This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft File: okz5AynEe6NDpmzWXTiDOjV7WVU.mft (raw, json) Hash identifier: JI82orjvcrADPlhz1FbSbesbUondXIpty3tSXgiH6FI= Subject key identifier: 6A:F2:95:4F:6B:D1:B7:B4:8F:D5:0F:27:64:C8:29:6F:9F:A4:8E:83 Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55 Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955 Certificate serial: 019AF12DE71A1DEDE86B3C429330FA8ABC98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:01:48 +0000 Manifest this update: Sat 06 Dec 2025 01:01:48 +0000 Manifest next update: Sun 07 Dec 2025 01:01:48 +0000 Files and hashes: 1: L_hJzZcxwJZunjzxLQL-YVG1jT0.roa (hash: /H7f2gZdXTvhI8V5NwcetnxeXbpLznW3EXechuUQFz0=) 2: RwOt6V2v9wJzu17DXTZnu1cti-k.roa (hash: pKpNRVrX80xh9DAepdCWEqDAUnRd1u2Llc+QIfnWV/Q=) 3: okz5AynEe6NDpmzWXTiDOjV7WVU.crl (hash: w8P+DBGHFizLC0vBNWuRlJ1aQrRttLm0fBYuuG9ZXZM=) 4: tDQAlIS1RkP7Hll5jY6GwoLQRHA.roa (hash: ZBp1qrqjsUhmRr1QqJR4LsXUqiXorK/xdRoQ9NS8bh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e7:1a:1d:ed:e8:6b:3c:42:93:30:fa:8a:bc:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955 Validity Not Before: Dec 6 01:01:48 2025 GMT Not After : Dec 7 01:01:48 2025 GMT Subject: CN=6af2954f6bd1b7b48fd50f2764c8296f9fa48e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0b:7a:97:b8:da:16:c5:50:6f:61:b6:db:75: 33:4e:c2:9e:b6:2e:ba:fc:70:0e:30:ee:5d:08:d9: 2b:3c:4c:79:25:c9:dd:de:f2:08:4f:cf:ba:f1:3e: 9b:16:54:ba:04:7b:de:fe:65:bb:33:81:1a:ca:44: c8:a3:07:9e:47:95:2f:9f:cf:60:b1:61:35:6c:68: 32:67:da:86:13:d6:2c:d7:a2:7d:d2:f1:ca:bb:d3: 1e:8a:ba:80:22:0e:17:32:5b:7d:d7:78:aa:c4:63: e0:a4:5a:05:45:da:4f:3b:e9:2a:67:87:f5:11:3e: 4a:dd:6a:7b:b5:6a:82:0f:2c:0a:1d:9b:74:2b:5d: b6:f7:9a:83:6c:f3:13:50:9e:0c:f2:a4:06:e1:93: 3b:7c:46:54:f2:30:b8:88:ab:f3:ba:2b:64:6f:2e: 5e:95:29:e5:59:c7:25:4e:ba:6c:cc:aa:98:4a:40: e9:18:db:d4:b6:fb:39:74:fa:8f:bd:6a:f2:6a:f9: dc:67:26:be:dc:78:93:9a:04:36:b7:e2:24:70:3a: ea:43:0e:77:bf:3f:ca:ef:51:25:01:40:f6:ba:33: a5:0f:ff:db:19:f3:1d:6d:49:c9:8d:94:c3:6d:67: c0:bf:ab:81:dc:d7:20:1b:6f:59:69:1d:18:cb:3a: 6c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F2:95:4F:6B:D1:B7:B4:8F:D5:0F:27:64:C8:29:6F:9F:A4:8E:83 X509v3 Authority Key Identifier: keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:25:40:5b:7b:4c:0f:6e:08:10:6a:dd:b2:80:ec:12:75:a1: 