This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft File: 1OKJaJepchZ45oRpOZOlqISQM2Q.mft (raw, json) Hash identifier: mEs8TlvyJErsX3gzdGks0YyqAdcUyKo6f/qQBEVsCcc= Subject key identifier: C8:C9:8C:3B:05:39:B4:4E:99:B6:78:91:86:46:07:5B:2A:09:01:2C Authority key identifier: D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64 Certificate issuer: /CN=d4e2896897a9721678e684693993a5a884903364 Certificate serial: 019B22F556CA7CE878CE728C63DFD7DB22E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 17:01:02 +0000 Manifest this update: Mon 15 Dec 2025 17:01:02 +0000 Manifest next update: Tue 16 Dec 2025 17:01:02 +0000 Files and hashes: 1: 1OKJaJepchZ45oRpOZOlqISQM2Q.crl (hash: 3O1nBTe6t8nlVdX13+snnuz5IQYo6+8Z9tEMis7bAzo=) 2: WAQz-NVz1tPP197fB-7kdlHEMDo.roa (hash: EfunuE83nVqoEWqBwZZf7jU1FPr/i4YaWTLI4hd6d6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f5:56:ca:7c:e8:78:ce:72:8c:63:df:d7:db:22:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4e2896897a9721678e684693993a5a884903364 Validity Not Before: Dec 15 17:01:02 2025 GMT Not After : Dec 16 17:01:02 2025 GMT Subject: CN=c8c98c3b0539b44e99b678918646075b2a09012c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:45:78:48:80:9b:d8:f9:c8:0f:10:3f:6a: 33:c8:19:54:02:d4:c4:fd:8a:ef:7c:cc:f8:97:92: 06:b0:49:0f:2b:4a:40:b1:4a:6e:dd:56:66:07:f0: 5f:77:f1:8f:d4:7f:98:de:f5:6f:2b:66:23:3b:92: 99:0f:43:13:e7:a9:87:c4:50:58:1d:3f:9a:64:03: 7b:64:72:ba:1a:8c:c7:72:4d:d7:47:39:2e:37:d7: 0a:52:ba:bd:07:e3:27:5c:08:40:e1:4e:23:53:82: 73:42:40:06:b6:7f:12:a0:7d:ee:76:22:9f:69:c3: 39:01:ba:cc:87:eb:ea:a3:2d:a4:80:1e:6f:de:ad: 77:88:d7:a1:a9:7d:83:3d:d4:01:36:65:d3:fd:fd: 1b:a1:3b:77:0f:0b:c4:17:e4:93:35:81:4b:b6:29: ba:04:2a:ae:a5:63:65:ee:8e:18:8b:ac:f1:9d:5c: bb:d9:5a:66:b2:87:2f:a9:a0:e8:5c:a5:34:17:1a: c4:9d:cf:3c:0f:44:f2:a7:be:be:6b:77:9b:22:c9: 25:92:1a:4b:30:41:ed:f3:e5:09:5a:ad:ef:82:90: 19:56:35:c3:32:5d:40:76:28:c3:be:2e:8c:a0:52: 60:0b:1f:fd:38:42:8f:cc:89:c2:07:7d:a2:40:72: e0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C9:8C:3B:05:39:B4:4E:99:B6:78:91:86:46:07:5B:2A:09:01:2C X509v3 Authority Key Identifier: keyid:D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9a:02:7a:58:71:1d:4f:1c:6f:4f:70:eb:a3:3b:73:e1:e0: 2d:e9:58:08:12:5d:e2:e7:54:58:eb:ec:fc:b9:30:8d:2d:59: 