This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json) Hash identifier: AuUrA7dpUG8WDGIKeP3j55SqYv1JJRNjf7xEb68Vq0A= Subject key identifier: 62:65:8E:70:98:6D:F5:E1:48:F6:D1:5A:7B:9C:42:74:73:B6:77:21 Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87 Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87 Certificate serial: 019AF0886EF9B423689C1735C1C290F73D40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 22:01:04 +0000 Manifest this update: Fri 05 Dec 2025 22:01:04 +0000 Manifest next update: Sat 06 Dec 2025 22:01:04 +0000 Files and hashes: 1: ABSwg5iM7lDSwpBpbSUM-jWDkxQ.roa (hash: DOO9GA+T1exZrXJnaC8HcR8le9oe4m7a+sJjxpyxjOg=) 2: GJYCLN0ib9ODqjC_4u9aKGjHiAs.roa (hash: AqwhbZ6NQ3s8EvVMwRFSwmoYz6Yquuk8Hi4hrgtZv3M=) 3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: KXrhd7k6nkPAoTLfgYWPvugBfl71PG9EE6Fm6E78vKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:6e:f9:b4:23:68:9c:17:35:c1:c2:90:f7:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87 Validity Not Before: Dec 5 22:01:04 2025 GMT Not After : Dec 6 22:01:04 2025 GMT Subject: CN=62658e70986df5e148f6d15a7b9c427473b67721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e6:ed:8a:c9:d3:26:63:c7:e8:30:da:ea:a9: a9:e4:fc:ca:c6:6b:6a:e7:21:2f:74:0f:7d:05:db: 49:5d:5f:18:9e:d0:05:f4:b0:7e:35:4e:1d:36:aa: f9:af:c8:c0:26:c9:aa:15:6b:80:73:93:3c:e8:de: a1:11:1f:3e:ae:a6:67:13:03:7d:66:b7:eb:18:13: e8:ea:f0:a9:65:41:f7:16:d7:b0:42:d0:ee:cb:91: d3:ac:f5:21:d0:c8:8a:9b:1d:87:dd:3f:a2:37:64: 1f:dc:f1:59:80:b3:b6:d1:b6:59:24:18:9d:05:07: d7:b9:a7:91:07:4f:c9:2d:12:62:b6:e5:2e:ed:da: 6c:0b:b8:0a:0c:01:58:b0:9b:20:6f:50:c5:b1:c8: cd:2c:c8:87:56:6c:19:31:e1:f9:d8:ae:5d:70:d6: 64:93:49:61:3a:e1:3e:44:45:fc:4c:14:f8:1f:cd: ad:15:7d:34:66:b3:f8:90:33:f5:80:b7:fd:c9:61: 93:5b:f0:a8:db:bd:bb:aa:85:4c:a5:f5:cf:7d:3b: da:e4:dc:1d:fd:0c:7d:14:c9:03:60:3f:f9:10:27: 3d:61:5e:1f:5f:bd:be:2e:8a:6c:d6:f5:c9:e8:70: e8:89:9f:ee:e4:9a:0a:26:9b:e6:33:e7:d0:42:18: ca:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:65:8E:70:98:6D:F5:E1:48:F6:D1:5A:7B:9C:42:74:73:B6:77:21 X509v3 Authority Key Identifier: keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:2a:86:85:68:9b:f7:30:5c:dc:f3:da:cc:df:48:b9:88:9b: ce:80:43:73:06:d6:32:66:d7:4c:55:ee:5f:5e:8a:f3:00:1b: 25:fb:f3:46:57:00:8e:a3:a0:69:70:73:1c:da:d3:8b:12:f0: c4:13:87:3a:c8:2c:96:50:5a:d1:ce:20:de:6a:97:0b:96:3a: 3e:b0:98:d3:5e:88:f2:6d:29:f7:87:b4:16:68:ba:78:d9:c1: 23:a1:6d:5a:88:b3:2a:95:3e:cd:a6:4b:15:8e:51:a4:5b:b8: 17:a0:c9:a5:fd:04:08:9e:c7:7d:54:12:1b:45:c9:fa:fc:57: 11:3d:c3:27:a7:15:41:fb:d4:79:9a:a0:de:df:5e:df:a7:93: 82:07:e7:db:2e:0c:a7:df:be:df:82:b3:20:20:09:8e:80:76: 75:ff:97:89:c5:ef:a4:80:fe:45:0f:a1:4e:93:44:dc:61:d0: 93:84:1a:e0:47:0d:57:8d:d7:33:30:97:8f:ac:19:05:2c:f6: 37:6a:84:34:4a:6a:7b:4c:d1:e3:32:69:fa:c7:8e:1c:ca:a6: 06:24:3b:aa:64:4d:4f:1f:ab:aa:da:e5:5f:42:c8:45:99:c4: 69:00:d8:26:14:0e:4e:62:cf:96:db:a5:49:db:7f:83:0c:fe: 8d:9b:7e:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiG75tCNonBc1wcKQ9z1AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYTZkNmIwODc0NjFmZGVjNmE1YjlkNTJkMjk4MzJkOGYy OTljODcwHhcNMjUxMjA1MjIwMTA0WhcNMjUxMjA2MjIwMTA0WjAzMTEwLwYDVQQD Eyg2MjY1OGU3MDk4NmRmNWUxNDhmNmQxNWE3YjljNDI3NDczYjY3NzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+btisnTJmPH6DDa6qmp5PzKxmtq 5yEvdA99BdtJXV8YntAF9LB+NU4dNqr5r8jAJsmqFWuAc5M86N6hER8+rqZnEwN9 ZrfrGBPo6vCpZUH3FtewQtDuy5HTrPUh0MiKmx2H3T+iN2Qf3PFZgLO20bZZJBid BQfXuaeRB0/JLRJituUu7dpsC7gKDAFYsJsgb1DFscjNLMiHVmwZMeH52K5dcNZk k0lhOuE+REX8TBT4H82tFX00ZrP4kDP1gLf9yWGTW/Co2727qoVMpfXPfTva5Nwd /Qx9FMkDYD/5ECc9YV4fX72+Lops1vXJ6HDoiZ/u5JoKJpvmM+fQQhjKcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJljnCYbfXhSPbRWnucQnRztnchMB8GA1UdIwQY MBaAFKCm1rCHRh/exqW51S0pgy2PKZyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yZDc2MDktMjE0Mi00YTAzLWIxMWUt MTE0OGZkZTdhZWY3LzEvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8yZDc2MDktMjE0Mi00YTAzLWIxMWUtMTE0OGZkZTdhZWY3 LzEvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyqGhWib 9zBc3PPazN9IuYibzoBDcwbWMmbXTFXuX16K8wAbJfvzRlcAjqOgaXBzHNrTixLw xBOHOsgsllBa0c4g3mqXC5Y6PrCY016I8m0p94e0Fmi6eNnBI6FtWoizKpU+zaZL FY5RpFu4F6DJpf0ECJ7HfVQSG0XJ+vxXET3DJ6cVQfvUeZqg3t9e36eTggfn2y4M p9++34KzICAJjoB2df+XicXvpID+RQ+hTpNE3GHQk4Qa4EcNV43XMzCXj6wZBSz2 N2qENEpqe0zR4zJp+seOHMqmBiQ7qmRNTx+rqtrlX0LIRZnEaQDYJhQOTmLPltul Sdt/gwz+jZt+Ow== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:10 2025 by rpki-client