This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json) Hash identifier: JJkI2AZpRrbtQzEjz5BtfiTUTI5/1HiW50IQBXyFuh4= Subject key identifier: 15:B2:38:AD:4D:B1:1D:E7:D1:66:B8:32:50:1C:EE:F9:1F:D6:E7:BF Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14 Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314 Certificate serial: 019B631F25684D8CCBAF62909AB439274385 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft Manifest number: 1799 Signing time: Sun 28 Dec 2025 04:02:23 +0000 Manifest this update: Sun 28 Dec 2025 04:02:23 +0000 Manifest next update: Mon 29 Dec 2025 04:02:23 +0000 Files and hashes: 1: EPNaozHQAjVOYQy-Vt2Z_kxiWS0.roa (hash: WsqXo+AMtH2w9AGoDi4Cn3lAEUdfpStLLlDa9sz3f6I=) 2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: XUXMsuRySBm1lpyZtExlo65skceWI571jnUcr7A91jE=) 3: oyDkuFI7Lh8_-ReZkAMKowiORyM.roa (hash: 3yAZCKM7m/E+YP0xth4LuRn5Dda6av4q64pWFUUvg/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1f:25:68:4d:8c:cb:af:62:90:9a:b4:39:27:43:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314 Validity Not Before: Dec 28 04:02:23 2025 GMT Not After : Dec 29 04:02:23 2025 GMT Subject: CN=15b238ad4db11de7d166b832501ceef91fd6e7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:ef:cb:19:34:23:c2:60:32:54:c4:28:a5: e2:4d:ff:42:26:61:16:f1:7f:5d:fb:68:7d:ae:aa: a4:3d:a8:ae:9e:59:50:1b:ae:a9:68:49:50:fd:80: 92:3d:85:c7:ee:be:c0:7e:a6:59:7b:c6:09:4a:2a: e0:40:84:15:40:b5:e3:9a:5a:3f:9d:d0:93:ca:f1: 31:ff:53:44:cc:0e:94:71:d4:8a:9e:28:28:83:cc: aa:e2:e3:d5:8f:33:79:64:3c:ef:20:76:34:eb:57: 0c:5b:12:5f:9c:89:d8:cc:ee:7c:f6:59:95:c9:6c: 63:5c:56:d3:57:b7:1a:23:34:68:d5:25:34:29:bf: fc:92:fb:bb:ed:5e:ba:a4:27:2a:4c:e6:4b:6e:5d: 52:15:f0:3a:12:b6:d8:a0:90:e3:1c:99:aa:97:a4: d9:b9:66:4b:c9:be:5b:84:e7:94:4a:fc:e9:a3:a6: 4c:4c:42:45:2b:d8:af:fc:b2:1b:69:26:65:8a:34: be:5c:66:2b:b5:3e:fe:47:9c:a3:16:4f:52:c8:14: f6:36:2c:f9:77:9b:2f:90:fd:31:4f:70:61:30:ed: 37:91:56:d2:2d:ca:49:b9:d0:f6:9b:a7:4e:ac:fa: 31:2e:9f:4a:de:9c:6f:65:b9:b6:b9:1b:54:b0:46: ed:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B2:38:AD:4D:B1:1D:E7:D1:66:B8:32:50:1C:EE:F9:1F:D6:E7:BF X509v3 Authority Key Identifier: keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:3e:2b:5d:1d:6d:3e:30:5a:7f:dc:d6:a6:1b:bf:2f:62:1e: 7c:37:ee:10:82:65:72:4c:ba:2e:8d:8f:59:74:96:62:8d:1b: c7:92:14:d3:71:99:3d:bb:de:4e:81:2f:d7:08:a3:aa:3b:dd: 74:98:af:62:bd:a9:05:8b:f5:8d:8f:7b:2f:9e:7f:ec:ee:8a: 7f:14:37:9f:dc:3c:55:95:79:9b:84:0a:2b:d5:f8:f2:51:0e: 6d:2c:e9:58:c7:86:39:b1:1a:99:6c:58:c1:b5:c8:4f:c7:cf: 21:28:f4:b9:a0:a5:95:60:8b:79:ab:9b:94:14:d8:6e:26:43: b6:92:18:a9:26:2c:51:5f:26:a1:f7:da:ef:73:17:c4:e4:98: 7a:81:25:51:69:53:48:f3:a2:39:e1:58:fd:3c:da:8b:25:8d: 43:34:84:aa:75:1d:f4:db:77:f8:49:d8:61:8e:c4:22:14:0f: 8b:7a:91:7f:69:34:50:d2:33:4a:6b:76:e2:b5:db:7a:60:c3: fc:d2:cf:46:64:38:16:58:ef:a5:52:f4:5d:f4:cd:98:12:18: dd:42:e0:2b:02:fe:cc:e5:ff:95:ba:fb:82:17:46:bd:cc:bf: 9b:92:97:d0:e7:67:57:f0:b7:14:14:c9:81:c5:84:10:47:dc: 7f:4c:01:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHyVoTYzLr2KQmrQ5J0OFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZTNiYTg3ZTNhOTM0NjhjYzNiM2MzZjYwZmE2M2Q1ZTg1 M2MzMTQwHhcNMjUxMjI4MDQwMjIzWhcNMjUxMjI5MDQwMjIzWjAzMTEwLwYDVQQD EygxNWIyMzhhZDRkYjExZGU3ZDE2NmI4MzI1MDFjZWVmOTFmZDZlN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfzvyxk0I8JgMlTEKKXiTf9CJmEW 8X9d+2h9rqqkPaiunllQG66paElQ/YCSPYXH7r7AfqZZe8YJSirgQIQVQLXjmlo/ ndCTyvEx/1NEzA6UcdSKnigog8yq4uPVjzN5ZDzvIHY061cMWxJfnInYzO589lmV yWxjXFbTV7caIzRo1SU0Kb/8kvu77V66pCcqTOZLbl1SFfA6ErbYoJDjHJmql6TZ uWZLyb5bhOeUSvzpo6ZMTEJFK9iv/LIbaSZlijS+XGYrtT7+R5yjFk9SyBT2Niz5 d5svkP0xT3BhMO03kVbSLcpJudD2m6dOrPoxLp9K3pxvZbm2uRtUsEbtIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWyOK1NsR3n0Wa4MlAc7vkf1ue/MB8GA1UdIwQY MBaAFGjjuofjqTRozDs8P2D6Y9XoU8MUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xZWZmMTctNjVlYy00NWVhLWE3NWQt OTZlYjA3Zjc4MjViLzEvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8xZWZmMTctNjVlYy00NWVhLWE3NWQtOTZlYjA3Zjc4MjVi LzEvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIz4rXR1t PjBaf9zWphu/L2IefDfuEIJlcky6Lo2PWXSWYo0bx5IU03GZPbveToEv1wijqjvd dJivYr2pBYv1jY97L55/7O6KfxQ3n9w8VZV5m4QKK9X48lEObSzpWMeGObEamWxY wbXIT8fPISj0uaCllWCLeaublBTYbiZDtpIYqSYsUV8moffa73MXxOSYeoElUWlT SPOiOeFY/TzaiyWNQzSEqnUd9Nt3+EnYYY7EIhQPi3qRf2k0UNIzSmt24rXbemDD /NLPRmQ4FljvpVL0XfTNmBIY3ULgKwL+zOX/lbr7ghdGvcy/m5KX0OdnV/C3FBTJ gcWEEEfcf0wBJQ== -----END CERTIFICATE-----Generated at Sun Dec 28 06:22:45 2025 by rpki-client