This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft File: OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json) Hash identifier: u9ybYFIgRbspR6NQsV3iL30j7mJ9YAYLeajySuTplwQ= Subject key identifier: B4:E0:8B:69:AB:B0:93:02:37:FC:75:C8:AB:B4:44:5F:64:32:E2:CB Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539 Certificate serial: 019B3D911AA9860ABC98600742321F4768A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft Manifest number: 1797 Signing time: Sat 20 Dec 2025 21:01:18 +0000 Manifest this update: Sat 20 Dec 2025 21:01:18 +0000 Manifest next update: Sun 21 Dec 2025 21:01:18 +0000 Files and hashes: 1: 1-yPHrZgsoThpMDnxsp8ik7ZJAmM.roa (hash: PkPdKCMYMFbeGyHu/UiymTakLQYctiNwfIAb9+YJYgQ=) 2: 5QRzBx43AV-rVFibUIkxX67tvbI.roa (hash: gayo6a2ZkLUJa9zMEpLRBH3Ls/m1iB/K2c1cMPBX4/Y=) 3: 6Xm-75V0sXQGqzDZtgBZ1MB1y7U.roa (hash: y6WKfvCzgcr5qRF8JvQX+THC7a2GBmmRXVuRnQY8PoA=) 4: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: e9GhU9bGg48aNGz1KY3mNBdp+ZWPqRI2ZBB/s2QAonk=) 5: U6V2FCr3duwrLHYXfMUAwbMQYWE.roa (hash: n65sXgOD4a9BNyNZnLy9ePNv9aeblojwP3q3G8dIAXE=) 6: aEuO7f3JtpWyu2f1MPnzErrljgU.roa (hash: YH8NEIJKb+pPrmGWzPR+jhBeuD5w3MtFJDL2dbR+PwQ=) 7: hE4J7-nVjBP1I1amWriRZQbCRjQ.roa (hash: t96fk3QnxrV27k+4LVx0l6UARkEoivZQZo9G+qQHzNc=) 8: tVLlOiV7SvnosXMuOA6u9tK4RqI.roa (hash: /FYDglX8ng94EWH9NM8VS2sIZeZUQbmdZE0FSeyFXmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:1a:a9:86:0a:bc:98:60:07:42:32:1f:47:68:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a4945e46764029d2581d820c3373fa445855539 Validity Not Before: Dec 20 21:01:18 2025 GMT Not After : Dec 21 21:01:18 2025 GMT Subject: CN=b4e08b69abb0930237fc75c8abb4445f6432e2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f5:7a:25:c4:0e:42:ce:b6:f8:d9:72:d0:86: 85:de:e4:84:de:87:53:34:42:ec:9a:04:9a:84:d9: 07:c3:74:49:08:6c:f3:64:aa:49:27:ea:e1:b5:47: 17:6b:69:f1:cb:44:6a:79:7f:5c:2c:e2:62:e3:63: 8c:0f:be:d9:c4:af:8e:fc:d2:10:76:5a:d5:88:16: 33:36:85:89:f9:ad:37:6f:62:b4:04:5e:9c:21:2b: 01:d9:f6:4a:58:96:37:93:e1:5a:1a:8d:e3:c9:ab: ba:26:d1:7b:e1:8f:05:09:21:9e:a3:da:06:70:2f: 49:93:5c:81:4c:91:5c:5d:23:eb:08:fc:08:84:b4: c7:4e:a2:c1:f9:8d:7c:6c:1e:1a:3b:6d:91:39:06: 48:37:49:7d:a0:25:bf:5b:43:cd:ad:56:d8:d5:08: 8d:ec:3f:a0:b6:01:af:45:3d:29:4f:61:86:d7:fc: 6a:79:ae:11:eb:1d:71:f9:74:21:bb:15:ee:04:8a: 27:42:86:38:5f:ea:bc:d8:07:71:1d:c5:54:dc:29: 89:d0:31:95:88:4c:f2:f4:2c:00:ff:f1:d2:0f:19: