This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft File: _o6FIymApj8NTfWwSRY-P9AvVLM.mft (raw, json) Hash identifier: Mm8W+iS2Guge9Pbj+6T6zj9ox2QoNhvgkL/9BSi4hnA= Subject key identifier: 28:3F:1D:4F:2E:F9:E6:E4:98:55:40:B2:FF:9D:B4:92:82:7F:44:A4 Authority key identifier: FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3 Certificate issuer: /CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3 Certificate serial: 019B4E4DE8C508994CFC83207BDE25DA5F51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft Manifest number: 0C09 Signing time: Wed 24 Dec 2025 03:01:27 +0000 Manifest this update: Wed 24 Dec 2025 03:01:27 +0000 Manifest next update: Thu 25 Dec 2025 03:01:27 +0000 Files and hashes: 1: 7IkFNxuEd7zYMJ5GFmWYCrb0D3k.roa (hash: EbQqPJKQBhTvoE7/qrp3Wi8FH8cq4X28q+E9y9x/db0=) 2: _o6FIymApj8NTfWwSRY-P9AvVLM.crl (hash: aFrtshXQlg1isEjpU+xbNArWXjUxI6WX/bpe1UY3Bbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:e8:c5:08:99:4c:fc:83:20:7b:de:25:da:5f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3 Validity Not Before: Dec 24 03:01:27 2025 GMT Not After : Dec 25 03:01:27 2025 GMT Subject: CN=283f1d4f2ef9e6e4985540b2ff9db492827f44a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:30:34:be:46:02:f9:e1:8a:bd:7d:55:19:06: 0f:2e:82:f3:f8:6c:8c:08:01:21:6c:c5:74:fc:3c: 3c:ab:0a:97:3a:f2:a9:ed:f2:a1:d3:3c:9c:91:ef: e5:38:9e:9e:3f:26:18:8e:a1:bf:30:82:88:d0:96: f4:9e:54:37:4a:fc:bd:0c:12:b1:27:98:5c:9c:62: da:3e:28:25:0c:fa:ba:db:b2:34:17:62:e7:70:c3: 94:90:fa:58:a2:1d:20:ad:0f:75:91:ef:e5:df:95: d7:4e:40:23:87:75:dd:c4:88:c5:65:d1:27:83:76: 1f:67:53:84:96:44:ae:d6:ae:0b:9f:a0:f8:03:96: 72:bb:d3:44:51:68:3b:04:02:07:63:f3:a2:18:92: 93:26:c7:e7:c8:e4:64:7b:9d:ac:4f:ed:98:46:7f: f9:95:9e:39:36:e5:c0:b4:e0:e8:27:a8:34:e9:a0: f2:4a:3c:8c:70:0a:31:39:50:95:0c:35:ba:d1:d7: 82:f8:3d:4b:0d:60:7d:62:42:95:89:f6:37:67:eb: a3:75:83:b8:83:25:45:9e:7c:e6:74:c8:2d:19:78: 6e:70:16:f4:51:5a:d6:31:0d:6c:0f:47:16:c0:d6: fc:f1:da:3f:12:f4:9d:77:5f:12:6a:ea:d8:cf:da: 28:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3F:1D:4F:2E:F9:E6:E4:98:55:40:B2:FF:9D:B4:92:82:7F:44:A4 X509v3 Authority Key Identifier: keyid:FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:8d:0f:e4:cd:6e:84:cf:53:38:12:be:74:e7:82:72:60:4a: fc:49:b6:56:43:cc:8b:f2:64:17:39:04:8a:6f:09:65:ed:52: 