This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json) Hash identifier: scynRMWrCqdlYsb5jqb0xJWHkknnngkEU84jelGWmi0= Subject key identifier: 8A:65:39:75:B1:06:DB:71:39:95:FD:CA:9A:4A:89:23:7F:54:4E:A9 Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0 Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0 Certificate serial: 019B6CFC8CE2641FD756D85039BA323EF067 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft Manifest number: 17A0 Signing time: Tue 30 Dec 2025 02:00:48 +0000 Manifest this update: Tue 30 Dec 2025 02:00:48 +0000 Manifest next update: Wed 31 Dec 2025 02:00:48 +0000 Files and hashes: 1: DFvO543buXO6QAD6iga-2ghdPJM.roa (hash: OwW2BWhEe6SpLOjaLPnDoeeE6qmWEx2kPzz7nMDDwRs=) 2: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: Kbg+1rKd5GFTcK0Dz2AzeYGu3FMdb5PLt+rrjHhkeAE=) 3: b0sJmSxqykyJp2ZxTmsozr8_J8Q.roa (hash: phtYuXPVmT4EIKYX0FwVqQycRaEtVPLsT/EPqn9XD1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:8c:e2:64:1f:d7:56:d8:50:39:ba:32:3e:f0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0 Validity Not Before: Dec 30 02:00:48 2025 GMT Not After : Dec 31 02:00:48 2025 GMT Subject: CN=8a653975b106db713995fdca9a4a89237f544ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:55:f1:8b:bb:0d:82:54:54:02:a0:65:5a:7d: d9:44:80:14:b7:0e:f0:ef:57:8f:46:f1:6b:e2:f1: 6d:fd:ab:1c:0c:88:6a:97:da:da:29:3f:df:f4:6a: c5:67:08:b4:bc:53:db:39:19:e0:f3:bd:79:f9:13: 44:03:96:d6:b3:90:fc:aa:d9:7f:bf:04:3f:41:97: d1:57:ad:71:c6:f5:2a:c8:b9:25:f1:bc:98:b9:b7: 67:83:0e:9f:c8:be:c9:99:b9:3d:b6:19:3b:9b:7a: 39:b8:2b:0c:6d:91:f9:a5:1a:cc:dc:cc:bb:d2:b9: 31:e0:9e:15:c6:56:26:e8:fd:3d:76:4a:f6:8c:76: 88:9b:f7:42:18:10:24:3c:7b:da:c4:ec:fe:fd:be: 55:66:30:d1:1e:50:0a:ad:c5:db:e7:98:54:de:13: 81:a0:d1:cd:bb:e4:bc:07:3d:5a:1c:08:32:8c:74: 36:9e:d7:93:ca:e7:fe:9f:20:36:7a:ce:1d:90:3c: 80:22:55:69:89:0c:16:5e:a8:c1:b5:28:78:a0:a2: bf:6b:86:14:fd:67:c8:f8:88:9c:ad:cf:ad:af:6a: b4:af:7a:06:ae:56:30:18:ed:6d:5b:4e:20:05:15: c8:f1:a7:a8:67:60:5d:b1:68:93:4a:a7:a9:94:11: 3e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:65:39:75:B1:06:DB:71:39:95:FD:CA:9A:4A:89:23:7F:54:4E:A9 X509v3 Authority Key Identifier: keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:0d:d0:d0:98:19:47:df:ec:5b:96:f3:9c:8b:9a:a5:23:81: 8f:b9:60:e4:15:95:85:e0:76:25:1b:ef:f7:66:a9:fe:1b:d6: