This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft File: OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft (raw, json) Hash identifier: bHmogZk3bdaVQOkezWqlHxnPiPb5qodplKMU1R64oXA= Subject key identifier: E2:C7:D1:3D:95:9F:F9:90:D9:41:4D:0F:A8:C7:A5:33:E0:40:38:93 Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b Certificate serial: 019B3C7F257BFD7292B086A5F4BBFDBDE314 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 16:02:04 +0000 Manifest this update: Sat 20 Dec 2025 16:02:04 +0000 Manifest next update: Sun 21 Dec 2025 16:02:04 +0000 Files and hashes: 1: 5r0GrYVoAysKJDuHDPTj-1MVWCQ.roa (hash: XAzmjxdrpIx5mLyehPHseK/+jaakSPTIZ07v9R3ktfQ=) 2: 7gpUO99SfoacmIWvz5o-z3ESpPc.roa (hash: jBBU4x8HtuG0AJgjijT3pv++S+IgCjRtCv3AjftIABQ=) 3: JOJ9b2WkEIXJpzQl9CDXk_CHY94.roa (hash: SAmYAd0xvQRGMk1x62ICIfIVJyfWTunRcVeOhZ1E3l0=) 4: OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl (hash: z1Po9qeqfGQNjuadQ9P/G/uhaz6WKD55BLtn8VwOrIg=) 5: _MMbboen6fjGZxdl1sjrAWa0F6o.roa (hash: lasMNF+CDNUkmhfnkFUMcQ2+Q/sn4RwC142SJaDCsYo=) 6: qTT5EzYYejgHx_-gozkgtiyWSxE.roa (hash: WcMM5EKO8L7zVDvgOOXzTCPHLyfkpMtxpa7CTFKHemk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:25:7b:fd:72:92:b0:86:a5:f4:bb:fd:bd:e3:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b Validity Not Before: Dec 20 16:02:04 2025 GMT Not After : Dec 21 16:02:04 2025 GMT Subject: CN=e2c7d13d959ff990d9414d0fa8c7a533e0403893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:05:0f:30:2e:4e:e4:f0:c8:ac:56:31:ef:2c: 80:88:a4:12:79:c7:2d:09:c2:24:35:3c:87:2b:3a: 51:e2:51:ab:57:71:2e:56:a2:39:04:59:21:c4:07: 7e:f3:02:b2:31:e3:cc:60:9a:83:61:74:94:0d:cb: ba:ac:ae:a7:b4:ad:2a:05:41:98:18:e1:bd:8f:ab: b8:63:1f:ba:b0:ae:48:9e:e6:bb:4f:37:73:0f:99: 4c:2a:62:17:9f:a0:a2:c2:94:a6:90:0a:ff:a8:6d: e0:42:ae:98:09:1b:cf:9c:11:6a:ec:5f:14:84:0c: 1e:5c:e9:1e:fd:a3:b9:78:ec:9e:3c:cc:7f:71:f5: 95:93:2b:27:95:52:67:11:da:e2:3f:e5:c7:97:b9: 4f:81:07:76:31:9b:f8:cf:32:5f:5d:8c:41:5e:8f: cf:d9:ce:a0:15:80:60:8b:4c:f9:84:8e:88:ea:87: 43:68:5f:0c:53:c4:ef:9d:a5:9a:e3:6d:7c:9d:66: bb:d6:66:36:6b:f2:71:52:ee:70:65:e4:27:e3:f7: 3d:67:2e:83:94:6d:b6:72:69:d9:fb:fd:f9:84:27: d8:a6:f0:aa:45:0e:25:f0:69:c5:42:f6:4c:3b:99: b3:9d:94:85:d1:54:44:8b:8f:b0:0f:b0:81:d9:8e: 9b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C7:D1:3D:95:9F:F9:90:D9:41:4D:0F:A8:C7:A5:33:E0:40:38:93 X509v3 Authority Key Identifier: keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:fb:34:ce:e9:50:6c:13:ad:21:92:0e:28:f7:5c:ec:d6:e7: 98:fc:57:2c:26:68:df:7a:4d:a9:f6:b8:af:c2:f1:5c:d7:4b: 4c:79:ee:e0:d0:73:40:89:ac:94:d9:80:67:b4:03:db:c4:04: 66:67:58:05:4e:15:d9:0e:73:9c:ac:37:70:55:22:22:1a:80: f7:01:82:19:34:c7:b7:60:80:0e:c9:24:e5:13:f5:4f:a9:c0: 03:f5:d5:13:3d:d7:d7:b1:d9:6f:95:46:f7:a4:5f:81:08:ff: 2a:5a:1a:c3:47:3c:9b:b2:db:f4:08:9f:16:09:00:12:7b:40: 19:7e:e5:51:07:38:0e:50:bc:cd:d2:87:f6:b1:b6:f4:f8:46: 61:25:03:c4:53:da:c0:c0:d9:ca:f7:01:03:6e:7b:69:e0:b9: 1e:7c:01:f2:2e:95:9d:77:db:22:41:38:5d:17:68:df:bc:53: 33:59:2b:64:a7:2c:55:84:6a:31:50:01:36:c4:2e:96:23:89: 9d:05:2a:64:5a:78:60:c8:10:c8:dc:8f:21:ce:56:54:80:7a: 45:cb:fa:4c:cc:13:a3:49:1f:6e:3e:5d:d3:73:42:e8:05:a1: 2f:4e:ed:d9:49:7a:48:ee:59:a3:2b:4e:b1:e8:9a:77:c9:01: 1b:33:4c:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fyV7/XKSsIal9Lv9veMUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YTg1NTA2NTliYjY4ZTc3MGQ4YjAxMjZiNzI2MWZiODdk ODI0MGIwHhcNMjUxMjIwMTYwMjA0WhcNMjUxMjIxMTYwMjA0WjAzMTEwLwYDVQQD EyhlMmM3ZDEzZDk1OWZmOTkwZDk0MTRkMGZhOGM3YTUzM2UwNDAzODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gUPMC5O5PDIrFYx7yyAiKQSecct CcIkNTyHKzpR4lGrV3EuVqI5BFkhxAd+8wKyMePMYJqDYXSUDcu6rK6ntK0qBUGY GOG9j6u4Yx+6sK5Inua7TzdzD5lMKmIXn6CiwpSmkAr/qG3gQq6YCRvPnBFq7F8U hAweXOke/aO5eOyePMx/cfWVkysnlVJnEdriP+XHl7lPgQd2MZv4zzJfXYxBXo/P 2c6gFYBgi0z5hI6I6odDaF8MU8TvnaWa4218nWa71mY2a/JxUu5wZeQn4/c9Zy6D lG22cmnZ+/35hCfYpvCqRQ4l8GnFQvZMO5mznZSF0VREi4+wD7CB2Y6bMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLH0T2Vn/mQ2UFND6jHpTPgQDiTMB8GA1UdIwQY MBaAFDioVQZZu2jncNiwEmtyYfuH2CQLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0toVkJsbTdhT2R3MkxBU2EzSmgtNGZZSkFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83ZGNlNzMtYzRkZi00MzMzLThlODEt MWQ3MDNiNDk2NjM0LzEvT0toVkJsbTdhT2R3MkxBU2EzSmgtNGZZSkFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi83ZGNlNzMtYzRkZi00MzMzLThlODEtMWQ3MDNiNDk2NjM0 LzEvT0toVkJsbTdhT2R3MkxBU2EzSmgtNGZZSkFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvs0zulQ bBOtIZIOKPdc7NbnmPxXLCZo33pNqfa4r8LxXNdLTHnu4NBzQImslNmAZ7QD28QE ZmdYBU4V2Q5znKw3cFUiIhqA9wGCGTTHt2CADskk5RP1T6nAA/XVEz3X17HZb5VG 96RfgQj/Kloaw0c8m7Lb9AifFgkAEntAGX7lUQc4DlC8zdKH9rG29PhGYSUDxFPa wMDZyvcBA257aeC5HnwB8i6VnXfbIkE4XRdo37xTM1krZKcsVYRqMVABNsQuliOJ nQUqZFp4YMgQyNyPIc5WVIB6Rcv6TMwTo0kfbj5d03NC6AWhL07t2Ul6SO5ZoytO seiad8kBGzNMeA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:32:51 2025 by rpki-client