This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft File: oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft (raw, json) Hash identifier: ODQpDmra7FsH5SbB2j7MDiXRoAEFsNzL6CdYNx4vY0w= Subject key identifier: E2:C6:8A:1D:FA:17:94:CA:46:4D:DD:0F:79:C5:05:DC:5D:19:96:61 Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59 Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59 Certificate serial: 019B53E1CA66CD154BAB8FDDF060D126DD36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft Manifest number: 0CF6 Signing time: Thu 25 Dec 2025 05:01:04 +0000 Manifest this update: Thu 25 Dec 2025 05:01:04 +0000 Manifest next update: Fri 26 Dec 2025 05:01:04 +0000 Files and hashes: 1: Y2_roQOUIthtVw1QejxD0nB1Z6Y.roa (hash: stNdekHqHd38daoAs6CHIS4mgM26Z52wdTv8J9OHtKw=) 2: oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl (hash: BGhOqsjiNQVOLrZb1huhxCEhu8ltWRtM13+FkgOTvPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:ca:66:cd:15:4b:ab:8f:dd:f0:60:d1:26:dd:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59 Validity Not Before: Dec 25 05:01:04 2025 GMT Not After : Dec 26 05:01:04 2025 GMT Subject: CN=e2c68a1dfa1794ca464ddd0f79c505dc5d199661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:41:44:5d:d2:56:98:a0:04:81:62:b6:67:82: ad:26:51:0a:db:f6:eb:65:bc:ef:28:d7:b1:44:40: 9f:89:e0:2d:f6:f4:de:9d:9f:33:d9:92:b8:11:19: 77:83:af:9a:43:7d:12:69:28:20:7b:58:7b:6e:8c: b1:f1:b7:f7:0b:b5:15:f1:e2:d5:97:23:48:de:7e: 60:2f:06:1a:37:ff:67:e9:a0:c9:b4:60:b9:42:c5: 15:c4:68:51:9b:b7:3b:6b:df:13:4d:cd:17:1c:96: 58:f9:54:bc:d6:8b:f5:b0:64:70:1e:d9:24:6f:e2: 05:2c:a2:63:30:c5:fa:8c:ec:31:61:a3:13:e2:b8: 6f:fe:df:43:0b:37:9d:ce:fe:03:8d:36:40:28:13: 93:61:1b:2b:d9:ad:bd:b8:fc:3f:f5:f0:c7:25:ee: 58:d9:73:58:da:9d:b9:40:f2:c9:c7:06:69:87:4a: b2:cc:bc:67:1b:80:eb:1a:4d:95:db:a9:17:fe:0a: 63:74:25:b6:37:b6:30:9e:47:28:10:0b:5f:db:95: ce:4c:73:ad:b8:1e:6c:b1:4f:c2:ac:8b:40:de:ca: 46:1a:0e:9e:a1:4b:e4:9e:4c:cf:e0:51:ad:58:a1: c0:bb:a6:43:05:a3:fb:9e:c3:9d:85:e0:7d:60:c7: b4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C6:8A:1D:FA:17:94:CA:46:4D:DD:0F:79:C5:05:DC:5D:19:96:61 X509v3 Authority Key Identifier: keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:ca:65:5e:b4:99:36:b8:80:78:c3:42:e7:ba:51:80:78:a7: 10:e5:2e:f2:42:a4:6c:cb:f6:93:ad:9a:d9:01:c6:80:42:9b: 