This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft File: oKzKnE_pv57fO8blyrxSg42TyxM.mft (raw, json) Hash identifier: Rxry5abfsO0sRq10QSebFCy8oDZeXCANB6r4Au+xZ64= Subject key identifier: F2:D2:18:3A:EA:FC:A6:07:29:EA:84:04:F4:B4:B3:35:74:AB:95:A8 Authority key identifier: A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13 Certificate issuer: /CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13 Certificate serial: 019AABDD9D69D6FA59485D6E87EB1811BFD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft Manifest number: 7E Signing time: Sat 22 Nov 2025 14:00:18 +0000 Manifest this update: Sat 22 Nov 2025 14:00:18 +0000 Manifest next update: Sun 23 Nov 2025 14:00:18 +0000 Files and hashes: 1: ep1-GDUun8xcdGHEE_lWHZRloMg.roa (hash: HiyP/TW6sZpVHtWLYDXWKIcePVBX2hkVKCTS2Lryhek=) 2: oKzKnE_pv57fO8blyrxSg42TyxM.crl (hash: 5sQqed3EiZA42HM2t3UfVDHO1ILeu+ApTb5h4b0Pz/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:dd:9d:69:d6:fa:59:48:5d:6e:87:eb:18:11:bf:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13 Validity Not Before: Nov 22 14:00:18 2025 GMT Not After : Nov 23 14:00:18 2025 GMT Subject: CN=f2d2183aeafca60729ea8404f4b4b33574ab95a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c9:52:12:c8:eb:b5:15:41:7d:06:15:d7:8a: 93:47:6f:78:cc:60:13:e4:fd:a3:ea:41:5a:bf:5e: 34:de:ba:28:1f:61:b3:bf:2f:62:bf:10:a4:ce:d4: 9b:b7:dc:39:8c:46:c0:38:21:f4:41:24:a6:d0:5d: 9a:e7:68:b4:ca:3e:f6:81:ab:56:73:fd:1b:f4:ff: 90:cf:03:a4:ee:c8:d5:c5:12:1d:55:91:07:a6:94: 7d:3b:0f:1c:6f:28:a1:41:74:d6:24:2f:3b:f4:e9: f2:04:0b:4b:21:b9:b8:f6:35:d7:26:c5:ba:aa:ec: 20:76:8a:5c:ee:7f:f0:ee:c7:e8:c5:0e:f6:43:dc: 56:fb:9d:c2:68:e3:b4:64:0d:1f:54:eb:c8:60:58: d9:6d:bf:9a:c7:d0:43:22:82:1a:65:93:5f:55:e7: e8:c0:17:dc:8b:6f:5d:76:84:14:cf:d2:65:cf:8b: 73:38:f8:7f:9e:2c:42:01:40:fd:79:5d:8d:72:e5: 38:96:67:8d:cf:a6:c7:51:04:b6:23:fd:65:54:04: d5:34:7e:f8:6d:34:c4:73:c2:7a:5f:a5:b8:e8:37: e5:18:b1:78:8b:39:5b:06:06:94:cd:ca:5e:57:b4: 12:2f:e2:47:f3:e8:e6:d0:e7:79:80:a6:cb:a4:63: 0a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D2:18:3A:EA:FC:A6:07:29:EA:84:04:F4:B4:B3:35:74:AB:95:A8 X509v3 Authority Key Identifier: keyid:A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:bc:27:39:40:9d:b2:15:52:66:a4:66:69:d3:a2:47:52:c6: 75:bf:74:a9:cb:6a:5c:3c:01:ee:d7:98:6c:ec:8c:6d:11:84: 