This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json) Hash identifier: oA6UzpEBpV2dOyBx6VsaXN2fpKfd+ASww6ShL9jjcoA= Subject key identifier: 27:26:3D:C0:29:2C:0A:3E:2F:AC:AB:FF:F1:CD:FD:D0:85:A8:32:BE Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87 Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87 Certificate serial: 019B3DC80ACDA5E5E0C5241BB0CFD03907DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 22:01:18 +0000 Manifest this update: Sat 20 Dec 2025 22:01:18 +0000 Manifest next update: Sun 21 Dec 2025 22:01:18 +0000 Files and hashes: 1: ABSwg5iM7lDSwpBpbSUM-jWDkxQ.roa (hash: DOO9GA+T1exZrXJnaC8HcR8le9oe4m7a+sJjxpyxjOg=) 2: GJYCLN0ib9ODqjC_4u9aKGjHiAs.roa (hash: AqwhbZ6NQ3s8EvVMwRFSwmoYz6Yquuk8Hi4hrgtZv3M=) 3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: hDD3hoD+LSsrWlQ5HuuKE8D9/tx9URYkRBmHIgxDOEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:0a:cd:a5:e5:e0:c5:24:1b:b0:cf:d0:39:07:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87 Validity Not Before: Dec 20 22:01:18 2025 GMT Not After : Dec 21 22:01:18 2025 GMT Subject: CN=27263dc0292c0a3e2facabfff1cdfdd085a832be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e8:f1:4a:2a:d9:53:86:7f:1d:a9:eb:c4:ed: be:5b:70:d5:9e:62:db:d7:02:ba:ae:d8:e1:87:e0: d7:b2:17:d7:19:cf:80:3d:99:94:96:3c:1e:62:e5: 3f:47:ea:de:79:38:a3:72:1a:a2:40:fa:a6:da:f6: 5e:2a:28:16:fd:66:12:c8:97:61:c2:8a:44:56:1f: 0c:90:9e:4d:b8:2b:9e:af:b1:b7:7d:6b:d7:f8:76: 55:bd:f7:ec:18:04:0d:1a:29:33:2c:03:f0:7f:64: a5:28:2d:47:2a:cb:9a:51:71:8f:1c:24:26:2d:76: 47:7b:fd:73:b0:f3:9a:e1:5c:83:a7:7a:0c:e7:51: d8:df:f3:15:35:82:ce:d3:60:c7:2f:64:92:81:07: be:13:9b:5f:77:4f:ad:e8:27:e2:1f:11:41:5b:8d: 95:a8:3d:37:71:84:3b:2b:68:7b:33:04:23:4e:7f: c7:67:37:ec:42:5a:66:0e:1b:bb:ed:7d:86:12:0c: b7:22:c7:b5:46:9e:f8:2f:af:e1:72:d8:bd:73:fc: 14:25:c1:60:bb:76:b3:79:4b:59:9e:d0:62:2b:f1: 41:0d:71:91:c7:b4:52:07:a9:6b:7f:29:64:2d:8f: c6:38:be:8e:80:61:ba:4f:4d:89:87:ca:2c:23:de: bf:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:26:3D:C0:29:2C:0A:3E:2F:AC:AB:FF:F1:CD:FD:D0:85:A8:32:BE X509v3 Authority Key Identifier: keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:e7:a0:9c:cf:9a:22:89:48:7f:20:ce:7c:d9:3f:4e:ad:0e: ee:e3:ee:bd:55:62:49:69:02:5b:63:42:03:8f:4b:77:0f:34: 69:67:41:9f:57:e7:0d:4f:e2:32:5e:aa:30:1b:14:29:c6:2e: a0:34:49:8d:56:46:ec:46:58:11:a5:e9:09:81:e9:c7:0a:37: 57:be:30:34:a1:80:cd:0e:97:84:c4:14:38:07:00:1f:bb:2d: bb:9c:24:c5:29:31:d0:7e:91:f0:3d:60:fc:0c:36:8c:68:b1: 4d:19:94:a5:28:5e:a5:1e:70:58:d1:03:65:f2:8d:81:fe:89: ba:9d:70:10:e0:80:63:68:32:23:cc:d4:fb:61:08:fa:c9:72: 45:a3:5f:3f:ed:18:d9:ec:73:5f:b7:74:db:d6:c1:e1:89:f5: 11:d1:35:fa:ee:68:4a:3c:b5:82:c2:82:de:39:37:ee:a5:f4: b7:86:aa:01:8e:9f:26:68:03:78:10:92:ab:aa:b8:ee:8c:6f: 6d:7b:93:68:6f:39:ab:10:81:d2:f4:99:d3:c1:da:9e:23:80: 8b:5a:60:b8:e1:85:37:51:cd:58:f5:e7:e8:e7:cf:32:85:63: df:57:93:1d:b5:66:59:17:fd:6f:50:d2:63:30:d1:04:a1:0e: 8f:bd:d0:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yArNpeXgxSQbsM/QOQfcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYTZkNmIwODc0NjFmZGVjNmE1YjlkNTJkMjk4MzJkOGYy OTljODcwHhcNMjUxMjIwMjIwMTE4WhcNMjUxMjIxMjIwMTE4WjAzMTEwLwYDVQQD EygyNzI2M2RjMDI5MmMwYTNlMmZhY2FiZmZmMWNkZmRkMDg1YTgzMmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OjxSirZU4Z/HanrxO2+W3DVnmLb 1wK6rtjhh+DXshfXGc+APZmUljweYuU/R+reeTijchqiQPqm2vZeKigW/WYSyJdh wopEVh8MkJ5NuCuer7G3fWvX+HZVvffsGAQNGikzLAPwf2SlKC1HKsuaUXGPHCQm LXZHe/1zsPOa4VyDp3oM51HY3/MVNYLO02DHL2SSgQe+E5tfd0+t6CfiHxFBW42V qD03cYQ7K2h7MwQjTn/HZzfsQlpmDhu77X2GEgy3Ise1Rp74L6/hcti9c/wUJcFg u3azeUtZntBiK/FBDXGRx7RSB6lrfylkLY/GOL6OgGG6T02Jh8osI96/OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcmPcApLAo+L6yr//HN/dCFqDK+MB8GA1UdIwQY MBaAFKCm1rCHRh/exqW51S0pgy2PKZyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yZDc2MDktMjE0Mi00YTAzLWIxMWUt MTE0OGZkZTdhZWY3LzEvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8yZDc2MDktMjE0Mi00YTAzLWIxMWUtMTE0OGZkZTdhZWY3 LzEvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReegnM+a IolIfyDOfNk/Tq0O7uPuvVViSWkCW2NCA49Ldw80aWdBn1fnDU/iMl6qMBsUKcYu oDRJjVZG7EZYEaXpCYHpxwo3V74wNKGAzQ6XhMQUOAcAH7stu5wkxSkx0H6R8D1g /Aw2jGixTRmUpShepR5wWNEDZfKNgf6Jup1wEOCAY2gyI8zU+2EI+slyRaNfP+0Y 2exzX7d029bB4Yn1EdE1+u5oSjy1gsKC3jk37qX0t4aqAY6fJmgDeBCSq6q47oxv bXuTaG85qxCB0vSZ08HaniOAi1pguOGFN1HNWPXn6OfPMoVj31eTHbVmWRf9b1DS YzDRBKEOj73QPQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:00:43 2025 by rpki-client