This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft File: oktI7cejJdfxrg8lfA4oNRcbya4.mft (raw, json) Hash identifier: JLjJniIoddwOkOlcOekfAD8HDsYYqaz8gIvlDa4tDg0= Subject key identifier: D6:CF:B3:14:3A:C6:09:D1:74:03:EB:3D:F6:C7:CB:CA:90:31:0B:91 Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae Certificate serial: 019AF2AD89A40C62189352A4519139E1A598 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 08:00:50 +0000 Manifest this update: Sat 06 Dec 2025 08:00:50 +0000 Manifest next update: Sun 07 Dec 2025 08:00:50 +0000 Files and hashes: 1: B0JGrIFbhcfZ9k0gLZbKOC7BRts.roa (hash: uan7Xlr3tx5QNJHwIPILAsu/3eaM2Ksrcs3oBa0JKWg=) 2: B6qJHXpeC3IEJy34_URs46RdWiA.roa (hash: toHD5hhCltD6s8AbgpGot0TJcoWUl/7kkl/+KkMGZ/I=) 3: X5BI_4m66OA1gTOSPBNCsDRd-Pw.roa (hash: 3oZT1fDyGLqNouLkyRSol/W9I5a1RPKZknAigOCTTYM=) 4: oktI7cejJdfxrg8lfA4oNRcbya4.crl (hash: laj0lbdnI0WutCqfqc8Hwjb1LrlbOlPZBhSyg2FBtFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:89:a4:0c:62:18:93:52:a4:51:91:39:e1:a5:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae Validity Not Before: Dec 6 08:00:50 2025 GMT Not After : Dec 7 08:00:50 2025 GMT Subject: CN=d6cfb3143ac609d17403eb3df6c7cbca90310b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:ad:c1:00:69:bd:15:b2:53:22:69:8f:74: 68:3b:f5:f6:af:a0:98:f7:1e:bb:e1:3d:6c:f0:dd: 90:00:e3:8e:7a:f0:08:1e:e3:a4:c4:77:cf:9f:c7: 46:4e:6f:fb:34:b6:c4:9d:b8:f2:af:ff:10:fa:4f: 70:9d:fe:67:59:52:1c:63:ab:f8:f8:c6:b5:3a:1a: 64:89:e5:a6:20:5d:dc:8f:51:e3:9a:e2:33:26:e2: 5c:a1:d6:9d:68:ea:ef:a6:ca:6a:28:45:a1:d4:eb: 17:37:cd:0a:15:c6:fb:9a:a9:7f:ef:ee:dc:76:3e: d3:b4:00:64:70:7e:97:27:a3:a5:83:95:29:4c:50: ae:10:1a:c9:06:51:f2:19:63:aa:32:1b:ac:7c:50: d0:4e:de:aa:06:87:f9:ac:0b:03:dd:c1:f7:94:81: 89:96:cf:ad:44:46:1a:3b:c4:7a:b1:46:b6:86:b2: b1:67:a4:54:c0:a9:3d:36:3d:4c:a8:fa:a2:64:da: 3e:2b:80:3a:e9:50:10:e4:ec:46:95:72:c0:a5:49: 3f:7b:bb:45:09:a8:6e:e8:9f:55:55:ff:ea:f7:3b: fa:3a:88:98:cd:0a:e2:e4:b2:52:6d:3e:a4:e7:23: 94:ac:b9:ff:d0:83:94:81:32:0c:3d:c8:08:91:db: ad:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CF:B3:14:3A:C6:09:D1:74:03:EB:3D:F6:C7:CB:CA:90:31:0B:91 X509v3 Authority Key Identifier: keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5b:4a:f7:55:8b:5b:c0:99:00:f4:ae:05:02:47:41:b9:31: f1:29:38:0c:c3:ca:03:96:56:ae:cd:52:ea:a1:da:7c:06:0a: 