This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft File: r2Okes26jsHNhdTXnzazW2mOX4k.mft (raw, json) Hash identifier: RfYpaIQHVr6HQg6z3X8hHZCw+QTqVfR3qp28mbnAetw= Subject key identifier: C5:78:21:0D:E4:D2:3F:A8:DA:1B:CD:8C:EA:C5:A6:34:77:08:42:AA Authority key identifier: AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89 Certificate issuer: /CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89 Certificate serial: 019AF209A370F88B5B8910FC4DFFB808032C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:49 +0000 Manifest this update: Sat 06 Dec 2025 05:01:49 +0000 Manifest next update: Sun 07 Dec 2025 05:01:49 +0000 Files and hashes: 1: YXk4VQ9w2ydeFfWUpTPAL38DI14.roa (hash: 63k2DxSPaDP/x2Jl3oeCNKnb4PXDg6/RYTgk7tLrZPw=) 2: r2Okes26jsHNhdTXnzazW2mOX4k.crl (hash: vuvTz8kqE74yaNuF3K7YU0KaN0oPVIYgjWRJtrkFJ3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a3:70:f8:8b:5b:89:10:fc:4d:ff:b8:08:03:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89 Validity Not Before: Dec 6 05:01:49 2025 GMT Not After : Dec 7 05:01:49 2025 GMT Subject: CN=c578210de4d23fa8da1bcd8ceac5a634770842aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:01:26:44:60:3f:6a:1f:dc:e5:fd:d4:99:ed: a5:e7:85:b7:a9:73:72:ea:6e:c4:fa:c6:52:9b:40: 90:c1:bd:c2:3f:e6:55:a5:10:8f:01:5b:2d:34:3c: 73:7a:38:cd:f5:89:2f:c8:ef:0e:d0:61:83:36:05: 8d:fd:9d:c2:bd:78:5f:81:d1:66:d1:7b:b1:94:ed: b7:73:51:ab:53:d8:a4:9c:5a:0a:6f:d9:2b:72:da: 4b:8b:d5:77:05:c3:f9:12:98:d6:c0:55:ba:0e:cf: cb:41:7b:96:a8:74:e2:5a:90:5a:6d:35:6c:e5:c5: d5:d4:71:8e:51:e1:26:31:a6:a9:f2:10:e5:50:16: c2:37:cd:06:59:7d:d6:73:4a:f8:04:67:4c:6f:bf: 6f:ec:54:f9:34:c1:36:76:43:e2:1a:44:95:b7:57: ee:9f:88:b5:ef:39:22:92:63:bb:79:d6:29:93:fc: e2:a0:0e:e5:cb:98:e9:05:e5:93:37:29:e8:d7:cf: 34:e4:5f:ce:99:99:d8:83:ae:23:49:c7:be:b5:e2: 1b:c6:d5:2f:c9:c3:10:e4:72:76:9e:55:eb:f1:2a: bd:7e:58:da:57:b3:ec:b9:f1:16:ee:d6:35:2e:02: d7:e4:55:13:37:2b:06:04:92:f6:e3:9c:6d:1b:b3: f5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:78:21:0D:E4:D2:3F:A8:DA:1B:CD:8C:EA:C5:A6:34:77:08:42:AA X509v3 Authority Key Identifier: keyid:AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:22:e4:e0:4a:d6:c9:48:e7:fd:3e:aa:54:bb:93:76:80:d3: ea:d3:6d:3c:93:c6:6c:f9:db:02:a9:29:9b:97:82:60:1b:2a: 14:67:bb:9f:c8:9a:30:51:9f:f5:03:76:6a:3f:83:d4:15:0c: 