This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft File: X06OdhPaoX6FqhB4yOwlXPGNQio.mft (raw, json) Hash identifier: eVZmg/PFMjtrsQWRK0zHbLSmvPWrsq0denxmUjh1pz8= Subject key identifier: A8:14:D0:C4:7C:64:AC:6A:86:6D:6F:8E:92:1A:54:EE:CD:90:FD:34 Authority key identifier: 5F:4E:8E:76:13:DA:A1:7E:85:AA:10:78:C8:EC:25:5C:F1:8D:42:2A Certificate issuer: /CN=5f4e8e7613daa17e85aa1078c8ec255cf18d422a Certificate serial: 019AF12D96B3F22B5E7E237463D95A9304CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X06OdhPaoX6FqhB4yOwlXPGNQio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft Manifest number: 0E8C Signing time: Sat 06 Dec 2025 01:01:27 +0000 Manifest this update: Sat 06 Dec 2025 01:01:27 +0000 Manifest next update: Sun 07 Dec 2025 01:01:27 +0000 Files and hashes: 1: X06OdhPaoX6FqhB4yOwlXPGNQio.crl (hash: keX89PLh6iqCEWlRjUW2Qg7cZ0lbkdY4RsCO6nA45b8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.crl rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft rsync://rpki.ripe.net/repository/DEFAULT/X06OdhPaoX6FqhB4yOwlXPGNQio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:96:b3:f2:2b:5e:7e:23:74:63:d9:5a:93:04:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f4e8e7613daa17e85aa1078c8ec255cf18d422a Validity Not Before: Dec 6 01:01:27 2025 GMT Not After : Dec 7 01:01:27 2025 GMT Subject: CN=a814d0c47c64ac6a866d6f8e921a54eecd90fd34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d6:04:2b:0e:7d:31:15:ee:8b:fc:cc:d5:f7: 83:07:73:cc:a2:aa:99:d1:6f:77:3d:c5:53:13:ab: 5f:58:fd:8c:5e:d9:5d:5c:02:ac:b8:e7:b4:22:68: 5d:53:67:25:3f:21:de:19:0e:1f:87:1e:a5:81:2a: d1:ac:24:a2:6d:2a:e1:76:56:f9:80:2c:1a:0c:71: 30:c0:bd:67:52:16:1c:c7:a2:94:26:b4:64:b6:86: 46:d0:fc:dc:77:46:01:f6:ef:67:88:24:14:68:43: a3:79:ad:19:e5:f2:4b:02:6f:23:75:cd:d0:b7:cd: 62:ee:3b:2f:7a:46:02:2d:21:44:5c:bf:b6:2f:92: 72:83:6e:3c:a0:70:e9:fc:b2:72:6e:12:11:0e:30: 5e:ee:3b:93:9d:70:19:e8:f9:64:2f:af:e4:55:d2: 2d:24:00:8d:47:d2:3d:f5:9e:9d:12:76:ba:9b:f0: 0a:bf:5f:ce:a8:3b:94:36:a3:6b:83:10:04:fe:96: 23:85:a1:17:03:8c:1e:69:78:7d:53:03:ac:7d:8f: 92:65:53:9d:93:94:0c:47:a1:90:34:64:2e:72:ac: 08:59:f1:5f:a6:83:b5:92:d1:8a:28:b1:bc:1d:44: 5a:d4:a4:87:0d:9a:16:52:c6:29:0e:9d:20:7e:7b: 8e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:14:D0:C4:7C:64:AC:6A:86:6D:6F:8E:92:1A:54:EE:CD:90:FD:34 X509v3 Authority Key Identifier: keyid:5F:4E:8E:76:13:DA:A1:7E:85:AA:10:78:C8:EC:25:5C:F1:8D:42:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X06OdhPaoX6FqhB4yOwlXPGNQio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:e5:66:62:01:8b:52:e4:19:93:f3:fa:94:10:dd:91:85:83: 