70:02:40:22:d9:d4:ad:e0:27:55:9d:ea:ee:df:e0:47:be:ba: 65:87:e5:bf:a0:68:26:af:d5:f7:59:a2:38:73:37:86:c5:06: 9c:40:6c:c4:7e:0b:04:f1:1f:f8:9e:27:fc:8e:86:c5:55:47: e7:af:e9:03:77:6b:a0:94:40:87:bc:69:cc:fe:71:04:59:0b: 29:e6:90:d4:81:74:dc:00:b7:ee:0f:13:a0:a3:6d:ff:64:e2: 73:49:0a:f5:94:0d:39:94:8e:cd:ee:7d:03:49:d2:2f:11:1c: 2f:fa:7a:03:83:ee:63:ed:0d:b9:96:90:0c:2d:d2:3e:00:62: f1:2d:a2:97:34:43:13:0a:59:7c:d5:b1:4d:7c:f9:8e:7a:60: 95:58:08:f1:a5:f4:e1:a8:d8:60:5d:a0:70:dd:ae:1e:a7:8f: b9:ec:9b:cf:d2:a2:aa:70:91:77:f0:05:4c:4b:27:3b:97:c7: c3:f3:57:ce:d3:f6:f9:73:0f:d7:28:94:6a:40:71:a4:48:46: 4a:b4:fb:3a:9a:f0:88:37:66:5a:71:14:2f:fc:8e:79:37:fc: 99:de:ae:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYmkDGIYk1KkUZE54aWYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNGI0OGVkYzdhMzI1ZDdmMWFlMGYyNTdjMGUyODM1MTcx YmM5YWUwHhcNMjUxMjA2MDgwMDUwWhcNMjUxMjA3MDgwMDUwWjAzMTEwLwYDVQQD EyhkNmNmYjMxNDNhYzYwOWQxNzQwM2ViM2RmNmM3Y2JjYTkwMzEwYjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvKtwQBpvRWyUyJpj3RoO/X2r6CY 9x674T1s8N2QAOOOevAIHuOkxHfPn8dGTm/7NLbEnbjyr/8Q+k9wnf5nWVIcY6v4 +Ma1OhpkieWmIF3cj1HjmuIzJuJcodadaOrvpspqKEWh1OsXN80KFcb7mql/7+7c dj7TtABkcH6XJ6Olg5UpTFCuEBrJBlHyGWOqMhusfFDQTt6qBof5rAsD3cH3lIGJ ls+tREYaO8R6sUa2hrKxZ6RUwKk9Nj1MqPqiZNo+K4A66VAQ5OxGlXLApUk/e7tF Cahu6J9VVf/q9zv6OoiYzQri5LJSbT6k5yOUrLn/0IOUgTIMPcgIkdutoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbPsxQ6xgnRdAPrPfbHy8qQMQuRMB8GA1UdIwQY MBaAFKJLSO3HoyXX8a4PJXwOKDUXG8muMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2t0STdjZWpKZGZ4cmc4bGZBNG9OUmNieWE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82MmFmZWYtNzBkMS00ZmUyLTllZGYt N2YxZTU3NDg3YzFhLzEvb2t0STdjZWpKZGZ4cmc4bGZBNG9OUmNieWE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni82MmFmZWYtNzBkMS00ZmUyLTllZGYtN2YxZTU3NDg3YzFh LzEvb2t0STdjZWpKZGZ4cmc4bGZBNG9OUmNieWE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFtK91WL W8CZAPSuBQJHQbkx8Sk4DMPKA5ZWrs1S6qHafAYKcAJAItnUreAnVZ3q7t/gR766 ZYflv6BoJq/V91miOHM3hsUGnEBsxH4LBPEf+J4n/I6GxVVH56/pA3droJRAh7xp zP5xBFkLKeaQ1IF03AC37g8ToKNt/2Tic0kK9ZQNOZSOze59A0nSLxEcL/p6A4Pu Y+0NuZaQDC3SPgBi8S2ilzRDEwpZfNWxTXz5jnpglVgI8aX04ajYYF2gcN2uHqeP ueybz9KiqnCRd/AFTEsnO5fHw/NXztP2+XMP1yiUakBxpEhGSrT7OprwiDdmWnEU L/yOeTf8md6uYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:38:00 2025 by rpki-client