This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft File: oKFURB35Yj7rWhlhONIb71gktEE.mft (raw, json) Hash identifier: VeNNIHHav4dwiNZIfmJ1xjfIsAz0CilM2iFVEi0ob0Y= Subject key identifier: 99:51:42:6A:37:66:56:C2:AC:55:A9:94:32:68:9B:79:81:5B:3E:10 Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41 Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441 Certificate serial: 019B3E35714C76F553AE75FCF933A8547B5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 00:00:48 +0000 Manifest this update: Sun 21 Dec 2025 00:00:48 +0000 Manifest next update: Mon 22 Dec 2025 00:00:48 +0000 Files and hashes: 1: LinQK8fdUd0acFjufsgbsosu8aw.roa (hash: hdbmVMkuGYn9OnPhUkRUmIQuYMEx93e049UxiL3ibkE=) 2: cqMIZbZG_XjFMjyio64LoSb9JEM.roa (hash: xBYH5ZrjKUuPI62l0z0GQBA4FW4u95fkTkxgETr+i9Q=) 3: oKFURB35Yj7rWhlhONIb71gktEE.crl (hash: ei8Awr7cNL4LVUlkRkSweGaZ27zMhxWG2xNafT7ywro=) 4: wlqxE5iuLQB304PN7hVNM4_5h14.roa (hash: xdHQ2e13Tky6CrFmxy2+w5Er25IzDfQGHtx/iyo+wSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:71:4c:76:f5:53:ae:75:fc:f9:33:a8:54:7b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441 Validity Not Before: Dec 21 00:00:48 2025 GMT Not After : Dec 22 00:00:48 2025 GMT Subject: CN=9951426a376656c2ac55a99432689b79815b3e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ca:43:e9:6c:0a:55:cf:ec:1d:d0:b9:da:60: ff:0a:5d:1b:a6:29:c7:85:fc:2e:3c:7d:38:f0:aa: dd:2a:06:40:de:06:41:6a:96:b2:bb:02:a7:83:a7: 28:d0:c1:2e:42:99:64:4e:88:0c:e9:d9:62:d2:28: 9e:38:58:a3:cb:6b:2a:e4:99:da:b9:fa:65:c6:cb: 7d:2c:d5:40:ac:81:d5:6e:c7:4b:27:90:b2:e4:7a: 2c:07:16:fd:c3:7d:b8:a8:4f:6a:99:6e:d4:dc:63: 9b:41:fa:e1:82:b6:0f:d1:b2:3c:dd:5b:c8:ed:85: 08:47:4d:63:d8:85:d0:c7:26:04:e9:ed:42:a8:61: e4:a9:c9:4b:98:4c:5f:86:11:7b:a8:18:d8:03:c3: 83:55:9c:a2:9e:37:43:f7:70:ec:29:d0:51:a0:82: 9a:31:ab:2a:2b:05:e0:59:cc:b2:0f:c9:14:cd:06: db:07:67:0b:b2:38:43:1c:37:98:10:c3:31:84:8f: 20:e4:88:be:50:07:8d:08:d8:e8:85:f5:a9:c3:5b: 5b:ae:94:b7:bf:64:c9:6a:96:d8:0a:aa:f3:37:cf: bc:08:8a:4b:64:1e:25:fd:4c:84:7d:41:31:01:4b: 14:dc:93:72:6b:ec:92:a3:b0:73:e8:ec:cf:56:ef: 0e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:51:42:6A:37:66:56:C2:AC:55:A9:94:32:68:9B:79:81:5B:3E:10 X509v3 Authority Key Identifier: keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8d:82:27:1c:2a:92:63:4b:1d:0c:72:25:eb:73:62:1c:2e: 3f:07:ad:03:14:14:2f:45:ab:49:d3:65:56:9b:ce:63:34:1e: 41:f9:96:37:64:ff:f2:d5:7d:30:89:f7:fc:c0:15:79:39:4e: ea:c5:ea:6b:47:f4:88:28:f3:96:e9:6e:0b:d3:05:7f:9e:88: 01:9a:af:c2:c3:fb:a6:ae:f8:ea:8e:cb:f4:8c:15:0d:40:10: 0d:18:0a:e3:34:88:7b:55:3f:7b:8d:5a:92:f7:16:ce:05:45: 14:ea:9a:09:25:3e:49:a1:96:4b:97:01:90:7e:0f:65:56:a4: cd:41:ab:f8:a7:84:91:15:33:0b:97:59:ab:a2:0e:f4:16:85: 9a:62:e4:20:dc:45:06:83:47:fa:b5:8a:1d:c2:68:e9:db:10: 25:f0:09:64:f4:d7:bf:46:4e:d2:89:ed:eb:d7:ae:b8:d2:45: f6:71:28:0d:7e:40:25:ad:93:dc:a7:91:1f:5f:7f:41:37:de: 21:92:df:8e:7d:ce:c3:eb:89:71:d0:b6:b0:ff:23:7a:20:4f: 37:4c:13:7d:92:25:34:b9:6d:59:eb:0e:70:f1:66:6c:5e:55: 5a:c8:46:48:d7:1e:19:d9:a9:ef:24:01:00:df:49:1a:7d:ea: 42:99:70:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NXFMdvVTrnX8+TOoVHtcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYTE1NDQ0MWRmOTYyM2VlYjVhMTk2MTM4ZDIxYmVmNTgy NGI0NDEwHhcNMjUxMjIxMDAwMDQ4WhcNMjUxMjIyMDAwMDQ4WjAzMTEwLwYDVQQD Eyg5OTUxNDI2YTM3NjY1NmMyYWM1NWE5OTQzMjY4OWI3OTgxNWIzZTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8pD6WwKVc/sHdC52mD/Cl0bpinH hfwuPH048KrdKgZA3gZBapayuwKng6co0MEuQplkTogM6dli0iieOFijy2sq5Jna ufplxst9LNVArIHVbsdLJ5Cy5HosBxb9w324qE9qmW7U3GObQfrhgrYP0bI83VvI 7YUIR01j2IXQxyYE6e1CqGHkqclLmExfhhF7qBjYA8ODVZyinjdD93DsKdBRoIKa MasqKwXgWcyyD8kUzQbbB2cLsjhDHDeYEMMxhI8g5Ii+UAeNCNjohfWpw1tbrpS3 v2TJapbYCqrzN8+8CIpLZB4l/UyEfUExAUsU3JNya+ySo7Bz6OzPVu8OMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlRQmo3ZlbCrFWplDJom3mBWz4QMB8GA1UdIwQY MBaAFKChVEQd+WI+61oZYTjSG+9YJLRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmIt OWQ5NDM2NzFhOGEzLzEvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmItOWQ5NDM2NzFhOGEz LzEvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnY2CJxwq kmNLHQxyJetzYhwuPwetAxQUL0WrSdNlVpvOYzQeQfmWN2T/8tV9MIn3/MAVeTlO 6sXqa0f0iCjzluluC9MFf56IAZqvwsP7pq746o7L9IwVDUAQDRgK4zSIe1U/e41a kvcWzgVFFOqaCSU+SaGWS5cBkH4PZVakzUGr+KeEkRUzC5dZq6IO9BaFmmLkINxF BoNH+rWKHcJo6dsQJfAJZPTXv0ZO0ont69euuNJF9nEoDX5AJa2T3KeRH19/QTfe IZLfjn3Ow+uJcdC2sP8jeiBPN0wTfZIlNLltWesOcPFmbF5VWshGSNceGdmp7yQB AN9JGn3qQplwdg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:11:06 2025 by rpki-client