This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft File: OkGxVaq20SKf00jqoD0PeQPxJno.mft (raw, json) Hash identifier: /afvGzEooY5dMQZy24rHxC3tYQxEu//P5Llfk7wpy6U= Subject key identifier: FC:83:22:E9:7B:C5:82:D5:1B:DF:BB:8D:8C:CB:C2:26:25:D9:8A:3F Authority key identifier: 3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A Certificate issuer: /CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a Certificate serial: 019B4280393D0C9C3AC629D39EE380783D67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft Manifest number: 1292 Signing time: Sun 21 Dec 2025 20:00:58 +0000 Manifest this update: Sun 21 Dec 2025 20:00:58 +0000 Manifest next update: Mon 22 Dec 2025 20:00:58 +0000 Files and hashes: 1: DUYlFbh6FULGzgdthf_PMDp6hOU.roa (hash: JR7UbEi2bM6dLHHY3xrq1gui3NHbn1GkWRWkFGTRYw0=) 2: OkGxVaq20SKf00jqoD0PeQPxJno.crl (hash: Zmqy3Jg+SY8gwESQNBOEYSulJk/s+VJ7JJCTgML+9ak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.crl rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:39:3d:0c:9c:3a:c6:29:d3:9e:e3:80:78:3d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a Validity Not Before: Dec 21 20:00:58 2025 GMT Not After : Dec 22 20:00:58 2025 GMT Subject: CN=fc8322e97bc582d51bdfbb8d8ccbc22625d98a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:10:56:31:27:e2:d2:eb:cd:64:69:fa:5d:ce: b4:f8:7b:ea:a9:00:d8:b7:9c:99:4a:83:fd:8a:c2: 46:d3:46:bb:fa:3c:cf:f5:6e:30:c5:04:71:b3:34: c0:ee:8b:cf:c4:d8:37:a4:d1:d4:5a:6f:06:75:c4: 9d:d6:b4:69:1a:ce:1d:e0:8a:dc:46:53:35:1f:ae: 06:44:cf:08:8a:f6:39:8b:c2:25:f9:7e:f5:90:a0: d4:e4:d4:3c:70:d7:f7:28:d6:38:8b:61:32:5f:f5: 33:33:64:7d:7e:d4:22:f6:9e:1b:5d:94:9b:38:8d: 58:02:31:f7:1c:10:6d:68:d4:d5:d1:b0:a0:1c:e2: 5a:19:11:10:70:ff:9f:45:1f:43:d9:f6:b6:19:66: fe:18:dc:81:78:57:7c:e9:05:e1:c4:74:40:06:c4: 95:da:88:84:ab:e5:27:14:9c:3c:95:70:c1:95:d5: 5a:b3:3b:62:46:b8:c1:60:26:31:07:c5:dc:26:97: 17:62:48:b4:71:69:d1:47:d3:77:de:6c:20:d6:ba: 6a:a5:e8:99:9c:31:2a:d1:f8:7f:0a:32:35:44:30: be:7a:04:78:77:b0:5e:ef:9a:5a:ea:17:aa:fb:18: 86:2e:1a:38:60:fd:7e:e7:86:4d:bb:0e:c6:1e:a0: a7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:83:22:E9:7B:C5:82:D5:1B:DF:BB:8D:8C:CB:C2:26:25:D9:8A:3F X509v3 Authority Key Identifier: keyid:3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:27:7d:32:7d:59:b5:98:71:4b:f9:08:63:1e:44:21:32:3c: ea:5a:22:2c:4a:7e:48:ad:f4:51:40:73:db:95:ad:2c:69:a1: 