This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft File: roOCT9wp6-SsKGygGETfhtTXXsA.mft (raw, json) Hash identifier: l+X4LvgDrxfICQt5HCUfO/BrCoVJBYHDIrX8Bbqde4I= Subject key identifier: 6D:67:9A:DE:75:95:0B:73:C9:B4:5F:E6:8E:77:52:AC:E9:50:D4:AF Authority key identifier: AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0 Certificate issuer: /CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0 Certificate serial: 019B65436355093C10A40D53E0A0CC5839F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft Manifest number: 03C2 Signing time: Sun 28 Dec 2025 14:01:13 +0000 Manifest this update: Sun 28 Dec 2025 14:01:13 +0000 Manifest next update: Mon 29 Dec 2025 14:01:13 +0000 Files and hashes: 1: jHCjx-TBB5oXKBhOsM_EWQyL88A.roa (hash: rucNPqCxXwLKo5x3absYJUk2L/e2sCkpCPYtoCEmNPo=) 2: roOCT9wp6-SsKGygGETfhtTXXsA.crl (hash: lu/pcRFBOTCAngWXdZoJP2acCcpZSnKY593ZJsxEjbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 14:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:43:63:55:09:3c:10:a4:0d:53:e0:a0:cc:58:39:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0 Validity Not Before: Dec 28 14:01:13 2025 GMT Not After : Dec 29 14:01:13 2025 GMT Subject: CN=6d679ade75950b73c9b45fe68e7752ace950d4af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0d:79:fb:38:e5:cb:37:1e:82:53:4e:9f:08: ef:2c:0e:be:a4:cd:05:01:4a:52:8c:47:2a:96:f5: cc:7b:00:48:28:3b:95:22:6e:a7:84:9e:0c:85:21: aa:67:13:82:40:cf:62:1f:70:ef:81:08:78:d3:a4: 9c:56:52:3c:53:39:94:d9:33:12:17:74:f6:71:f1: 28:a3:82:d3:71:2d:00:35:db:f4:8c:2c:fe:4e:eb: c2:e3:be:b9:f4:f2:ef:68:ac:96:14:af:19:f1:f5: 0b:18:74:13:b3:12:0b:6f:32:ad:3f:b9:b1:b6:c5: 4d:9b:78:50:87:32:9e:08:e0:e6:03:92:3a:66:92: 9d:95:d9:75:a8:39:90:47:5d:38:78:f8:8e:83:e6: 94:86:66:f3:f8:27:6d:77:8d:28:b5:19:e0:a4:19: 10:a7:23:57:f1:66:ab:02:75:11:81:a0:8b:28:b7: 3c:76:26:0a:a8:eb:70:04:2f:5b:6e:0b:09:07:96: a2:95:77:ec:cb:0d:90:69:4b:2c:63:05:ec:67:7e: 75:dd:27:41:90:f0:2a:04:86:d6:bb:c1:bf:93:14: 1d:25:8a:d1:e2:69:de:b0:f5:c0:4d:40:cc:4f:53: 6e:e9:31:43:b1:03:24:32:8c:88:bb:e4:2c:c0:a6: ab:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:67:9A:DE:75:95:0B:73:C9:B4:5F:E6:8E:77:52:AC:E9:50:D4:AF X509v3 Authority Key Identifier: keyid:AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f0:45:61:bf:bd:18:a0:62:80:49:3e:2e:a6:1e:be:40:37: da:86:82:ea:78:13:db:e7:50:c2:b5:d4:ba:61:99:f0:c9:17: 