This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft File: o6znPa9SECzbhLf1aBKWlXoMmng.mft (raw, json) Hash identifier: CSKlLPsJFBuDC2DeYwFFLJm8Q1WFZhKtYXJULnT/5q8= Subject key identifier: 78:8E:F8:58:42:73:58:DE:09:05:37:D8:7B:87:41:94:6A:55:7A:3D Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78 Certificate issuer: /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78 Certificate serial: 019B51BC9E61CCD11C8BBD5DB704D97BFA96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft Manifest number: 0990 Signing time: Wed 24 Dec 2025 19:01:14 +0000 Manifest this update: Wed 24 Dec 2025 19:01:14 +0000 Manifest next update: Thu 25 Dec 2025 19:01:14 +0000 Files and hashes: 1: PLwRwWOtSjw-0Pg41XEpQjuSA-U.roa (hash: lGtM/oEk7N2nkUdCvZFwDApY3dPL/dm/f6h+7RuL+gU=) 2: o6znPa9SECzbhLf1aBKWlXoMmng.crl (hash: RnBuG1Us9/0DpvXwyiAZQcr2d7KixLZJLS6e2FSndic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:9e:61:cc:d1:1c:8b:bd:5d:b7:04:d9:7b:fa:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78 Validity Not Before: Dec 24 19:01:14 2025 GMT Not After : Dec 25 19:01:14 2025 GMT Subject: CN=788ef858427358de090537d87b8741946a557a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:11:06:54:28:ed:c6:7d:75:83:06:34:1e: 94:d4:61:a0:a4:ca:97:4e:63:6f:80:d5:01:91:a2: 90:82:a6:53:7b:71:fc:eb:ce:65:07:21:de:a4:dd: 5c:2e:43:6e:2b:1f:fd:da:40:06:d6:1c:d1:4c:4b: ed:e2:13:e8:39:7a:76:cc:af:7f:27:c8:3f:10:70: a6:67:89:cc:bf:aa:29:ae:77:24:93:eb:0e:0e:95: c8:56:bb:f2:19:d1:b2:ab:8d:4a:bb:e8:49:e4:6b: c6:e2:1a:b2:fa:f8:99:96:67:bf:b2:0a:fb:ee:b6: ab:16:f2:a7:68:40:4b:e3:c8:9e:c9:01:15:b0:4b: 99:6b:58:4a:04:8b:74:53:7f:ed:67:b8:b8:d0:27: 2e:45:1c:99:2a:11:45:7c:a8:22:77:9e:a5:1b:54: 90:8a:98:7a:23:fc:f8:94:29:db:c5:3f:b1:6b:2f: 6b:58:5e:25:59:c5:b7:6f:70:71:1a:ec:e1:0a:9d: c1:be:5a:2e:b2:92:a4:12:77:6c:8f:06:9b:d8:46: ff:08:94:25:41:d2:fc:ed:20:69:10:d2:ff:e4:4f: f3:29:24:14:1f:dd:ab:4f:16:f1:39:44:f7:2f:a8: 27:92:2b:07:5d:89:29:ff:18:cc:85:13:bb:c6:f2: d7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8E:F8:58:42:73:58:DE:09:05:37:D8:7B:87:41:94:6A:55:7A:3D X509v3 Authority Key Identifier: keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d7:b5:94:c9:2b:b0:ef:93:52:b3:e5:94:9b:8c:d5:c0:b7: 59:ce:3d:5a:14:57:8c:13:b8:e2:24:c5:b1:bf:a4:44:b1:46: 