25:3d:94:08:08:7e:1c:87:6f:63:21:57:e6:fe:bd:cd:e0:20: 76:bc:97:33:0f:c2:16:e1:ad:a7:9a:e9:11:83:65:7a:d5:9d: e3:3f:7a:e8:ff:6f:4d:57:8d:3a:39:50:b8:ae:bc:f1:56:7d: 3e:45:5f:02:d2:31:be:b7:14:14:5a:71:60:4f:c2:23:78:1b: c9:a1:f8:d5:c7:25:94:6c:4d:6a:6b:3a:ae:22:20:49:41:c3: 42:1d:9a:4c:7f:a8:3e:b0:49:c2:25:77:90:b5:e2:1a:b6:b1: 78:b0:01:b9:6c:59:6e:87:2a:61:89:78:4e:09:ac:77:e2:c6: 8d:7f:b8:f8:2c:50:7d:97:ed:5b:fa:fb:91:ee:1f:04:e4:7c: 4a:80:8f:a3:7c:21:d3:75:a1:c0:33:5e:fa:a4:95:f5:98:29: 96:e0:90:53:a6:dc:fb:d8:06:e0:2a:0c:76:9d:8e:66:f6:be: 31:71:56:59:16:5c:5c:43:7c:00:e5:95:08:65:fe:b3:5e:bb: 07:89:85:c2:5d:b1:4e:19:e1:1f:8d:1f:ef:97:26:df:61:08: b3:3b:9c:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgDk9DJw6xinTnuOAeD1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNDFiMTU1YWFiNmQxMjI5ZmQzNDhlYWEwM2QwZjc5MDNm MTI2N2EwHhcNMjUxMjIxMjAwMDU4WhcNMjUxMjIyMjAwMDU4WjAzMTEwLwYDVQQD EyhmYzgzMjJlOTdiYzU4MmQ1MWJkZmJiOGQ4Y2NiYzIyNjI1ZDk4YTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hBWMSfi0uvNZGn6Xc60+HvqqQDY t5yZSoP9isJG00a7+jzP9W4wxQRxszTA7ovPxNg3pNHUWm8GdcSd1rRpGs4d4Irc RlM1H64GRM8IivY5i8Il+X71kKDU5NQ8cNf3KNY4i2EyX/UzM2R9ftQi9p4bXZSb OI1YAjH3HBBtaNTV0bCgHOJaGREQcP+fRR9D2fa2GWb+GNyBeFd86QXhxHRABsSV 2oiEq+UnFJw8lXDBldVasztiRrjBYCYxB8XcJpcXYki0cWnRR9N33mwg1rpqpeiZ nDEq0fh/CjI1RDC+egR4d7Be75pa6heq+xiGLho4YP1+54ZNuw7GHqCneQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyDIul7xYLVG9+7jYzLwiYl2Yo/MB8GA1UdIwQY MBaAFDpBsVWqttEin9NI6qA9D3kD8SZ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2tHeFZhcTIwU0tmMDBqcW9EMFBlUVB4Sm5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iY2NhZWEtNjhjZS00MjI0LTk3YTUt MmIzYjRjNzgwNDE5LzEvT2tHeFZhcTIwU0tmMDBqcW9EMFBlUVB4Sm5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9iY2NhZWEtNjhjZS00MjI0LTk3YTUtMmIzYjRjNzgwNDE5 LzEvT2tHeFZhcTIwU0tmMDBqcW9EMFBlUVB4Sm5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyd9Mn1Z tZhxS/kIYx5EITI86loiLEp+SK30UUBz25WtLGmhJT2UCAh+HIdvYyFX5v69zeAg dryXMw/CFuGtp5rpEYNletWd4z966P9vTVeNOjlQuK688VZ9PkVfAtIxvrcUFFpx YE/CI3gbyaH41ccllGxNams6riIgSUHDQh2aTH+oPrBJwiV3kLXiGraxeLABuWxZ bocqYYl4Tgmsd+LGjX+4+CxQfZftW/r7ke4fBOR8SoCPo3wh03WhwDNe+qSV9Zgp luCQU6bc+9gG4CoMdp2OZva+MXFWWRZcXEN8AOWVCGX+s167B4mFwl2xThnhH40f 75cm32EIszucgQ== -----END CERTIFICATE-----Generated at Mon Dec 22 05:31:24 2025 by rpki-client