This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft File: o75019azdkTAG-1V4NsxRkuYYMY.mft (raw, json) Hash identifier: 5LyP3+ZwKla5bTgl3AXTfN0VcnA/9K0OFTPfVXGoyEQ= Subject key identifier: A7:0A:3E:36:21:00:2F:D4:AB:DB:AC:BF:B6:F5:22:A7:22:12:64:19 Authority key identifier: A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6 Certificate issuer: /CN=a3be74d7d6b37644c01bed55e0db31464b9860c6 Certificate serial: 019AF19B70C7DEE2773E22B0F29DF2470C79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft Manifest number: 06 Signing time: Sat 06 Dec 2025 03:01:27 +0000 Manifest this update: Sat 06 Dec 2025 03:01:27 +0000 Manifest next update: Sun 07 Dec 2025 03:01:27 +0000 Files and hashes: 1: 6Fg7wtAwutmcLUzAjmzQTBDc-14.roa (hash: cgk4tzeyjppTkUWpcIbNvFnqDx/8dz1BTIJGLNKeMY4=) 2: o75019azdkTAG-1V4NsxRkuYYMY.crl (hash: WpjK5qDCJTVp/t3wrGJ+91OIBrBubtzYop0Ab3GtwHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:70:c7:de:e2:77:3e:22:b0:f2:9d:f2:47:0c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3be74d7d6b37644c01bed55e0db31464b9860c6 Validity Not Before: Dec 6 03:01:27 2025 GMT Not After : Dec 7 03:01:27 2025 GMT Subject: CN=a70a3e3621002fd4abdbacbfb6f522a722126419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:90:21:5a:2b:f6:bb:98:a3:2e:e3:4d:61:40: 48:56:a8:3a:bf:51:39:df:74:7c:40:60:49:ae:9a: f2:15:ca:f7:1e:0f:3e:09:e4:93:bf:2b:8c:b6:b9: 9e:d7:33:d3:46:e1:ed:42:2d:e1:0a:57:6c:5b:36: a9:65:89:4a:18:c1:0e:62:13:55:86:75:7a:95:e5: 4e:32:98:52:c7:a5:63:1e:2d:f9:17:98:72:07:32: d5:cd:2d:9b:7b:b4:d2:6e:25:a6:8a:5e:15:c6:b7: cc:88:dd:61:40:4c:72:8b:b0:b0:db:4b:45:52:6e: c2:bf:54:8d:80:54:12:3f:2d:69:52:d8:13:1c:98: 04:4f:95:46:33:31:ac:43:80:ea:ad:2d:35:46:e7: cd:d2:a9:54:0d:bb:8b:4a:84:d0:27:79:d0:21:76: 85:bd:08:5e:6d:82:31:62:f6:38:cb:c3:76:27:d4: b2:75:26:ca:65:d5:49:24:e4:de:78:78:04:52:14: 2b:46:0c:c3:2b:fe:60:f6:aa:78:09:aa:ed:ea:78: e6:03:9c:1c:4d:75:d0:f4:17:22:cb:76:45:a8:b0: b2:cd:ab:c6:bd:79:ee:83:54:7e:0f:5f:9e:67:b3: 35:a8:81:51:47:5f:5c:dd:00:5d:c8:4b:cc:e2:62: 1d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0A:3E:36:21:00:2F:D4:AB:DB:AC:BF:B6:F5:22:A7:22:12:64:19 X509v3 Authority Key Identifier: keyid:A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:20:a5:25:3d:dc:5b:33:8e:78:0e:33:35:77:b9:1c:c0:e4: 1a:af:57:54:c1:a3:1a:bc:39:08:f4:43:47:12:b1:c3:7d:b7: a1:78:e6:34:a3:9c:f9:b0:6c:ef:40:ee:c6:77:d1:c6:1c:5a: a5:b3:cb:0b:f2:9d:73:9a:bd:81:c6:00:09:ec:42:56:df:72: 81:0b:1b:7e:5c:8e:59:40:97:2f:6e:3d:b6:9d:cb:43:86:b2: b1:c2:69:69:60:ec:36:4e:fa:c3:2e:11:26:10:70:04:79:63: 3c:65:c6:c9:f1:ab:db:ca:c1:2c:02:28:6b:88:9f:10:55:7b: e1:e1:4e:42:6a:1a:6c:85:79:b4:a3:43:4e:6f:5d:c6:84:96: b6:df:7e:20:97:f5:93:3a:50:b0:92:f6:e5:fd:2c:12:10:61: b6:fd:6e:c2:09:61:28:7c:a6:92:11:39:79:3f:30:3a:79:46: c1:57:09:c1:1e:46:3f:ef:d0:bb:95:6f:5d:cb:05:2c:89:08: 89:73:5b:39:73:bd:fd:d2:40:e3:d0:39:8d:8a:f9:1e:75:09: b7:73:1a:0c:54:49:8d:1b:8f:ae:eb:45:e7:c9:d4:09:9a:6d: b9:48:d1:a6:53:60:3f:3d:68:d2:55:19:71:fc:e1:bb:07:c9: ea:8b:43:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3DH3uJ3PiKw8p3yRwx5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYmU3NGQ3ZDZiMzc2NDRjMDFiZWQ1NWUwZGIzMTQ2NGI5 ODYwYzYwHhcNMjUxMjA2MDMwMTI3WhcNMjUxMjA3MDMwMTI3WjAzMTEwLwYDVQQD EyhhNzBhM2UzNjIxMDAyZmQ0YWJkYmFjYmZiNmY1MjJhNzIyMTI2NDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5AhWiv2u5ijLuNNYUBIVqg6v1E5 33R8QGBJrpryFcr3Hg8+CeSTvyuMtrme1zPTRuHtQi3hCldsWzapZYlKGMEOYhNV hnV6leVOMphSx6VjHi35F5hyBzLVzS2be7TSbiWmil4VxrfMiN1hQExyi7Cw20tF Um7Cv1SNgFQSPy1pUtgTHJgET5VGMzGsQ4DqrS01RufN0qlUDbuLSoTQJ3nQIXaF vQhebYIxYvY4y8N2J9SydSbKZdVJJOTeeHgEUhQrRgzDK/5g9qp4Cart6njmA5wc TXXQ9Bciy3ZFqLCyzavGvXnug1R+D1+eZ7M1qIFRR19c3QBdyEvM4mIdIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcKPjYhAC/Uq9usv7b1IqciEmQZMB8GA1UdIwQY MBaAFKO+dNfWs3ZEwBvtVeDbMUZLmGDGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzc1MDE5YXpka1RBRy0xVjROc3hSa3VZWU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85NjFhY2EtZjQyNS00ODg3LWFmNGEt Y2ZhMDYxMDMwMzQ2LzEvbzc1MDE5YXpka1RBRy0xVjROc3hSa3VZWU1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi85NjFhY2EtZjQyNS00ODg3LWFmNGEtY2ZhMDYxMDMwMzQ2 LzEvbzc1MDE5YXpka1RBRy0xVjROc3hSa3VZWU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvCClJT3c WzOOeA4zNXe5HMDkGq9XVMGjGrw5CPRDRxKxw323oXjmNKOc+bBs70DuxnfRxhxa pbPLC/Kdc5q9gcYACexCVt9ygQsbflyOWUCXL249tp3LQ4ayscJpaWDsNk76wy4R JhBwBHljPGXGyfGr28rBLAIoa4ifEFV74eFOQmoabIV5tKNDTm9dxoSWtt9+IJf1 kzpQsJL25f0sEhBhtv1uwglhKHymkhE5eT8wOnlGwVcJwR5GP+/Qu5VvXcsFLIkI iXNbOXO9/dJA49A5jYr5HnUJt3MaDFRJjRuPrutF58nUCZptuUjRplNgPz1o0lUZ cfzhuwfJ6otDmg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:56:10 2025 by rpki-client