16:0a:b0:1b:78:80:5e:9f:df:93:45:af:c6:46:68:08:c1:94: 56:8e:f1:bb:97:ea:cb:c6:82:bc:11:a4:76:13:d1:a3:bf:9c: 21:ae:8f:78:25:0e:0d:32:65:ce:b5:f4:93:0d:6b:e2:e3:51: 5a:a7:3b:3a:e6:e8:ce:5e:b1:28:fd:38:fe:23:4a:a6:b3:4a: be:8a:9b:0e:b5:8e:62:60:f5:4a:43:db:c4:89:12:7e:ea:a7: dc:66:d9:e2:84:9a:c0:82:81:cc:62:6a:e3:3e:d1:98:19:29: 89:08:7f:fc:9b:af:d5:af:1d:b9:fb:ac:ef:66:96:02:e9:f9: 40:35:f4:b9:b0:11:a4:78:44:ec:e4:ea:69:6f:68:2a:a5:da: 16:1a:ba:f8:48:cf:7e:01:03:3a:3a:4a:bf:07:fc:e3:1c:ef: 98:dd:58:5c:c4:ba:4c:9c:b4:25:fc:4c:3d:85:ab:fb:3d:93: 3a:ca:ff:9e:57:f7:67:b8:97:2e:0e:e7:a6:10:09:7b:73:6c: 77:c0:45:95:87:a0:31:cb:0f:26:52:ef:b3:3c:18:f7:d0:d3: 3e:e5:c3:5e:ec:af:03:e5:99:cd:30:2d:08:24:50:1c:43:cb: 7a:2c:6c:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZaz8itefiN0Y9lakwTLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNGU4ZTc2MTNkYWExN2U4NWFhMTA3OGM4ZWMyNTVjZjE4 ZDQyMmEwHhcNMjUxMjA2MDEwMTI3WhcNMjUxMjA3MDEwMTI3WjAzMTEwLwYDVQQD EyhhODE0ZDBjNDdjNjRhYzZhODY2ZDZmOGU5MjFhNTRlZWNkOTBmZDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNYEKw59MRXui/zM1feDB3PMoqqZ 0W93PcVTE6tfWP2MXtldXAKsuOe0ImhdU2clPyHeGQ4fhx6lgSrRrCSibSrhdlb5 gCwaDHEwwL1nUhYcx6KUJrRktoZG0Pzcd0YB9u9niCQUaEOjea0Z5fJLAm8jdc3Q t81i7jsvekYCLSFEXL+2L5Jyg248oHDp/LJybhIRDjBe7juTnXAZ6PlkL6/kVdIt JACNR9I99Z6dEna6m/AKv1/OqDuUNqNrgxAE/pYjhaEXA4weaXh9UwOsfY+SZVOd k5QMR6GQNGQucqwIWfFfpoO1ktGKKLG8HURa1KSHDZoWUsYpDp0gfnuOWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgU0MR8ZKxqhm1vjpIaVO7NkP00MB8GA1UdIwQY MBaAFF9OjnYT2qF+haoQeMjsJVzxjUIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDA2T2RoUGFvWDZGcWhCNHlPd2xYUEdOUWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83MGJmZDctNzExZC00YWQ5LTgyZjct MmYzYzAwMzJlNDQ2LzEvWDA2T2RoUGFvWDZGcWhCNHlPd2xYUEdOUWlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy83MGJmZDctNzExZC00YWQ5LTgyZjctMmYzYzAwMzJlNDQ2 LzEvWDA2T2RoUGFvWDZGcWhCNHlPd2xYUEdOUWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWeVmYgGL UuQZk/P6lBDdkYWDFgqwG3iAXp/fk0WvxkZoCMGUVo7xu5fqy8aCvBGkdhPRo7+c Ia6PeCUODTJlzrX0kw1r4uNRWqc7Oubozl6xKP04/iNKprNKvoqbDrWOYmD1SkPb xIkSfuqn3GbZ4oSawIKBzGJq4z7RmBkpiQh//Juv1a8dufus72aWAun5QDX0ubAR pHhE7OTqaW9oKqXaFhq6+EjPfgEDOjpKvwf84xzvmN1YXMS6TJy0JfxMPYWr+z2T Osr/nlf3Z7iXLg7nphAJe3Nsd8BFlYegMcsPJlLvszwY99DTPuXDXuyvA+WZzTAt CCRQHEPLeixsDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:05 2025 by rpki-client