This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft File: ogVTc5WopAMDh35p04kDP-N6ZPA.mft (raw, json) Hash identifier: OHBt+7DVWO/8bVNeOlL6rrtJ61PEyYuCVWTQxApH4Ao= Subject key identifier: 8F:C0:39:4A:42:20:CF:C1:FF:E2:FD:C5:CA:E8:DB:46:C2:96:72:D9 Authority key identifier: A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0 Certificate issuer: /CN=a205537395a8a40303877e69d389033fe37a64f0 Certificate serial: 019B5AF612E5BAAB47C0A092A620162E1B13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft Manifest number: 01AA Signing time: Fri 26 Dec 2025 14:00:34 +0000 Manifest this update: Fri 26 Dec 2025 14:00:34 +0000 Manifest next update: Sat 27 Dec 2025 14:00:34 +0000 Files and hashes: 1: ZCpl3UyatQkZjsK8z_IxqXu_Sk0.roa (hash: O39VxnKkC8Thbx7rhWEv+PJDcL54U/wq4sE9v+Ry7uQ=) 2: ogVTc5WopAMDh35p04kDP-N6ZPA.crl (hash: lfXFxxhN9zo3jfq9igBxMisC+AVp7H8rqBGAbf+0LJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:12:e5:ba:ab:47:c0:a0:92:a6:20:16:2e:1b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a205537395a8a40303877e69d389033fe37a64f0 Validity Not Before: Dec 26 14:00:34 2025 GMT Not After : Dec 27 14:00:34 2025 GMT Subject: CN=8fc0394a4220cfc1ffe2fdc5cae8db46c29672d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:57:0d:d8:d5:a7:f4:ba:5b:27:1c:eb:fd:a2: 79:1e:62:33:32:f5:e9:45:e8:fd:e9:86:8e:9a:e0: d5:e7:4c:d7:00:e8:06:73:3d:b8:83:b9:88:da:a4: 46:ed:8c:e8:6c:0f:7d:f2:83:e7:6c:6e:05:17:c0: 21:d8:f4:b6:7c:3f:2d:57:d2:46:14:e1:1c:5f:57: a8:76:49:73:f3:a8:55:db:ce:1e:fd:86:16:47:1b: 2e:68:76:92:0c:8b:77:00:9f:66:5e:d2:5e:ae:f6: 90:d2:02:ad:b2:2b:d6:4e:3a:8f:b6:84:24:64:3f: 8f:3f:60:f8:b0:28:50:fc:4b:a1:54:3f:8f:bd:86: f8:12:85:bd:9e:50:5b:56:90:0a:07:61:3e:db:12: cf:db:68:e6:6d:24:2d:75:56:a9:4f:28:a1:d0:e5: 3b:71:d8:ee:c1:cb:96:b8:f8:e3:03:4d:fb:36:cb: 03:dd:f6:a5:05:31:b6:ec:d8:f2:55:0c:6c:de:a0: c6:23:7d:d5:a4:ff:77:0c:aa:5a:ba:a5:ec:d6:1e: f9:2b:9d:53:bf:f8:9e:62:95:e0:34:d7:65:43:11: 24:29:90:a5:2d:3a:4a:a5:93:09:b5:7f:b3:72:82: cf:3d:c1:44:86:60:6e:75:ed:cc:37:c1:d6:5e:65: a0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C0:39:4A:42:20:CF:C1:FF:E2:FD:C5:CA:E8:DB:46:C2:96:72:D9 X509v3 Authority Key Identifier: keyid:A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ec:54:b1:83:78:81:97:6d:33:74:d4:f0:c3:d0:55:e9:19: f5:a1:f2:08:fe:46:0e:44:34:52:d7:62:f5:d2:09:80:85:7a: b1:df:d8:99:43:2b:b5:6c:34:82:82:c9:7e:7c:63:55:5e:71: 0d:c8:3b:46:bc:bb:2e:65:c4:f3:b0:c2:88:ad:d3:15:85:d2: 97:4c:4b:b4:96:41:1e:dd:91:80:1a:bf:97:d5:4a:8f:ca:d6: 18:02:40:2e:70:3c:a1:11:dd:d9:1d:f6:df:f4:5a:3e:61:6a: c5:0e:0b:c5:9c:db:2a:99:80:4d:c5:7f:4e:bc:b2:b5:b3:e7: c6:5b:bb:1d:f9:29:05:1d:2d:41:83:cf:9f:0c:ff:ee:d8:94: 4d:38:e6:49:11:7c:12:cc:89:d7:10:4a:3a:a9:ef:8a:35:93: f4:9a:43:44:e8:a9:86:45:a1:ad:07:7d:b4:43:c3:24:96:f8: dc:40:08:18:fe:c1:44:b6:50:da:0f:3e:e1:ce:08:aa:94:fb: ab:fa:3e:06:b2:4c:af:ef:f6:92:73:30:36:77:91:8f:d2:1d: e9:bb:49:c7:18:2b:29:65:0c:b0:d5:4d:17:ac:f2:af:46:0a: e6:f2:71:75:88:8a:2d:cc:1d:67:a1:03:c7:f2:29:4c:f6:85: f1:a7:ee:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9hLluqtHwKCSpiAWLhsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDU1MzczOTVhOGE0MDMwMzg3N2U2OWQzODkwMzNmZTM3 YTY0ZjAwHhcNMjUxMjI2MTQwMDM0WhcNMjUxMjI3MTQwMDM0WjAzMTEwLwYDVQQD Eyg4ZmMwMzk0YTQyMjBjZmMxZmZlMmZkYzVjYWU4ZGI0NmMyOTY3MmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1cN2NWn9LpbJxzr/aJ5HmIzMvXp Rej96YaOmuDV50zXAOgGcz24g7mI2qRG7YzobA998oPnbG4FF8Ah2PS2fD8tV9JG FOEcX1eodklz86hV284e/YYWRxsuaHaSDIt3AJ9mXtJervaQ0gKtsivWTjqPtoQk ZD+PP2D4sChQ/EuhVD+PvYb4EoW9nlBbVpAKB2E+2xLP22jmbSQtdVapTyih0OU7 cdjuwcuWuPjjA037NssD3falBTG27NjyVQxs3qDGI33VpP93DKpauqXs1h75K51T v/ieYpXgNNdlQxEkKZClLTpKpZMJtX+zcoLPPcFEhmBude3MN8HWXmWgwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/AOUpCIM/B/+L9xcro20bClnLZMB8GA1UdIwQY MBaAFKIFU3OVqKQDA4d+adOJAz/jemTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dWVGM1V29wQU1EaDM1cDA0a0RQLU42WlBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hYzc0Y2MtYTg5Ni00MzI2LWEwMjEt NmM3NWJjYmZiNGE2LzEvb2dWVGM1V29wQU1EaDM1cDA0a0RQLU42WlBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9hYzc0Y2MtYTg5Ni00MzI2LWEwMjEtNmM3NWJjYmZiNGE2 LzEvb2dWVGM1V29wQU1EaDM1cDA0a0RQLU42WlBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+xUsYN4 gZdtM3TU8MPQVekZ9aHyCP5GDkQ0Utdi9dIJgIV6sd/YmUMrtWw0goLJfnxjVV5x Dcg7Rry7LmXE87DCiK3TFYXSl0xLtJZBHt2RgBq/l9VKj8rWGAJALnA8oRHd2R32 3/RaPmFqxQ4LxZzbKpmATcV/TryytbPnxlu7HfkpBR0tQYPPnwz/7tiUTTjmSRF8 EsyJ1xBKOqnvijWT9JpDROiphkWhrQd9tEPDJJb43EAIGP7BRLZQ2g8+4c4IqpT7 q/o+BrJMr+/2knMwNneRj9Id6btJxxgrKWUMsNVNF6zyr0YK5vJxdYiKLcwdZ6ED x/IpTPaF8afu8g== -----END CERTIFICATE-----Generated at Fri Dec 26 23:02:56 2025 by rpki-client