This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft File: ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft (raw, json) Hash identifier: StZErCPhQSI5VBdd4vgf5T14DPrcm9XxwrF3LUXmZik= Subject key identifier: B4:33:13:EA:DA:3D:42:FB:22:AB:07:34:21:62:2D:45:24:0E:4E:49 Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28 Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928 Certificate serial: 019B360E15F26A22D6EB5A9E68478CF236F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft Manifest number: 11F8 Signing time: Fri 19 Dec 2025 10:00:51 +0000 Manifest this update: Fri 19 Dec 2025 10:00:51 +0000 Manifest next update: Sat 20 Dec 2025 10:00:51 +0000 Files and hashes: 1: 0riwbK-R5SQDQbiXbxNMvOKwj1Q.roa (hash: d2SRgakZUBxW5TlLkPzlI9efZpJljVH6FfcMkO1myyQ=) 2: 13rU8nhg31f282Ufq4fY9epK_mk.roa (hash: 71Un032C55jpwedQZGjeiCXgaYcH9RkzCt+gCgI2Wak=) 3: ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl (hash: 0P4WnaoP6X6Z2sW3bEDkZd1gxqgpsHLB4nwtwpDEJJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:15:f2:6a:22:d6:eb:5a:9e:68:47:8c:f2:36:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20cc67154b403145d139469886127ab629eb928 Validity Not Before: Dec 19 10:00:51 2025 GMT Not After : Dec 20 10:00:51 2025 GMT Subject: CN=b43313eada3d42fb22ab073421622d45240e4e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0a:ef:60:25:53:1b:e3:ab:6f:b2:52:12:58: c3:24:8c:88:36:f3:5c:0c:1b:5d:a6:fb:3c:08:7b: ae:eb:17:05:bc:c5:ad:4b:1b:9a:c1:24:da:4d:df: b2:3e:19:b0:41:a3:94:34:15:5f:28:2e:77:6e:61: 66:26:63:c9:4c:5d:70:ac:c9:ef:99:85:e7:02:ec: 4e:9a:c8:db:09:d3:df:a7:97:17:9d:cc:8b:97:5a: c1:49:35:17:59:b5:9e:cc:43:82:d2:e0:37:8f:62: 94:28:64:f5:c7:e2:2d:8d:c5:9f:b4:98:11:c3:6e: 79:07:91:fd:a4:5f:76:7a:99:a7:6c:02:94:df:d3: 67:ae:fb:11:e0:1b:2c:b2:88:c4:5c:1f:9f:f7:8b: af:d6:d4:2c:c5:8e:1a:0a:5a:32:85:60:b7:62:2b: 77:01:4e:c4:08:6e:d6:e1:d8:b7:d5:02:4c:d8:89: 64:dc:36:cd:fb:57:53:09:03:6e:5f:8e:50:af:dc: 5b:24:a9:f0:5a:91:6f:cf:b4:fb:16:c0:95:ae:22: 85:35:bd:2f:b0:28:2d:70:52:a5:c9:94:2c:b3:7e: 19:f4:44:24:7e:b4:73:c6:ed:cb:a2:47:85:e7:f4: b6:7b:c7:25:d4:07:b0:73:3f:12:b5:31:04:c6:c1: c7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:33:13:EA:DA:3D:42:FB:22:AB:07:34:21:62:2D:45:24:0E:4E:49 X509v3 Authority Key Identifier: keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a3:b9:64:65:a2:7a:a0:47:e4:38:ef:90:a3:6a:1d:7c:0c: 31:4e:ad:18:b5:69:e2:72:5f:5c:a0:d9:93:f8:d9:7d:65:2b: 99:9e:14:58:58:5e:61:db:c6:d8:84:46:af:f7:96:cc:59:86: ed:b7:cc:89:9b:74:a5:e6:53:57:48:36:c0:fe:f3:f0:52:ed: 4a:00:f3:60:8b:ca:6b:12:d5:1a:2c:be:5d:28:6e:a4:52:88: 8c:7e:53:a2:93:ce:58:2e:05:ef:f8:95:e0:cd:f5:7c:18:e8: 95:f7:29:39:1d:d2:f2:77:39:58:6b:8b:40:25:92:60:c2:f2: aa:26:1c:bc:30:85:b3:69:fa:bf:10:a7:1d:8e:03:67:de:3d: 20:44:52:72:fc:93:be:c5:9d:89:cd:1f:bc:dc:a4:e3:cd:da: cc:e0:d5:5c:88:49:cf:d7:da:79:c5:ff:ec:9c:75:4a:22:f2: e1:18:7f:2c:b3:1e:bc:30:5c:20:b7:b6:12:f2:53:cf:2b:76: 1a:1e:c0:9c:af:e1:0c:6b:c6:35:0e:df:a1:d7:03:52:e9:98: 47:5a:b5:18:f6:55:94:91:58:e7:61:38:0b:5d:5f:bd:51:56: 10:d5:36:41:f3:ac:f3:bb:bd:27:e6:ed:53:e5:06:56:03:0c: d3:69:5c:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DhXyaiLW61qeaEeM8jb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMGNjNjcxNTRiNDAzMTQ1ZDEzOTQ2OTg4NjEyN2FiNjI5 ZWI5MjgwHhcNMjUxMjE5MTAwMDUxWhcNMjUxMjIwMTAwMDUxWjAzMTEwLwYDVQQD EyhiNDMzMTNlYWRhM2Q0MmZiMjJhYjA3MzQyMTYyMmQ0NTI0MGU0ZTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QrvYCVTG+Orb7JSEljDJIyINvNc DBtdpvs8CHuu6xcFvMWtSxuawSTaTd+yPhmwQaOUNBVfKC53bmFmJmPJTF1wrMnv mYXnAuxOmsjbCdPfp5cXncyLl1rBSTUXWbWezEOC0uA3j2KUKGT1x+ItjcWftJgR w255B5H9pF92epmnbAKU39NnrvsR4BsssojEXB+f94uv1tQsxY4aCloyhWC3Yit3 AU7ECG7W4di31QJM2Ilk3DbN+1dTCQNuX45Qr9xbJKnwWpFvz7T7FsCVriKFNb0v sCgtcFKlyZQss34Z9EQkfrRzxu3LokeF5/S2e8cl1Aewcz8StTEExsHHzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQzE+raPUL7IqsHNCFiLUUkDk5JMB8GA1UdIwQY MBaAFKIMxnFUtAMUXROUaYhhJ6tinrkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kZDg4NzgtMjk0MS00YzE1LWIyMDQt OGZjMzM3MzdjZWFiLzEvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9kZDg4NzgtMjk0MS00YzE1LWIyMDQtOGZjMzM3MzdjZWFi LzEvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKO5ZGWi eqBH5DjvkKNqHXwMMU6tGLVp4nJfXKDZk/jZfWUrmZ4UWFheYdvG2IRGr/eWzFmG 7bfMiZt0peZTV0g2wP7z8FLtSgDzYIvKaxLVGiy+XShupFKIjH5TopPOWC4F7/iV 4M31fBjolfcpOR3S8nc5WGuLQCWSYMLyqiYcvDCFs2n6vxCnHY4DZ949IERScvyT vsWdic0fvNyk483azODVXIhJz9faecX/7Jx1SiLy4Rh/LLMevDBcILe2EvJTzyt2 Gh7AnK/hDGvGNQ7fodcDUumYR1q1GPZVlJFY52E4C11fvVFWENU2QfOs87u9J+bt U+UGVgMM02lcEA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:08:55 2025 by rpki-client