69:19:e7:8d:42:e9:19:75:e3:ea:fb:bc:7f:ce:7a:cc:f9:90: cd:11:10:dd:09:9a:1d:3b:b4:0a:6a:ed:8b:dc:6e:01:26:74: b5:e8:ef:0e:d3:46:ab:41:5d:8d:9f:e1:c0:58:1c:34:5a:54: 05:01:aa:c4:f7:28:fd:07:f8:2c:a8:77:7b:bb:99:78:7b:50: b2:00:05:62:1e:f4:e3:16:08:d4:7d:5f:c5:b5:02:d7:fb:a6: 8d:dc:ce:50:25:8a:29:f0:4a:a0:67:93:89:a7:67:61:a2:76: ca:07:a1:8f:45:24:49:0b:b5:9c:30:5a:51:18:77:b8:23:0b: f3:fb:c7:a4:20:ce:5d:1e:01:10:35:d1:97:28:34:fe:15:1a: e0:0c:8b:ed:d8:cb:7a:e2:5e:58:2b:41:e1:af:fd:0e:92:dc: cf:2c:32:63:97:db:25:6f:3c:42:dc:43:4e:52:1d:ed:ad:15: 62:55:bd:36:a2:04:42:89:cb:33:3a:30:53:24:b3:65:f6:17: 1d:70:10:70:7f:3a:f4:ce:dd:23:bb:20:10:61:53:69:05:46: 6d:99:4b:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvJ5hzNEci71dtwTZe/qWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYWNlNzNkYWY1MjEwMmNkYjg0YjdmNTY4MTI5Njk1N2Ew YzlhNzgwHhcNMjUxMjI0MTkwMTE0WhcNMjUxMjI1MTkwMTE0WjAzMTEwLwYDVQQD Eyg3ODhlZjg1ODQyNzM1OGRlMDkwNTM3ZDg3Yjg3NDE5NDZhNTU3YTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIIRBlQo7cZ9dYMGNB6U1GGgpMqX TmNvgNUBkaKQgqZTe3H8685lByHepN1cLkNuKx/92kAG1hzRTEvt4hPoOXp2zK9/ J8g/EHCmZ4nMv6oprnckk+sODpXIVrvyGdGyq41Ku+hJ5GvG4hqy+viZlme/sgr7 7rarFvKnaEBL48ieyQEVsEuZa1hKBIt0U3/tZ7i40CcuRRyZKhFFfKgid56lG1SQ iph6I/z4lCnbxT+xay9rWF4lWcW3b3BxGuzhCp3BvlouspKkEndsjwab2Eb/CJQl QdL87SBpENL/5E/zKSQUH92rTxbxOUT3L6gnkisHXYkp/xjMhRO7xvLXzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiO+FhCc1jeCQU32HuHQZRqVXo9MB8GA1UdIwQY MBaAFKOs5z2vUhAs24S39WgSlpV6DJp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzZ6blBhOVNFQ3piaExmMWFCS1dsWG9NbW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83N2Y1YjktNWI4Yy00NTQ2LTlhMGQt YjhjNWY4NGQ5Njg3LzEvbzZ6blBhOVNFQ3piaExmMWFCS1dsWG9NbW5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83N2Y1YjktNWI4Yy00NTQ2LTlhMGQtYjhjNWY4NGQ5Njg3 LzEvbzZ6blBhOVNFQ3piaExmMWFCS1dsWG9NbW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALte1lMkr sO+TUrPllJuM1cC3Wc49WhRXjBO44iTFsb+kRLFGaRnnjULpGXXj6vu8f856zPmQ zREQ3QmaHTu0Cmrti9xuASZ0tejvDtNGq0FdjZ/hwFgcNFpUBQGqxPco/Qf4LKh3 e7uZeHtQsgAFYh704xYI1H1fxbUC1/umjdzOUCWKKfBKoGeTiadnYaJ2ygehj0Uk SQu1nDBaURh3uCML8/vHpCDOXR4BEDXRlyg0/hUa4AyL7djLeuJeWCtB4a/9DpLc zywyY5fbJW88QtxDTlId7a0VYlW9NqIEQonLMzowUySzZfYXHXAQcH869M7dI7sg EGFTaQVGbZlLaw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:24:49 2025 by rpki-client