e4:09:33:f4:60:50:07:54:8a:b1:95:e9:87:f9:72:a5:c7:19: fc:c3:c9:e8:c1:8c:77:88:ee:12:c6:f2:2f:ac:c9:21:9c:13: 18:3b:3a:0c:9e:e4:77:e6:f0:da:81:52:fe:8b:fc:7f:41:c0: 25:d9:96:ed:87:75:1e:25:ec:b1:28:b1:95:27:3f:e4:ad:09: 38:32:06:7c:9a:09:29:71:03:ea:5e:4e:00:96:ee:c2:3a:97: e3:9d:23:be:58:fd:f1:6a:73:2b:19:ff:a7:0e:0d:8d:68:d1: c2:06:46:c0:df:10:3a:7b:1a:53:1c:ab:ca:25:65:93:5d:43: 91:45:b8:20:eb:0c:2f:ac:31:ee:fd:e6:26:51:e0:6e:f7:20: 45:2b:dc:85:cf:48:8b:d5:71:b4:48:db:b9:0f:b7:c0:9f:0a: b3:00:6c:39:3e:06:4b:40:ef:03:29:80:b2:d9:c6:a6:a0:cc: 8e:4d:0c:99:6e:e0:9e:49:31:50:80:df:b7:11:7c:63:78:e3: eb:a7:57:7c:24:dc:8c:00:b2:db:13:7b:a4:3e:8e:5d:5c:f8: 1f:8b:d5:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/IziZB/XVthQOboyPvBnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNDhjMjcwMTczNWNkNWQyMzE3ZDEwYWM2M2Q3ZjJlYzY2 MThjZTAwHhcNMjUxMjMwMDIwMDQ4WhcNMjUxMjMxMDIwMDQ4WjAzMTEwLwYDVQQD Eyg4YTY1Mzk3NWIxMDZkYjcxMzk5NWZkY2E5YTRhODkyMzdmNTQ0ZWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VXxi7sNglRUAqBlWn3ZRIAUtw7w 71ePRvFr4vFt/ascDIhql9raKT/f9GrFZwi0vFPbORng8715+RNEA5bWs5D8qtl/ vwQ/QZfRV61xxvUqyLkl8byYubdngw6fyL7Jmbk9thk7m3o5uCsMbZH5pRrM3My7 0rkx4J4VxlYm6P09dkr2jHaIm/dCGBAkPHvaxOz+/b5VZjDRHlAKrcXb55hU3hOB oNHNu+S8Bz1aHAgyjHQ2nteTyuf+nyA2es4dkDyAIlVpiQwWXqjBtSh4oKK/a4YU /WfI+Iicrc+tr2q0r3oGrlYwGO1tW04gBRXI8aeoZ2BdsWiTSqeplBE+dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIplOXWxBttxOZX9yppKiSN/VE6pMB8GA1UdIwQY MBaAFDpIwnAXNc1dIxfRCsY9fy7GYYzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2tqQ2NCYzF6VjBqRjlFS3hqMV9Mc1poak9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9lNzQ1OTUtZDY1Ny00YWI0LTgzMDkt MGQ1N2M5NDEwMTI3LzEvT2tqQ2NCYzF6VjBqRjlFS3hqMV9Mc1poak9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9lNzQ1OTUtZDY1Ny00YWI0LTgzMDktMGQ1N2M5NDEwMTI3 LzEvT2tqQ2NCYzF6VjBqRjlFS3hqMV9Mc1poak9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgA3Q0JgZ R9/sW5bznIuapSOBj7lg5BWVheB2JRvv92ap/hvW5Akz9GBQB1SKsZXph/lypccZ /MPJ6MGMd4juEsbyL6zJIZwTGDs6DJ7kd+bw2oFS/ov8f0HAJdmW7Yd1HiXssSix lSc/5K0JODIGfJoJKXED6l5OAJbuwjqX450jvlj98WpzKxn/pw4NjWjRwgZGwN8Q OnsaUxyryiVlk11DkUW4IOsML6wx7v3mJlHgbvcgRSvchc9Ii9VxtEjbuQ+3wJ8K swBsOT4GS0DvAymAstnGpqDMjk0MmW7gnkkxUIDftxF8Y3jj66dXfCTcjACy2xN7 pD6OXVz4H4vVqw== -----END CERTIFICATE-----Generated at Tue Dec 30 08:53:21 2025 by rpki-client