This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft File: oGBriq1VPwlIx6iU1oZxhw64LLA.mft (raw, json) Hash identifier: GQspYwcnoGlv7e4E+d3FmuILJ8QgtWQERTCiSvUuZ50= Subject key identifier: 0A:9E:11:77:F2:35:69:F7:AA:D4:8F:71:94:53:C6:57:C7:8D:00:48 Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0 Certificate issuer: /CN=a0606b8aad553f0948c7a894d68671870eb82cb0 Certificate serial: 019B48F0573EF17C87B379D9DDADB3CD1E0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft Manifest number: 1594 Signing time: Tue 23 Dec 2025 02:01:09 +0000 Manifest this update: Tue 23 Dec 2025 02:01:09 +0000 Manifest next update: Wed 24 Dec 2025 02:01:09 +0000 Files and hashes: 1: KrIvvgvNcbldjoVbc0aYd49MKLk.roa (hash: Efb7XeSs1Qr2rRr6o/FWnq95UEV78aFPxWcZg4DCWHc=) 2: ZkYwAX8sFU0tx7MlmzFWDuReNoo.roa (hash: 1bC+YhGSYAmLg99m2lBrTp2m6aERC4TuVMQpOPNQzNM=) 3: coBIhj-g7a4t_QkFPEnA3t3TN8U.roa (hash: FMtCmhYv8BwdhkKpNroPbCbepJ79NGcx+1J9x7kaHKA=) 4: oGBriq1VPwlIx6iU1oZxhw64LLA.crl (hash: 604a8S1/54wZGmbmivvxoMEtRBLC0ZvjkaH7rIafVR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 02:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:57:3e:f1:7c:87:b3:79:d9:dd:ad:b3:cd:1e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0 Validity Not Before: Dec 23 02:01:09 2025 GMT Not After : Dec 24 02:01:09 2025 GMT Subject: CN=0a9e1177f23569f7aad48f719453c657c78d0048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:60:aa:9f:d4:32:c2:35:97:71:77:65:7d:22: d5:60:24:4a:c3:31:76:1b:0b:7f:70:16:b9:a6:9c: d0:8b:84:fe:8b:60:22:dc:5b:94:56:5c:38:f9:7d: 12:5d:dd:19:4d:67:db:9d:c0:3c:45:12:98:c5:b9: 0d:fe:2a:29:fb:f2:ef:d6:37:41:b1:03:0b:d2:49: ca:8d:43:17:f4:32:a5:1d:dc:13:62:6f:42:7c:aa: 3f:83:a7:22:e5:33:aa:f3:3e:90:fe:b5:52:11:50: be:16:c6:24:b6:48:4c:26:86:a3:79:51:01:5b:d8: 19:80:0b:8d:e1:95:0f:35:95:9b:b1:1d:dc:14:24: 26:c4:96:24:db:fc:09:97:32:44:b1:88:1d:85:c0: f9:79:58:18:f2:1c:38:56:d6:21:64:18:7f:fd:4f: 1f:81:34:cc:fb:a3:dd:d0:7d:65:26:5d:11:da:31: 2b:55:4f:8c:2f:ac:e0:96:1b:bc:5e:db:ab:20:66: 26:57:97:90:06:09:f6:8b:22:bf:af:cf:cc:e9:4d: 45:e9:24:c5:85:c7:e7:cc:f5:33:e5:3c:44:10:c0: 84:85:2c:51:d4:1d:81:67:22:ba:1c:75:b4:5f:36: d0:ae:38:32:82:02:02:66:29:52:ac:bb:8c:7e:1b: 74:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9E:11:77:F2:35:69:F7:AA:D4:8F:71:94:53:C6:57:C7:8D:00:48 X509v3 Authority Key Identifier: keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:2e:01:b0:32:3d:47:e0:22:92:37:4f:f3:27:f7:15:08:e3: a1:46:03:32:9c:b4:8c:98:f5:ab:9d:63:24:d4:ad:c9:88:5a: d1:fa:ea:ba:e2:89:85:b7:77:84:c2:f2:73:02:d1:65:ee:5d: 4e:09:1b:d2:04:18:db:a7:41:d7:1c:ad:51:b5:e3:10:89:11: a6:1c:c2:c1:e7:d2:72:20:b7:78:db:45:65:0a:7f:1e:fe:eb: bd:03:5e:8a:62:f0:36:2a:6e:eb:ce:b9:f1:b8:0d:7e:a9:83: ed:39:8c:7b:ea:d7:72:c4:2a:c9:fd:cb:90:8e:53:a2:92:31: 96:f6:ff:f1:f5:47:4f:2c:b7:4f:4d:dd:ed:e0:09:ba:42:c8: f8:f8:5c:d5:18:09:3f:83:ba:be:5a:fb:1f:b9:28:16:04:4f: c7:11:5c:e3:7b:bc:d7:5b:b9:ab:e4:62:dd:86:bf:82:d2:d7: a7:21:01:00:eb:cb:47:30:c7:98:09:05:e6:e6:16:47:9f:79: bb:69:19:e8:96:ac:40:4c:0d:94:26:12:09:7d:18:fa:fa:b8: a6:63:af:60:2a:50:ad:ca:0f:b8:11:cf:08:3e:67:4e:ce:04: cc:78:82:f0:8b:f0:60:c7:a4:fc:19:cf:03:8d:27:1e:0f:71: 3a:e3:8a:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8Fc+8XyHs3nZ3a2zzR4LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNjA2YjhhYWQ1NTNmMDk0OGM3YTg5NGQ2ODY3MTg3MGVi ODJjYjAwHhcNMjUxMjIzMDIwMTA5WhcNMjUxMjI0MDIwMTA5WjAzMTEwLwYDVQQD EygwYTllMTE3N2YyMzU2OWY3YWFkNDhmNzE5NDUzYzY1N2M3OGQwMDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mCqn9QywjWXcXdlfSLVYCRKwzF2 Gwt/cBa5ppzQi4T+i2Ai3FuUVlw4+X0SXd0ZTWfbncA8RRKYxbkN/iop+/Lv1jdB sQML0knKjUMX9DKlHdwTYm9CfKo/g6ci5TOq8z6Q/rVSEVC+FsYktkhMJoajeVEB W9gZgAuN4ZUPNZWbsR3cFCQmxJYk2/wJlzJEsYgdhcD5eVgY8hw4VtYhZBh//U8f gTTM+6Pd0H1lJl0R2jErVU+ML6zglhu8XturIGYmV5eQBgn2iyK/r8/M6U1F6STF hcfnzPUz5TxEEMCEhSxR1B2BZyK6HHW0XzbQrjgyggICZilSrLuMfht0/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqeEXfyNWn3qtSPcZRTxlfHjQBIMB8GA1UdIwQY MBaAFKBga4qtVT8JSMeolNaGcYcOuCywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85ZTJkZmQtZjJlOS00MTZkLThmMWYt YmIzNDMxZmUwMjg1LzEvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85ZTJkZmQtZjJlOS00MTZkLThmMWYtYmIzNDMxZmUwMjg1 LzEvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArC4BsDI9 R+AikjdP8yf3FQjjoUYDMpy0jJj1q51jJNStyYha0frquuKJhbd3hMLycwLRZe5d Tgkb0gQY26dB1xytUbXjEIkRphzCwefSciC3eNtFZQp/Hv7rvQNeimLwNipu6865 8bgNfqmD7TmMe+rXcsQqyf3LkI5TopIxlvb/8fVHTyy3T03d7eAJukLI+Phc1RgJ P4O6vlr7H7koFgRPxxFc43u811u5q+Ri3Ya/gtLXpyEBAOvLRzDHmAkF5uYWR595 u2kZ6JasQEwNlCYSCX0Y+vq4pmOvYCpQrcoPuBHPCD5nTs4EzHiC8IvwYMek/BnP A40nHg9xOuOKFw== -----END CERTIFICATE-----Generated at Tue Dec 23 10:58:13 2025 by rpki-client