70:aa:e3:e9:28:6f:3b:24:42:27:b1:5d:e8:ea:1e:c8:87:38: aa:52:c0:d8:a7:aa:57:02:8c:ef:76:b1:0a:00:29:fb:16:76: c2:61:f6:e5:fa:bb:4f:93:a8:d8:59:c1:d5:27:df:d6:b1:00: 09:b2:1e:c6:36:69:70:1d:fd:64:59:e5:c8:12:0f:f3:55:a9: 74:6d:ac:74:48:b2:46:a6:11:80:03:63:ba:64:18:d8:0f:64: 7e:ef:4e:4a:6d:75:af:15:e3:a0:b0:b1:af:a4:60:09:d2:83: 0c:50:b6:64:90:7b:b0:97:55:84:ea:1e:eb:16:1e:3a:ef:b4: 56:49:c7:49:69:2e:85:d4:4f:af:bc:72:dd:19:5f:4c:5d:a8: 3b:9c:0f:c5:49:a4:c5:ec:48:df:ef:a5:d4:f6:2d:e5:b2:8a: 2e:b4:f1:ff:46:86:67:cf:cb:11:3b:51:66:42:0a:52:f5:ab: b0:de:23:7a:88:d7:0a:9b:16:b6:96:d6:a1:64:71:e8:f3:61: 71:af:0f:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaNw+ItbiRD8Tf+4CAMsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNjNhNDdhY2RiYThlYzFjZDg1ZDRkNzlmMzZiMzViNjk4 ZTVmODkwHhcNMjUxMjA2MDUwMTQ5WhcNMjUxMjA3MDUwMTQ5WjAzMTEwLwYDVQQD EyhjNTc4MjEwZGU0ZDIzZmE4ZGExYmNkOGNlYWM1YTYzNDc3MDg0MmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwEmRGA/ah/c5f3Ume2l54W3qXNy 6m7E+sZSm0CQwb3CP+ZVpRCPAVstNDxzejjN9YkvyO8O0GGDNgWN/Z3CvXhfgdFm 0XuxlO23c1GrU9iknFoKb9krctpLi9V3BcP5EpjWwFW6Ds/LQXuWqHTiWpBabTVs 5cXV1HGOUeEmMaap8hDlUBbCN80GWX3Wc0r4BGdMb79v7FT5NME2dkPiGkSVt1fu n4i17zkikmO7edYpk/zioA7ly5jpBeWTNyno18805F/OmZnYg64jSce+teIbxtUv ycMQ5HJ2nlXr8Sq9fljaV7PsufEW7tY1LgLX5FUTNysGBJL245xtG7P1EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMV4IQ3k0j+o2hvNjOrFpjR3CEKqMB8GA1UdIwQY MBaAFK9jpHrNuo7BzYXU1582s1tpjl+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjJPa2VzMjZqc0hOaGRUWG56YXpXMm1PWDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9jNGQ3YjAtNmViZi00Y2FjLWE4YWQt ZmUzZTMxOGNhZTljLzEvcjJPa2VzMjZqc0hOaGRUWG56YXpXMm1PWDRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9jNGQ3YjAtNmViZi00Y2FjLWE4YWQtZmUzZTMxOGNhZTlj LzEvcjJPa2VzMjZqc0hOaGRUWG56YXpXMm1PWDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyLk4ErW yUjn/T6qVLuTdoDT6tNtPJPGbPnbAqkpm5eCYBsqFGe7n8iaMFGf9QN2aj+D1BUM cKrj6ShvOyRCJ7Fd6OoeyIc4qlLA2KeqVwKM73axCgAp+xZ2wmH25fq7T5Oo2FnB 1Sff1rEACbIexjZpcB39ZFnlyBIP81WpdG2sdEiyRqYRgANjumQY2A9kfu9OSm11 rxXjoLCxr6RgCdKDDFC2ZJB7sJdVhOoe6xYeOu+0VknHSWkuhdRPr7xy3RlfTF2o O5wPxUmkxexI3++l1PYt5bKKLrTx/0aGZ8/LETtRZkIKUvWrsN4jeojXCpsWtpbW oWRx6PNhca8PGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:44:36 2025 by rpki-client