This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft File: 6oss0R-FmHiYVHRQySF4Efzeoos.mft (raw, json) Hash identifier: tSi8gxaqVn7BBzX6K+8h2XFG/PxR2lc1Vcw8JJ83zNU= Subject key identifier: E1:CE:A1:F9:2E:50:CF:D0:64:63:C8:0E:79:52:37:3F:A2:72:05:25 Authority key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B Certificate issuer: /CN=ea8b2cd11f85987898547450c9217811fcdea28b Certificate serial: 019B3D5A3F48288D7E66370AA37762C7ACCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft Manifest number: 112D Signing time: Sat 20 Dec 2025 20:01:23 +0000 Manifest this update: Sat 20 Dec 2025 20:01:23 +0000 Manifest next update: Sun 21 Dec 2025 20:01:23 +0000 Files and hashes: 1: 6oss0R-FmHiYVHRQySF4Efzeoos.crl (hash: F5Cd558lo6SXSlSn9Rj5o5F6m2Lk/rnPtk2aaUsp70o=) 2: Wwi6glxCUUOadZqgxrOkdmMrALQ.roa (hash: ojxf/c/q5Kwb/LwjbQGsJ4lb3PD40U6FhYMP3ryQG10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:3f:48:28:8d:7e:66:37:0a:a3:77:62:c7:ac:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea8b2cd11f85987898547450c9217811fcdea28b Validity Not Before: Dec 20 20:01:23 2025 GMT Not After : Dec 21 20:01:23 2025 GMT Subject: CN=e1cea1f92e50cfd06463c80e7952373fa2720525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4f:90:5e:51:d0:fd:2a:e6:9d:4d:89:d2:99: 06:47:f6:2b:13:c4:27:91:29:3e:9f:e2:53:c2:4c: 60:63:a7:3d:9f:a2:d9:ee:93:2c:98:ae:1d:c3:14: 3d:e6:42:2b:7a:24:e9:5d:73:2e:ad:d3:d3:d7:d4: 5c:76:b3:ac:8d:95:16:90:79:25:ec:40:9d:67:b0: 05:a8:a2:94:c2:ba:09:dc:00:7e:8e:87:17:0f:7b: 0d:1d:1e:b0:6e:0c:9a:50:05:45:7e:05:4f:77:4d: da:14:29:f6:a3:6f:b5:c5:57:90:c0:be:da:70:a7: 9c:5c:b1:b5:44:e8:59:15:ce:3e:cc:30:62:0e:d3: b3:48:2e:49:47:b5:d6:af:62:12:29:4c:85:f5:06: de:65:96:0f:7e:2d:ba:6b:c0:77:8d:1e:9d:4a:5e: 5c:55:4a:f0:56:b1:a2:a4:f3:11:39:3b:7f:21:1f: 61:9c:4d:9e:b0:c9:17:89:a8:71:c7:96:6a:7a:70: d4:a4:b7:03:25:3d:f2:c0:22:80:7b:2a:4e:76:1e: 7f:8d:f3:9b:3b:12:20:b8:14:2b:84:b8:a3:d8:e0: 0a:0e:0b:4c:24:e8:14:d5:42:32:72:6d:9f:b3:20: 10:cb:74:21:4c:04:2c:57:03:24:41:75:5a:76:cf: 8e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CE:A1:F9:2E:50:CF:D0:64:63:C8:0E:79:52:37:3F:A2:72:05:25 X509v3 Authority Key Identifier: keyid:EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:4f:c9:86:19:11:3e:42:b2:bc:9c:fc:51:94:54:3f:b1:b2: 