This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json) Hash identifier: aBqG+yRU1CvRO4bRaU8SWMAJpkGt6xFJh8ivZz5sMCE= Subject key identifier: 24:EF:77:75:59:60:DC:05:03:C5:58:6D:6A:45:BB:37:00:F4:A3:3E Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab Certificate serial: 019B3946AA7477CA4F7F64B2C51C1D6E02A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft Manifest number: 0B8D Signing time: Sat 20 Dec 2025 01:01:30 +0000 Manifest this update: Sat 20 Dec 2025 01:01:30 +0000 Manifest next update: Sun 21 Dec 2025 01:01:30 +0000 Files and hashes: 1: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: XMoWkop+mE+VHzE3Yg9gerU2y8LOga2ZctRb5D3lqqE=) 2: oWc3B6RGO7S9pWcq4HKnbJyfKDk.roa (hash: dicu1vprnt1mxmGFnS2f3yDtWezJRT6KC1umgv5QkRo=) 3: yzmCfwKm_JPG030YXapakt0raKE.roa (hash: FgUsVc5q6Pi83IVxku3Q5cKwPTsj2kNtxaix/96GJI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:aa:74:77:ca:4f:7f:64:b2:c5:1c:1d:6e:02:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab Validity Not Before: Dec 20 01:01:30 2025 GMT Not After : Dec 21 01:01:30 2025 GMT Subject: CN=24ef77755960dc0503c5586d6a45bb3700f4a33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:48:60:93:68:71:fa:58:c8:09:57:92:90:37: 89:02:31:ea:39:25:91:92:19:92:32:06:74:0d:03: 65:7e:7e:65:80:ca:ca:a4:08:66:f8:a2:f3:9e:1f: a2:a2:75:2e:d4:d5:f7:11:d6:ca:1a:6b:57:14:cf: 7d:15:f1:51:8b:03:e1:b0:1e:5a:4f:c4:15:db:54: bb:98:23:6c:ba:3a:64:5e:c7:38:ca:03:29:b7:02: 51:d8:53:e9:98:89:04:70:98:8d:fb:96:09:fd:4d: 19:01:eb:92:dc:43:47:c1:14:ef:11:52:4c:40:07: 52:d9:40:77:f8:f2:77:92:e0:14:3a:ca:5c:5e:c6: 32:38:10:26:a0:93:16:4e:76:63:74:9a:82:d0:cb: c7:2f:5b:30:bb:19:64:02:c0:ae:01:c6:0f:e7:43: 1b:5c:6f:9b:05:84:fc:ed:2a:61:23:db:11:06:61: ea:6a:4d:d7:87:31:b2:f5:57:71:80:76:f1:4b:81: 5b:79:85:7f:b9:cc:b7:4e:ec:15:bc:aa:a7:f1:54: 5f:bd:ac:c4:3b:7f:68:83:dc:ba:52:02:3b:8d:a8: 49:38:ac:72:1b:a5:67:04:f1:26:3f:0b:a8:2a:a0: e9:f2:66:c5:5d:1a:65:1d:1f:6f:a1:54:a5:a1:ec: 6c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EF:77:75:59:60:DC:05:03:C5:58:6D:6A:45:BB:37:00:F4:A3:3E X509v3 Authority Key Identifier: keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ad:f2:ce:bc:50:b3:10:25:26:40:46:ab:01:82:df:43:3f: 47:d6:63:91:38:ef:a1:15:4f:2c:dc:81:10:ce:d7:4b:d9:a2: 45:10:5b:05:5c:96:c5:b4:a6:9f:6f:e9:cb:cf:27:9e:0d:09: 99:d0:1c:49:52:03:3a:c0:7d:ed:a0:ff:1d:a3:cb:74:fd:69: ea:1b:06:fa:d2:a7:d8:c8:53:16:0d:be:d1:e7:54:3a:1e:cc: 42:ad:0a:24:ea:90:45:41:56:9f:e2:5f:1d:6c:04:f9:90:60: 43:64:e1:f4:f0:fa:f4:c3:a7:ce:eb:61:0d:6a:29:50:a2:99: 17:c4:e3:40:c3:41:48:49:2e:11:91:8d:21:15:87:86:5b:cb: 46:af:af:54:9d:79:ce:92:41:b0:6b:e7:3d:76:9f:5c:19:da: 70:24:c1:dc:60:73:1f:bc:ba:5b:fe:de:d1:3a:f0:34:ec:40: 6a:29:b6:6a:b4:aa:c3:e5:34:f5:2a:fa:b2:50:55:85:a5:d5: 36:61:79:6a:21:d6:34:df:40:dd:f0:81:26:e0:bc:af:40:3d: 85:63:1b:fb:b6:a6:4c:65:4e:df:fd:d5:74:b4:ac:c4:a7:58: 70:23:b4:2c:75:27:9e:58:ae:82:f4:5e:9a:75:ff:da:80:b3: 57:cd:96:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Rqp0d8pPf2SyxRwdbgKjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYmExZDI0ZTcyYzQzOWVjN2E1Y2JkYzM5MTM1N2RkODlj Yjg2YWIwHhcNMjUxMjIwMDEwMTMwWhcNMjUxMjIxMDEwMTMwWjAzMTEwLwYDVQQD EygyNGVmNzc3NTU5NjBkYzA1MDNjNTU4NmQ2YTQ1YmIzNzAwZjRhMzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0hgk2hx+ljICVeSkDeJAjHqOSWR khmSMgZ0DQNlfn5lgMrKpAhm+KLznh+ionUu1NX3EdbKGmtXFM99FfFRiwPhsB5a T8QV21S7mCNsujpkXsc4ygMptwJR2FPpmIkEcJiN+5YJ/U0ZAeuS3ENHwRTvEVJM QAdS2UB3+PJ3kuAUOspcXsYyOBAmoJMWTnZjdJqC0MvHL1swuxlkAsCuAcYP50Mb XG+bBYT87SphI9sRBmHqak3XhzGy9VdxgHbxS4FbeYV/ucy3TuwVvKqn8VRfvazE O39og9y6UgI7jahJOKxyG6VnBPEmPwuoKqDp8mbFXRplHR9voVSloexsVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTvd3VZYNwFA8VYbWpFuzcA9KM+MB8GA1UdIwQY MBaAFGu6HSTnLEOex6XL3DkTV92Jy4arMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hOTRhNGMtYTU1Mi00NmY2LThhODEt Y2VmOTQ0ODEyNGIwLzEvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9hOTRhNGMtYTU1Mi00NmY2LThhODEtY2VmOTQ0ODEyNGIw LzEvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMa3yzrxQ sxAlJkBGqwGC30M/R9ZjkTjvoRVPLNyBEM7XS9miRRBbBVyWxbSmn2/py88nng0J mdAcSVIDOsB97aD/HaPLdP1p6hsG+tKn2MhTFg2+0edUOh7MQq0KJOqQRUFWn+Jf HWwE+ZBgQ2Th9PD69MOnzuthDWopUKKZF8TjQMNBSEkuEZGNIRWHhlvLRq+vVJ15 zpJBsGvnPXafXBnacCTB3GBzH7y6W/7e0TrwNOxAaim2arSqw+U09Sr6slBVhaXV NmF5aiHWNN9A3fCBJuC8r0A9hWMb+7amTGVO3/3VdLSsxKdYcCO0LHUnnliugvRe mnX/2oCzV82WYA== -----END CERTIFICATE-----Generated at Sat Dec 20 03:29:32 2025 by rpki-client