This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft File: OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft (raw, json) Hash identifier: LSU46vb9ficU8tItMz1raeZ1s9CFvcDtnZlLwgvifw0= Subject key identifier: 4B:83:83:46:8D:31:CA:B4:C4:19:58:AD:61:72:B2:E0:8C:84:3D:B4 Authority key identifier: 3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48 Certificate issuer: /CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48 Certificate serial: 019B16F153215FA7BF2C4D97CB48B41448C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft Manifest number: 2A Signing time: Sat 13 Dec 2025 09:01:12 +0000 Manifest this update: Sat 13 Dec 2025 09:01:12 +0000 Manifest next update: Sun 14 Dec 2025 09:01:12 +0000 Files and hashes: 1: OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl (hash: e281q41zj9J09gnUTB3kS9x01ZzvQA+4SODgoglTlqc=) 2: XNNLmF6xYLzYM5AanU02Pset_Q0.roa (hash: HlxBuNjrBjrN/3xEMV5/reH8Pvrb165mYX7ZjyMcf4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 09:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:f1:53:21:5f:a7:bf:2c:4d:97:cb:48:b4:14:48:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48 Validity Not Before: Dec 13 09:01:12 2025 GMT Not After : Dec 14 09:01:12 2025 GMT Subject: CN=4b8383468d31cab4c41958ad6172b2e08c843db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f3:b3:6a:bd:1d:a1:12:51:0a:96:d7:d2:10: 5d:d0:0c:6c:08:71:47:03:b6:d8:bb:97:46:2e:7e: 2f:fa:04:23:14:b4:98:65:d4:e3:7e:39:ea:4d:39: 62:69:b8:43:07:db:f8:05:70:fa:65:1d:cf:a3:b9: 38:ab:f8:e2:d6:3e:ca:81:1c:85:d4:59:f2:30:a8: af:a8:3a:73:73:72:d1:09:c1:d7:a3:c3:b8:6b:07: 9e:e2:b7:e2:e7:be:de:1d:20:98:95:b9:89:46:3e: 28:bd:a6:de:7a:73:80:80:60:7d:61:f5:72:8d:1e: 8c:04:1a:21:7e:63:8d:ab:bc:84:25:82:67:ac:64: e2:b0:44:24:e8:49:f7:ce:5f:41:3c:5b:90:eb:20: b4:15:50:73:7c:ed:20:98:0a:49:22:db:58:5c:3e: eb:34:c6:2e:28:a5:98:ff:0b:50:06:f7:b6:1a:ee: 8a:c3:e9:00:e7:07:01:ea:df:54:59:b2:28:62:5c: 14:49:ef:5a:7c:28:5b:7a:ed:39:ec:f0:42:29:45: 13:71:1b:eb:21:31:5b:40:83:e3:91:13:ba:26:77: b4:27:d6:c3:18:c8:40:c2:36:06:67:d4:be:98:9c: c1:c4:0b:ab:94:0a:e9:51:fd:3e:f2:f3:c5:86:35: fd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:83:83:46:8D:31:CA:B4:C4:19:58:AD:61:72:B2:E0:8C:84:3D:B4 X509v3 Authority Key Identifier: keyid:3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:b0:69:a8:87:82:d8:39:e3:89:12:fe:b4:9d:2d:58:69:7b: 09:f4:93:e1:75:69:ab:bc:19:02:50:78:e8:12:44:e9:d6:ec: aa:18:0c:dc:5c:5e:4b:92:3e:91:0f:c5:42:8b:49:c7:c0:d1: fd:9f:13:f3:5b:fc:54:fa:c4:b2:a7:fa:37:57:d1:ff:9d:bd: c0:aa:0e:88:d7:2c:70:9c:37:76:2d:f1:28:d3:87:cf:d1:80: 48:fc:27:c5:7e:28:e5:98:45:f5:3d:42:6e:5f:88:6d:b8:a2: 57:2b:7b:fa:28:e0:2e:2d:f9:3d:a9:a4:50:62:60:89:ae:9b: b0:4d:c6:69:75:3e:6b:4c:9b:64:b9:1b:79:3d:83:21:ab:48: ce:8e:2c:95:ee:1a:7e:e3:03:56:82:5a:38:3a:2c:8e:b9:9b: d7:e3:d3:c5:af:3c:25:5b:5b:22:3f:36:93:90:3a:5d:01:87: d5:d7:16:ef:56:c1:d6:cd:a1:0c:ed:53:a9:38:21:12:ae:60: 45:a3:83:e2:1e:c1:07:b9:b7:8b:c8:a5:7b:31:9a:30:06:e9: 46:0a:c9:14:d4:d0:d8:92:aa:87:06:f3:87:f7:84:b4:f8:68: ad:e3:5a:cf:c1:d5:6a:15:8b:b8:b7:c8:89:70:e8:ef:1a:2e: 30:83:99:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsW8VMhX6e/LE2Xy0i0FEjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDNlODg4YzIyM2IzYmZhZTgxOWIyMjBmZmIyNWYyNmYx YzJmNDgwHhcNMjUxMjEzMDkwMTEyWhcNMjUxMjE0MDkwMTEyWjAzMTEwLwYDVQQD Eyg0YjgzODM0NjhkMzFjYWI0YzQxOTU4YWQ2MTcyYjJlMDhjODQzZGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvOzar0doRJRCpbX0hBd0AxsCHFH A7bYu5dGLn4v+gQjFLSYZdTjfjnqTTliabhDB9v4BXD6ZR3Po7k4q/ji1j7KgRyF 1FnyMKivqDpzc3LRCcHXo8O4awee4rfi577eHSCYlbmJRj4ovabeenOAgGB9YfVy jR6MBBohfmONq7yEJYJnrGTisEQk6En3zl9BPFuQ6yC0FVBzfO0gmApJIttYXD7r NMYuKKWY/wtQBve2Gu6Kw+kA5wcB6t9UWbIoYlwUSe9afChbeu057PBCKUUTcRvr ITFbQIPjkRO6Jne0J9bDGMhAwjYGZ9S+mJzBxAurlArpUf0+8vPFhjX9/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuDg0aNMcq0xBlYrWFysuCMhD20MB8GA1UdIwQY MBaAFDoD6IjCI7O/roGbIg/7JfJvHC9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dQb2lNSWpzNy11Z1pzaURfc2w4bThjTDBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kOTBiOTctYWYxMC00MmM4LTgyZDIt ODQ4MTA0MmU5YTM1LzEvT2dQb2lNSWpzNy11Z1pzaURfc2w4bThjTDBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9kOTBiOTctYWYxMC00MmM4LTgyZDItODQ4MTA0MmU5YTM1 LzEvT2dQb2lNSWpzNy11Z1pzaURfc2w4bThjTDBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbBpqIeC 2DnjiRL+tJ0tWGl7CfST4XVpq7wZAlB46BJE6dbsqhgM3FxeS5I+kQ/FQotJx8DR /Z8T81v8VPrEsqf6N1fR/529wKoOiNcscJw3di3xKNOHz9GASPwnxX4o5ZhF9T1C bl+IbbiiVyt7+ijgLi35PamkUGJgia6bsE3GaXU+a0ybZLkbeT2DIatIzo4sle4a fuMDVoJaODosjrmb1+PTxa88JVtbIj82k5A6XQGH1dcW71bB1s2hDO1TqTghEq5g RaOD4h7BB7m3i8ilezGaMAbpRgrJFNTQ2JKqhwbzh/eEtPhoreNaz8HVahWLuLfI iXDo7xouMIOZmw== -----END CERTIFICATE-----Generated at Sat Dec 13 15:00:45 2025 by rpki-client