This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft File: 0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft (raw, json) Hash identifier: OmGcb/P7ldq/JLjmX0JyGwCiKjJwxnH45UyaU1lYfGE= Subject key identifier: 86:88:AB:1C:CA:A1:63:0A:5B:43:B7:D4:8E:16:02:4B:34:36:FD:A0 Authority key identifier: D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A Certificate issuer: /CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a Certificate serial: 019AF12E0D19026D4981CA250E4BB6FB3F02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:01:58 +0000 Manifest this update: Sat 06 Dec 2025 01:01:58 +0000 Manifest next update: Sun 07 Dec 2025 01:01:58 +0000 Files and hashes: 1: 0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl (hash: JHXjKPx+1L5waunDlLxpi4ithr+7m0p/b1+bRXfja6Q=) 2: AddwdaQYSDgJ_-W9pipGLPibD4Q.roa (hash: YjKAFD6jnw8P32xCITagf8KVgpNGeRxCswidFmsKIOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:0d:19:02:6d:49:81:ca:25:0e:4b:b6:fb:3f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a Validity Not Before: Dec 6 01:01:58 2025 GMT Not After : Dec 7 01:01:58 2025 GMT Subject: CN=8688ab1ccaa1630a5b43b7d48e16024b3436fda0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:34:e0:4a:59:45:ee:c2:f9:e1:ba:80:a0:15: 82:2d:78:e0:e3:8d:5c:01:fd:cc:7c:74:29:c2:b8: f5:d3:a0:b9:db:ed:ab:b4:99:08:7a:6c:f3:2a:b2: 54:a2:58:db:90:17:a9:f4:b6:56:cb:ec:f8:f7:69: f8:2c:af:10:49:f5:9b:85:5a:ca:bf:e0:eb:01:00: 83:dc:17:b2:2d:31:84:16:ab:4f:b2:e4:c5:a0:af: 29:02:e7:8d:5d:85:62:93:b5:69:49:34:b7:fb:6a: de:a4:6d:5d:d0:ea:90:d8:3a:81:a2:44:9d:20:50: 22:83:f7:b4:56:57:97:aa:74:08:d3:c0:09:45:98: 54:96:fd:f1:e1:d2:2f:01:1d:9d:b1:72:c2:65:5f: 3c:8e:42:de:70:fd:65:8a:65:b4:06:9a:36:8a:cd: da:11:3a:ff:c1:f6:48:cb:7b:0a:19:57:b2:45:5d: ca:b2:1b:5a:5e:ff:bb:3f:79:2b:23:4a:d6:10:42: 8d:1d:08:b4:82:ea:3f:35:78:95:20:1f:6b:6d:47: 39:9e:d5:60:2b:f9:1a:78:43:bf:5c:fe:6e:23:a4: 72:14:1b:10:3a:85:2f:30:0b:8a:7e:00:99:6b:84: 10:77:15:7d:b1:93:fa:8b:69:68:f6:ef:89:55:15: 88:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:88:AB:1C:CA:A1:63:0A:5B:43:B7:D4:8E:16:02:4B:34:36:FD:A0 X509v3 Authority Key Identifier: keyid:D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:12:82:05:94:c3:01:76:e3:b8:49:1f:a1:2f:12:9b:08:10: c1:c1:7e:24:e5:7b:7f:f4:b0:94:90:ee:a1:56:63:0a:98:34: 61:13:4f:96:24:f5:43:0e:48:30:6d:b7:28:30:39:0a:77:c1: 77:d7:11:fc:68:73:d4:7f:f0:85:22:2b:ca:27:9f:79:cb:0a: 90:35:07:26:60:f8:e4:af:a3:e7:41:fd:18:87:a9:24:7e:94: 61:f0:02:c3:1f:08:08:7b:38:89:f4:ea:f6:d1:07:da:31:df: b6:c4:9b:a8:47:a2:2d:1f:76:af:0c:d8:92:2f:be:e8:8c:22: df:57:06:99:64:72:40:d8:91:e0:33:25:e4:78:1d:1b:2c:0f: d2:f1:c7:14:fc:08:c4:76:41:1e:50:b5:47:5c:27:49:28:03: a3:0c:9f:1d:73:b4:a3:99:ef:a6:91:ef:73:3b:56:f4:ac:2f: c3:0c:07:92:fb:8d:d3:98:da:8b:c1:b7:aa:44:e3:59:95:f9: 25:4f:3a:12:29:cd:85:2a:5e:b9:ab:61:4b:a1:82:54:f0:c6: d3:b2:c6:4e:aa:c8:ec:ef:25:43:9d:25:58:2c:26:a8:ae:8d: ca:98:7a:1a:72:d9:3a:7f:d5:40:59:c2:26:36:b2:3c:ed:77: 92:9f:9a:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLg0ZAm1JgcolDku2+z8CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZTY1YmVjNWM3NjVjODUwZWU4ZmY5N2NjNDFiMzgwMzFk MWQ4M2EwHhcNMjUxMjA2MDEwMTU4WhcNMjUxMjA3MDEwMTU4WjAzMTEwLwYDVQQD Eyg4Njg4YWIxY2NhYTE2MzBhNWI0M2I3ZDQ4ZTE2MDI0YjM0MzZmZGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDTgSllF7sL54bqAoBWCLXjg441c Af3MfHQpwrj106C52+2rtJkIemzzKrJUoljbkBep9LZWy+z492n4LK8QSfWbhVrK v+DrAQCD3BeyLTGEFqtPsuTFoK8pAueNXYVik7VpSTS3+2repG1d0OqQ2DqBokSd IFAig/e0VleXqnQI08AJRZhUlv3x4dIvAR2dsXLCZV88jkLecP1limW0Bpo2is3a ETr/wfZIy3sKGVeyRV3KshtaXv+7P3krI0rWEEKNHQi0guo/NXiVIB9rbUc5ntVg K/kaeEO/XP5uI6RyFBsQOoUvMAuKfgCZa4QQdxV9sZP6i2lo9u+JVRWIVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaIqxzKoWMKW0O31I4WAks0Nv2gMB8GA1UdIwQY MBaAFNDmW+xcdlyFDuj/l8xBs4Ax0dg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME9aYjdGeDJYSVVPNlAtWHpFR3pnREhSMkRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS82YmI3Y2ItZDBlZC00NjUwLWFkMGEt MjdhNDc0NTA1NDk5LzEvME9aYjdGeDJYSVVPNlAtWHpFR3pnREhSMkRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS82YmI3Y2ItZDBlZC00NjUwLWFkMGEtMjdhNDc0NTA1NDk5 LzEvME9aYjdGeDJYSVVPNlAtWHpFR3pnREhSMkRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyxKCBZTD AXbjuEkfoS8SmwgQwcF+JOV7f/SwlJDuoVZjCpg0YRNPliT1Qw5IMG23KDA5CnfB d9cR/Ghz1H/whSIryiefecsKkDUHJmD45K+j50H9GIepJH6UYfACwx8ICHs4ifTq 9tEH2jHftsSbqEeiLR92rwzYki++6Iwi31cGmWRyQNiR4DMl5HgdGywP0vHHFPwI xHZBHlC1R1wnSSgDowyfHXO0o5nvppHvcztW9KwvwwwHkvuN05jai8G3qkTjWZX5 JU86EinNhSpeuathS6GCVPDG07LGTqrI7O8lQ50lWCwmqK6Nyph6GnLZOn/VQFnC JjayPO13kp+a4w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:17:00 2025 by rpki-client