This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft File: OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json) Hash identifier: ET7iq2NbI1RD2vk2ITkguDJUXV/WX+vzNy1Sf3hXZLc= Subject key identifier: 35:E4:5D:E5:AC:55:FE:48:80:68:AB:66:F7:48:26:7D:94:5E:FC:63 Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539 Certificate serial: 019AEC7504124481281A8B2AD9D553B2B932 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft Manifest number: 176D Signing time: Fri 05 Dec 2025 03:01:22 +0000 Manifest this update: Fri 05 Dec 2025 03:01:22 +0000 Manifest next update: Sat 06 Dec 2025 03:01:22 +0000 Files and hashes: 1: 1-yPHrZgsoThpMDnxsp8ik7ZJAmM.roa (hash: PkPdKCMYMFbeGyHu/UiymTakLQYctiNwfIAb9+YJYgQ=) 2: 5QRzBx43AV-rVFibUIkxX67tvbI.roa (hash: gayo6a2ZkLUJa9zMEpLRBH3Ls/m1iB/K2c1cMPBX4/Y=) 3: 6Xm-75V0sXQGqzDZtgBZ1MB1y7U.roa (hash: y6WKfvCzgcr5qRF8JvQX+THC7a2GBmmRXVuRnQY8PoA=) 4: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: Yd7bEc3URgDNZHZIpjntSwZDkYUfOtMFUk2a1Yw96SI=) 5: U6V2FCr3duwrLHYXfMUAwbMQYWE.roa (hash: n65sXgOD4a9BNyNZnLy9ePNv9aeblojwP3q3G8dIAXE=) 6: aEuO7f3JtpWyu2f1MPnzErrljgU.roa (hash: YH8NEIJKb+pPrmGWzPR+jhBeuD5w3MtFJDL2dbR+PwQ=) 7: hE4J7-nVjBP1I1amWriRZQbCRjQ.roa (hash: t96fk3QnxrV27k+4LVx0l6UARkEoivZQZo9G+qQHzNc=) 8: tVLlOiV7SvnosXMuOA6u9tK4RqI.roa (hash: /FYDglX8ng94EWH9NM8VS2sIZeZUQbmdZE0FSeyFXmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ec:75:04:12:44:81:28:1a:8b:2a:d9:d5:53:b2:b9:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a4945e46764029d2581d820c3373fa445855539 Validity Not Before: Dec 5 03:01:22 2025 GMT Not After : Dec 6 03:01:22 2025 GMT Subject: CN=35e45de5ac55fe488068ab66f748267d945efc63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b8:8a:7a:ba:52:52:f9:9b:30:ec:aa:ae:97: 23:40:05:e5:b3:42:1a:df:72:2a:fb:e9:c4:fb:13: 81:86:aa:aa:58:7c:49:c2:3d:b1:72:89:5d:ff:aa: 28:78:de:5f:ab:ba:aa:5d:f5:09:cd:71:a3:72:aa: 85:17:cf:5d:f8:92:86:7a:ad:30:a1:cb:c6:c0:31: d7:e5:1b:8c:90:83:98:ca:5e:7d:67:52:10:11:3b: 2a:77:ee:e2:a5:47:58:69:c8:5d:ec:95:c8:7c:e6: 3d:c9:51:5e:eb:21:00:f9:0d:18:fc:22:4d:e6:a9: 26:10:e4:ba:af:87:d8:32:ab:9f:51:48:f9:21:07: 19:8e:f9:7c:8f:88:4d:82:f9:ce:d5:be:e0:65:0a: 4a:bf:a6:6e:35:5d:3e:4f:af:28:aa:ec:ac:42:ca: ec:f8:57:79:e4:20:c8:f9:78:cc:98:d6:37:b9:7c: 58:0e:91:a6:66:6f:75:f8:c7:76:21:07:0c:c8:43: 19:7d:bb:0d:45:ff:4a:78:73:2f:af:4f:e0:50:7c: 6e:3d:c8:5b:70:6a:e4:e8:85:b3:c4:45:d8:66:00: 