This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json) Hash identifier: FqlS2L/4aa9D66zfDUelzdodr3dqa6eA6M+mxTCLE34= Subject key identifier: 47:DE:3B:01:FD:2E:A0:C3:B1:5C:71:DE:03:E8:EE:D6:24:48:CD:9E Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14 Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314 Certificate serial: 019B51BC95BEE83CBC2630FCA59CC28B4A0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 19:01:12 +0000 Manifest this update: Wed 24 Dec 2025 19:01:12 +0000 Manifest next update: Thu 25 Dec 2025 19:01:12 +0000 Files and hashes: 1: EPNaozHQAjVOYQy-Vt2Z_kxiWS0.roa (hash: WsqXo+AMtH2w9AGoDi4Cn3lAEUdfpStLLlDa9sz3f6I=) 2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: N9xWnVPPvxRdr0NHn+GmaRvPhErM4PWNNjR4zpjHIfc=) 3: oyDkuFI7Lh8_-ReZkAMKowiORyM.roa (hash: 3yAZCKM7m/E+YP0xth4LuRn5Dda6av4q64pWFUUvg/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:95:be:e8:3c:bc:26:30:fc:a5:9c:c2:8b:4a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314 Validity Not Before: Dec 24 19:01:12 2025 GMT Not After : Dec 25 19:01:12 2025 GMT Subject: CN=47de3b01fd2ea0c3b15c71de03e8eed62448cd9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f3:5d:27:87:f7:9f:56:b4:25:f8:16:99:15: b0:4e:ad:f7:e8:3d:5e:22:25:5c:c2:61:13:5c:dc: f9:8e:02:11:90:55:e8:cf:ff:88:e8:5d:aa:ab:f3: 6e:00:16:62:1a:51:36:13:a4:9d:aa:a8:b4:28:9b: fd:7f:c9:dd:91:5e:30:76:f6:31:07:63:18:1d:ea: 91:4e:2d:5a:e4:b6:4c:20:9f:1c:17:8b:98:47:60: 64:82:01:cc:5a:8f:03:4a:9c:3a:02:a9:e9:c2:42: 08:36:a7:16:89:b9:8a:51:53:34:18:68:d9:c8:1f: df:a3:95:9c:48:a0:3c:13:3b:6b:4d:8b:33:f9:e6: 3f:b9:0a:74:72:c1:51:1c:47:42:ea:2c:a4:7f:d8: df:1a:c1:da:f2:f5:05:38:d7:87:49:39:4a:3c:54: 92:b7:22:42:18:b7:cb:f1:cc:c7:ce:da:30:08:74: f7:b1:7d:90:dc:8e:a1:33:a5:70:4f:a0:37:11:df: bb:2d:7c:06:3d:18:30:3d:38:83:36:0e:08:82:f2: 55:04:1a:b7:e5:cf:6f:c5:33:2b:c4:53:16:33:1f: 06:a6:f1:4e:49:13:91:85:77:74:be:65:43:8b:b8: 2d:59:d6:6e:42:97:a2:13:6f:04:9f:10:ad:bd:44: a0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DE:3B:01:FD:2E:A0:C3:B1:5C:71:DE:03:E8:EE:D6:24:48:CD:9E X509v3 Authority Key Identifier: keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:8b:b4:ff:fb:34:8f:08:fb:24:f1:fe:ad:94:49:6f:e5:d1: 91:01:4d:9a:75:b6:31:27:36:36:2d:20:c1:72:e4:65:bd:3f: 78:4b:5d:e7:6d:75:6c:c9:b0:72:4c:b9:89:68:23:3a:00:1a: fe:5b:2d:5a:2f:61:f0:a7:4e:17:e0:33:c8:5b:44:e9:92:31: 0b:b7:67:05:82:f1:c0:45:03:40:01:d6:40:89:40:37:e2:98: e6:1e:a7:3b:8c:0a:c1:d6:70:65:ca:74:e2:78:50:8b:14:41: 96:b5:68:45:df:59:3b:8b:96:19:38:8f:51:79:13:bd:dc:7b: 25:5a:e0:82:0e:50:a1:f2:49:95:1c:4c:a5:23:72:a1:ac:45: c0:64:90:9c:c9:5b:46:d0:53:b2:ad:1b:e5:4f:9b:2b:6b:b2: b8:da:5c:96:13:da:6b:3d:d4:9a:80:e4:46:89:dc:05:0f:72: da:a2:e3:32:fa:8f:8f:79:66:ae:98:26:07:d2:af:8c:ab:72: 22:8e:2d:fa:fe:e5:dc:e9:85:23:ea:84:86:c2:a8:c4:4d:41: 51:de:4d:78:d0:1c:17:82:50:9f:c8:b3:e6:e3:c6:4b:75:89: 46:62:67:15:44:cd:11:54:40:0b:01:46:34:be:e0:8b:d7:a3: 15:44:6a:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvJW+6Dy8JjD8pZzCi0oKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZTNiYTg3ZTNhOTM0NjhjYzNiM2MzZjYwZmE2M2Q1ZTg1 M2MzMTQwHhcNMjUxMjI0MTkwMTEyWhcNMjUxMjI1MTkwMTEyWjAzMTEwLwYDVQQD Eyg0N2RlM2IwMWZkMmVhMGMzYjE1YzcxZGUwM2U4ZWVkNjI0NDhjZDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPNdJ4f3n1a0JfgWmRWwTq336D1e IiVcwmETXNz5jgIRkFXoz/+I6F2qq/NuABZiGlE2E6Sdqqi0KJv9f8ndkV4wdvYx B2MYHeqRTi1a5LZMIJ8cF4uYR2BkggHMWo8DSpw6AqnpwkIINqcWibmKUVM0GGjZ yB/fo5WcSKA8EztrTYsz+eY/uQp0csFRHEdC6iykf9jfGsHa8vUFONeHSTlKPFSS tyJCGLfL8czHztowCHT3sX2Q3I6hM6VwT6A3Ed+7LXwGPRgwPTiDNg4IgvJVBBq3 5c9vxTMrxFMWMx8GpvFOSRORhXd0vmVDi7gtWdZuQpeiE28EnxCtvUSg+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEfeOwH9LqDDsVxx3gPo7tYkSM2eMB8GA1UdIwQY MBaAFGjjuofjqTRozDs8P2D6Y9XoU8MUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xZWZmMTctNjVlYy00NWVhLWE3NWQt OTZlYjA3Zjc4MjViLzEvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8xZWZmMTctNjVlYy00NWVhLWE3NWQtOTZlYjA3Zjc4MjVi LzEvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIu0//s0 jwj7JPH+rZRJb+XRkQFNmnW2MSc2Ni0gwXLkZb0/eEtd5211bMmwcky5iWgjOgAa /lstWi9h8KdOF+AzyFtE6ZIxC7dnBYLxwEUDQAHWQIlAN+KY5h6nO4wKwdZwZcp0 4nhQixRBlrVoRd9ZO4uWGTiPUXkTvdx7JVrggg5QofJJlRxMpSNyoaxFwGSQnMlb RtBTsq0b5U+bK2uyuNpclhPaaz3UmoDkRoncBQ9y2qLjMvqPj3lmrpgmB9KvjKty Io4t+v7l3OmFI+qEhsKoxE1BUd5NeNAcF4JQn8iz5uPGS3WJRmJnFUTNEVRACwFG NL7gi9ejFURqXw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:27:18 2025 by rpki-client