33:0c:3f:5c:88:34:a9:1c:7f:f7:4f:99:62:f2:84:26:41:3c: 81:c3:6c:ef:e9:d1:bf:84:8f:be:ab:a2:4c:2e:30:ec:82:3a: 66:87:ee:71:b8:1b:d8:6e:b3:49:91:17:07:f1:08:1b:72:1b: be:30:80:e9:b5:c2:38:a8:9b:ac:61:bf:0a:3b:f7:18:0e:43: f1:cf:59:da:43:31:29:77:2f:f4:83:07:61:dd:29:14:49:b5: cc:ae:ea:a4:19:37:d1:94:87:f4:be:4d:13:34:8d:1b:c9:dd: 9a:15:7a:a5:67:30:e3:51:d7:7a:10:3a:f4:79:9b:81:6d:aa: 0d:63:36:68:43:52:e2:7e:2b:69:ce:40:2b:a5:3e:95:01:2f: 59:d7:f2:83:b4:4f:30:cb:06:4d:1c:a6:89:42:95:46:7c:31: 1d:de:23:1d:6f:12:8c:63:91:62:67:9b:b0:9f:b1:3d:ac:cd: c7:19:1d:2a:e2:01:c5:38:8b:fa:db:a1:f7:ec:d8:4a:d3:74: 68:02:77:94:e7:d2:5c:53:b7:9e:d0:27:55:12:7f:3b:c5:92: 9c:ab:d0:5f:81:bc:fd:f3:fc:b3:d4:5f:2b:33:8f:aa:e1:ca: 16:6f:38:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wj9IKI1+ZjcKo3dix6zOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhOGIyY2QxMWY4NTk4Nzg5ODU0NzQ1MGM5MjE3ODExZmNk ZWEyOGIwHhcNMjUxMjIwMjAwMTIzWhcNMjUxMjIxMjAwMTIzWjAzMTEwLwYDVQQD EyhlMWNlYTFmOTJlNTBjZmQwNjQ2M2M4MGU3OTUyMzczZmEyNzIwNTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10+QXlHQ/SrmnU2J0pkGR/YrE8Qn kSk+n+JTwkxgY6c9n6LZ7pMsmK4dwxQ95kIreiTpXXMurdPT19RcdrOsjZUWkHkl 7ECdZ7AFqKKUwroJ3AB+jocXD3sNHR6wbgyaUAVFfgVPd03aFCn2o2+1xVeQwL7a cKecXLG1ROhZFc4+zDBiDtOzSC5JR7XWr2ISKUyF9QbeZZYPfi26a8B3jR6dSl5c VUrwVrGipPMROTt/IR9hnE2esMkXiahxx5ZqenDUpLcDJT3ywCKAeypOdh5/jfOb OxIguBQrhLij2OAKDgtMJOgU1UIycm2fsyAQy3QhTAQsVwMkQXVads+OUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHOofkuUM/QZGPIDnlSNz+icgUlMB8GA1UdIwQY MBaAFOqLLNEfhZh4mFR0UMkheBH83qKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8xZmY3ZWEtYmMxMy00YjU0LTg5OGQt MWQxY2QyMTUyNzVkLzEvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8xZmY3ZWEtYmMxMy00YjU0LTg5OGQtMWQxY2QyMTUyNzVk LzEvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkU/JhhkR PkKyvJz8UZRUP7GyMww/XIg0qRx/90+ZYvKEJkE8gcNs7+nRv4SPvquiTC4w7II6 Zofucbgb2G6zSZEXB/EIG3IbvjCA6bXCOKibrGG/Cjv3GA5D8c9Z2kMxKXcv9IMH Yd0pFEm1zK7qpBk30ZSH9L5NEzSNG8ndmhV6pWcw41HXehA69HmbgW2qDWM2aENS 4n4rac5AK6U+lQEvWdfyg7RPMMsGTRymiUKVRnwxHd4jHW8SjGORYmebsJ+xPazN xxkdKuIBxTiL+tuh9+zYStN0aAJ3lOfSXFO3ntAnVRJ/O8WSnKvQX4G8/fP8s9Rf KzOPquHKFm84Rw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:27:06 2025 by rpki-client