90:0b:0b:f4:1b:1b:05:70:5d:27:d4:2f:63:b7:3e:af:3c:87: 8d:e5:ea:5e:55:61:c0:23:a5:23:c5:91:62:ba:20:d7:c9:73: 88:1d:81:b3:4f:46:d8:b4:59:af:5d:46:ad:3e:b4:63:ef:9a: 26:cf:2b:13:2f:b2:31:d0:f3:43:c1:ac:73:ec:45:e3:c7:25: 37:01:93:3b:b5:84:c1:50:c6:dc:5b:78:38:af:36:60:50:c8: c6:bd:ec:26:3b:39:73:58:35:05:84:81:c7:f2:01:5d:d4:f7: 57:de:2d:c7:05:07:1c:06:61:47:b9:63:1b:4a:a8:df:1c:b3: 29:eb:96:8a:11:1d:7e:6e:46:fe:25:94:78:9a:d4:4d:de:af: 05:67:41:d8:ba:2c:7b:86:91:cd:8c:c9:ce:75:23:b3:19:61: a1:44:4d:86:bb:61:ee:ef:19:f8:7b:c9:24:75:61:ea:41:a6: 88:45:54:70:e5:de:09:ba:d8:f7:80:c9:47:f6:3a:0a:a3:a8: 02:54:1c:a5:69:87:c3:6d:5e:ff:04:00:93:5a:f4:ac:c3:0f: 1c:8a:66:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqr3Z1p1vpZSF1uh+sYEb/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYWNjYTljNGZlOWJmOWVkZjNiYzZlNWNhYmM1MjgzOGQ5 M2NiMTMwHhcNMjUxMTIyMTQwMDE4WhcNMjUxMTIzMTQwMDE4WjAzMTEwLwYDVQQD EyhmMmQyMTgzYWVhZmNhNjA3MjllYTg0MDRmNGI0YjMzNTc0YWI5NWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8lSEsjrtRVBfQYV14qTR294zGAT 5P2j6kFav1403rooH2Gzvy9ivxCkztSbt9w5jEbAOCH0QSSm0F2a52i0yj72gatW c/0b9P+QzwOk7sjVxRIdVZEHppR9Ow8cbyihQXTWJC879OnyBAtLIbm49jXXJsW6 quwgdopc7n/w7sfoxQ72Q9xW+53CaOO0ZA0fVOvIYFjZbb+ax9BDIoIaZZNfVefo wBfci29ddoQUz9Jlz4tzOPh/nixCAUD9eV2NcuU4lmeNz6bHUQS2I/1lVATVNH74 bTTEc8J6X6W46DflGLF4izlbBgaUzcpeV7QSL+JH8+jm0Od5gKbLpGMKKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLSGDrq/KYHKeqEBPS0szV0q5WoMB8GA1UdIwQY MBaAFKCsypxP6b+e3zvG5cq8UoONk8sTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0t6S25FX3B2NTdmTzhibHlyeFNnNDJUeXhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83YjYxMTAtOGM0Yi00YWY2LWE3Y2Et MmVkZmUyNWJiNThhLzEvb0t6S25FX3B2NTdmTzhibHlyeFNnNDJUeXhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni83YjYxMTAtOGM0Yi00YWY2LWE3Y2EtMmVkZmUyNWJiNThh LzEvb0t6S25FX3B2NTdmTzhibHlyeFNnNDJUeXhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLwnOUCd shVSZqRmadOiR1LGdb90qctqXDwB7teYbOyMbRGEkAsL9BsbBXBdJ9QvY7c+rzyH jeXqXlVhwCOlI8WRYrog18lziB2Bs09G2LRZr11GrT60Y++aJs8rEy+yMdDzQ8Gs c+xF48clNwGTO7WEwVDG3Ft4OK82YFDIxr3sJjs5c1g1BYSBx/IBXdT3V94txwUH HAZhR7ljG0qo3xyzKeuWihEdfm5G/iWUeJrUTd6vBWdB2Lose4aRzYzJznUjsxlh oURNhrth7u8Z+HvJJHVh6kGmiEVUcOXeCbrY94DJR/Y6CqOoAlQcpWmHw21e/wQA k1r0rMMPHIpm8A== -----END CERTIFICATE-----Generated at Sat Nov 22 20:53:56 2025 by rpki-client