b1:67:51:d4:61:6f:50:d8:bc:b1:5d:29:28:2e:47: ff:ab:d1:d3:0f:69:fc:6f:31:09:21:af:5f:7a:b5: eb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E0:8B:69:AB:B0:93:02:37:FC:75:C8:AB:B4:44:5F:64:32:E2:CB X509v3 Authority Key Identifier: keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:89:4a:e2:eb:86:88:09:66:c8:6c:b3:68:f9:8b:c0:f5:2e: d7:de:9b:6a:35:1d:c4:ec:51:56:9e:ed:8e:c9:1b:c2:02:2b: a7:5f:40:6c:09:d6:86:8f:67:41:57:cb:71:52:85:e3:35:cc: f6:37:ac:11:bd:42:45:f4:b7:06:1a:87:09:f9:91:90:27:41: c8:bf:26:4c:f8:35:66:c7:ac:80:f3:e6:76:10:ce:75:60:db: b0:1f:8b:b2:1d:67:af:ae:d5:8f:af:7d:cb:f8:5e:df:e9:00: 26:61:aa:56:3e:f4:3c:63:14:a1:5e:be:89:45:d8:9e:e0:47: bd:87:f1:02:d7:47:ce:0e:17:b6:eb:ce:f3:2a:6d:04:f0:4c: d2:46:b2:c2:94:a1:d7:6a:56:4f:e5:ec:93:e4:0e:eb:15:be: b4:34:2e:71:9d:9f:73:2a:81:72:ec:a1:97:9c:4a:1c:e0:e2: 61:77:d6:03:18:82:95:58:8d:0c:fd:6c:4f:84:a9:5c:6e:19: 7d:0c:8d:24:ab:96:64:f9:74:f5:15:eb:06:53:96:1e:b4:ff: b8:44:ad:44:3d:c8:2e:fe:12:0b:ba:9d:7f:ae:a1:07:41:95: ac:7a:0b:67:87:a7:78:03:a2:3b:c4:cf:f5:ad:94:71:4b:0a: 73:53:af:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kRqphgq8mGAHQjIfR2ihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4 NTU1MzkwHhcNMjUxMjIwMjEwMTE4WhcNMjUxMjIxMjEwMTE4WjAzMTEwLwYDVQQD EyhiNGUwOGI2OWFiYjA5MzAyMzdmYzc1YzhhYmI0NDQ1ZjY0MzJlMmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fV6JcQOQs62+Nly0IaF3uSE3odT NELsmgSahNkHw3RJCGzzZKpJJ+rhtUcXa2nxy0RqeX9cLOJi42OMD77ZxK+O/NIQ dlrViBYzNoWJ+a03b2K0BF6cISsB2fZKWJY3k+FaGo3jyau6JtF74Y8FCSGeo9oG cC9Jk1yBTJFcXSPrCPwIhLTHTqLB+Y18bB4aO22ROQZIN0l9oCW/W0PNrVbY1QiN 7D+gtgGvRT0pT2GG1/xqea4R6x1x+XQhuxXuBIonQoY4X+q82AdxHcVU3CmJ0DGV iEzy9CwA//HSDxmxZ1HUYW9Q2LyxXSkoLkf/q9HTD2n8bzEJIa9ferXrSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTgi2mrsJMCN/x1yKu0RF9kMuLLMB8GA1UdIwQY MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt MzM2YWM5NDU2NDY0LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0 LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4lK4uuG iAlmyGyzaPmLwPUu196bajUdxOxRVp7tjskbwgIrp19AbAnWho9nQVfLcVKF4zXM 9jesEb1CRfS3BhqHCfmRkCdByL8mTPg1ZsesgPPmdhDOdWDbsB+Lsh1nr67Vj699 y/he3+kAJmGqVj70PGMUoV6+iUXYnuBHvYfxAtdHzg4XtuvO8yptBPBM0kaywpSh 12pWT+Xsk+QO6xW+tDQucZ2fcyqBcuyhl5xKHODiYXfWAxiClViNDP1sT4SpXG4Z fQyNJKuWZPl09RXrBlOWHrT/uEStRD3ILv4SC7qdf66hB0GVrHoLZ4eneAOiO8TP 9a2UcUsKc1Ovqw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:51:36 2025 by rpki-client