32:52:86:67:d6:66:82:96:86:57:5c:30:78:7e:86:9f:90:ad: bc:fc:ef:f4:54:6a:ee:f2:7f:f5:e8:7d:d2:83:95:76:08:95: 1d:dc:ae:cf:6b:fb:b9:a8:cb:0c:7a:57:e3:43:f7:b7:7f:a9: 59:73:e3:d3:95:c2:a8:85:14:0e:d7:c9:8a:34:99:29:bf:ac: e1:59:cc:91:fc:16:fc:d0:05:36:a5:63:fd:77:06:41:c5:17: 33:8a:b1:04:f9:34:99:4e:36:bc:40:29:fe:55:33:21:03:72: 61:67:71:cc:12:d7:c1:27:cb:cc:ea:7b:d0:68:90:7d:ad:7d: f9:b0:c9:4a:45:00:45:24:e2:bc:53:9e:ee:46:3e:92:1d:ed: c6:a6:de:e0:e1:e7:3f:3a:68:d5:38:fc:aa:0c:74:01:58:72: a8:bb:b1:c5:48:f8:5e:32:c1:31:b8:6f:71:c4:60:c7:9e:74: 00:c4:93:f8:d5:e8:7e:34:cd:e6:c1:47:f6:ee:5c:8b:80:97: bb:81:c1:02:84:f4:50:63:94:da:5e:93:31:5a:ad:f8:12:0b: 2e:91:f9:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTejFCJlM/IMge94l2l9RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlOGU4NTIzMjk4MGE2M2YwZDRkZjViMDQ5MTYzZTNmZDAy ZjU0YjMwHhcNMjUxMjI0MDMwMTI3WhcNMjUxMjI1MDMwMTI3WjAzMTEwLwYDVQQD EygyODNmMWQ0ZjJlZjllNmU0OTg1NTQwYjJmZjlkYjQ5MjgyN2Y0NGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDA0vkYC+eGKvX1VGQYPLoLz+GyM CAEhbMV0/Dw8qwqXOvKp7fKh0zycke/lOJ6ePyYYjqG/MIKI0Jb0nlQ3Svy9DBKx J5hcnGLaPiglDPq627I0F2LncMOUkPpYoh0grQ91ke/l35XXTkAjh3XdxIjFZdEn g3YfZ1OElkSu1q4Ln6D4A5Zyu9NEUWg7BAIHY/OiGJKTJsfnyORke52sT+2YRn/5 lZ45NuXAtODoJ6g06aDySjyMcAoxOVCVDDW60deC+D1LDWB9YkKVifY3Z+ujdYO4 gyVFnnzmdMgtGXhucBb0UVrWMQ1sD0cWwNb88do/EvSdd18SaurYz9ooywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCg/HU8u+ebkmFVAsv+dtJKCf0SkMB8GA1UdIwQY MBaAFP6OhSMpgKY/DU31sEkWPj/QL1SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX282Rkl5bUFwajhOVGZXd1NSWS1QOUF2VkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kMzZiOGItODY1Ni00ODViLTkzYjIt Mzg5MmFjYTI3N2IwLzEvX282Rkl5bUFwajhOVGZXd1NSWS1QOUF2VkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9kMzZiOGItODY1Ni00ODViLTkzYjItMzg5MmFjYTI3N2Iw LzEvX282Rkl5bUFwajhOVGZXd1NSWS1QOUF2VkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANI0P5M1u hM9TOBK+dOeCcmBK/Em2VkPMi/JkFzkEim8JZe1SMlKGZ9ZmgpaGV1wweH6Gn5Ct vPzv9FRq7vJ/9eh90oOVdgiVHdyuz2v7uajLDHpX40P3t3+pWXPj05XCqIUUDtfJ ijSZKb+s4VnMkfwW/NAFNqVj/XcGQcUXM4qxBPk0mU42vEAp/lUzIQNyYWdxzBLX wSfLzOp70GiQfa19+bDJSkUARSTivFOe7kY+kh3txqbe4OHnPzpo1Tj8qgx0AVhy qLuxxUj4XjLBMbhvccRgx550AMST+NXofjTN5sFH9u5ci4CXu4HBAoT0UGOU2l6T MVqt+BILLpH5uA== -----END CERTIFICATE-----Generated at Wed Dec 24 11:09:22 2025 by rpki-client