This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft File: OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft (raw, json) Hash identifier: XuGgMScbNVt3ytv9LQTQpbAAHuCTKtvYHN0SnkZ/S5w= Subject key identifier: C5:45:6B:B2:86:4D:5D:39:C8:FE:C2:28:4A:24:77:D2:7E:20:67:89 Authority key identifier: 38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB Certificate issuer: /CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb Certificate serial: 019B33442366D8EEB317D823D905B275BBB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft Manifest number: 16E9 Signing time: Thu 18 Dec 2025 21:01:02 +0000 Manifest this update: Thu 18 Dec 2025 21:01:02 +0000 Manifest next update: Fri 19 Dec 2025 21:01:02 +0000 Files and hashes: 1: KBKNSo54C-UjedwUMFB9xB41sio.roa (hash: EOnhGNtgG2NlhPSt6QkJfBoHbT869foRrNlEhdeoqqA=) 2: OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl (hash: 7uQOWwr7fm2MrzHVcSqZfRh5XHbnq6Wsnhu7DF5X8r4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:23:66:d8:ee:b3:17:d8:23:d9:05:b2:75:bb:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb Validity Not Before: Dec 18 21:01:02 2025 GMT Not After : Dec 19 21:01:02 2025 GMT Subject: CN=c5456bb2864d5d39c8fec2284a2477d27e206789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:24:5c:0a:b6:1e:69:bb:a6:dd:8d:00:cf:b7: 58:2a:25:fb:1d:88:60:4b:4a:c3:e5:85:72:da:64: 1e:1c:bc:a6:72:a6:b2:d0:dd:9f:4c:48:12:7d:79: 5c:06:18:0d:d4:ed:08:04:61:a0:69:e8:ab:3a:2d: 12:83:e6:23:8c:a8:7b:c4:18:79:d0:7a:5c:3a:71: 9a:43:52:86:6d:97:b0:77:03:a2:f6:ea:9e:86:65: 9e:f9:5a:11:7e:33:f2:e2:32:fc:14:6e:4a:03:2c: 2a:1e:b5:b0:0f:dd:f3:a2:e8:48:98:98:7c:0d:dd: 90:ed:df:99:16:7c:41:2e:c8:33:c8:b7:4c:55:79: 24:b2:df:44:b5:a3:17:c3:f8:5f:1a:84:e5:a3:63: c8:dd:2c:5b:43:9c:39:bc:1e:3f:aa:a3:1b:bd:45: 1f:6e:f6:83:21:85:fc:0d:90:27:3e:56:df:2e:b8: 95:ed:34:72:50:d3:27:11:dc:9a:ac:cc:df:7f:8c: ee:b0:f4:02:98:33:d7:25:53:45:cf:6d:58:89:9a: 4a:b4:00:bd:b1:60:39:af:38:9f:19:50:8a:69:97: c1:fc:14:61:81:23:2c:2a:b1:1b:74:57:05:17:46: e3:f2:9c:4e:98:0a:e1:87:eb:97:65:1e:ca:b7:09: 0b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:45:6B:B2:86:4D:5D:39:C8:FE:C2:28:4A:24:77:D2:7E:20:67:89 X509v3 Authority Key Identifier: keyid:38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:fa:39:f2:e5:b2:01:af:24:5d:4a:7e:f4:5c:07:24:7b:39: 9d:b0:90:a6:82:32:4a:1e:f1:cb:50:1e:74:81:86:e6:6e:2a: cc:b6:70:d2:40:6e:4a:e9:e9:65:82:6b:30:3a:28:5f:6a:87: f9:b8:64:a3:c9:55:14:b4:3f:50:6f:93:d8:61:ac:2c:33:26: 16:c1:36:d3:98:b0:ce:58:22:43:fc:88:07:09:71:24:07:70: 5f:24:9a:c0:90:93:d8:0c:7e:5c:ed:53:35:9b:06:c3:49:12: 49:fd:f7:e0:c5:25:50:46:c0:a6:3f:9a:18:03:2d:92:e8:a7: 1c:9c:53:df:d2:fe:0e:5d:d5:2b:56:30:16:bf:eb:4c:b4:75: 0e:35:ea:c3:d7:e2:6b:09:6b:ad:b8:1b:3c:c8:15:10:60:e4: 90:15:22:bb:13:1c:75:ca:28:d2:ec:68:d6:48:a8:2d:7f:d0: f3:85:13:b8:a1:3c:77:cd:a3:b8:cc:0f:f3:ec:a5:55:77:4f: fc:94:3f:b2:12:48:63:cc:3d:f7:e9:09:e4:4c:1a:f7:88:3f: c3:13:4f:36:14:ca:3f:91:be:08:4a:06:e0:ee:bb:02:10:44: ab:77:4c:e8:54:4a:d3:43:5e:a3:0b:04:ef:fb:1f:7d:3b:df: d9:f5:82:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRCNm2O6zF9gj2QWydbuzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YTBjODgyNmMxOGJjZDUxM2FhYTdlNTIwODFmZjlmZDM3 OTE5ZmIwHhcNMjUxMjE4MjEwMTAyWhcNMjUxMjE5MjEwMTAyWjAzMTEwLwYDVQQD EyhjNTQ1NmJiMjg2NGQ1ZDM5YzhmZWMyMjg0YTI0NzdkMjdlMjA2Nzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliRcCrYeabum3Y0Az7dYKiX7HYhg S0rD5YVy2mQeHLymcqay0N2fTEgSfXlcBhgN1O0IBGGgaeirOi0Sg+YjjKh7xBh5 0HpcOnGaQ1KGbZewdwOi9uqehmWe+VoRfjPy4jL8FG5KAywqHrWwD93zouhImJh8 Dd2Q7d+ZFnxBLsgzyLdMVXkkst9EtaMXw/hfGoTlo2PI3SxbQ5w5vB4/qqMbvUUf bvaDIYX8DZAnPlbfLriV7TRyUNMnEdyarMzff4zusPQCmDPXJVNFz21YiZpKtAC9 sWA5rzifGVCKaZfB/BRhgSMsKrEbdFcFF0bj8pxOmArhh+uXZR7KtwkLbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVFa7KGTV05yP7CKEokd9J+IGeJMB8GA1UdIwQY MBaAFDigyIJsGLzVE6qn5SCB/5/TeRn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0tESWdtd1l2TlVUcXFmbElJSF9uOU41R2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yOTYzOGItMTJjYS00OWVmLTk0ZTkt MDUwMmE2YTU0YWFiLzEvT0tESWdtd1l2TlVUcXFmbElJSF9uOU41R2ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8yOTYzOGItMTJjYS00OWVmLTk0ZTktMDUwMmE2YTU0YWFi LzEvT0tESWdtd1l2TlVUcXFmbElJSF9uOU41R2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPo58uWy Aa8kXUp+9FwHJHs5nbCQpoIySh7xy1AedIGG5m4qzLZw0kBuSunpZYJrMDooX2qH +bhko8lVFLQ/UG+T2GGsLDMmFsE205iwzlgiQ/yIBwlxJAdwXySawJCT2Ax+XO1T NZsGw0kSSf334MUlUEbApj+aGAMtkuinHJxT39L+Dl3VK1YwFr/rTLR1DjXqw9fi awlrrbgbPMgVEGDkkBUiuxMcdcoo0uxo1kioLX/Q84UTuKE8d82juMwP8+ylVXdP /JQ/shJIY8w99+kJ5Ewa94g/wxNPNhTKP5G+CEoG4O67AhBEq3dM6FRK00NeowsE 7/sffTvf2fWCIA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:56:05 2025 by rpki-client