This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json) Hash identifier: lm1++OytPKcTLy3RQunRC68bkvjaPO/6i02rXdHvISc= Subject key identifier: 36:88:14:F0:BB:FA:B0:B9:2D:DC:1F:FC:4E:CE:9B:7E:1D:C4:58:79 Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14 Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314 Certificate serial: 019B38A1ED878182BD9944762C842B01DF67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 22:01:34 +0000 Manifest this update: Fri 19 Dec 2025 22:01:34 +0000 Manifest next update: Sat 20 Dec 2025 22:01:34 +0000 Files and hashes: 1: EPNaozHQAjVOYQy-Vt2Z_kxiWS0.roa (hash: WsqXo+AMtH2w9AGoDi4Cn3lAEUdfpStLLlDa9sz3f6I=) 2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: 0MA9gO3w/0gk5pnW9ofWjSDJcn5kH5ND75ysecE1ez0=) 3: oyDkuFI7Lh8_-ReZkAMKowiORyM.roa (hash: 3yAZCKM7m/E+YP0xth4LuRn5Dda6av4q64pWFUUvg/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:ed:87:81:82:bd:99:44:76:2c:84:2b:01:df:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314 Validity Not Before: Dec 19 22:01:34 2025 GMT Not After : Dec 20 22:01:34 2025 GMT Subject: CN=368814f0bbfab0b92ddc1ffc4ece9b7e1dc45879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d9:18:6d:e1:48:d9:9c:87:0e:96:5b:06:91: 86:e2:ba:34:d2:f7:ff:ed:7c:d7:f4:ea:fb:87:59: e2:01:c2:c7:69:fc:9b:50:d1:6d:1a:43:69:af:a3: 1e:2e:6e:0d:92:c8:70:0e:1a:58:9f:18:59:3e:68: 88:7e:cf:7e:45:cd:e5:d6:5c:03:b0:26:b4:6d:1b: 37:0b:a6:6c:56:e0:b0:65:94:bf:e9:ed:1c:e7:bd: e4:6e:00:19:ec:cf:70:e1:5b:cf:6a:d5:ad:e4:bc: 9b:59:64:fe:03:6f:c2:d5:28:20:b6:7d:7b:16:ab: 62:80:96:ee:fa:c3:92:de:7c:da:9a:1c:ea:5c:65: 8d:9b:13:c5:58:65:dd:cf:6e:90:22:0c:f3:2c:34: 70:fc:c4:16:76:04:ef:98:e8:2c:02:1e:18:ae:93: d8:4b:83:55:16:3c:9b:5b:81:1a:b6:9b:2e:73:d4: 43:20:0a:ea:36:b9:d7:bb:63:dc:0c:e5:cb:17:81: 68:5f:f2:bc:f9:f2:1b:2f:d7:d0:92:c1:b5:38:ee: 2b:67:06:04:b6:88:c5:a4:d9:92:83:81:25:0d:ca: 8d:e6:35:33:05:e3:b1:1b:9d:d4:6b:b3:50:cc:11: 72:a0:da:b3:70:2a:0a:85:2d:c3:13:4c:6e:39:f8: 0a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:88:14:F0:BB:FA:B0:B9:2D:DC:1F:FC:4E:CE:9B:7E:1D:C4:58:79 X509v3 Authority Key Identifier: keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:00:9a:0b:14:28:70:1a:97:67:19:ae:6f:79:51:48:15:41: a9:e4:7a:ad:63:f9:4d:cb:7f:e3:a7:9b:7f:8c:83:b7:96:dd: bd:d5:1a:64:01:ee:75:0a:8f:fd:69:4b:10:aa:22:a2:62:0d: 6d:be:67:6c:34:1d:13:4c:93:a2:a9:74:24:52:c8:9d:6e:96: 4e:eb:76:c3:b0:94:5e:e6:db:e7:8b:92:ba:e3:0f:a4:aa:b6: e8:48:8d:09:de:e9:00:fe:0e:dd:eb:65:16:44:77:c9:c4:25: e7:d2:a4:0f:a6:dc:46:0f:84:4f:46:09:c1:41:f7:c7:10:c1: fe:4f:84:83:ad:98:ef:c4:2e:ca:6e:1c:51:9c:f2:d5:f5:22: b8:81:a5:c1:e4:97:de:ff:f9:a5:d0:f6:3a:63:ad:3a:bb:06: 6a:87:43:f9:df:bd:aa:8d:1d:c4:33:2e:90:07:8f:8f:bd:af: 6c:e4:93:24:51:47:1a:68:94:06:be:80:2e:9d:bf:82:e9:e1: c7:e2:f6:d7:43:3d:03:3c:f1:3d:75:5e:4e:12:a5:29:93:ba: 72:b6:d5:f6:0c:fd:2f:62:ba:2c:78:39:ae:2a:22:53:d5:90: 71:a1:1e:a7:62:99:0f:22:e7:0c:44:b6:9d:04:e0:43:f8:20: 50:4f:31:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oe2HgYK9mUR2LIQrAd9nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZTNiYTg3ZTNhOTM0NjhjYzNiM2MzZjYwZmE2M2Q1ZTg1 M2MzMTQwHhcNMjUxMjE5MjIwMTM0WhcNMjUxMjIwMjIwMTM0WjAzMTEwLwYDVQQD EygzNjg4MTRmMGJiZmFiMGI5MmRkYzFmZmM0ZWNlOWI3ZTFkYzQ1ODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9kYbeFI2ZyHDpZbBpGG4ro00vf/ 7XzX9Or7h1niAcLHafybUNFtGkNpr6MeLm4NkshwDhpYnxhZPmiIfs9+Rc3l1lwD sCa0bRs3C6ZsVuCwZZS/6e0c573kbgAZ7M9w4VvPatWt5LybWWT+A2/C1Sggtn17 FqtigJbu+sOS3nzamhzqXGWNmxPFWGXdz26QIgzzLDRw/MQWdgTvmOgsAh4YrpPY S4NVFjybW4Eatpsuc9RDIArqNrnXu2PcDOXLF4FoX/K8+fIbL9fQksG1OO4rZwYE tojFpNmSg4ElDcqN5jUzBeOxG53Ua7NQzBFyoNqzcCoKhS3DE0xuOfgKyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaIFPC7+rC5Ldwf/E7Om34dxFh5MB8GA1UdIwQY MBaAFGjjuofjqTRozDs8P2D6Y9XoU8MUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xZWZmMTctNjVlYy00NWVhLWE3NWQt OTZlYjA3Zjc4MjViLzEvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8xZWZmMTctNjVlYy00NWVhLWE3NWQtOTZlYjA3Zjc4MjVi LzEvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgCaCxQo cBqXZxmub3lRSBVBqeR6rWP5Tct/46ebf4yDt5bdvdUaZAHudQqP/WlLEKoiomIN bb5nbDQdE0yToql0JFLInW6WTut2w7CUXubb54uSuuMPpKq26EiNCd7pAP4O3etl FkR3ycQl59KkD6bcRg+ET0YJwUH3xxDB/k+Eg62Y78Quym4cUZzy1fUiuIGlweSX 3v/5pdD2OmOtOrsGaodD+d+9qo0dxDMukAePj72vbOSTJFFHGmiUBr6ALp2/gunh x+L210M9AzzxPXVeThKlKZO6crbV9gz9L2K6LHg5rioiU9WQcaEep2KZDyLnDES2 nQTgQ/ggUE8xjg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:31:37 2025 by rpki-client