This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json) Hash identifier: QnrjhH3+Jhu0dMJQJBJ8yu7NMr505GW9Gwy1VpYSYpE= Subject key identifier: AF:FC:EA:7D:AD:42:2C:03:CA:04:A3:7D:BA:10:72:EF:FE:56:BA:5A Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42 Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42 Certificate serial: 019B5DF720F8BD42E65CD462DB7DBC8AEF5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft Manifest number: 17A9 Signing time: Sat 27 Dec 2025 04:00:35 +0000 Manifest this update: Sat 27 Dec 2025 04:00:35 +0000 Manifest next update: Sun 28 Dec 2025 04:00:35 +0000 Files and hashes: 1: 1-kJ7dFfkbXY8GKTB51YoZp95upA.roa (hash: dR9vYcvJGh1CzLQ01rVJBBjGJtG77A8jF4vNPyZgLsk=) 2: BEfZLYm22ytL2TAUbAdVw1zX1Lw.roa (hash: klB/IG9rFDsKmRUAoHWuriGo/ZZNxkQ+BXChvVj85xk=) 3: HEUTASsEJ1XaEbGOmH7X4Jwc8WA.roa (hash: pY4BF2ACBH1qgVniWcBeMHaQwZVHstzR7MkwfTMJy6w=) 4: L2g5JebuYY7V2mQAYgdmVvxTDpM.roa (hash: NnNek1hVJzs9KMTpcStW+sGX8YKBScQrjrv4sJRJLuY=) 5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: bZV9P1H2z8tnPGKCuYzTh6CmiZ9li1izh9sJPWoa+EY=) 6: XOraKSxzxrwhqKYes5-js7tbyMM.roa (hash: WQ2IBOPtnhThz+gIf7Qaas166QmuF5Q3ApP6XXJ39d4=) 7: g9BBfDc_1PLnz7Bt9VifF-7KO2o.roa (hash: egth43kB7TA1PASJjKkxy/iH4S+KR37qtj3zbkktKes=) 8: nqUZf1GLiVDPhsp8HEtZMlhp3BY.roa (hash: AwrhAC+0+48MNhq3fFji1sJrgTPkE6AyZbz5FDgm7So=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:f7:20:f8:bd:42:e6:5c:d4:62:db:7d:bc:8a:ef:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42 Validity Not Before: Dec 27 04:00:35 2025 GMT Not After : Dec 28 04:00:35 2025 GMT Subject: CN=affcea7dad422c03ca04a37dba1072effe56ba5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:56:10:0e:9d:2e:19:6a:38:f5:72:d8:39: 69:58:e9:2e:91:ef:32:b1:36:2e:60:70:7f:f1:d1: f9:7c:d3:34:95:d6:7a:aa:e3:b0:f0:85:b0:ba:5d: fd:ce:31:bb:b0:fc:4c:9d:bc:c4:0b:02:0f:cd:3e: c4:6e:5b:f5:01:7e:bd:74:ca:9f:30:7b:3b:07:da: 92:a6:b7:14:57:a8:d0:28:15:a4:70:3b:c3:3e:0a: f5:43:8e:7d:0d:48:e7:d2:36:24:b3:d2:6d:ed:c0: 85:0e:92:a0:c1:56:bb:8c:b0:59:70:57:17:a0:52: 75:9c:36:b9:68:3d:0c:75:08:1a:70:03:7b:18:a6: 38:1a:91:92:6e:8d:a7:f9:eb:d5:ce:88:bb:ff:26: ec:78:1c:d3:96:c5:05:8a:ce:0c:32:c6:2f:ce:aa: 6e:f9:f0:61:fb:8f:9f:c7:cf:8c:fe:5a:c2:8d:99: d8:50:c5:4d:31:8c:04:36:1d:59:10:14:47:12:49: 94:78:e5:dc:1b:31:b7:ee:21:5b:7b:bf:19:92:35: 9a:d6:e3:eb:7b:e3:eb:e9:96:70:c4:02:7d:fa:93: 1f:c9:ec:93:8c:e7:8d:f2:32:dd:20:46:fe:f0:76: f9:a7:75:be:d3:ba:a2:4c:a9:78:b4:d4:d7:15:ab: 97:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FC:EA:7D:AD:42:2C:03:CA:04:A3:7D:BA:10:72:EF:FE:56:BA:5A X509v3 Authority Key Identifier: keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:db:2c:ee:cd:99:e1:ff:cd:7f:d2:52:d0:4b:44:d8:cc:3b: b1:10:58:4a:cf:91:1e:b7:67:8c:40:39:22:14:df:c5:f4:7b: 23:80:8f:7e:37:b1:2c:d2:27:cf:6e:11:36:ff:3c:88:f5:12: da:15:2c:72:2a:ff:d0:dd:ab:7e:10:60:70:33:67:b4:6f:3f: a1:5a:e8:9d:e2:e6:b6:b8:f7:dc:b9:17:d3:88:a6:f0:f8:6a: 2c:08:20:e3:fb:8a:46:fd:02:31:be:95:af:c5:7e:14:5d:3c: e5:cd:1f:e1:46:d2:48:45:09:c5:31:c3:71:10:2a:37:33:66: 44:48:49:2e:a7:26:81:5a:2c:ee:6c:14:76:8a:4a:d6:22:00: 05:1a:21:cd:8a:aa:a7:01:d6:4a:8c:a7:68:19:c0:3d:bd:89: c0:73:85:ff:bd:99:3b:4e:ee:6a:0d:3a:1f:d0:d1:8e:b7:8d: 6a:58:11:ce:f2:c7:f8:dd:cc:22:5d:8a:f0:85:e8:f0:5d:c6: 58:f3:02:dc:1e:18:d8:02:2b:0f:1b:4e:be:73:5c:66:35:fa: 8d:8d:85:9e:12:11:94:55:51:7f:d4:07:9c:c9:b8:da:30:c7: 80:b7:60:59:49:4c:7f:62:ad:bd:20:15:db:e1:03:14:8e:33: b6:70:99:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtd9yD4vULmXNRi2328iu9fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYTViMWMwOWFhMzFmNjcxM2M2MWIzMmU1NTgxMDllNDc5 NjZkNDIwHhcNMjUxMjI3MDQwMDM1WhcNMjUxMjI4MDQwMDM1WjAzMTEwLwYDVQQD EyhhZmZjZWE3ZGFkNDIyYzAzY2EwNGEzN2RiYTEwNzJlZmZlNTZiYTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpRWEA6dLhlqOPVy2DlpWOkuke8y sTYuYHB/8dH5fNM0ldZ6quOw8IWwul39zjG7sPxMnbzECwIPzT7Eblv1AX69dMqf MHs7B9qSprcUV6jQKBWkcDvDPgr1Q459DUjn0jYks9Jt7cCFDpKgwVa7jLBZcFcX oFJ1nDa5aD0MdQgacAN7GKY4GpGSbo2n+evVzoi7/ybseBzTlsUFis4MMsYvzqpu +fBh+4+fx8+M/lrCjZnYUMVNMYwENh1ZEBRHEkmUeOXcGzG37iFbe78ZkjWa1uPr e+Pr6ZZwxAJ9+pMfyeyTjOeN8jLdIEb+8Hb5p3W+07qiTKl4tNTXFauX8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/86n2tQiwDygSjfboQcu/+VrpaMB8GA1UdIwQY MBaAFDulscCaox9nE8YbMuVYEJ5Hlm1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQt NDY2ZTljYWI3ODY0LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQtNDY2ZTljYWI3ODY0 LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtss7s2Z 4f/Nf9JS0EtE2Mw7sRBYSs+RHrdnjEA5IhTfxfR7I4CPfjexLNInz24RNv88iPUS 2hUscir/0N2rfhBgcDNntG8/oVroneLmtrj33LkX04im8PhqLAgg4/uKRv0CMb6V r8V+FF085c0f4UbSSEUJxTHDcRAqNzNmREhJLqcmgVos7mwUdopK1iIABRohzYqq pwHWSoynaBnAPb2JwHOF/72ZO07uag06H9DRjreNalgRzvLH+N3MIl2K8IXo8F3G WPMC3B4Y2AIrDxtOvnNcZjX6jY2FnhIRlFVRf9QHnMm42jDHgLdgWUlMf2KtvSAV 2+EDFI4ztnCZfw== -----END CERTIFICATE-----Generated at Sat Dec 27 06:16:19 2025 by rpki-client