8b:fb:9b:51:91:da:f3:e9:f5:a8:c5:31:4e:5a:3c:8f:cf:df: 9d:c9:e5:a9:dc:78:11:f4:cf:d7:12:95:ba:76:ee:c0:3b:a7: c9:5e:a3:56:06:1a:95:55:97:02:65:af:32:89:5f:30:a1:6d: e5:d0:d8:db:39:05:e6:47:96:8f:da:73:23:d4:88:bc:65:40: 9b:79:3d:1e:b7:93:13:5d:c3:30:fd:33:45:b9:26:92:55:76: dc:ce:d1:e9:e4:17:71:ac:6d:3e:f1:b1:b8:83:44:b1:80:63: a7:03:7d:46:bc:be:63:96:72:48:9e:5e:ba:0f:37:68:40:59: 11:59:1d:81:51:52:d3:65:0e:a2:04:d4:93:5d:d8:8a:ef:98: 3d:46:85:79:ca:be:d3:ae:72:04:a5:d6:de:00:16:10:83:0b: 1f:ee:c7:3c:72:99:a2:99:2a:c8:cc:12:0a:1e:cf:ee:41:90: ab:f5:42:18:97:16:3f:3c:95:a3:92:5d:db:f4:51:26:64:20: 52:43:df:07:74:96:c9:c6:90:6d:36:d7:db:32:42:7e:61:e1: 81:77:85:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9VbKfOh4znKMY9/X2yLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZTI4OTY4OTdhOTcyMTY3OGU2ODQ2OTM5OTNhNWE4ODQ5 MDMzNjQwHhcNMjUxMjE1MTcwMTAyWhcNMjUxMjE2MTcwMTAyWjAzMTEwLwYDVQQD EyhjOGM5OGMzYjA1MzliNDRlOTliNjc4OTE4NjQ2MDc1YjJhMDkwMTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfJFeEiAm9j5yA8QP2ozyBlUAtTE /YrvfMz4l5IGsEkPK0pAsUpu3VZmB/Bfd/GP1H+Y3vVvK2YjO5KZD0MT56mHxFBY HT+aZAN7ZHK6GozHck3XRzkuN9cKUrq9B+MnXAhA4U4jU4JzQkAGtn8SoH3udiKf acM5AbrMh+vqoy2kgB5v3q13iNehqX2DPdQBNmXT/f0boTt3DwvEF+STNYFLtim6 BCqupWNl7o4Yi6zxnVy72VpmsocvqaDoXKU0FxrEnc88D0Typ76+a3ebIsklkhpL MEHt8+UJWq3vgpAZVjXDMl1AdijDvi6MoFJgCx/9OEKPzInCB32iQHLgvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjJjDsFObROmbZ4kYZGB1sqCQEsMB8GA1UdIwQY MBaAFNTiiWiXqXIWeOaEaTmTpaiEkDNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU9LSmFKZXBjaFo0NW9ScE9aT2xxSVNRTTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lMjgxMDMtYTBmYi00MjI3LWJjYjEt ZTQ5N2Q0MGY0ZTJhLzEvMU9LSmFKZXBjaFo0NW9ScE9aT2xxSVNRTTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9lMjgxMDMtYTBmYi00MjI3LWJjYjEtZTQ5N2Q0MGY0ZTJh LzEvMU9LSmFKZXBjaFo0NW9ScE9aT2xxSVNRTTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5oCelhx HU8cb09w66M7c+HgLelYCBJd4udUWOvs/LkwjS1Zi/ubUZHa8+n1qMUxTlo8j8/f ncnlqdx4EfTP1xKVunbuwDunyV6jVgYalVWXAmWvMolfMKFt5dDY2zkF5keWj9pz I9SIvGVAm3k9HreTE13DMP0zRbkmklV23M7R6eQXcaxtPvGxuINEsYBjpwN9Rry+ Y5ZySJ5eug83aEBZEVkdgVFS02UOogTUk13Yiu+YPUaFecq+065yBKXW3gAWEIML H+7HPHKZopkqyMwSCh7P7kGQq/VCGJcWPzyVo5Jd2/RRJmQgUkPfB3SWycaQbTbX 2zJCfmHhgXeFSw== -----END CERTIFICATE-----Generated at Tue Dec 16 00:33:07 2025 by rpki-client