This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft File: 43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json) Hash identifier: BDPdFiQRa/PwZjaOqNaWWrP8bDuGdomarDNUojh8X58= Subject key identifier: D7:9A:6D:F2:A9:3A:D4:D9:7B:0F:B6:66:62:F3:9E:66:55:5C:E0:EE Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A Certificate issuer: /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a Certificate serial: 019B481591583ACD9E2E55ADDB5D590E8EA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft Manifest number: 13F1 Signing time: Mon 22 Dec 2025 22:02:11 +0000 Manifest this update: Mon 22 Dec 2025 22:02:11 +0000 Manifest next update: Tue 23 Dec 2025 22:02:11 +0000 Files and hashes: 1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: SrEBXJLyUdeX7mZzI0PX7r3mHNBobksQEw7y+YpsSRQ=) 2: 9PUwFWX6MI5zmQ2Oq6gL-_qhrj0.roa (hash: 3b0NbUCvSpLrWF4vh/o6Yjp7ddJczpbBr1onafxnYgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:91:58:3a:cd:9e:2e:55:ad:db:5d:59:0e:8e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a Validity Not Before: Dec 22 22:02:11 2025 GMT Not After : Dec 23 22:02:11 2025 GMT Subject: CN=d79a6df2a93ad4d97b0fb66662f39e66555ce0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:13:0f:95:4c:a3:bd:9a:c0:8a:e2:4e:0c:e4: 24:4d:6a:3c:b6:0c:04:e1:8a:2a:98:10:5c:42:0e: 56:f5:00:0f:63:3d:48:8f:29:0b:d6:62:6e:93:ea: f9:05:59:32:ed:1b:71:c0:16:70:20:0a:42:ff:c7: 9a:59:c8:c9:01:e9:e5:62:fb:50:2c:2a:a6:30:75: 3e:91:d2:c1:13:94:6d:d2:5c:c2:c8:9d:bd:4b:c8: 9c:6f:b9:f4:70:ec:37:67:11:63:b8:8a:9a:ec:69: 55:93:a9:f5:a0:63:7a:14:e6:fd:50:f2:ec:a5:3a: 35:65:1a:33:8a:35:76:d1:95:64:c0:b2:d5:34:ae: aa:a2:52:ce:c5:44:3f:36:46:80:b7:3d:31:e8:23: b6:1f:30:9b:28:b6:8a:bd:47:dc:7e:80:35:c3:3f: e0:b0:60:96:8a:0a:da:6c:60:62:67:19:a6:d2:66: 10:e4:28:9d:cf:71:a1:ea:6b:f9:55:f1:9a:cc:12: 69:84:3a:c1:2d:ac:4b:36:ae:a8:35:82:f9:30:d5: c7:2d:95:71:5e:0d:0f:50:82:f1:b2:56:db:74:92: ed:82:89:84:59:0e:aa:df:81:d2:27:b8:02:5d:83: 46:d8:25:78:1a:e0:37:98:5a:ba:78:9f:a4:43:8b: 5a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9A:6D:F2:A9:3A:D4:D9:7B:0F:B6:66:62:F3:9E:66:55:5C:E0:EE X509v3 Authority Key Identifier: keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:73:c1:f3:9a:1b:39:dc:c8:e8:ea:7a:95:7f:6c:1a:b3:d8: 7f:39:c3:2e:f0:e6:39:76:2b:c4:0c:bc:d7:58:4d:ae:1f:cb: 74:1b:cc:5d:a6:01:b1:1d:bf:74:99:52:a1:d1:a9:f5:3a:ea: a1:20:e3:65:31:31:b3:57:7b:34:08:df:2e:01:84:50:8a:26: ee:fb:c2:69:ce:62:1f:0b:18:4c:b4:f1:b0:38:f1:62:68:91: 22:77:8d:3a:7f:89:c5:c1:39:e7:78:20:14:48:d8:13:ee:b6: 7d:f7:82:a3:c0:bc:04:71:60:b3:b2:72:74:fb:32:d7:1b:92: d6:5a:9f:f4:2f:ea:55:8f:b2:9d:36:7c:4e:6a:19:3c:06:0f: e6:6b:7b:62:1e:8d:6c:bb:5b:9c:66:04:fa:48:10:04:e8:f3: 87:bf:38:2e:53:05:e3:03:83:65:6f:49:13:ba:6b:93:65:f2: 03:78:dd:38:35:b2:58:8f:fe:66:e0:39:2e:87:41:e8:2f:94: c1:11:dc:3c:44:f4:38:8c:71:0f:d3:a8:d9:6c:fb:37:26:d1: bb:12:02:52:4d:13:a0:8e:47:d5:93:85:56:b0:4c:28:23:1d: 46:21:c7:c6:ec:12:8e:bf:37:47:a1:a9:6c:6c:75:72:f5:03: 7d:b0:a7:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFZFYOs2eLlWt211ZDo6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2EyMGE3ZjI4YTgyNGY2NzMxNWE1NjZlNTkyNDRhYWE4 YzdkNGEwHhcNMjUxMjIyMjIwMjExWhcNMjUxMjIzMjIwMjExWjAzMTEwLwYDVQQD EyhkNzlhNmRmMmE5M2FkNGQ5N2IwZmI2NjY2MmYzOWU2NjU1NWNlMGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthMPlUyjvZrAiuJODOQkTWo8tgwE 4YoqmBBcQg5W9QAPYz1IjykL1mJuk+r5BVky7RtxwBZwIApC/8eaWcjJAenlYvtQ LCqmMHU+kdLBE5Rt0lzCyJ29S8icb7n0cOw3ZxFjuIqa7GlVk6n1oGN6FOb9UPLs pTo1ZRozijV20ZVkwLLVNK6qolLOxUQ/NkaAtz0x6CO2HzCbKLaKvUfcfoA1wz/g sGCWigrabGBiZxmm0mYQ5Cidz3Gh6mv5VfGazBJphDrBLaxLNq6oNYL5MNXHLZVx Xg0PUILxslbbdJLtgomEWQ6q34HSJ7gCXYNG2CV4GuA3mFq6eJ+kQ4ta3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeabfKpOtTZew+2ZmLznmZVXODuMB8GA1UdIwQY MBaAFON6IKfyioJPZzFaVm5ZJEqqjH1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hYzU5OGYtNWY1Mi00MzMwLWIwMTMt NTcwNjllMDgwM2I1LzEvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hYzU5OGYtNWY1Mi00MzMwLWIwMTMtNTcwNjllMDgwM2I1 LzEvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHPB85ob OdzI6Op6lX9sGrPYfznDLvDmOXYrxAy811hNrh/LdBvMXaYBsR2/dJlSodGp9Trq oSDjZTExs1d7NAjfLgGEUIom7vvCac5iHwsYTLTxsDjxYmiRIneNOn+JxcE553gg FEjYE+62ffeCo8C8BHFgs7JydPsy1xuS1lqf9C/qVY+ynTZ8TmoZPAYP5mt7Yh6N bLtbnGYE+kgQBOjzh784LlMF4wODZW9JE7prk2XyA3jdODWyWI/+ZuA5LodB6C+U wRHcPET0OIxxD9Oo2Wz7NybRuxICUk0ToI5H1ZOFVrBMKCMdRiHHxuwSjr83R6Gp bGx1cvUDfbCnIA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:45:57 2025 by rpki-client