This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft File: oKzKnE_pv57fO8blyrxSg42TyxM.mft (raw, json) Hash identifier: ZifV6h6yebMb8EDOF4b94T1p2QCUz9Kbi01n8FYrLGE= Subject key identifier: F6:FF:C2:D4:F3:E8:5A:A0:2B:03:93:6F:8E:76:59:D2:9A:C0:49:F5 Authority key identifier: A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13 Certificate issuer: /CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13 Certificate serial: 019AF3520AD6A602921191C09D2498B4F8D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft Manifest number: A3 Signing time: Sat 06 Dec 2025 11:00:31 +0000 Manifest this update: Sat 06 Dec 2025 11:00:31 +0000 Manifest next update: Sun 07 Dec 2025 11:00:31 +0000 Files and hashes: 1: ep1-GDUun8xcdGHEE_lWHZRloMg.roa (hash: HiyP/TW6sZpVHtWLYDXWKIcePVBX2hkVKCTS2Lryhek=) 2: oKzKnE_pv57fO8blyrxSg42TyxM.crl (hash: mDT2m8VXSoEXUtnqTsC7g5qNREDtqDX3TxRu9ax3K08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:0a:d6:a6:02:92:11:91:c0:9d:24:98:b4:f8:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13 Validity Not Before: Dec 6 11:00:31 2025 GMT Not After : Dec 7 11:00:31 2025 GMT Subject: CN=f6ffc2d4f3e85aa02b03936f8e7659d29ac049f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:f6:62:1e:21:78:ae:e1:b4:50:65:b0:6c: fa:43:88:0b:d6:d5:c3:1e:5a:07:95:68:b2:e2:a6: 82:6f:2c:a3:df:a5:00:5b:42:aa:2b:6f:a3:56:ad: ac:14:27:b6:80:89:a9:6f:27:db:50:34:b1:46:f6: 2b:cd:08:8f:95:57:58:46:d6:8b:07:ea:03:3f:31: 19:9c:d9:77:dd:4e:77:76:74:7b:54:ff:5d:b0:8a: 81:ae:f9:9b:53:94:5c:f9:82:06:4b:16:c1:cf:9c: b5:62:2d:9c:cd:69:00:1a:cf:a6:e4:22:05:93:5c: fc:97:8e:52:ce:7f:be:ae:b6:ba:ea:e1:4e:8b:20: 75:00:4e:8e:b7:a0:d2:06:6f:10:d1:73:50:63:55: 24:ce:b7:a9:e7:b6:01:3d:16:2c:53:75:02:b5:af: 96:cf:c0:fc:12:bc:f6:81:6f:f7:5e:58:c7:5d:ba: 68:64:44:01:ac:bb:53:fb:e7:a6:d4:22:b0:b3:93: ac:34:5f:45:4e:d9:2d:76:0d:23:f1:24:fd:1b:af: 62:cc:5a:48:e7:3b:05:7c:6a:53:4a:99:43:2a:34: 41:d0:3a:07:2a:60:a6:b2:9a:ab:39:9e:5d:73:e4: f4:3c:9f:7c:72:be:38:6e:97:6a:5c:3b:76:ee:65: cd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FF:C2:D4:F3:E8:5A:A0:2B:03:93:6F:8E:76:59:D2:9A:C0:49:F5 X509v3 Authority Key Identifier: keyid:A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ff:0e:7b:cc:a2:ac:2e:5f:92:90:ab:c6:14:c6:6e:41:6a: d3:f5:46:da:30:87:08:da:77:23:9b:b1:13:07:f6:86:2d:08: 