This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft File: oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft (raw, json) Hash identifier: 2dzRZGgGchVqazAWvg3tnbTcf2j9uBt142vm7tv7BnM= Subject key identifier: 17:09:2A:12:AD:15:4E:27:90:35:FD:9D:D4:4B:94:27:18:B4:1A:47 Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5 Certificate issuer: /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5 Certificate serial: 019AF209885CD8CE756F93E1DC13311AE223 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:42 +0000 Manifest this update: Sat 06 Dec 2025 05:01:42 +0000 Manifest next update: Sun 07 Dec 2025 05:01:42 +0000 Files and hashes: 1: QkZZT0OmyPm1U7sUIDpJIndlAn4.roa (hash: 2DQZexpqRbr1zDWnxxG0byMVlPhiUoCIJC9UgWimgPI=) 2: T8KLOt6NPvQjdduRK2LFDHFk-Ow.roa (hash: dmD7G0wa7KStRC2oIGcFu5FuaJHoaquq+ceiOTM5mGE=) 3: oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl (hash: 0PxAUh76fXj6o4xj5QxR0mbGLBJib5pSqxFFuvaK/lI=) 4: uE6sCBGadbkdNjamuV9CVt7KEu0.roa (hash: 1QH+0Q+M4LSSW1D1mW+DBLCOYwkL6R7teXBJDnbRr5c=) 5: yQrnhCAAVRdNwjOPjF1ErzWjUdw.roa (hash: wlIPSP/dxpPek11XcClQXG8X5S1Ifs5kIcm9YTpY8Rk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:88:5c:d8:ce:75:6f:93:e1:dc:13:31:1a:e2:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5 Validity Not Before: Dec 6 05:01:42 2025 GMT Not After : Dec 7 05:01:42 2025 GMT Subject: CN=17092a12ad154e279035fd9dd44b942718b41a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:37:e3:d2:06:b2:aa:26:17:e4:a3:7d:a2:55: c4:fd:e1:7e:28:3d:82:18:c1:7a:b3:b5:7f:80:7c: 92:de:a0:e5:42:69:21:94:fb:bb:91:f3:53:e5:39: 39:a6:7c:a3:8d:94:5b:8d:05:d6:bd:46:e5:59:5f: 8f:fa:7a:ec:ea:10:12:73:09:36:cf:85:fe:15:8f: f0:6f:b0:04:8f:4f:61:5f:af:08:3a:35:b3:88:55: a3:cb:f1:7d:df:de:d0:23:c1:62:b3:c0:a9:77:1f: c9:77:00:d6:68:7d:d6:ff:fa:ae:0e:fb:9f:a3:9b: 48:10:3d:d5:75:be:3e:8e:60:f5:17:b9:89:7c:9e: b1:00:2f:6a:ef:22:90:02:87:97:d6:a0:ef:02:63: 00:fc:67:5e:f5:8c:0d:71:f6:6d:fd:b3:1d:9f:a0: 51:9d:85:42:1b:46:21:a1:f3:7c:03:33:60:33:d1: 8a:ad:5c:96:0d:2b:ad:41:d4:b7:93:8a:1d:b5:2c: f7:28:e9:a4:d9:29:9c:dd:fc:97:c1:13:d1:a5:63: 61:2a:58:e0:63:b8:0a:e9:d4:a2:0e:b0:d9:79:52: 4f:f4:27:00:59:6d:a2:43:1f:a7:95:09:12:97:45: c6:2a:79:67:8f:cc:df:9d:57:65:91:7d:33:11:c8: d1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:09:2A:12:AD:15:4E:27:90:35:FD:9D:D4:4B:94:27:18:B4:1A:47 X509v3 Authority Key Identifier: keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d0:3a:92:e1:0d:49:dc:3d:9d:36:5c:44:b9:5b:04:00:ab: