This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft File: o6_aacqxv_Ujyj71dLh8oTD96iw.mft (raw, json) Hash identifier: oQg5R7n/HbWOlAs3NIocFI/+k3y6r+wJDeibt9X3V8g= Subject key identifier: A0:CC:E4:01:E7:C5:AE:8A:2E:C1:DC:DA:C9:BB:FE:C5:8D:FB:73:F5 Authority key identifier: A3:AF:DA:69:CA:B1:BF:F5:23:CA:3E:F5:74:B8:7C:A1:30:FD:EA:2C Certificate issuer: /CN=a3afda69cab1bff523ca3ef574b87ca130fdea2c Certificate serial: 019AF6F8C7D41B0867BF2F681C1F3D514E19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft Manifest number: 1059 Signing time: Sun 07 Dec 2025 04:01:30 +0000 Manifest this update: Sun 07 Dec 2025 04:01:30 +0000 Manifest next update: Mon 08 Dec 2025 04:01:30 +0000 Files and hashes: 1: o6_aacqxv_Ujyj71dLh8oTD96iw.crl (hash: 9ntUMQ7J+EMCsF4o1Ka7SE6nu/BjnRMp3mPaYSj2XH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft rsync://rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:c7:d4:1b:08:67:bf:2f:68:1c:1f:3d:51:4e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3afda69cab1bff523ca3ef574b87ca130fdea2c Validity Not Before: Dec 7 04:01:30 2025 GMT Not After : Dec 8 04:01:30 2025 GMT Subject: CN=a0cce401e7c5ae8a2ec1dcdac9bbfec58dfb73f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4b:96:3c:85:f3:17:04:17:1e:1a:6a:82:9c: 48:3b:8d:df:fe:ca:bd:53:79:0f:f5:bf:3f:12:70: 8b:6c:3e:06:d9:54:90:e1:b1:4b:e9:40:52:d6:62: 77:76:8b:2b:23:5b:4f:46:ee:de:f0:9f:8d:89:fa: 19:9b:d3:06:fb:21:6a:7e:ef:2a:a5:8a:9a:39:c6: d6:33:e4:d8:11:14:eb:56:3b:1b:22:8e:0b:5e:e9: ea:91:fb:af:f9:d6:bb:9b:05:fb:72:b6:56:58:5b: 0b:1c:5f:4c:91:ec:a2:3b:70:97:43:30:7e:35:bc: 23:7f:a3:48:f3:b0:a7:7b:b7:59:cd:e6:38:5f:24: 76:b3:a7:29:e9:d1:62:d9:e4:59:21:58:51:c0:e5: eb:8f:b7:48:da:ae:a2:dc:c2:8b:25:59:4b:3d:05: 1e:36:3f:7b:54:7c:7e:48:87:c7:d1:e0:c6:24:5d: 1c:55:32:2d:07:87:1d:d5:a7:48:bc:de:ad:d7:42: 0d:07:16:f4:0f:1d:59:db:46:8f:19:74:8b:85:86: 71:49:ff:f0:64:44:43:eb:74:98:e9:8c:21:a2:64: a1:b6:3d:b0:d8:f6:b8:67:5e:1f:65:29:7e:d7:81: 72:d0:3d:e0:53:4b:d8:56:e2:46:92:36:49:1c:2d: 02:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CC:E4:01:E7:C5:AE:8A:2E:C1:DC:DA:C9:BB:FE:C5:8D:FB:73:F5 X509v3 Authority Key Identifier: keyid:A3:AF:DA:69:CA:B1:BF:F5:23:CA:3E:F5:74:B8:7C:A1:30:FD:EA:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:88:73:11:fd:05:cc:40:0b:58:df:2c:a3:9a:ef:30:41:57: 3a:5c:48:bd:08:62:44:a8:76:ee:85:0e:2c:c3:5d:53:06:47: 