This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft File: o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json) Hash identifier: d4QmQOHzJfgx84TR9YFisMk+yN00T2eJrqIA5MSAepo= Subject key identifier: E8:1A:3B:EE:EF:AD:35:46:35:BD:4A:10:D7:99:D8:F8:EF:31:9A:AC Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38 Certificate issuer: /CN=a3a82ee9aa1106ed720d63c3844e666440e34438 Certificate serial: 019B3B6C0CBA78E38D794847DE360A0A690C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft Manifest number: 0CBC Signing time: Sat 20 Dec 2025 11:01:35 +0000 Manifest this update: Sat 20 Dec 2025 11:01:35 +0000 Manifest next update: Sun 21 Dec 2025 11:01:35 +0000 Files and hashes: 1: c6Nj79I3Har3nGytaNZUrH4rLp8.roa (hash: pFirwTzGIzOGXK1Oft6HDqGlSVO899FoeQfzjWxGxFc=) 2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: /acHxQmEtcM7osnF4KRTIVMhhEA3tfbQSafhPYjujBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6c:0c:ba:78:e3:8d:79:48:47:de:36:0a:0a:69:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438 Validity Not Before: Dec 20 11:01:35 2025 GMT Not After : Dec 21 11:01:35 2025 GMT Subject: CN=e81a3beeefad354635bd4a10d799d8f8ef319aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d4:7e:46:49:82:c0:d3:c5:2d:89:7f:d2:50: 5b:ba:bc:ba:7a:71:08:2e:5d:eb:1b:47:b7:86:4f: 13:4f:00:da:67:68:33:ca:1d:0d:75:86:a5:27:a3: c1:f3:dc:24:d5:44:db:52:dc:19:6d:69:73:be:2d: 62:8c:37:d7:ed:7e:54:cc:bb:3d:63:40:4c:d7:dc: d8:85:0f:1c:7f:52:9a:e1:26:01:97:16:f6:74:0c: f0:b7:eb:43:71:2b:04:ec:8a:7f:11:97:03:3c:21: 78:51:06:d6:1f:cb:11:59:8d:05:92:36:b0:25:ae: d8:94:1f:81:15:73:75:66:5d:2f:23:fb:38:4e:f4: ec:c7:68:6a:ab:8e:bb:2c:99:07:03:8e:27:8a:c6: a6:5f:48:04:c6:c5:fa:b4:0a:9c:8e:90:a9:b6:c7: f0:12:69:c3:ba:d8:79:ae:d1:e8:92:5e:dc:57:5a: 49:95:73:b4:af:25:b1:f8:ef:8e:1a:c1:94:ee:6a: dc:a8:dc:f8:2b:4f:7d:55:0b:75:b6:0c:86:e4:96: 56:af:18:41:e4:56:42:0e:1f:a7:9a:74:cf:8d:85: 58:13:cd:88:a9:99:65:d0:a3:4c:07:b3:2a:82:c8: af:87:46:9f:51:34:23:ae:22:de:9f:cb:e3:21:42: da:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1A:3B:EE:EF:AD:35:46:35:BD:4A:10:D7:99:D8:F8:EF:31:9A:AC X509v3 Authority Key Identifier: keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:e6:30:a4:d0:9e:c8:8b:d2:11:8a:ca:82:d8:ae:01:db:56: cb:0d:f1:e0:0c:5b:79:92:67:7c:e2:47:16:af:8b:4c:be:04: 30:99:31:ba:69:ca:64:69:89:00:66:5a:d5:ca:93:58:2d:32: 66:65:a8:22:a2:bc:06:bb:ce:41:0d:5a:a9:bd:8c:a4:c3:7b: 3c:ec:b1:3f:eb:42:41:35:5c:a2:24:13:16:29:3d:1f:cc:be: 96:39:17:be:38:6d:02:39:c0:98:85:77:9a:de:fd:67:ce:42: c1:8e:72:57:b3:8a:9a:7f:14:2d:1c:95:c8:be:a6:54:52:76: 60:50:5c:00:18:e0:6c:21:8a:20:58:90:64:1f:8d:ac:3a:7e: 6e:6d:b4:d5:50:29:66:85:6d:83:9e:5a:90:c6:53:92:d0:97: 31:d6:60:6c:39:7e:29:4b:d4:37:77:f5:fc:bb:d2:58:03:06: 63:7b:e1:b7:6a:5a:9b:9d:2b:5d:d4:c5:b1:15:5e:5f:49:cc: 8b:d2:17:69:d8:24:d9:57:5b:b3:58:3e:b3:b9:ed:6e:7d:1e: d3:78:ba:07:41:a6:3e:3e:7d:f6:d1:2d:a0:d0:03:13:e6:09: 8d:9e:f5:f2:d2:c0:9e:3a:f4:23:06:0a:bc:d5:1d:66:c6:81: e8:9d:c1:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7bAy6eOONeUhH3jYKCmkMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYTgyZWU5YWExMTA2ZWQ3MjBkNjNjMzg0NGU2NjY0NDBl MzQ0MzgwHhcNMjUxMjIwMTEwMTM1WhcNMjUxMjIxMTEwMTM1WjAzMTEwLwYDVQQD EyhlODFhM2JlZWVmYWQzNTQ2MzViZDRhMTBkNzk5ZDhmOGVmMzE5YWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNR+RkmCwNPFLYl/0lBbury6enEI Ll3rG0e3hk8TTwDaZ2gzyh0NdYalJ6PB89wk1UTbUtwZbWlzvi1ijDfX7X5UzLs9 Y0BM19zYhQ8cf1Ka4SYBlxb2dAzwt+tDcSsE7Ip/EZcDPCF4UQbWH8sRWY0Fkjaw Ja7YlB+BFXN1Zl0vI/s4TvTsx2hqq467LJkHA44nisamX0gExsX6tAqcjpCptsfw EmnDuth5rtHokl7cV1pJlXO0ryWx+O+OGsGU7mrcqNz4K099VQt1tgyG5JZWrxhB 5FZCDh+nmnTPjYVYE82IqZll0KNMB7Mqgsivh0afUTQjriLen8vjIULa4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgaO+7vrTVGNb1KENeZ2PjvMZqsMB8GA1UdIwQY MBaAFKOoLumqEQbtcg1jw4ROZmRA40Q4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzZndTZhb1JCdTF5RFdQRGhFNW1aRURqUkRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jNzIwYjQtMWFjYi00NzAzLWJjMjQt NDY3ZTAwOWRhZWQwLzEvbzZndTZhb1JCdTF5RFdQRGhFNW1aRURqUkRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9jNzIwYjQtMWFjYi00NzAzLWJjMjQtNDY3ZTAwOWRhZWQw LzEvbzZndTZhb1JCdTF5RFdQRGhFNW1aRURqUkRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKeYwpNCe yIvSEYrKgtiuAdtWyw3x4AxbeZJnfOJHFq+LTL4EMJkxumnKZGmJAGZa1cqTWC0y ZmWoIqK8BrvOQQ1aqb2MpMN7POyxP+tCQTVcoiQTFik9H8y+ljkXvjhtAjnAmIV3 mt79Z85CwY5yV7OKmn8ULRyVyL6mVFJ2YFBcABjgbCGKIFiQZB+NrDp+bm201VAp ZoVtg55akMZTktCXMdZgbDl+KUvUN3f1/LvSWAMGY3vht2pam50rXdTFsRVeX0nM i9IXadgk2Vdbs1g+s7ntbn0e03i6B0GmPj599tEtoNADE+YJjZ718tLAnjr0IwYK vNUdZsaB6J3BPA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:32:57 2025 by rpki-client