c9:0e:0c:18:c2:d3:89:53:c4:1e:f3:fb:a9:3d:7c:18:73:c4: c6:a5:cd:45:1d:86:06:94:68:a4:b0:fb:12:49:9c:3d:8d:29: 66:90:30:72:9c:51:8d:61:9d:73:72:ad:1f:4a:eb:03:ce:ce: d7:5d:ea:8d:e4:a7:6b:d2:89:87:99:44:02:f2:2b:b5:59:2a: 41:e9:2f:3b:ab:49:6a:03:70:0a:96:0a:b0:6b:3b:a2:43:a4: 6e:ae:aa:1e:0b:b4:53:ed:05:57:52:9e:4e:90:e5:fb:64:fc: 72:72:da:97:50:f2:67:b7:48:d3:98:28:13:7b:d4:04:70:14: cc:27:d9:05:8a:cc:87:5e:a3:86:d4:db:11:26:32:6d:5f:9e: a4:c9:33:c5:fa:60:c6:ad:f8:9d:e9:13:9b:fd:05:92:e3:39: 7c:a5:89:d4:17:4f:d0:61:0f:72:b1:84:6c:16:3e:04:81:45: 54:26:2b:a3:ed:2e:61:6c:95:5c:f3:2d:ee:ea:84:30:0c:99: cf:4c:bf:9d:07:58:15:dd:45:64:c6:cf:18:cd:75:62:50:72: 64:80:4b:29:d3:3a:c5:a7:31:ab:8c:14:d8:ef:29:2b:e2:26: d4:6a:12:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYhc2M51b5Ph3BMxGuIjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYWZlMWZlZDFmMmI3ZGIyNGEwYzJkMWY2MTAxMDY4NGU5 M2NiZDUwHhcNMjUxMjA2MDUwMTQyWhcNMjUxMjA3MDUwMTQyWjAzMTEwLwYDVQQD EygxNzA5MmExMmFkMTU0ZTI3OTAzNWZkOWRkNDRiOTQyNzE4YjQxYTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDfj0gayqiYX5KN9olXE/eF+KD2C GMF6s7V/gHyS3qDlQmkhlPu7kfNT5Tk5pnyjjZRbjQXWvUblWV+P+nrs6hAScwk2 z4X+FY/wb7AEj09hX68IOjWziFWjy/F9397QI8Fis8Cpdx/JdwDWaH3W//quDvuf o5tIED3Vdb4+jmD1F7mJfJ6xAC9q7yKQAoeX1qDvAmMA/Gde9YwNcfZt/bMdn6BR nYVCG0YhofN8AzNgM9GKrVyWDSutQdS3k4odtSz3KOmk2Smc3fyXwRPRpWNhKljg Y7gK6dSiDrDZeVJP9CcAWW2iQx+nlQkSl0XGKnlnj8zfnVdlkX0zEcjRmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcJKhKtFU4nkDX9ndRLlCcYtBpHMB8GA1UdIwQY MBaAFKCv4f7R8rfbJKDC0fYQEGhOk8vVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0tfaF90SHl0OXNrb01MUjloQVFhRTZUeTlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zMjAyYWQtN2I0Ni00MjJkLWE0ZDIt ZWNhNTNhN2Y3NzYyLzEvb0tfaF90SHl0OXNrb01MUjloQVFhRTZUeTlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zMjAyYWQtN2I0Ni00MjJkLWE0ZDItZWNhNTNhN2Y3NzYy LzEvb0tfaF90SHl0OXNrb01MUjloQVFhRTZUeTlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtA6kuEN Sdw9nTZcRLlbBACryQ4MGMLTiVPEHvP7qT18GHPExqXNRR2GBpRopLD7EkmcPY0p ZpAwcpxRjWGdc3KtH0rrA87O113qjeSna9KJh5lEAvIrtVkqQekvO6tJagNwCpYK sGs7okOkbq6qHgu0U+0FV1KeTpDl+2T8cnLal1DyZ7dI05goE3vUBHAUzCfZBYrM h16jhtTbESYybV+epMkzxfpgxq34nekTm/0FkuM5fKWJ1BdP0GEPcrGEbBY+BIFF VCYro+0uYWyVXPMt7uqEMAyZz0y/nQdYFd1FZMbPGM11YlByZIBLKdM6xacxq4wU 2O8pK+Im1GoScg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:44 2025 by rpki-client