29:23:06:3d:09:87:68:d8:46:3b:b0:79:7d:c5:5b:b5:93:6e: 5c:c4:94:5b:b9:44:fd:fe:62:20:26:3f:b0:11:b8:a2:9c:c9: ac:82:e1:5b:e7:5d:02:2b:8f:02:0d:19:76:d2:d6:8e:80:14: 49:ae:72:8a:f8:6f:f3:2f:f4:0d:ec:a9:51:3c:96:1d:66:75: 89:92:8e:01:d7:6b:eb:79:19:cc:93:c1:b9:51:9a:ec:40:17: d0:73:c0:c2:b0:47:d4:ae:18:87:b6:c4:34:d5:6e:c6:c7:fa: 3c:c3:c4:6e:f8:17:b2:90:2b:ee:65:4b:b4:1d:63:c0:7c:1a: 85:b5:ab:16:d4:0b:a5:15:50:a6:b0:d2:49:cd:0b:f1:01:c0: e1:e5:05:2e:f7:30:99:1b:ae:79:66:a0:4c:8d:e0:32:bf:0b: 3b:99:03:2c:aa:86:73:55:2c:6f:5e:e7:4d:b2:e9:9c:f7:62: 14:20:53:34:af:7b:14:7f:cb:54:1c:64:ea:ee:48:95:52:29: 81:b8:b8:ff:db:33:5d:d2:d7:88:68:05:b6:46:94:07:f3:b6: 11:d8:0f:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+MfUGwhnvy9oHB89UU4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYWZkYTY5Y2FiMWJmZjUyM2NhM2VmNTc0Yjg3Y2ExMzBm ZGVhMmMwHhcNMjUxMjA3MDQwMTMwWhcNMjUxMjA4MDQwMTMwWjAzMTEwLwYDVQQD EyhhMGNjZTQwMWU3YzVhZThhMmVjMWRjZGFjOWJiZmVjNThkZmI3M2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0uWPIXzFwQXHhpqgpxIO43f/sq9 U3kP9b8/EnCLbD4G2VSQ4bFL6UBS1mJ3dosrI1tPRu7e8J+NifoZm9MG+yFqfu8q pYqaOcbWM+TYERTrVjsbIo4LXunqkfuv+da7mwX7crZWWFsLHF9MkeyiO3CXQzB+ Nbwjf6NI87Cne7dZzeY4XyR2s6cp6dFi2eRZIVhRwOXrj7dI2q6i3MKLJVlLPQUe Nj97VHx+SIfH0eDGJF0cVTItB4cd1adIvN6t10INBxb0Dx1Z20aPGXSLhYZxSf/w ZERD63SY6YwhomShtj2w2Pa4Z14fZSl+14Fy0D3gU0vYVuJGkjZJHC0CKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDM5AHnxa6KLsHc2sm7/sWN+3P1MB8GA1UdIwQY MBaAFKOv2mnKsb/1I8o+9XS4fKEw/eosMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzZfYWFjcXh2X1VqeWo3MWRMaDhvVEQ5Nml3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZTU4ZGItOGIwMi00ZWQ1LWFhNmMt ZWNkNjFiZDAyYjQ2LzEvbzZfYWFjcXh2X1VqeWo3MWRMaDhvVEQ5Nml3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81ZTU4ZGItOGIwMi00ZWQ1LWFhNmMtZWNkNjFiZDAyYjQ2 LzEvbzZfYWFjcXh2X1VqeWo3MWRMaDhvVEQ5Nml3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYhzEf0F zEALWN8so5rvMEFXOlxIvQhiRKh27oUOLMNdUwZHKSMGPQmHaNhGO7B5fcVbtZNu XMSUW7lE/f5iICY/sBG4opzJrILhW+ddAiuPAg0ZdtLWjoAUSa5yivhv8y/0Deyp UTyWHWZ1iZKOAddr63kZzJPBuVGa7EAX0HPAwrBH1K4Yh7bENNVuxsf6PMPEbvgX spAr7mVLtB1jwHwahbWrFtQLpRVQprDSSc0L8QHA4eUFLvcwmRuueWagTI3gMr8L O5kDLKqGc1Usb17nTbLpnPdiFCBTNK97FH/LVBxk6u5IlVIpgbi4/9szXdLXiGgF tkaUB/O2EdgPkg== -----END CERTIFICATE-----Generated at Sun Dec 7 06:40:51 2025 by rpki-client