This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft File: aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json) Hash identifier: 7HE+B+jNTPaPQXYuFJO0sydkCGnl9qvq3LFyQ8onm/E= Subject key identifier: F8:E0:4F:FE:2B:DC:AF:B8:94:6C:29:F5:D7:75:10:2B:80:33:54:40 Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70 Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670 Certificate serial: 019B2AE54F1C84E880B7A48F98555E3402F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft Manifest number: 0E56 Signing time: Wed 17 Dec 2025 06:00:29 +0000 Manifest this update: Wed 17 Dec 2025 06:00:29 +0000 Manifest next update: Thu 18 Dec 2025 06:00:29 +0000 Files and hashes: 1: VwGWvDQ1yZ1m9qd6Qjq6ZmEis2Q.roa (hash: NXsj+T/BQfpZjDU55fDpRASUPCV40ml/FEaUgz3NxTI=) 2: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: ymiMCl2iQaV3z9kbXoxQcSbpAUnwzEK9BAoFB+OwvmY=) 3: mShmo_W6HwOVfRB9AY5LNAbBfho.roa (hash: 6BJcHM6l3PuBUi+3plKY0AbWfl02EmVTYEtLpT66zmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:e5:4f:1c:84:e8:80:b7:a4:8f:98:55:5e:34:02:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670 Validity Not Before: Dec 17 06:00:29 2025 GMT Not After : Dec 18 06:00:29 2025 GMT Subject: CN=f8e04ffe2bdcafb8946c29f5d775102b80335440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:be:46:40:8d:ad:0e:33:e9:2d:c3:ed:b4:2e: 54:43:41:52:a5:ac:af:e4:e5:91:88:4d:9f:2c:d0: 92:f8:99:ff:b9:58:b0:58:c8:99:8b:56:2c:fe:f5: e5:8f:fc:53:84:5e:c2:d0:01:6c:93:01:34:5b:d9: 7b:cc:41:fe:01:eb:c0:f2:d8:77:ec:20:94:78:7e: 92:87:a4:4a:24:3c:62:47:05:22:07:3f:fe:33:1c: 87:37:08:05:14:ac:d7:94:6c:fc:69:3d:7a:87:53: 71:78:b1:a9:31:7f:bb:70:0b:9c:22:aa:2b:10:5d: 83:aa:cb:b0:86:6e:be:39:22:d3:a8:80:99:12:41: 50:e6:7d:dc:b5:1d:d8:05:b6:92:31:43:00:e7:25: 78:e3:28:10:50:42:80:01:42:ce:1e:99:ea:7c:ce: e1:6f:48:cc:1d:55:33:74:b2:53:f6:75:81:c9:63: b9:68:6a:a7:b9:ec:33:88:38:ba:6f:72:87:d4:a6: 1a:2b:c5:8c:6d:88:b2:b1:b1:cf:ba:c1:74:9e:f2: 06:ae:e3:af:ae:83:d5:91:35:ec:74:9b:2c:43:99: c6:26:a1:3c:2f:74:3e:a0:dd:67:d0:d6:2a:05:77: 8c:46:f3:d4:c1:60:50:25:92:90:b4:2e:5f:b5:62: 44:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E0:4F:FE:2B:DC:AF:B8:94:6C:29:F5:D7:75:10:2B:80:33:54:40 X509v3 Authority Key Identifier: keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:16:fc:17:75:c1:16:0d:d0:d4:dc:b6:09:1f:11:41:e2:d5: 69:18:da:93:95:65:88:c1:bf:65:d3:31:44:9c:d4:a1:6d:90: ef:06:a1:87:77:1f:3c:32:09:e8:7d:19:d5:c2:85:0f:7c:0f: c7:40:35:f2:35:5c:2a:68:fe:d6:34:41:f9:c7:24:6a:ab:e7: 55:69:d3:c0:38:20:26:b6:d4:22:af:a7:1e:d2:98:a7:4a:e0: 2b:fe:19:b3:b3:a1:c0:d4:4e:7e:28:7a:bd:09:f0:68:8f:21: 93:47:28:ee:66:af:f8:b7:82:b5:9e:76:d2:b3:b5:f5:45:e0: 7c:ad:07:1d:25:12:37:f7:10:d1:f4:23:24:1e:aa:ba:79:c6: 3a:67:47:f7:99:3d:a5:16:42:3c:28:d5:af:80:d9:26:06:a3: 49:2e:ed:ea:5a:e2:0d:da:fe:bf:a4:ed:24:5a:c7:f8:b8:90: 8d:22:4e:37:23:a2:c0:10:27:1a:41:14:10:ac:1b:6f:0c:d2: e9:a2:e7:92:aa:06:84:fa:21:e7:67:f2:f0:86:19:14:e4:6d: 85:27:95:0d:2a:a3:94:27:fe:70:82:bf:85:d2:b0:7f:66:76: 51:7c:df:15:42:db:a7:24:71:76:9e:f1:63:4d:5e:6a:af:97: 27:31:f9:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsq5U8chOiAt6SPmFVeNAL5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOGI1YTM3NGYxNDZkN2I2YTZkYzdkMzE2ZThlYmIxMmRl ZWE2NzAwHhcNMjUxMjE3MDYwMDI5WhcNMjUxMjE4MDYwMDI5WjAzMTEwLwYDVQQD EyhmOGUwNGZmZTJiZGNhZmI4OTQ2YzI5ZjVkNzc1MTAyYjgwMzM1NDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b5GQI2tDjPpLcPttC5UQ0FSpayv 5OWRiE2fLNCS+Jn/uViwWMiZi1Ys/vXlj/xThF7C0AFskwE0W9l7zEH+AevA8th3 7CCUeH6Sh6RKJDxiRwUiBz/+MxyHNwgFFKzXlGz8aT16h1NxeLGpMX+7cAucIqor EF2Dqsuwhm6+OSLTqICZEkFQ5n3ctR3YBbaSMUMA5yV44ygQUEKAAULOHpnqfM7h b0jMHVUzdLJT9nWByWO5aGqnuewziDi6b3KH1KYaK8WMbYiysbHPusF0nvIGruOv roPVkTXsdJssQ5nGJqE8L3Q+oN1n0NYqBXeMRvPUwWBQJZKQtC5ftWJEgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjgT/4r3K+4lGwp9dd1ECuAM1RAMB8GA1UdIwQY MBaAFGqLWjdPFG17am3H0xbo67Et7qZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQt NDQyNDFmZWMxYTlmLzEvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQtNDQyNDFmZWMxYTlm LzEvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxb8F3XB Fg3Q1Ny2CR8RQeLVaRjak5VliMG/ZdMxRJzUoW2Q7wahh3cfPDIJ6H0Z1cKFD3wP x0A18jVcKmj+1jRB+cckaqvnVWnTwDggJrbUIq+nHtKYp0rgK/4Zs7OhwNROfih6 vQnwaI8hk0co7mav+LeCtZ520rO19UXgfK0HHSUSN/cQ0fQjJB6qunnGOmdH95k9 pRZCPCjVr4DZJgajSS7t6lriDdr+v6TtJFrH+LiQjSJONyOiwBAnGkEUEKwbbwzS 6aLnkqoGhPoh52fy8IYZFORthSeVDSqjlCf+cIK/hdKwf2Z2UXzfFULbpyRxdp7x Y01eaq+XJzH5sw== -----END CERTIFICATE-----Generated at Wed Dec 17 15:07:27 2025 by rpki-client