This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft File: oKFURB35Yj7rWhlhONIb71gktEE.mft (raw, json) Hash identifier: 9DcTsmESTikHa317pHk+GcgfipkdTKnD4AfUSJmvRYg= Subject key identifier: 68:83:D9:DC:6B:9F:77:83:4D:38:6E:66:AC:E2:D4:85:83:73:61:0E Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41 Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441 Certificate serial: 019AF0F5F63491EB03532C6346C700FB54C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 00:00:42 +0000 Manifest this update: Sat 06 Dec 2025 00:00:42 +0000 Manifest next update: Sun 07 Dec 2025 00:00:42 +0000 Files and hashes: 1: LinQK8fdUd0acFjufsgbsosu8aw.roa (hash: hdbmVMkuGYn9OnPhUkRUmIQuYMEx93e049UxiL3ibkE=) 2: cqMIZbZG_XjFMjyio64LoSb9JEM.roa (hash: xBYH5ZrjKUuPI62l0z0GQBA4FW4u95fkTkxgETr+i9Q=) 3: oKFURB35Yj7rWhlhONIb71gktEE.crl (hash: U6okI2qYWx/nshHMyXko/ReqQy0E5UrPw0IFdmlf7aU=) 4: wlqxE5iuLQB304PN7hVNM4_5h14.roa (hash: xdHQ2e13Tky6CrFmxy2+w5Er25IzDfQGHtx/iyo+wSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:f6:34:91:eb:03:53:2c:63:46:c7:00:fb:54:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441 Validity Not Before: Dec 6 00:00:42 2025 GMT Not After : Dec 7 00:00:42 2025 GMT Subject: CN=6883d9dc6b9f77834d386e66ace2d4858373610e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f1:36:ba:c8:12:c3:d8:3b:92:e1:cb:c1:a8: eb:c5:6d:a8:0c:d3:37:9c:a3:e4:e1:bd:6a:aa:e2: 3b:e6:14:6b:a9:19:79:5e:be:19:b0:ae:c0:9a:46: 0e:56:42:13:3d:da:de:a6:02:f6:a6:fb:73:8f:8a: a8:bf:5a:eb:f9:95:1d:7f:8e:6f:c5:e6:40:1e:df: cc:55:d6:3b:6f:ac:0d:ca:cb:b2:b4:ec:78:4b:8d: 34:a8:d8:c7:b5:54:ec:7b:18:f0:0f:61:96:76:3b: 60:61:b0:84:45:7d:c5:2d:9b:b0:88:d8:7f:76:8e: 4d:d2:42:1f:2f:97:95:88:84:41:63:52:a5:7a:b1: 4f:db:39:af:53:93:6d:80:24:65:77:c8:df:ee:72: 04:c1:e6:28:2e:6e:74:5d:ad:cd:6a:d9:f4:36:ba: f0:e6:2a:93:cc:57:1b:61:e3:18:d1:43:46:db:15: 2a:aa:8a:3d:f5:ed:6c:31:a0:c8:ef:70:62:0b:88: 22:52:a5:6a:f9:d8:87:3c:eb:8e:56:7d:7b:3b:68: 84:6d:45:6b:68:f8:0d:9a:71:10:4b:29:6a:89:ff: fc:35:6c:b1:c8:45:50:3b:7f:25:27:8f:91:78:c1: c3:16:0c:5e:26:b7:65:01:e1:29:02:99:9c:c7:e0: 14:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:83:D9:DC:6B:9F:77:83:4D:38:6E:66:AC:E2:D4:85:83:73:61:0E X509v3 Authority Key Identifier: keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:5b:4f:30:92:4b:da:9e:48:1d:6b:a1:a3:8d:06:cf:1c:07: 4c:66:5c:da:c6:c1:4c:26:1e:ad:63:9b:14:71:59:cf:e7:9f: 41:f6:db:73:b1:a7:87:3e:a6:fc:02:d9:f3:dd:70:66:82:02: bd:8e:d7:8b:71:f9:5c:8f:b1:27:ac:57:f0:ac:42:39:8b:16: cd:be:45:f1:b6:5a:f4:cd:c9:82:f0:c2:85:11:06:d3:ba:3a: 30:e0:34:ae:f0:de:5b:68:5e:84:43:0a:e0:e9:e2:aa:45:d0: 6e:16:f4:f0:64:89:9e:91:85:ca:25:6e:64:8f:0b:63:fa:2a: b8:93:6e:24:53:03:44:23:2d:53:aa:69:f7:ad:51:47:1b:1e: f7:6d:c9:e4:9b:79:f1:08:e1:5b:7e:07:39:e1:9f:5a:e7:a6: 31:15:cb:82:18:0c:70:0a:9a:99:76:e9:fc:c1:c2:9c:ed:65: e4:1b:61:4c:f0:1c:bf:7f:99:f1:30:4b:8a:af:b1:64:72:cb: 68:df:a3:07:2a:86:64:78:66:e2:58:0d:64:02:06:74:af:86: f8:e4:c9:68:8d:6d:51:1c:b2:7b:ec:69:78:93:d7:71:5f:f7: fd:af:ed:a5:57:d5:56:d4:2f:dd:3f:e9:ec:ba:70:df:01:31: 8c:3e:7d:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9fY0kesDUyxjRscA+1TCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYTE1NDQ0MWRmOTYyM2VlYjVhMTk2MTM4ZDIxYmVmNTgy NGI0NDEwHhcNMjUxMjA2MDAwMDQyWhcNMjUxMjA3MDAwMDQyWjAzMTEwLwYDVQQD Eyg2ODgzZDlkYzZiOWY3NzgzNGQzODZlNjZhY2UyZDQ4NTgzNzM2MTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/E2usgSw9g7kuHLwajrxW2oDNM3 nKPk4b1qquI75hRrqRl5Xr4ZsK7AmkYOVkITPdrepgL2pvtzj4qov1rr+ZUdf45v xeZAHt/MVdY7b6wNysuytOx4S400qNjHtVTsexjwD2GWdjtgYbCERX3FLZuwiNh/ do5N0kIfL5eViIRBY1KlerFP2zmvU5NtgCRld8jf7nIEweYoLm50Xa3Natn0Nrrw 5iqTzFcbYeMY0UNG2xUqqoo99e1sMaDI73BiC4giUqVq+diHPOuOVn17O2iEbUVr aPgNmnEQSylqif/8NWyxyEVQO38lJ4+ReMHDFgxeJrdlAeEpApmcx+AUQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiD2dxrn3eDTThuZqzi1IWDc2EOMB8GA1UdIwQY MBaAFKChVEQd+WI+61oZYTjSG+9YJLRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmIt OWQ5NDM2NzFhOGEzLzEvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmItOWQ5NDM2NzFhOGEz LzEvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1tPMJJL 2p5IHWuho40GzxwHTGZc2sbBTCYerWObFHFZz+efQfbbc7Gnhz6m/ALZ891wZoIC vY7Xi3H5XI+xJ6xX8KxCOYsWzb5F8bZa9M3JgvDChREG07o6MOA0rvDeW2hehEMK 4OniqkXQbhb08GSJnpGFyiVuZI8LY/oquJNuJFMDRCMtU6pp961RRxse923J5Jt5 8QjhW34HOeGfWuemMRXLghgMcAqamXbp/MHCnO1l5BthTPAcv3+Z8TBLiq+xZHLL aN+jByqGZHhm4lgNZAIGdK+G+OTJaI1tURyye+xpeJPXcV/3/a/tpVfVVtQv3T/p 7Lpw3wExjD590A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:01 2025 by rpki-client