This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft File: 1OKJaJepchZ45oRpOZOlqISQM2Q.mft (raw, json) Hash identifier: lDX0st6ZiEm0AjYaDeA8sCW9N34DWhC++fSVQnrbW1g= Subject key identifier: FB:38:50:F2:DC:16:8A:F1:07:C6:5F:A3:5F:04:57:62:93:82:87:10 Authority key identifier: D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64 Certificate issuer: /CN=d4e2896897a9721678e684693993a5a884903364 Certificate serial: 019AF2AD50FBF1C36B01E6A36FB4E2F7DCC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:00:35 +0000 Manifest this update: Sat 06 Dec 2025 08:00:35 +0000 Manifest next update: Sun 07 Dec 2025 08:00:35 +0000 Files and hashes: 1: 1OKJaJepchZ45oRpOZOlqISQM2Q.crl (hash: tRmUOnHwRbJQ93nml/EeZNPT+67/UNnQ+vLy+ouRR00=) 2: WAQz-NVz1tPP197fB-7kdlHEMDo.roa (hash: EfunuE83nVqoEWqBwZZf7jU1FPr/i4YaWTLI4hd6d6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:50:fb:f1:c3:6b:01:e6:a3:6f:b4:e2:f7:dc:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4e2896897a9721678e684693993a5a884903364 Validity Not Before: Dec 6 08:00:35 2025 GMT Not After : Dec 7 08:00:35 2025 GMT Subject: CN=fb3850f2dc168af107c65fa35f04576293828710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:4e:06:e5:87:87:5d:f1:4c:72:c4:6d:11: 92:76:60:6c:01:fa:f9:6d:fd:38:e6:7c:89:5f:62: 0b:4c:a0:27:ad:d6:6e:d4:5d:7f:d9:c7:5b:06:71: b9:ba:87:e7:2b:35:96:0a:d4:9e:23:93:36:b0:b7: 32:e5:19:90:5d:f0:e4:fd:b3:30:8f:74:27:f8:a4: 08:39:04:80:ae:3b:bd:23:18:99:38:a5:7f:62:14: 59:b2:f5:94:0e:fd:0c:21:13:a2:a3:6b:6d:76:29: 98:51:17:42:a7:51:1e:d0:98:c8:c3:fe:1b:b4:05: 5b:4e:57:00:b0:80:06:ad:6b:24:34:cd:0a:bf:c2: 97:fd:95:8c:04:b7:35:5f:e8:3c:ee:6b:ec:c2:7c: 06:db:da:9b:60:08:eb:c6:f5:a2:c0:47:63:a8:15: 6d:eb:bb:96:05:eb:79:8e:e9:44:21:12:10:7e:bc: 14:c9:64:8e:e0:8c:57:ef:a0:2d:b9:0d:05:19:7c: e5:bb:33:4a:5e:34:e0:25:bb:ba:d3:13:c4:94:48: ea:03:99:1d:b8:d1:91:02:29:f0:1c:36:f2:c7:b5: fa:82:68:73:36:9d:41:e2:24:47:a6:b8:fc:3a:48: 83:31:d2:d0:3e:ec:78:8e:b9:1a:9f:be:72:30:47: 67:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:38:50:F2:DC:16:8A:F1:07:C6:5F:A3:5F:04:57:62:93:82:87:10 X509v3 Authority Key Identifier: keyid:D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:39:35:3c:48:aa:9a:93:a7:77:22:6e:0d:e1:3b:43:dc:59: c5:ca:7b:b3:a6:13:c9:62:c3:a8:79:aa:0f:43:52:d2:c5:cc: e9:ef:07:af:05:9f:7c:a7:60:04:b5:5a:0a:48:90:c4:a8:ce: 80:8c:26:a4:36:7f:48:eb:3e:d9:a1:c2:cc:e2:15:ed:06:47: 0b:27:f8:f7:3c:26:15:1c:5f:a2:f9:25:0a:5e:e7:d1:60:bf: f9:e8:a0:34:29:ce:9d:7c:97:95:d2:6e:54:25:ce:fb:61:df: b2:9c:03:bd:23:24:b1:7f:2b:be:6f:63:95:ba:39:32:0a:e2: ce:c6:4e:88:cc:0b:f8:88:22:46:9e:32:f3:11:d0:33:9f:3f: 8b:64:8c:02:8a:9a:d1:c7:ab:3d:86:20:bd:e4:94:af:9d:23: 10:7f:84:b0:27:1d:d6:5a:09:80:82:5b:d9:21:a6:39:d8:22: f6:ce:10:b5:f0:b3:6f:31:f9:db:5d:b4:b6:04:fc:da:a4:f1: 98:5b:8d:91:34:a2:91:c8:67:0d:29:36:ca:8a:cf:9f:51:16: ef:2f:3d:8c:91:de:6d:6b:9e:cb:75:98:de:ee:20:53:e9:1c: d6:22:df:b1:37:63:08:55:a9:d8:39:3b:53:16:96:5d:cd:1c: 1d:83:d0:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVD78cNrAeajb7Ti99zBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZTI4OTY4OTdhOTcyMTY3OGU2ODQ2OTM5OTNhNWE4ODQ5 MDMzNjQwHhcNMjUxMjA2MDgwMDM1WhcNMjUxMjA3MDgwMDM1WjAzMTEwLwYDVQQD EyhmYjM4NTBmMmRjMTY4YWYxMDdjNjVmYTM1ZjA0NTc2MjkzODI4NzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv49OBuWHh13xTHLEbRGSdmBsAfr5 bf045nyJX2ILTKAnrdZu1F1/2cdbBnG5uofnKzWWCtSeI5M2sLcy5RmQXfDk/bMw j3Qn+KQIOQSArju9IxiZOKV/YhRZsvWUDv0MIROio2ttdimYURdCp1Ee0JjIw/4b tAVbTlcAsIAGrWskNM0Kv8KX/ZWMBLc1X+g87mvswnwG29qbYAjrxvWiwEdjqBVt 67uWBet5julEIRIQfrwUyWSO4IxX76AtuQ0FGXzluzNKXjTgJbu60xPElEjqA5kd uNGRAinwHDbyx7X6gmhzNp1B4iRHprj8OkiDMdLQPux4jrkan75yMEdnLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPs4UPLcForxB8Zfo18EV2KTgocQMB8GA1UdIwQY MBaAFNTiiWiXqXIWeOaEaTmTpaiEkDNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU9LSmFKZXBjaFo0NW9ScE9aT2xxSVNRTTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lMjgxMDMtYTBmYi00MjI3LWJjYjEt ZTQ5N2Q0MGY0ZTJhLzEvMU9LSmFKZXBjaFo0NW9ScE9aT2xxSVNRTTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9lMjgxMDMtYTBmYi00MjI3LWJjYjEtZTQ5N2Q0MGY0ZTJh LzEvMU9LSmFKZXBjaFo0NW9ScE9aT2xxSVNRTTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTk1PEiq mpOndyJuDeE7Q9xZxcp7s6YTyWLDqHmqD0NS0sXM6e8HrwWffKdgBLVaCkiQxKjO gIwmpDZ/SOs+2aHCzOIV7QZHCyf49zwmFRxfovklCl7n0WC/+eigNCnOnXyXldJu VCXO+2HfspwDvSMksX8rvm9jlbo5MgrizsZOiMwL+IgiRp4y8xHQM58/i2SMAoqa 0cerPYYgveSUr50jEH+EsCcd1loJgIJb2SGmOdgi9s4QtfCzbzH52120tgT82qTx mFuNkTSikchnDSk2yorPn1EW7y89jJHebWuey3WY3u4gU+kc1iLfsTdjCFWp2Dk7 UxaWXc0cHYPQNg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:04 2025 by rpki-client