This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft File: oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft (raw, json) Hash identifier: 2mdCFRJj6apcR+EZj+1QXMR6cmW9A/NChbDH98uAfGs= Subject key identifier: 77:D1:60:14:E3:88:2F:7F:75:52:42:7B:43:B4:D6:25:34:34:EC:B1 Authority key identifier: A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C Certificate issuer: /CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c Certificate serial: 019AF19B0BCC930B766E61254820CC01BFAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft Manifest number: 08B6 Signing time: Sat 06 Dec 2025 03:01:01 +0000 Manifest this update: Sat 06 Dec 2025 03:01:01 +0000 Manifest next update: Sun 07 Dec 2025 03:01:01 +0000 Files and hashes: 1: oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl (hash: KmgAtuqiiSAOaKpdJgBqZelxhJgi5snDoUbshC+jedI=) 2: vVp_ERdrnRIqLCUsItb5VjVaAYU.roa (hash: qquI+vjzguENR1gQyNKb61rrA2a/ZfrzpGtiqom6A+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:0b:cc:93:0b:76:6e:61:25:48:20:cc:01:bf:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c Validity Not Before: Dec 6 03:01:01 2025 GMT Not After : Dec 7 03:01:01 2025 GMT Subject: CN=77d16014e3882f7f7552427b43b4d6253434ecb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e5:43:de:60:a8:db:d8:2f:6c:40:52:c8:9a: 0c:96:8c:e6:2a:3e:80:cb:cc:ef:6f:a3:c3:bc:de: d0:c5:3a:47:2d:ea:8f:a9:76:63:91:06:b5:53:49: 0e:15:9d:a8:27:c3:2b:07:80:b5:ca:7e:ef:e3:f1: 89:94:a6:1e:5a:c5:9d:b2:27:38:d3:38:e3:6d:4a: e6:94:d2:c4:b3:b7:df:a9:da:e1:38:5d:54:d0:1f: 35:29:97:60:48:63:f6:39:16:80:44:69:1d:d2:cf: 70:1a:9a:02:88:60:6a:70:a4:63:d5:9f:d3:45:d6: 31:d0:a3:f7:46:51:4e:3b:8c:a5:01:5a:1a:73:9a: b4:e3:0d:44:d0:87:9b:93:43:6d:96:88:ad:9f:26: 0b:8c:d0:a4:a1:2d:43:70:04:47:2a:ba:66:05:27: 41:39:9a:45:7e:5c:73:94:73:23:1d:1a:92:28:94: 25:74:f8:0c:c7:24:27:2a:83:c1:c2:89:6e:03:ee: c7:d5:e5:1f:b1:db:76:2c:6a:40:3c:c6:c6:b8:6c: 47:91:1d:35:03:eb:88:79:cc:2b:17:36:18:14:97: 52:ef:96:74:3e:88:68:71:84:70:d1:5b:94:8e:91: 60:5f:0b:83:4d:49:f4:f1:0f:55:b5:4c:23:4a:62: 95:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D1:60:14:E3:88:2F:7F:75:52:42:7B:43:B4:D6:25:34:34:EC:B1 X509v3 Authority Key Identifier: keyid:A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:13:f5:ec:43:a7:48:0c:eb:3c:fe:a6:dc:c1:26:48:78:62: 09:ea:0f:65:1a:8a:6a:e0:76:5c:94:54:19:15:25:20:9a:c9: 94:86:bb:a8:61:73:22:fe:6a:f0:4e:4f:b8:3d:b8:bd:bb:4b: 68:d4:92:63:c2:0c:c7:9b:22:30:0e:f5:bd:65:f1:0f:c0:97: 6a:87:c8:3c:f2:f6:04:20:43:67:fc:d4:60:c0:42:0a:d7:aa: 27:e5:1e:68:e3:07:70:9c:88:09:4b:d3:40:ea:86:91:f3:f6: 36:48:fe:d6:5b:88:08:fd:dd:f8:b7:80:2b:b6:31:36:e0:eb: 0e:8f:a7:f7:76:18:63:b5:ae:7d:c9:65:27:8a:81:b1:66:92: 83:15:f3:5a:3d:e1:8d:4f:0d:a2:22:13:e9:06:b4:f9:e3:ef: a2:90:40:39:3e:a9:ca:b7:a3:c5:d6:79:23:bb:b9:ad:05:2e: 19:96:4b:05:d2:af:6f:1e:dd:08:c0:86:a9:97:a7:6d:91:75: ae:8a:aa:80:68:18:54:37:a3:21:3b:76:ff:23:2e:50:f8:10: a2:ba:d5:39:18:c5:ba:5e:25:b9:53:2c:fd:22:e8:54:3a:4c: 4b:16:53:f4:2c:78:17:f7:5f:0b:f9:1a:37:48:93:66:91:df: 9c:c3:42:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwvMkwt2bmElSCDMAb+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYTIyZmNiNTRhMDkxZDY5MTNmZmU5ZmFmYjk4M2M1N2E0 YWMyMmMwHhcNMjUxMjA2MDMwMTAxWhcNMjUxMjA3MDMwMTAxWjAzMTEwLwYDVQQD Eyg3N2QxNjAxNGUzODgyZjdmNzU1MjQyN2I0M2I0ZDYyNTM0MzRlY2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleVD3mCo29gvbEBSyJoMlozmKj6A y8zvb6PDvN7QxTpHLeqPqXZjkQa1U0kOFZ2oJ8MrB4C1yn7v4/GJlKYeWsWdsic4 0zjjbUrmlNLEs7ffqdrhOF1U0B81KZdgSGP2ORaARGkd0s9wGpoCiGBqcKRj1Z/T RdYx0KP3RlFOO4ylAVoac5q04w1E0Iebk0NtloitnyYLjNCkoS1DcARHKrpmBSdB OZpFflxzlHMjHRqSKJQldPgMxyQnKoPBwoluA+7H1eUfsdt2LGpAPMbGuGxHkR01 A+uIecwrFzYYFJdS75Z0PohocYRw0VuUjpFgXwuDTUn08Q9VtUwjSmKVFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfRYBTjiC9/dVJCe0O01iU0NOyxMB8GA1UdIwQY MBaAFKCiL8tUoJHWkT/+n6+5g8V6SsIsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0tJdnkxU2drZGFSUF82ZnI3bUR4WHBLd2l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kZjNiMzAtMWJhOS00YzRiLWFhMGMt ZjkyN2U1ODJlYmY5LzEvb0tJdnkxU2drZGFSUF82ZnI3bUR4WHBLd2l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9kZjNiMzAtMWJhOS00YzRiLWFhMGMtZjkyN2U1ODJlYmY5 LzEvb0tJdnkxU2drZGFSUF82ZnI3bUR4WHBLd2l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxP17EOn SAzrPP6m3MEmSHhiCeoPZRqKauB2XJRUGRUlIJrJlIa7qGFzIv5q8E5PuD24vbtL aNSSY8IMx5siMA71vWXxD8CXaofIPPL2BCBDZ/zUYMBCCteqJ+UeaOMHcJyICUvT QOqGkfP2Nkj+1luICP3d+LeAK7YxNuDrDo+n93YYY7WufcllJ4qBsWaSgxXzWj3h jU8NoiIT6Qa0+ePvopBAOT6pyrejxdZ5I7u5rQUuGZZLBdKvbx7dCMCGqZenbZF1 roqqgGgYVDejITt2/yMuUPgQorrVORjFul4luVMs/SLoVDpMSxZT9Cx4F/dfC/ka N0iTZpHfnMNC6w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:01:24 2025 by rpki-client