9d:87:7e:2a:91:62:71:0f:f7:50:cb:25:47:60:4e:c9:6a:dc: 36:19:6a:b8:ef:43:f7:9e:f2:fa:86:f5:85:2d:72:b4:5e:03: 88:d1:6a:f3:ce:6c:2a:9a:03:45:b1:4f:04:af:b8:84:63:51: b7:33:4e:eb:b4:b1:41:7d:3a:e9:b2:8d:57:11:83:a9:d5:db: f3:70:58:83:f1:cc:3b:34:f7:7a:9d:82:0b:55:28:81:e7:9e: 2e:d4:69:11:1f:d1:bd:c6:4a:92:94:7c:a6:11:6b:9c:9b:9a: 7a:34:79:8f:ab:6d:66:2d:ba:fd:02:83:8b:d6:d4:c9:b6:f8: e2:77:aa:34:80:1f:04:a6:3d:36:6a:48:a9:fc:17:49:7e:d4: ff:f9:8d:79:dd:f1:e3:19:98:66:a9:2f:59:01:05:b8:14:5f: 5f:ae:af:cb:d0:43:f6:93:a1:cd:b7:df:43:08:d7:5d:df:ba: e6:3e:45:f1:03:92:39:f2:07:72:95:90:a1:6a:e7:e0:45:da: 50:0b:4c:79:c6:42:e9:2b:c4:18:24:ec:40:8b:e5:3b:aa:60: 08:a2:7a:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlQ2NVCTwQpA1T4KDMWDn1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlODM4MjRmZGMyOWViZTRhYzI4NmNhMDE4NDRkZjg2ZDRk NzVlYzAwHhcNMjUxMjI4MTQwMTEzWhcNMjUxMjI5MTQwMTEzWjAzMTEwLwYDVQQD Eyg2ZDY3OWFkZTc1OTUwYjczYzliNDVmZTY4ZTc3NTJhY2U5NTBkNGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA15+zjlyzceglNOnwjvLA6+pM0F AUpSjEcqlvXMewBIKDuVIm6nhJ4MhSGqZxOCQM9iH3DvgQh406ScVlI8UzmU2TMS F3T2cfEoo4LTcS0ANdv0jCz+TuvC47659PLvaKyWFK8Z8fULGHQTsxILbzKtP7mx tsVNm3hQhzKeCODmA5I6ZpKdldl1qDmQR104ePiOg+aUhmbz+Cdtd40otRngpBkQ pyNX8WarAnURgaCLKLc8diYKqOtwBC9bbgsJB5ailXfsyw2QaUssYwXsZ3513SdB kPAqBIbWu8G/kxQdJYrR4mnesPXATUDMT1Nu6TFDsQMkMoyIu+QswKarVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1nmt51lQtzybRf5o53UqzpUNSvMB8GA1UdIwQY MBaAFK6Dgk/cKevkrChsoBhE34bU117AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm9PQ1Q5d3A2LVNzS0d5Z0dFVGZodFRYWHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC83MTc0ZWUtMzA3Ni00OTZjLWIyNTkt OTcwMDU0NmI1NzExLzEvcm9PQ1Q5d3A2LVNzS0d5Z0dFVGZodFRYWHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC83MTc0ZWUtMzA3Ni00OTZjLWIyNTktOTcwMDU0NmI1NzEx LzEvcm9PQ1Q5d3A2LVNzS0d5Z0dFVGZodFRYWHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPBFYb+9 GKBigEk+LqYevkA32oaC6ngT2+dQwrXUumGZ8MkXnYd+KpFicQ/3UMslR2BOyWrc NhlquO9D957y+ob1hS1ytF4DiNFq885sKpoDRbFPBK+4hGNRtzNO67SxQX066bKN VxGDqdXb83BYg/HMOzT3ep2CC1UogeeeLtRpER/RvcZKkpR8phFrnJuaejR5j6tt Zi26/QKDi9bUybb44neqNIAfBKY9NmpIqfwXSX7U//mNed3x4xmYZqkvWQEFuBRf X66vy9BD9pOhzbffQwjXXd+65j5F8QOSOfIHcpWQoWrn4EXaUAtMecZC6SvEGCTs QIvlO6pgCKJ6zQ== -----END CERTIFICATE-----Generated at Sun Dec 28 23:39:00 2025 by rpki-client