77:62:b8:8c:70:af:94:9d:8f:76:83:6b:bf:26:d4: 08:59:b6:0b:e5:92:14:ab:17:d5:31:ba:5c:34:e7: bb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E4:5D:E5:AC:55:FE:48:80:68:AB:66:F7:48:26:7D:94:5E:FC:63 X509v3 Authority Key Identifier: keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b6:1e:86:d8:5f:54:d8:44:fd:90:40:03:e1:20:24:2e:20: e1:81:4c:7e:9b:a9:0e:42:a9:c4:f7:6b:ef:2f:cc:a4:22:dd: dd:31:7c:36:d1:2f:ec:64:6f:22:cb:06:0f:a0:3c:97:d0:e3: 9d:d2:9e:e9:f1:c1:45:0c:a7:36:c9:3f:4e:09:1a:37:f5:fd: f9:fe:aa:84:90:0f:fe:48:b3:11:55:91:f9:c3:56:23:20:cb: 32:8a:cc:fc:9b:dd:5f:35:44:2a:c2:01:44:65:22:ba:ec:b1: 9d:54:ac:96:48:30:ae:93:7f:fb:0d:16:a5:fe:a9:1f:51:ea: 54:8e:0f:1c:12:dc:9c:b0:30:cf:eb:56:43:df:82:41:b3:dc: c3:61:72:a4:9c:0f:6c:37:d8:f5:ff:4d:81:0b:bf:cf:4d:ee: 6f:32:fe:20:cc:ab:c7:9d:6d:18:cf:d9:40:18:b6:0e:8b:82: f6:c7:97:d5:0c:63:16:b6:4a:c2:2e:e1:a2:30:f1:81:85:56: 95:08:b5:10:6a:6e:1e:33:77:71:cd:80:d2:8e:cf:6c:03:07: 77:92:c9:12:c3:2d:23:44:0f:4a:b2:85:d8:32:01:3d:a5:01: 5d:b3:a3:a2:c7:30:fe:a1:7d:61:37:4c:ab:1a:02:f5:d2:46: ed:c5:5a:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrsdQQSRIEoGosq2dVTsrkyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4 NTU1MzkwHhcNMjUxMjA1MDMwMTIyWhcNMjUxMjA2MDMwMTIyWjAzMTEwLwYDVQQD EygzNWU0NWRlNWFjNTVmZTQ4ODA2OGFiNjZmNzQ4MjY3ZDk0NWVmYzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobiKerpSUvmbMOyqrpcjQAXls0Ia 33Iq++nE+xOBhqqqWHxJwj2xcold/6ooeN5fq7qqXfUJzXGjcqqFF89d+JKGeq0w ocvGwDHX5RuMkIOYyl59Z1IQETsqd+7ipUdYachd7JXIfOY9yVFe6yEA+Q0Y/CJN 5qkmEOS6r4fYMqufUUj5IQcZjvl8j4hNgvnO1b7gZQpKv6ZuNV0+T68oquysQsrs +Fd55CDI+XjMmNY3uXxYDpGmZm91+Md2IQcMyEMZfbsNRf9KeHMvr0/gUHxuPchb cGrk6IWzxEXYZgB3YriMcK+UnY92g2u/JtQIWbYL5ZIUqxfVMbpcNOe7MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXkXeWsVf5IgGirZvdIJn2UXvxjMB8GA1UdIwQY MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt MzM2YWM5NDU2NDY0LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0 LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbYehthf VNhE/ZBAA+EgJC4g4YFMfpupDkKpxPdr7y/MpCLd3TF8NtEv7GRvIssGD6A8l9Dj ndKe6fHBRQynNsk/TgkaN/X9+f6qhJAP/kizEVWR+cNWIyDLMorM/JvdXzVEKsIB RGUiuuyxnVSslkgwrpN/+w0Wpf6pH1HqVI4PHBLcnLAwz+tWQ9+CQbPcw2FypJwP bDfY9f9NgQu/z03ubzL+IMyrx51tGM/ZQBi2DouC9seX1QxjFrZKwi7hojDxgYVW lQi1EGpuHjN3cc2A0o7PbAMHd5LJEsMtI0QPSrKF2DIBPaUBXbOjoscw/qF9YTdM qxoC9dJG7cVaBA== -----END CERTIFICATE-----Generated at Fri Dec 5 07:53:05 2025 by rpki-client