This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft File: a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft (raw, json) Hash identifier: 6r5WjiHcY4gXP9IAg7wHQrrjwTtSly6hg8XtntnGH4Q= Subject key identifier: 32:52:7A:32:BE:A0:3C:B2:C3:89:8B:C6:A3:B6:53:CD:67:AF:F1:D9 Authority key identifier: 6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54 Certificate issuer: /CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654 Certificate serial: 019AF31BD7049A80334E267ABEB26E632751 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft Manifest number: 0ECF Signing time: Sat 06 Dec 2025 10:01:19 +0000 Manifest this update: Sat 06 Dec 2025 10:01:19 +0000 Manifest next update: Sun 07 Dec 2025 10:01:19 +0000 Files and hashes: 1: a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl (hash: yBYYkYpWRdXqsZqJ8fcMGhcE3qRT5md3uD326KRYxj8=) 2: y1CXud9r4_KJCPJy5YSEoyYl1eg.roa (hash: kuTX8hxg4+tvv3VjP1J6iCQyHiFE3dinO8w9j6x97BA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:d7:04:9a:80:33:4e:26:7a:be:b2:6e:63:27:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654 Validity Not Before: Dec 6 10:01:19 2025 GMT Not After : Dec 7 10:01:19 2025 GMT Subject: CN=32527a32bea03cb2c3898bc6a3b653cd67aff1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:22:26:bf:3a:5d:98:2b:e6:12:fa:20:3b:74: af:5c:12:80:12:78:ea:e4:90:5e:92:88:5d:b1:db: 5f:f3:88:ba:c7:6d:50:f5:40:4a:b4:08:29:25:aa: a0:6b:d6:a6:42:0b:f1:2e:f1:96:1a:cc:07:ed:82: 26:c3:16:1a:34:f1:e3:7f:e5:5c:30:d6:37:8f:88: 48:ad:f2:4a:4c:8c:54:bd:af:a8:40:e7:69:af:18: 09:a3:8b:68:f1:75:ce:29:9e:c6:30:89:e5:8a:b9: 17:d8:1e:37:e2:ee:d1:db:87:8c:b4:43:ac:e2:42: d0:26:a5:14:73:3f:a8:e7:ac:4c:3c:1e:2d:e7:04: f2:6e:a6:d0:d6:f9:f5:c9:ea:c4:84:ae:5c:1e:22: 4e:a3:94:d8:50:fa:12:0e:4a:d7:31:f5:41:f8:0f: 68:12:30:a0:a5:bd:21:f4:0e:af:d8:12:1f:11:6d: 76:8a:6f:03:62:fb:36:6e:b0:74:b2:fe:2a:2f:42: 54:8d:1f:d2:4c:3a:cc:11:cf:91:b2:0e:20:56:8c: 89:bc:70:e2:f5:91:4d:4e:a3:77:42:31:46:af:73: f5:ab:14:c4:c5:78:ca:d4:3e:12:73:d4:1a:81:5c: a8:06:66:c4:c1:42:6d:ce:27:ec:dd:2f:fd:bd:66: da:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:52:7A:32:BE:A0:3C:B2:C3:89:8B:C6:A3:B6:53:CD:67:AF:F1:D9 X509v3 Authority Key Identifier: keyid:6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b6:6b:23:c8:b3:05:35:07:5c:c8:39:e7:62:fa:58:88:50: a2:66:ae:71:52:df:1c:fa:dc:4a:4f:f1:93:98:79:e2:41:82: 4d:a7:86:e6:47:72:be:c3:21:b5:2e:72:a9:14:81:5b:5c:89: 0c:47:cb:8a:d9:43:05:b4:89:d3:ba:09:25:e6:d6:f7:37:29: 89:82:cb:8c:ee:c5:ed:59:55:7b:d6:fc:98:35:61:a9:f8:55: ce:92:58:d5:85:e1:89:9b:71:d9:77:da:a1:7b:c8:65:90:ad: ec:24:2e:3b:e3:f9:65:05:68:3c:42:e1:05:d9:f0:8a:10:a7: ed:0e:60:39:6e:17:60:c0:29:44:de:ac:cd:e4:5a:51:6f:71: b3:80:8d:e7:f7:d0:23:4a:7b:d9:ed:ef:6e:1b:22:62:fe:62: 9d:d3:f7:79:1b:ae:1a:c4:bc:06:d1:4c:b9:c5:11:be:5a:d6: 96:fd:21:58:fb:3c:51:03:6b:ef:89:4e:a3:8c:99:38:90:a4: f4:bf:ce:4f:ce:c9:78:9f:6c:97:09:55:f4:b4:82:25:f8:9c: 37:9d:30:96:3d:e7:20:04:0f:b1:43:df:67:52:23:05:24:b3: 5c:4a:e3:43:ba:3b:79:41:10:d0:18:42:cf:6b:df:f5:66:1f: 51:13:e7:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9cEmoAzTiZ6vrJuYydRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZWM0ZTI5YzY4NDljNWY4MDg0MjhlNjY4NThmNGYwZWNm NGE2NTQwHhcNMjUxMjA2MTAwMTE5WhcNMjUxMjA3MTAwMTE5WjAzMTEwLwYDVQQD EygzMjUyN2EzMmJlYTAzY2IyYzM4OThiYzZhM2I2NTNjZDY3YWZmMWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyImvzpdmCvmEvogO3SvXBKAEnjq 5JBekohdsdtf84i6x21Q9UBKtAgpJaqga9amQgvxLvGWGswH7YImwxYaNPHjf+Vc MNY3j4hIrfJKTIxUva+oQOdprxgJo4to8XXOKZ7GMInlirkX2B434u7R24eMtEOs 4kLQJqUUcz+o56xMPB4t5wTybqbQ1vn1yerEhK5cHiJOo5TYUPoSDkrXMfVB+A9o EjCgpb0h9A6v2BIfEW12im8DYvs2brB0sv4qL0JUjR/STDrMEc+Rsg4gVoyJvHDi 9ZFNTqN3QjFGr3P1qxTExXjK1D4Sc9QagVyoBmbEwUJtzifs3S/9vWbanQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJSejK+oDyyw4mLxqO2U81nr/HZMB8GA1UdIwQY MBaAFGvsTinGhJxfgIQo5mhY9PDs9KZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mOGFjOTktMGVhYS00ZjUxLThkNTgt ZGJmYWVjZGM3ZWEzLzEvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mOGFjOTktMGVhYS00ZjUxLThkNTgtZGJmYWVjZGM3ZWEz LzEvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArZrI8iz BTUHXMg552L6WIhQomaucVLfHPrcSk/xk5h54kGCTaeG5kdyvsMhtS5yqRSBW1yJ DEfLitlDBbSJ07oJJebW9zcpiYLLjO7F7VlVe9b8mDVhqfhVzpJY1YXhiZtx2Xfa oXvIZZCt7CQuO+P5ZQVoPELhBdnwihCn7Q5gOW4XYMApRN6szeRaUW9xs4CN5/fQ I0p72e3vbhsiYv5indP3eRuuGsS8BtFMucURvlrWlv0hWPs8UQNr74lOo4yZOJCk 9L/OT87JeJ9slwlV9LSCJficN50wlj3nIAQPsUPfZ1IjBSSzXErjQ7o7eUEQ0BhC z2vf9WYfURPnLA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:45:30 2025 by rpki-client