:de:0f:a4:8d:1c:7f:06:b9:bb:50:ca:66:53:69:59:68:76: 90:7d:e3:bc:33:81:ac:47:1d:e9:75:02:93:c3:a0:62:9e:c2: 6a:2a:7d:6d:2d:9d:e9:ae:ad:f2:e7:26:a8:ec:18:73:ae:95: 87:73:5a:e0:f2:05:41:16:53:25:01:de:c6:fe:f8:77:36:e7: 79:0e:14:9f:02:05:83:87:3a:dc:23:98:56:5b:0e:6b:48:9a: 32:41:86:f6:d6:d1:bd:3e:a9:32:fb:b3:8a:49:82:d2:22:b1: 56:47:70:eb:98:97:6c:66:64:4e:9b:97:07:7d:aa:41:75:31: ee:cb:45:48:d0:b5:24:31:5d:55:68:0b:58:23:6e:29:1c:e3: 52:61:24:22:07:f2:1e:49:96:a3:62:b9:50:f0:a2:aa:71:92: 5f:5c:5e:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ohRY/pBPJDrGSlsNHF07MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNmE4ZTNjNmEyNWQ0NjM5ZjM5NDVhZDE2Y2NjNWU5OGEz YTkyYTYwHhcNMjUxMjE5MjIwMTQ0WhcNMjUxMjIwMjIwMTQ0WjAzMTEwLwYDVQQD EygxMjk0NThmYTJlNTU2YzJhYzJhYmFiYTE2NWM5YTg3ZTY5ZDllYzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm8VbBjTTn3sGQMx+CRjT+hKB3Ie gHzWODUfYmVG65FB3GklO+ssyJca7oIrzuAppF2bJak9WCBJQcQ+rm8t+3VPf72L F+hNv+0R+51gD7mIApe2U7sO8VHQkZJYPd+YogLbMqVuwfWETSsWNFyPaWGxvQtl OKQ5cQlbWE6i8DHpFCUneaDfWR85mWgKV6aJiVmQIW59ItYBNBANY7IWfp2zmuoK UKAp/oTiOJAiBossQ8f+KMMctV9OnDrYysA73Fuc76Ydy0MQYqiXpxrnCnJ+82SC RgxLZv+pdTzYMITN4iti03ZQMRrls8PM8TOOVxXyvIWG3hPQV3L2grGppQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKUWPouVWwqwquroWXJqH5p2exuMB8GA1UdIwQY MBaAFKBqjjxqJdRjnzlFrRbMxemKOpKmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0dxT1BHb2wxR09mT1VXdEZzekY2WW82a3FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9kMjQzMDUtYzU1MS00NTBkLWI2OTct OWFjMmQ1MzZmMTJkLzEvb0dxT1BHb2wxR09mT1VXdEZzekY2WW82a3FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9kMjQzMDUtYzU1MS00NTBkLWI2OTctOWFjMmQ1MzZmMTJk LzEvb0dxT1BHb2wxR09mT1VXdEZzekY2WW82a3FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcpGSU5y 5SHqAEvTQLY4NrTlhSOCoUeC5KZj6pWAWhrCpQ4/o8ia8VxH93CqYE7ydX8supYI JFVYMBEalT8kAcQ0RddPFUlq2RIwnoAxypgZNkzaIl7B+llWhd4PpI0cfwa5u1DK ZlNpWWh2kH3jvDOBrEcd6XUCk8OgYp7Caip9bS2d6a6t8ucmqOwYc66Vh3Na4PIF QRZTJQHexv74dzbneQ4UnwIFg4c63COYVlsOa0iaMkGG9tbRvT6pMvuzikmC0iKx Vkdw65iXbGZkTpuXB32qQXUx7stFSNC1JDFdVWgLWCNuKRzjUmEkIgfyHkmWo2K5 UPCiqnGSX1xeMw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:37:53 2025 by rpki-client