78:ce:d1:7b:e2:c8:1c:77:ef:b4:e9:21:a4:6b:e0:2a:3e:86: 0a:fe:a3:24:af:77:91:33:8f:53:bf:4c:83:f0:2f:0a:7c:56: 7a:3f:75:4b:17:ea:24:7c:89:af:a3:37:d2:da:0a:af:63:35: 63:b8:07:e4:fb:88:e3:cd:d3:84:3d:1e:8d:2c:9b:66:50:cf: e6:7c:28:5b:12:a6:e8:08:ae:5e:8a:36:b9:fb:e4:87:6c:1b: 00:9f:c7:ef:ef:40:69:ef:95:43:91:95:88:a9:65:c1:c1:de: ac:79:8c:70:e5:04:ba:50:a4:4f:28:d4:c6:c4:2c:e1:4f:ed: 54:9a:80:45:f2:88:c4:a3:63:5c:2c:31:1f:a9:4d:86:9b:ce: be:22:11:6b:9b:0d:50:c0:eb:87:89:a0:50:76:5b:6b:11:e5: 40:5f:95:f4:97:2e:f9:8d:b3:42:d7:6a:d7:64:1b:b4:74:aa: 75:c3:5d:15:45:8c:a6:fd:2c:e3:ef:00:34:a1:15:0a:56:53: fc:f1:b4:d1:da:4a:15:9b:82:c8:39:ff:cd:36:f3:7b:4d:b0: 1e:6c:84:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4cpmzRVLq4/d8GDRJt02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYTY0N2RhYzcyOWY0N2IwNjM2OWM0Yzk3NDFjZjk0Mzk1 M2RjNTkwHhcNMjUxMjI1MDUwMTA0WhcNMjUxMjI2MDUwMTA0WjAzMTEwLwYDVQQD EyhlMmM2OGExZGZhMTc5NGNhNDY0ZGRkMGY3OWM1MDVkYzVkMTk5NjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0FEXdJWmKAEgWK2Z4KtJlEK2/br ZbzvKNexRECfieAt9vTenZ8z2ZK4ERl3g6+aQ30SaSgge1h7boyx8bf3C7UV8eLV lyNI3n5gLwYaN/9n6aDJtGC5QsUVxGhRm7c7a98TTc0XHJZY+VS81ov1sGRwHtkk b+IFLKJjMMX6jOwxYaMT4rhv/t9DCzedzv4DjTZAKBOTYRsr2a29uPw/9fDHJe5Y 2XNY2p25QPLJxwZph0qyzLxnG4DrGk2V26kX/gpjdCW2N7YwnkcoEAtf25XOTHOt uB5ssU/CrItA3spGGg6eoUvknkzP4FGtWKHAu6ZDBaP7nsOdheB9YMe0tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLGih36F5TKRk3dD3nFBdxdGZZhMB8GA1UdIwQY MBaAFKCmR9rHKfR7BjacTJdBz5Q5U9xZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0taSDJzY3A5SHNHTnB4TWwwSFBsRGxUM0ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iYTFmODgtNzA3Zi00MWJkLWI5YmQt ZmI2OTgzY2U5ZGZmLzEvb0taSDJzY3A5SHNHTnB4TWwwSFBsRGxUM0ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9iYTFmODgtNzA3Zi00MWJkLWI5YmQtZmI2OTgzY2U5ZGZm LzEvb0taSDJzY3A5SHNHTnB4TWwwSFBsRGxUM0ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssplXrSZ NriAeMNC57pRgHinEOUu8kKkbMv2k62a2QHGgEKbeM7Re+LIHHfvtOkhpGvgKj6G Cv6jJK93kTOPU79Mg/AvCnxWej91SxfqJHyJr6M30toKr2M1Y7gH5PuI483ThD0e jSybZlDP5nwoWxKm6AiuXoo2ufvkh2wbAJ/H7+9Aae+VQ5GViKllwcHerHmMcOUE ulCkTyjUxsQs4U/tVJqARfKIxKNjXCwxH6lNhpvOviIRa5sNUMDrh4mgUHZbaxHl QF+V9Jcu+Y2zQtdq12QbtHSqdcNdFUWMpv0s4+8ANKEVClZT/PG00dpKFZuCyDn/ zTbze02wHmyErw== -----END CERTIFICATE-----Generated at Thu Dec 25 12:40:52 2025 by rpki-client