This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft File: o6znPa9SECzbhLf1aBKWlXoMmng.mft (raw, json) Hash identifier: lu1L/eoCqv0v/h1tYivx+BUIvc3EsM96wnMv344epMY= Subject key identifier: 6D:1C:71:1F:12:9D:BA:28:F2:CA:C4:A1:97:CB:6A:B0:25:AF:6C:96 Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78 Certificate issuer: /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78 Certificate serial: 019B4DDFCB7EDE7E46485279606872AAB177 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft Manifest number: 098E Signing time: Wed 24 Dec 2025 01:01:10 +0000 Manifest this update: Wed 24 Dec 2025 01:01:10 +0000 Manifest next update: Thu 25 Dec 2025 01:01:10 +0000 Files and hashes: 1: PLwRwWOtSjw-0Pg41XEpQjuSA-U.roa (hash: lGtM/oEk7N2nkUdCvZFwDApY3dPL/dm/f6h+7RuL+gU=) 2: o6znPa9SECzbhLf1aBKWlXoMmng.crl (hash: eoeRKAP+n/4b96OnM6g/Lkv1mZPXWxLvmPxpawLg5lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:cb:7e:de:7e:46:48:52:79:60:68:72:aa:b1:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78 Validity Not Before: Dec 24 01:01:10 2025 GMT Not After : Dec 25 01:01:10 2025 GMT Subject: CN=6d1c711f129dba28f2cac4a197cb6ab025af6c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5d:56:cc:1e:dd:55:f4:f2:da:c2:71:21:bb: 51:1c:1b:d5:41:02:fd:ce:de:72:82:e1:89:3d:1d: 05:9c:90:cb:17:f3:6e:68:05:08:2c:2e:59:78:2f: e2:6a:73:07:7f:71:77:50:29:49:ef:44:c8:c5:44: 70:f2:61:b6:9d:b8:92:96:9f:11:ba:a2:d1:fb:52: b9:3b:d5:df:6d:4a:ea:7e:3d:1f:93:b6:c1:01:58: 0e:5d:03:46:c3:40:10:52:07:39:29:76:a3:9a:85: 67:1a:77:f3:82:1b:3a:1a:c7:17:01:53:50:c6:e9: d1:d8:c9:7a:63:8c:dd:9f:0a:d3:70:14:e5:a3:7b: 83:31:58:ac:26:e1:05:48:f9:ad:ae:65:9c:0a:f2: ed:2d:9c:a0:37:ca:6a:3a:f7:76:0c:86:2f:9e:01: 04:1b:84:26:23:f0:72:eb:af:c5:fc:14:06:9c:33: e6:c6:e3:32:b5:60:14:68:e0:e1:74:fb:bb:d7:3f: a9:9c:80:14:26:62:ce:57:d3:2e:2a:3b:29:e0:43: 7b:0f:1a:87:9e:e9:7c:4f:34:19:99:75:71:44:bc: a8:99:72:47:10:b8:4d:8b:4e:1f:cc:ac:ae:cd:eb: 48:dc:e7:8f:00:c6:f4:8f:11:3b:0b:5e:01:aa:83: 69:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1C:71:1F:12:9D:BA:28:F2:CA:C4:A1:97:CB:6A:B0:25:AF:6C:96 X509v3 Authority Key Identifier: keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:8a:c7:0e:5f:2e:a0:e4:e6:dc:41:39:17:c2:79:b5:fd:a9: 17:b3:e6:a4:22:87:b2:db:95:76:0b:c3:b2:9b:b9:26:0a:8b: 