This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft File: oKFURB35Yj7rWhlhONIb71gktEE.mft (raw, json) Hash identifier: Is8IPAJA9SEOpb0axGfX57q+M2AeUCMErdSFJr6SAk8= Subject key identifier: 50:D5:BF:A8:0F:EE:9D:66:A1:14:3D:BC:C8:C1:84:1C:E2:7B:CC:08 Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41 Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441 Certificate serial: 019B5F0A0FE0A3F4D15C80DFF725C682D146 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft Manifest number: 17A1 Signing time: Sat 27 Dec 2025 09:00:53 +0000 Manifest this update: Sat 27 Dec 2025 09:00:53 +0000 Manifest next update: Sun 28 Dec 2025 09:00:53 +0000 Files and hashes: 1: LinQK8fdUd0acFjufsgbsosu8aw.roa (hash: hdbmVMkuGYn9OnPhUkRUmIQuYMEx93e049UxiL3ibkE=) 2: cqMIZbZG_XjFMjyio64LoSb9JEM.roa (hash: xBYH5ZrjKUuPI62l0z0GQBA4FW4u95fkTkxgETr+i9Q=) 3: oKFURB35Yj7rWhlhONIb71gktEE.crl (hash: Zw3L5DUmv7lBpimZ3H4PuUhROznaUCznQm5hQaCudb8=) 4: wlqxE5iuLQB304PN7hVNM4_5h14.roa (hash: xdHQ2e13Tky6CrFmxy2+w5Er25IzDfQGHtx/iyo+wSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:0a:0f:e0:a3:f4:d1:5c:80:df:f7:25:c6:82:d1:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441 Validity Not Before: Dec 27 09:00:53 2025 GMT Not After : Dec 28 09:00:53 2025 GMT Subject: CN=50d5bfa80fee9d66a1143dbcc8c1841ce27bcc08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:46:08:c6:b0:8a:59:9b:92:b4:01:fc:5d:49: ca:42:e5:21:e0:df:23:d5:4b:b8:b3:61:d1:e9:9b: c1:e2:e8:3d:4b:61:d8:dd:db:e7:e5:66:2b:18:7f: ce:38:07:89:2b:b4:17:4e:a2:ce:3f:2f:9f:d6:3d: 45:b8:d7:88:9a:cb:7d:42:dc:14:7f:0a:95:14:35: cc:8d:cf:ce:ab:56:8d:b3:7e:97:20:8e:8e:05:fe: 3d:a9:36:6e:40:15:13:67:de:46:dd:ba:03:9f:45: f1:ea:7a:36:75:b3:f5:3a:8e:82:18:38:60:9f:ef: 58:9b:bc:f4:42:19:3d:83:b5:93:af:f4:39:58:49: 0f:11:00:13:5d:35:a0:10:da:e2:2c:c7:6d:09:39: 9c:17:78:f3:0c:0c:3d:98:c1:c4:dd:b5:f4:3e:6c: 90:3b:d6:f2:48:0f:37:e9:6a:fd:b5:00:4f:ea:93: d2:89:84:f8:c7:57:79:29:da:66:16:c0:b5:ec:b2: 91:81:de:b1:53:0a:6a:87:ab:4d:ec:4d:ec:b5:24: 8b:e3:09:f1:ac:49:a8:02:ba:31:ac:eb:f9:e0:d7: d7:30:f7:4b:e1:65:ea:68:9a:45:17:05:6e:08:3c: 9e:78:be:6d:10:ea:ce:00:ed:a2:25:e6:b7:dc:26: 21:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D5:BF:A8:0F:EE:9D:66:A1:14:3D:BC:C8:C1:84:1C:E2:7B:CC:08 X509v3 Authority Key Identifier: keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:6a:42:02:db:d5:2b:60:dd:c4:ea:e2:31:97:00:df:47:30: ea:6e:5a:f9:ba:5a:60:03:54:f6:f6:87:98:3c:91:62:e8:69: 9e:09:30:ea:28:25:6a:77:b7:6f:0f:a1:d2:4f:36:3d:24:7c: 68:5e:b4:1c:08:bb:fb:d8:bd:2b:8d:c8:fa:39:1b:6e:62:43: a3:a9:5e:a6:a4:5d:d4:2f:43:c3:d0:9e:4b:40:31:91:d2:65: ed:51:8c:2f:1c:df:80:ea:b9:1c:7f:64:7e:fe:53:3e:c5:bf: 6e:7b:ab:5a:c8:9f:7f:c1:53:6e:26:1e:dc:6f:d1:4b:64:bc: ce:2a:65:33:d8:63:e2:21:f1:10:38:b1:e7:99:16:f3:82:bd: 1f:66:2d:85:d0:5f:10:5c:28:fc:91:76:d1:05:2f:83:c5:22: 3d:83:53:28:95:60:7c:35:dd:72:68:d5:e9:d2:24:ef:db:9c: 96:e0:ab:97:79:45:06:ac:51:19:19:5f:10:c0:c5:10:1e:7e: 60:22:cb:53:47:a4:01:1d:39:12:9b:50:76:34:cc:f1:9c:8b: 40:c8:af:80:23:1c:1a:9f:81:45:ed:b7:1c:2b:d5:de:0f:8d: ed:10:17:84:96:7e:68:23:3b:5e:89:93:b7:f4:f1:8e:ad:de: e7:a3:cb:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfCg/go/TRXIDf9yXGgtFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYTE1NDQ0MWRmOTYyM2VlYjVhMTk2MTM4ZDIxYmVmNTgy NGI0NDEwHhcNMjUxMjI3MDkwMDUzWhcNMjUxMjI4MDkwMDUzWjAzMTEwLwYDVQQD Eyg1MGQ1YmZhODBmZWU5ZDY2YTExNDNkYmNjOGMxODQxY2UyN2JjYzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EYIxrCKWZuStAH8XUnKQuUh4N8j 1Uu4s2HR6ZvB4ug9S2HY3dvn5WYrGH/OOAeJK7QXTqLOPy+f1j1FuNeImst9QtwU fwqVFDXMjc/Oq1aNs36XII6OBf49qTZuQBUTZ95G3boDn0Xx6no2dbP1Oo6CGDhg n+9Ym7z0Qhk9g7WTr/Q5WEkPEQATXTWgENriLMdtCTmcF3jzDAw9mMHE3bX0PmyQ O9bySA836Wr9tQBP6pPSiYT4x1d5KdpmFsC17LKRgd6xUwpqh6tN7E3stSSL4wnx rEmoAroxrOv54NfXMPdL4WXqaJpFFwVuCDyeeL5tEOrOAO2iJea33CYhKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDVv6gP7p1moRQ9vMjBhBzie8wIMB8GA1UdIwQY MBaAFKChVEQd+WI+61oZYTjSG+9YJLRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmIt OWQ5NDM2NzFhOGEzLzEvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmItOWQ5NDM2NzFhOGEz LzEvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGpCAtvV K2DdxOriMZcA30cw6m5a+bpaYANU9vaHmDyRYuhpngkw6iglane3bw+h0k82PSR8 aF60HAi7+9i9K43I+jkbbmJDo6lepqRd1C9Dw9CeS0AxkdJl7VGMLxzfgOq5HH9k fv5TPsW/bnurWsiff8FTbiYe3G/RS2S8ziplM9hj4iHxEDix55kW84K9H2YthdBf EFwo/JF20QUvg8UiPYNTKJVgfDXdcmjV6dIk79ucluCrl3lFBqxRGRlfEMDFEB5+ YCLLU0ekAR05EptQdjTM8ZyLQMivgCMcGp+BRe23HCvV3g+N7RAXhJZ+aCM7XomT t/Txjq3e56PL2g== -----END CERTIFICATE-----Generated at Sat Dec 27 15:39:54 2025 by rpki-client