This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json) Hash identifier: 1Q0yUn4zu5VrgJNDpO8iEmpbZcjxNOsFoMPgtPKmIIg= Subject key identifier: 7E:87:57:7F:67:5A:AF:D9:72:99:40:00:1C:7F:A8:B4:17:A3:48:ED Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88 Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688 Certificate serial: 019B3F7EE7B4972C37FA65F0F9B68A9C38B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 06:00:40 +0000 Manifest this update: Sun 21 Dec 2025 06:00:40 +0000 Manifest next update: Mon 22 Dec 2025 06:00:40 +0000 Files and hashes: 1: 96vIwkHilvFUiWBW4PufPiXs8Xc.roa (hash: 4z0rz62JRZZ2Fr+WLR7zv9wYSLzC1Er1yBLihUvuTTQ=) 2: W5hSAR4sZalO8wqJY5l805Zgmmc.roa (hash: BNtHkanpnpWtZP85x9b7xHDyrh1q2+yrxaroucbMTVc=) 3: gVangjOt-W6Q-QV_s66mXYPcc_o.roa (hash: DiTRQhaMQ99SN8kWmrVuQekBFcD8SdmyYMIP7Glc7p0=) 4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: eGnEccDv9hTEKKSYtdU4MohF9iPhbfdwD7zNWvoX4Dg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:e7:b4:97:2c:37:fa:65:f0:f9:b6:8a:9c:38:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2893a4b284acb5d8a4164289045492109511688 Validity Not Before: Dec 21 06:00:40 2025 GMT Not After : Dec 22 06:00:40 2025 GMT Subject: CN=7e87577f675aafd9729940001c7fa8b417a348ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0c:65:17:93:09:01:30:1e:3c:f0:f8:65:98: 06:d3:c7:9e:d9:cd:7f:47:74:f5:00:91:a2:ba:cf: 93:fc:47:3c:19:79:20:0f:6a:84:32:88:40:41:7c: 5b:41:c6:5b:dd:f2:d1:a0:48:42:c5:2e:01:89:5f: 1f:db:f9:d8:6d:95:83:04:f8:86:c6:af:6d:cb:0d: 61:5b:5a:bd:2d:cb:de:d1:1b:d7:5a:ab:88:37:76: f9:2d:a0:99:82:1a:41:88:9f:e5:aa:e8:ac:68:07: 9d:01:a5:6a:27:e6:12:75:8c:ce:f1:5d:b5:83:31: 06:16:28:48:9a:75:e1:ef:65:cd:df:71:4f:d3:4f: 0a:40:8a:16:2d:85:f9:30:67:ba:7b:0f:e0:67:9b: c2:0d:41:38:3a:57:70:47:68:04:5d:5e:bf:65:8b: cf:58:bc:e8:c1:e7:10:05:37:42:93:18:48:2a:65: 89:e8:a2:26:25:2d:7b:7b:19:0b:cd:ac:75:5f:bc: b1:2b:2d:95:1c:f6:a7:ea:83:21:60:e0:6a:bf:ff: 35:04:aa:59:28:e6:10:47:0a:60:93:89:68:d2:71: d1:61:0e:10:38:3c:b7:59:86:15:eb:fe:55:ac:97: 25:76:64:28:30:45:13:df:d0:5c:ee:1e:5f:97:e4: ac:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:87:57:7F:67:5A:AF:D9:72:99:40:00:1C:7F:A8:B4:17:A3:48:ED X509v3 Authority Key Identifier: keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:08:69:0f:0a:1f:9f:3d:62:35:7a:b1:78:75:56:28:e3:73: ea:1e:c0:eb:96:e9:d8:0e:fd:30:6c:21:de:5b:02:9d:71:5a: 80:fd:6a:3e:d9:a6:f6:7d:5a:28:2b:1a:fe:b7:7d:3d:ce:1c: fe:10:33:34:25:16:a4:c4:a6:9c:f4:ee:a9:bd:79:82:9e:c0: f0:5d:6e:6d:25:2a:70:7e:c9:24:97:1f:34:69:7d:3f:d8:89: 1d:b1:43:da:8e:b9:cb:3e:28:83:33:51:b6:bb:22:22:89:83: 48:f7:0f:16:27:d0:1a:07:69:24:80:01:96:49:b5:d1:9b:8e: c0:56:f5:da:17:2f:09:2e:32:58:b6:2f:71:86:9b:02:6b:91: c4:73:71:42:bc:f5:b4:2a:b2:c9:07:dc:93:00:e1:15:41:1f: da:18:d2:1d:c9:94:72:9f:4d:ef:f7:ce:2e:90:a9:bf:33:c3: 38:18:a3:4c:3f:d2:f9:f6:95:f2:05:0e:e8:ba:66:df:6d:7b: 50:98:74:43:ba:d6:0d:49:87:91:45:fc:70:4d:e4:26:7c:65: fb:6c:54:73:67:a0:4f:16:af:dd:5f:05:67:d3:47:a1:7d:06: 1f:94:49:c7:20:d7:65:68:9d:4e:65:59:0e:4d:55:a3:0c:4e: ec:9d:a2:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fue0lyw3+mXw+baKnDi0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyODkzYTRiMjg0YWNiNWQ4YTQxNjQyODkwNDU0OTIxMDk1 MTE2ODgwHhcNMjUxMjIxMDYwMDQwWhcNMjUxMjIyMDYwMDQwWjAzMTEwLwYDVQQD Eyg3ZTg3NTc3ZjY3NWFhZmQ5NzI5OTQwMDAxYzdmYThiNDE3YTM0OGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAxlF5MJATAePPD4ZZgG08ee2c1/ R3T1AJGius+T/Ec8GXkgD2qEMohAQXxbQcZb3fLRoEhCxS4BiV8f2/nYbZWDBPiG xq9tyw1hW1q9Lcve0RvXWquIN3b5LaCZghpBiJ/lquisaAedAaVqJ+YSdYzO8V21 gzEGFihImnXh72XN33FP008KQIoWLYX5MGe6ew/gZ5vCDUE4OldwR2gEXV6/ZYvP WLzowecQBTdCkxhIKmWJ6KImJS17exkLzax1X7yxKy2VHPan6oMhYOBqv/81BKpZ KOYQRwpgk4lo0nHRYQ4QODy3WYYV6/5VrJcldmQoMEUT39Bc7h5fl+SsbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6HV39nWq/ZcplAABx/qLQXo0jtMB8GA1UdIwQY MBaAFKKJOksoSstdikFkKJBFSSEJURaIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iNDg3YWItNWUzMS00MTE3LWFkYTgt YTVkM2NiOTE4MjA2LzEvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iNDg3YWItNWUzMS00MTE3LWFkYTgtYTVkM2NiOTE4MjA2 LzEvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADghpDwof nz1iNXqxeHVWKONz6h7A65bp2A79MGwh3lsCnXFagP1qPtmm9n1aKCsa/rd9Pc4c /hAzNCUWpMSmnPTuqb15gp7A8F1ubSUqcH7JJJcfNGl9P9iJHbFD2o65yz4ogzNR trsiIomDSPcPFifQGgdpJIABlkm10ZuOwFb12hcvCS4yWLYvcYabAmuRxHNxQrz1 tCqyyQfckwDhFUEf2hjSHcmUcp9N7/fOLpCpvzPDOBijTD/S+faV8gUO6Lpm3217 UJh0Q7rWDUmHkUX8cE3kJnxl+2xUc2egTxav3V8FZ9NHoX0GH5RJxyDXZWidTmVZ Dk1VowxO7J2iBw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:30:42 2025 by rpki-client