95:70:a9:b1:a5:e3:93:d8:b1:a7:0a:a7:fa:7f:df:58:03:d1: 3d:30:74:8c:88:2c:d5:53:e8:70:60:c2:57:07:57:49:46:79: 4d:67:e4:ae:3b:bd:f0:71:7c:66:79:1d:9e:30:0e:77:b2:83: f3:26:1e:36:06:ca:80:7c:3f:e5:6a:a1:90:99:64:ac:4e:5a: e4:f7:53:10:59:8c:66:06:09:68:cb:f4:e6:2d:aa:e8:a1:97: 56:e1:2d:e5:2a:80:96:ba:32:4b:07:53:96:14:9d:62:45:9d: 43:8f:36:de:b2:99:5c:bb:df:90:b0:01:ea:c4:f3:3e:9f:eb: 8c:79:d5:7e:02:22:e9:6f:21:66:59:c5:6c:f8:2b:18:7f:58: c3:0e:42:91:85:6e:89:16:59:eb:23:6d:ad:e1:31:68:f5:7b: 6d:6b:ac:33:92:3e:45:fb:f1:67:fb:25:01:ba:f3:6a:23:4f: 41:35:97:ed:ac:5a:2f:fc:b4:cb:04:cf:7c:e8:87:be:90:18: 64:5d:39:38:d0:c4:7f:06:ed:0f:11:56:29:84:51:61:d3:6e: ab:c6:f2:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN38t+3n5GSFJ5YGhyqrF3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYWNlNzNkYWY1MjEwMmNkYjg0YjdmNTY4MTI5Njk1N2Ew YzlhNzgwHhcNMjUxMjI0MDEwMTEwWhcNMjUxMjI1MDEwMTEwWjAzMTEwLwYDVQQD Eyg2ZDFjNzExZjEyOWRiYTI4ZjJjYWM0YTE5N2NiNmFiMDI1YWY2Yzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw11WzB7dVfTy2sJxIbtRHBvVQQL9 zt5yguGJPR0FnJDLF/NuaAUILC5ZeC/ianMHf3F3UClJ70TIxURw8mG2nbiSlp8R uqLR+1K5O9XfbUrqfj0fk7bBAVgOXQNGw0AQUgc5KXajmoVnGnfzghs6GscXAVNQ xunR2Ml6Y4zdnwrTcBTlo3uDMVisJuEFSPmtrmWcCvLtLZygN8pqOvd2DIYvngEE G4QmI/By66/F/BQGnDPmxuMytWAUaODhdPu71z+pnIAUJmLOV9MuKjsp4EN7DxqH nul8TzQZmXVxRLyomXJHELhNi04fzKyuzetI3OePAMb0jxE7C14BqoNpHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0ccR8Snboo8srEoZfLarAlr2yWMB8GA1UdIwQY MBaAFKOs5z2vUhAs24S39WgSlpV6DJp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzZ6blBhOVNFQ3piaExmMWFCS1dsWG9NbW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83N2Y1YjktNWI4Yy00NTQ2LTlhMGQt YjhjNWY4NGQ5Njg3LzEvbzZ6blBhOVNFQ3piaExmMWFCS1dsWG9NbW5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83N2Y1YjktNWI4Yy00NTQ2LTlhMGQtYjhjNWY4NGQ5Njg3 LzEvbzZ6blBhOVNFQ3piaExmMWFCS1dsWG9NbW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4rHDl8u oOTm3EE5F8J5tf2pF7PmpCKHstuVdgvDspu5JgqLlXCpsaXjk9ixpwqn+n/fWAPR PTB0jIgs1VPocGDCVwdXSUZ5TWfkrju98HF8ZnkdnjAOd7KD8yYeNgbKgHw/5Wqh kJlkrE5a5PdTEFmMZgYJaMv05i2q6KGXVuEt5SqAlroySwdTlhSdYkWdQ4823rKZ XLvfkLAB6sTzPp/rjHnVfgIi6W8hZlnFbPgrGH9Yww5CkYVuiRZZ6yNtreExaPV7 bWusM5I+RfvxZ/slAbrzaiNPQTWX7axaL/y0ywTPfOiHvpAYZF05ONDEfwbtDxFW KYRRYdNuq8byjQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:31:03 2025 by rpki-client