This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft File: oGqOPGol1GOfOUWtFszF6Yo6kqY.mft (raw, json) Hash identifier: KhgPLN65KbO1pQefUePc7td2G/84RYjpgDMnn3ztri4= Subject key identifier: 21:06:54:8E:97:56:EB:A8:EA:D3:AC:0E:F1:0A:F8:3F:58:E0:05:1A Authority key identifier: A0:6A:8E:3C:6A:25:D4:63:9F:39:45:AD:16:CC:C5:E9:8A:3A:92:A6 Certificate issuer: /CN=a06a8e3c6a25d4639f3945ad16ccc5e98a3a92a6 Certificate serial: 019B462741A20258984B5334B1647AB3A42D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 13:02:16 +0000 Manifest this update: Mon 22 Dec 2025 13:02:16 +0000 Manifest next update: Tue 23 Dec 2025 13:02:16 +0000 Files and hashes: 1: oGqOPGol1GOfOUWtFszF6Yo6kqY.crl (hash: deguR1e98KV5+B9hFROWwIyvOhnSIjTG4GlZwQ/q5mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:41:a2:02:58:98:4b:53:34:b1:64:7a:b3:a4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a06a8e3c6a25d4639f3945ad16ccc5e98a3a92a6 Validity Not Before: Dec 22 13:02:16 2025 GMT Not After : Dec 23 13:02:16 2025 GMT Subject: CN=2106548e9756eba8ead3ac0ef10af83f58e0051a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e6:60:ed:83:bf:9d:c0:14:85:96:93:d3:90: df:f4:83:99:b0:39:42:19:d4:51:53:ae:ee:69:ac: d0:d8:4c:5d:0f:05:d3:d9:1b:9d:23:ac:d9:95:b7: 84:a1:26:a2:29:78:1a:e9:b8:10:5b:6c:59:82:87: 9f:bd:7f:5e:99:49:ad:cb:67:2b:9e:13:e6:9d:3a: fd:e9:60:60:15:25:8f:bd:88:93:ae:5d:19:17:ac: 6d:ab:f2:5f:3e:45:26:c3:80:63:88:7d:83:be:f5: 96:82:e8:93:5d:e5:da:d6:a1:ee:68:4f:c5:8f:87: 32:9f:a6:c1:b8:32:d6:1d:65:bc:a5:6e:a4:42:ab: c3:16:65:58:0a:a7:b3:39:50:ce:12:4e:23:ec:d6: bf:17:54:89:c2:f6:68:a9:94:1b:66:bd:6b:03:a1: fa:ce:5c:10:10:d4:6d:ef:95:10:b2:02:bd:34:a6: 24:09:10:09:44:f5:8d:d6:68:f1:58:f0:07:93:ff: 26:af:c5:66:f9:c1:96:e9:53:b3:3f:35:82:0f:76: 42:db:b5:67:4e:76:28:4b:4f:8c:ce:41:b9:4b:fe: 43:35:48:0b:9e:c4:68:75:3b:8e:ca:33:dc:22:d6: 50:70:53:c2:33:79:4a:6b:61:4d:10:7f:e2:dc:69: 3b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:06:54:8E:97:56:EB:A8:EA:D3:AC:0E:F1:0A:F8:3F:58:E0:05:1A X509v3 Authority Key Identifier: keyid:A0:6A:8E:3C:6A:25:D4:63:9F:39:45:AD:16:CC:C5:E9:8A:3A:92:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:90:df:da:0e:0f:78:67:da:eb:cb:6b:83:29:9d:61:30:c1: ed:92:91:95:8d:9e:8a:39:f2:40:b2:18:59:91:0c:cf:0b:f5: 6c:c8:3d:33:5f:d6:d9:7c:e4:72:e7:06:d6:68:e6:6b:47:a2: 