08:9e:33:b3:50:8a:d5:64:ef:65:28:4c:41:3b:fd:43:29:99: 82:fa:24:50:25:9c:d0:52:b2:de:10:c5:18:e3:c1:8f:e4:58: 7d:9a:a6:a0:8e:3c:1b:b9:79:70:a2:be:2f:d9:e3:df:75:2b: 14:ef:74:d8:30:b0:a6:33:7f:80:13:aa:23:b3:1f:75:9e:74: f1:5f:4c:a9:19:ed:a4:63:0a:21:eb:b3:09:1e:31:65:f4:3d: 4a:a9:84:18:ac:a0:ee:a8:03:1a:9f:79:cc:72:61:a7:1f:2c: 47:5e:8c:26:cc:46:21:b5:fb:8a:5e:c7:96:98:c6:1c:50:4b: 48:a5:37:e3:f8:44:1c:17:ec:2c:31:cc:18:38:72:a1:60:fc: 58:1e:0f:c4:84:88:18:f6:59:bb:02:e3:45:04:d2:c0:8a:00: 23:8e:42:d2:55:d7:77:dd:2f:e8:6b:da:d9:8f:26:a7:54:d8: 15:b8:c2:7c:ac:de:20:78:7c:29:fa:55:b3:dc:6d:cc:3a:95: 61:95:c7:fa:71:27:31:31:9d:a2:18:b0:2f:1a:97:1b:1b:8d: d4:43:e2:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUgrWpgKSEZHAnSSYtPjSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYWNjYTljNGZlOWJmOWVkZjNiYzZlNWNhYmM1MjgzOGQ5 M2NiMTMwHhcNMjUxMjA2MTEwMDMxWhcNMjUxMjA3MTEwMDMxWjAzMTEwLwYDVQQD EyhmNmZmYzJkNGYzZTg1YWEwMmIwMzkzNmY4ZTc2NTlkMjlhYzA0OWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLj2Yh4heK7htFBlsGz6Q4gL1tXD HloHlWiy4qaCbyyj36UAW0KqK2+jVq2sFCe2gImpbyfbUDSxRvYrzQiPlVdYRtaL B+oDPzEZnNl33U53dnR7VP9dsIqBrvmbU5Rc+YIGSxbBz5y1Yi2czWkAGs+m5CIF k1z8l45Szn++rra66uFOiyB1AE6Ot6DSBm8Q0XNQY1Ukzrep57YBPRYsU3UCta+W z8D8Erz2gW/3XljHXbpoZEQBrLtT++em1CKws5OsNF9FTtktdg0j8ST9G69izFpI 5zsFfGpTSplDKjRB0DoHKmCmspqrOZ5dc+T0PJ98cr44bpdqXDt27mXNfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPb/wtTz6FqgKwOTb452WdKawEn1MB8GA1UdIwQY MBaAFKCsypxP6b+e3zvG5cq8UoONk8sTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0t6S25FX3B2NTdmTzhibHlyeFNnNDJUeXhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83YjYxMTAtOGM0Yi00YWY2LWE3Y2Et MmVkZmUyNWJiNThhLzEvb0t6S25FX3B2NTdmTzhibHlyeFNnNDJUeXhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni83YjYxMTAtOGM0Yi00YWY2LWE3Y2EtMmVkZmUyNWJiNThh LzEvb0t6S25FX3B2NTdmTzhibHlyeFNnNDJUeXhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARP8Oe8yi rC5fkpCrxhTGbkFq0/VG2jCHCNp3I5uxEwf2hi0ICJ4zs1CK1WTvZShMQTv9QymZ gvokUCWc0FKy3hDFGOPBj+RYfZqmoI48G7l5cKK+L9nj33UrFO902DCwpjN/gBOq I7MfdZ508V9MqRntpGMKIeuzCR4xZfQ9SqmEGKyg7qgDGp95zHJhpx8sR16MJsxG IbX7il7HlpjGHFBLSKU34/hEHBfsLDHMGDhyoWD8WB4PxISIGPZZuwLjRQTSwIoA I45C0lXXd90v6Gva2Y8mp1TYFbjCfKzeIHh8KfpVs9xtzDqVYZXH+nEnMTGdohiw LxqXGxuN1EPi+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:02:30 2025 by rpki-client