This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json) Hash identifier: VwfXJPxeETWTKtKgC+kvh8ZUVvVPi14plgulC/M+POI= Subject key identifier: EA:68:55:EC:1A:44:C2:3E:99:A1:93:ED:18:4D:74:98:E8:E3:BF:18 Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52 Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352 Certificate serial: 019B53AABE9E3E057070D4BB659F101A53E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft Manifest number: 1798 Signing time: Thu 25 Dec 2025 04:00:57 +0000 Manifest this update: Thu 25 Dec 2025 04:00:57 +0000 Manifest next update: Fri 26 Dec 2025 04:00:57 +0000 Files and hashes: 1: 3jF5JkqZzpwDg2CUyKrMHDx4QqM.roa (hash: Ct22y3Kn4dpY61h6fsUyGmJkOxPrtpccRirSLUmpVtY=) 2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: xPXMZc3pxkMiTYEWUKwzDGrFLqKPFG59eLWQLkH8xkw=) 3: caUBuUxU945I82DD831l9nsD-jo.roa (hash: fcv+cYVXy7t+Ay1RhyoB8XEGTuHAujkCAZt9GTjK/IA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:be:9e:3e:05:70:70:d4:bb:65:9f:10:1a:53:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352 Validity Not Before: Dec 25 04:00:57 2025 GMT Not After : Dec 26 04:00:57 2025 GMT Subject: CN=ea6855ec1a44c23e99a193ed184d7498e8e3bf18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ac:2d:3a:39:ff:90:93:23:3c:dc:8e:1f:af: 5d:d4:1e:23:4c:c1:52:5b:14:2e:d5:55:13:41:bf: 97:2f:b5:52:a8:fa:7b:ff:ff:89:bd:3e:97:2d:3b: 57:f9:a1:9a:56:80:77:b6:f8:21:4a:fb:94:6f:3c: 25:43:ed:21:94:09:5a:82:fa:13:43:e1:49:84:d1: 6d:d1:7e:ae:61:13:57:80:41:ee:4b:5b:82:a4:bb: bc:3b:ce:12:bd:aa:43:33:8d:4d:34:2f:bf:9a:a6: 37:73:49:6c:ec:0c:6b:39:15:40:da:a6:5f:06:e7: 1f:06:6c:9e:da:9f:68:1a:46:c8:cd:28:fa:fd:ca: 79:6f:82:ab:a2:f7:20:83:08:f5:29:aa:7d:f5:7f: 89:38:00:9d:1d:1d:49:60:d0:c7:bc:20:a1:d9:71: 08:cc:e8:9c:f3:56:2a:99:74:85:4f:59:04:70:4e: 16:95:c6:ca:ac:31:ba:46:c9:05:68:a3:5b:ba:d2: 21:1f:cc:a9:50:a1:af:f1:48:93:b5:57:78:84:22: 80:8c:24:22:7e:d4:11:9b:3e:83:5d:68:af:e7:f1: 8c:11:66:c0:94:18:b9:e4:d1:5c:7c:98:98:49:c2: 62:a6:ce:64:c2:8f:16:18:79:fe:b4:1c:6a:64:2f: 6c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:68:55:EC:1A:44:C2:3E:99:A1:93:ED:18:4D:74:98:E8:E3:BF:18 X509v3 Authority Key Identifier: keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:83:ec:87:a4:90:2c:63:75:2f:5b:5c:88:cb:09:84:73:f1: 98:b3:b5:26:75:9a:1e:ec:2f:b5:c1:c7:ff:96:72:27:85:23: c6:1e:cd:a1:cc:97:bc:9e:57:0b:f8:b9:b0:e1:d5:73:39:8e: 5d:c6:96:a9:50:64:9b:e7:a2:a5:be:d6:df:93:fa:98:b0:d6: a3:53:ef:bb:77:40:35:61:3d:56:9b:a5:a0:40:af:3b:1a:1f: a3:0e:10:50:88:8f:65:9e:5b:93:5f:93:ab:45:71:41:21:de: 60:d1:07:a2:6b:dd:dc:1b:4f:2b:d0:c3:2e:11:dc:26:82:4a: 17:93:db:f1:b2:b6:1b:21:0f:72:ce:81:65:92:fe:f5:5e:88: 2f:94:19:e4:56:d2:06:9c:fa:8c:a2:56:48:ca:d5:82:d1:5c: 42:95:21:2d:6a:78:7f:ad:ca:26:86:9f:72:7d:df:79:11:81: cf:f0:49:5e:c4:0a:35:41:30:58:6d:29:e6:25:71:af:a7:4d: d8:79:1f:b1:5b:57:bd:ea:12:ab:0e:64:d5:62:ef:87:08:4a: dc:61:5b:96:90:7d:73:b4:be:cf:b6:2a:57:81:3d:4b:96:84: 1d:1c:45:36:3e:28:88:58:68:8a:de:33:b8:3f:fe:e2:f1:db: 94:0a:0e:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqr6ePgVwcNS7ZZ8QGlPlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYTE3ODJiNmFmYmE3YzZiY2YwNzBiOTNmZWQ0Y2M4NGFm NDEzNTIwHhcNMjUxMjI1MDQwMDU3WhcNMjUxMjI2MDQwMDU3WjAzMTEwLwYDVQQD EyhlYTY4NTVlYzFhNDRjMjNlOTlhMTkzZWQxODRkNzQ5OGU4ZTNiZjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKwtOjn/kJMjPNyOH69d1B4jTMFS WxQu1VUTQb+XL7VSqPp7//+JvT6XLTtX+aGaVoB3tvghSvuUbzwlQ+0hlAlagvoT Q+FJhNFt0X6uYRNXgEHuS1uCpLu8O84SvapDM41NNC+/mqY3c0ls7AxrORVA2qZf BucfBmye2p9oGkbIzSj6/cp5b4Krovcggwj1Kap99X+JOACdHR1JYNDHvCCh2XEI zOic81YqmXSFT1kEcE4WlcbKrDG6RskFaKNbutIhH8ypUKGv8UiTtVd4hCKAjCQi ftQRmz6DXWiv5/GMEWbAlBi55NFcfJiYScJips5kwo8WGHn+tBxqZC9suQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpoVewaRMI+maGT7RhNdJjo478YMB8GA1UdIwQY MBaAFDuheCtq+6fGvPBwuT/tTMhK9BNSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZDdhYzMtYjhhZC00MmIwLWFkMmEt YWU5NjdkNzM5ZGQzLzEvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hZDdhYzMtYjhhZC00MmIwLWFkMmEtYWU5NjdkNzM5ZGQz LzEvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4Psh6SQ LGN1L1tciMsJhHPxmLO1JnWaHuwvtcHH/5ZyJ4Ujxh7NocyXvJ5XC/i5sOHVczmO XcaWqVBkm+eipb7W35P6mLDWo1Pvu3dANWE9VpuloECvOxofow4QUIiPZZ5bk1+T q0VxQSHeYNEHomvd3BtPK9DDLhHcJoJKF5Pb8bK2GyEPcs6BZZL+9V6IL5QZ5FbS Bpz6jKJWSMrVgtFcQpUhLWp4f63KJoafcn3feRGBz/BJXsQKNUEwWG0p5iVxr6dN 2HkfsVtXveoSqw5k1WLvhwhK3GFblpB9c7S+z7YqV4E9S5aEHRxFNj4oiFhoit4z uD/+4vHblAoOVQ== -----END CERTIFICATE-----Generated at Thu Dec 25 09:20:57 2025 by rpki-client