80:a0:25:84:b3:85:c0:20:4b:4b:77:7a:83:40:09:6c:d5:61: b2:06:12:cc:db:0d:f4:16:85:43:da:79:44:b7:69:24:47:2d: 22:d7:38:ba:23:28:5b:c8:06:65:01:c3:8a:0f:4b:39:da:44: 4b:89:ab:14:99:a8:c1:39:10:3b:ce:80:47:f3:71:0a:64:16: dd:49:32:15:86:2f:db:ba:10:10:25:52:de:5b:76:b4:ed:9c: f3:cf:ea:df:9a:09:bc:ef:f7:c8:8a:44:1d:f8:77:56:15:f4: 2b:ca:a1:e2:20:b0:be:cd:30:54:85:d0:58:f8:fc:68:e4:49: 13:ee:a0:e3:e1:06:70:f5:8d:7a:33:1f:f9:6b:6e:17:ef:fd: f7:d8:22:a2:17:30:2b:ee:1f:fd:38:77:86:2e:12:4b:b4:96: ee:f0:49:0e:56:7b:35:2e:6a:d6:0e:6c:a2:bf:a9:9a:ab:8b: d6:14:64:43:d1:0b:5a:3b:6e:9e:8d:99:ed:f2:2a:19:f4:e1: f5:4e:47:16:76:76:68:ec:2b:cf:38:ae:8c:fd:dc:93:59:81: fe:70:a5:96:41:a1:20:d7:17:46:f3:08:51:47:43:f9:eb:ae: e8:5b:90:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLecaHe3oazxCkzD6iryYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNGNmOTAzMjljNDdiYTM0M2E2NmNkNjVkMzg4MzNhMzU3 YjU5NTUwHhcNMjUxMjA2MDEwMTQ4WhcNMjUxMjA3MDEwMTQ4WjAzMTEwLwYDVQQD Eyg2YWYyOTU0ZjZiZDFiN2I0OGZkNTBmMjc2NGM4Mjk2ZjlmYTQ4ZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wt6l7jaFsVQb2G223UzTsKeti66 /HAOMO5dCNkrPEx5Jcnd3vIIT8+68T6bFlS6BHve/mW7M4EaykTIoweeR5Uvn89g sWE1bGgyZ9qGE9Ys16J90vHKu9MeirqAIg4XMlt913iqxGPgpFoFRdpPO+kqZ4f1 ET5K3Wp7tWqCDywKHZt0K12295qDbPMTUJ4M8qQG4ZM7fEZU8jC4iKvzuitkby5e lSnlWcclTrpszKqYSkDpGNvUtvs5dPqPvWryavncZya+3HiTmgQ2t+IkcDrqQw53 vz/K71ElAUD2ujOlD//bGfMdbUnJjZTDbWfAv6uB3NcgG29ZaR0YyzpsmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrylU9r0be0j9UPJ2TIKW+fpI6DMB8GA1UdIwQY MBaAFKJM+QMpxHujQ6Zs1l04gzo1e1lVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2t6NUF5bkVlNk5EcG16V1hUaURPalY3V1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kZWExNDktNGZiOC00OTc4LWE0NmIt MzM5ODVkYjgwNDdhLzEvb2t6NUF5bkVlNk5EcG16V1hUaURPalY3V1ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9kZWExNDktNGZiOC00OTc4LWE0NmItMzM5ODVkYjgwNDdh LzEvb2t6NUF5bkVlNk5EcG16V1hUaURPalY3V1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoyVAW3tM D24IEGrdsoDsEnWhgKAlhLOFwCBLS3d6g0AJbNVhsgYSzNsN9BaFQ9p5RLdpJEct Itc4uiMoW8gGZQHDig9LOdpES4mrFJmowTkQO86AR/NxCmQW3UkyFYYv27oQECVS 3lt2tO2c88/q35oJvO/3yIpEHfh3VhX0K8qh4iCwvs0wVIXQWPj8aORJE+6g4+EG cPWNejMf+WtuF+/999giohcwK+4f/Th3hi4SS7SW7vBJDlZ7NS5q1g5sor+pmquL 1hRkQ9ELWjtuno2Z7fIqGfTh9U5HFnZ2aOwrzziujP3ck1mB/nCllkGhINcXRvMI UUdD+euu6FuQ/g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:56 2025 by rpki-client