This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json) Hash identifier: Ptr6N8y7S6M5/R10regN6M5/vaGZh+WEzpT4ZaM2Z/M= Subject key identifier: 54:C1:EC:A6:1E:4A:8F:E4:CC:E1:FE:2D:67:48:9D:C4:70:8E:B3:CB Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87 Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87 Certificate serial: 019B20CFD948369B5C3DC0AC8107BEF4CDB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 07:00:50 +0000 Manifest this update: Mon 15 Dec 2025 07:00:50 +0000 Manifest next update: Tue 16 Dec 2025 07:00:50 +0000 Files and hashes: 1: ABSwg5iM7lDSwpBpbSUM-jWDkxQ.roa (hash: DOO9GA+T1exZrXJnaC8HcR8le9oe4m7a+sJjxpyxjOg=) 2: GJYCLN0ib9ODqjC_4u9aKGjHiAs.roa (hash: AqwhbZ6NQ3s8EvVMwRFSwmoYz6Yquuk8Hi4hrgtZv3M=) 3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: cszfU7ABOYavdNFFWlW854/qME7ZecGKKdQ2bUtY9RE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:d9:48:36:9b:5c:3d:c0:ac:81:07:be:f4:cd:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87 Validity Not Before: Dec 15 07:00:50 2025 GMT Not After : Dec 16 07:00:50 2025 GMT Subject: CN=54c1eca61e4a8fe4cce1fe2d67489dc4708eb3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6c:bf:fc:e8:f4:56:58:39:f7:d3:a7:17:7e: 6e:ca:02:31:86:1d:e9:be:4a:a0:59:fd:06:17:cc: 64:8e:af:37:59:6b:68:19:2e:8c:f5:db:74:c5:77: dd:2b:27:54:67:12:95:0e:e9:6c:ed:82:79:99:5f: a3:6a:6a:92:aa:ad:b4:33:f6:a2:ea:18:95:54:39: 99:ff:a5:88:2c:55:63:2f:64:ee:96:70:0e:fa:a7: f1:53:9c:24:d6:35:d9:65:fa:30:b7:71:46:10:c5: b7:30:ac:31:6d:94:96:6b:b4:d5:78:42:24:ac:27: 09:40:53:b5:23:e4:c5:aa:9e:34:23:d0:22:a3:e1: d7:de:de:b1:c0:05:59:3b:d6:9d:a8:ef:6c:77:32: d0:85:3a:e4:69:f7:0c:e8:77:f1:b4:d8:96:0c:fc: ae:c2:39:c3:23:44:40:ed:23:1a:a7:bf:ba:fe:0e: ca:89:3c:4b:23:2a:61:be:06:29:07:7b:9a:6c:d2: 8c:03:06:ca:e9:1c:3e:e8:66:47:be:72:15:0e:f0: 78:bb:3a:c2:7f:4f:09:cd:df:df:ee:46:da:49:9e: 46:7a:8d:89:58:38:8e:98:7d:3d:ec:ac:e6:7f:29: 78:d1:3a:17:10:48:e6:86:bb:ff:ff:e3:ae:0f:94: 2e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C1:EC:A6:1E:4A:8F:E4:CC:E1:FE:2D:67:48:9D:C4:70:8E:B3:CB X509v3 Authority Key Identifier: keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:5b:a7:9b:e8:2d:00:41:f7:3c:85:18:1d:89:99:ff:1d:5c: 71:d1:75:b9:23:0f:77:bc:36:b4:ae:2f:53:f2:3a:8f:6b:eb: 3f:e7:7e:6c:c3:a2:fb:b0:2a:c6:b1:9d:de:5a:d6:52:5d:ae: 14:e9:37:e3:36:f0:24:24:da:74:42:a5:df:d1:2c:91:20:7e: 74:7c:ae:43:e7:af:5f:67:24:f2:80:10:55:96:8e:2b:ae:86: 17:1c:51:17:65:db:17:a9:a7:46:25:50:6d:0e:0a:9b:c0:85: 30:d4:50:8f:ef:08:2d:f1:ed:c7:9c:17:ec:19:df:c5:80:85: 8c:cd:ba:5b:31:88:03:c8:d6:67:5f:3b:f5:0e:dc:20:29:24: 2d:51:30:7f:ae:75:c4:2e:4f:3a:2e:e4:9d:cc:bd:54:d2:07: ae:ee:fc:64:4c:d1:5e:ef:f5:18:af:bd:3c:24:66:7b:c6:28: 47:c7:6a:a2:9f:31:c5:7e:97:aa:01:17:0d:32:85:db:4f:f2: 5d:91:92:ba:7f:99:3c:86:93:dc:03:27:3a:1f:50:a3:fc:bc: 47:20:98:6d:f8:20:b1:3e:cb:0d:1f:1b:42:a2:20:c0:05:1f: d6:a0:5a:4a:49:e5:d7:ed:af:cf:af:ac:4a:74:d5:6f:01:99: 96:58:22:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz9lINptcPcCsgQe+9M20MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYTZkNmIwODc0NjFmZGVjNmE1YjlkNTJkMjk4MzJkOGYy OTljODcwHhcNMjUxMjE1MDcwMDUwWhcNMjUxMjE2MDcwMDUwWjAzMTEwLwYDVQQD Eyg1NGMxZWNhNjFlNGE4ZmU0Y2NlMWZlMmQ2NzQ4OWRjNDcwOGViM2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmy//Oj0Vlg599OnF35uygIxhh3p vkqgWf0GF8xkjq83WWtoGS6M9dt0xXfdKydUZxKVDuls7YJ5mV+jamqSqq20M/ai 6hiVVDmZ/6WILFVjL2TulnAO+qfxU5wk1jXZZfowt3FGEMW3MKwxbZSWa7TVeEIk rCcJQFO1I+TFqp40I9Aio+HX3t6xwAVZO9adqO9sdzLQhTrkafcM6HfxtNiWDPyu wjnDI0RA7SMap7+6/g7KiTxLIyphvgYpB3uabNKMAwbK6Rw+6GZHvnIVDvB4uzrC f08Jzd/f7kbaSZ5Geo2JWDiOmH097Kzmfyl40ToXEEjmhrv//+OuD5QuOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTB7KYeSo/kzOH+LWdIncRwjrPLMB8GA1UdIwQY MBaAFKCm1rCHRh/exqW51S0pgy2PKZyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yZDc2MDktMjE0Mi00YTAzLWIxMWUt MTE0OGZkZTdhZWY3LzEvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8yZDc2MDktMjE0Mi00YTAzLWIxMWUtMTE0OGZkZTdhZWY3 LzEvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1unm+gt AEH3PIUYHYmZ/x1ccdF1uSMPd7w2tK4vU/I6j2vrP+d+bMOi+7AqxrGd3lrWUl2u FOk34zbwJCTadEKl39EskSB+dHyuQ+evX2ck8oAQVZaOK66GFxxRF2XbF6mnRiVQ bQ4Km8CFMNRQj+8ILfHtx5wX7BnfxYCFjM26WzGIA8jWZ1879Q7cICkkLVEwf651 xC5POi7kncy9VNIHru78ZEzRXu/1GK+9PCRme8YoR8dqop8xxX6XqgEXDTKF20/y XZGSun+ZPIaT3AMnOh9Qo/y8RyCYbfggsT7LDR8bQqIgwAUf1qBaSknl1+2vz6+s SnTVbwGZllgiLA== -----END CERTIFICATE-----Generated at Mon Dec 15 12:01:09 2025 by rpki-client