50:72:53:b6:39:b2:d9:ff:32:29:1b:2c:12:78:95:f4:83:12: 31:bb:3d:b5:3d:81:22:4e:9f:d1:ab:5a:16:33:6f:98:9d:05: bc:21:e5:74:9d:91:12:6e:52:37:81:04:1b:85:46:24:79:6c: bf:cb:98:bf:e6:4d:96:ff:9f:27:a7:0b:d8:a7:c0:c8:05:25: 81:d1:9e:56:a9:cd:dd:e2:dd:b5:f6:f6:d1:4e:3f:2e:af:f8: 75:81:22:a6:5c:f3:4c:ce:20:29:3f:5b:e3:67:7c:8e:f0:23: e0:46:f8:9d:37:a4:fd:8b:74:7f:ef:54:6b:b9:02:73:92:11: ac:52:5f:5d:7f:33:e9:d3:c8:fe:dd:66:62:2e:8d:90:36:6e: e5:08:74:0f:ac:d1:d1:7c:cb:95:3d:47:8e:78:ee:50:10:21: d8:cc:c6:5c:1a:da:aa:84:5f:92:3c:c5:25:88:12:66:da:da: be:1b:09:b2:2f:ca:b7:c5:10:d9:ee:19:62:6c:b3:52:ab:a5: fd:a1:4b:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJ0GiAliYS1M0sWR6s6QtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNmE4ZTNjNmEyNWQ0NjM5ZjM5NDVhZDE2Y2NjNWU5OGEz YTkyYTYwHhcNMjUxMjIyMTMwMjE2WhcNMjUxMjIzMTMwMjE2WjAzMTEwLwYDVQQD EygyMTA2NTQ4ZTk3NTZlYmE4ZWFkM2FjMGVmMTBhZjgzZjU4ZTAwNTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+Zg7YO/ncAUhZaT05Df9IOZsDlC GdRRU67uaazQ2ExdDwXT2RudI6zZlbeEoSaiKXga6bgQW2xZgoefvX9emUmty2cr nhPmnTr96WBgFSWPvYiTrl0ZF6xtq/JfPkUmw4BjiH2DvvWWguiTXeXa1qHuaE/F j4cyn6bBuDLWHWW8pW6kQqvDFmVYCqezOVDOEk4j7Na/F1SJwvZoqZQbZr1rA6H6 zlwQENRt75UQsgK9NKYkCRAJRPWN1mjxWPAHk/8mr8Vm+cGW6VOzPzWCD3ZC27Vn TnYoS0+MzkG5S/5DNUgLnsRodTuOyjPcItZQcFPCM3lKa2FNEH/i3Gk73wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEGVI6XVuuo6tOsDvEK+D9Y4AUaMB8GA1UdIwQY MBaAFKBqjjxqJdRjnzlFrRbMxemKOpKmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0dxT1BHb2wxR09mT1VXdEZzekY2WW82a3FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9kMjQzMDUtYzU1MS00NTBkLWI2OTct OWFjMmQ1MzZmMTJkLzEvb0dxT1BHb2wxR09mT1VXdEZzekY2WW82a3FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9kMjQzMDUtYzU1MS00NTBkLWI2OTctOWFjMmQ1MzZmMTJk LzEvb0dxT1BHb2wxR09mT1VXdEZzekY2WW82a3FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJDf2g4P eGfa68trgymdYTDB7ZKRlY2eijnyQLIYWZEMzwv1bMg9M1/W2XzkcucG1mjma0ei UHJTtjmy2f8yKRssEniV9IMSMbs9tT2BIk6f0ataFjNvmJ0FvCHldJ2REm5SN4EE G4VGJHlsv8uYv+ZNlv+fJ6cL2KfAyAUlgdGeVqnN3eLdtfb20U4/Lq/4dYEiplzz TM4gKT9b42d8jvAj4Eb4nTek/Yt0f+9Ua7kCc5IRrFJfXX8z6dPI/t1mYi6NkDZu 5Qh0D6zR0XzLlT1HjnjuUBAh2MzGXBraqoRfkjzFJYgSZtravhsJsi/Kt8UQ2e4Z YmyzUqul/aFLeQ== -----END CERTIFICATE-----Generated at Mon Dec 22 20:43:53 2025 by rpki-client