This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft File: 6oss0R-FmHiYVHRQySF4Efzeoos.mft (raw, json) Hash identifier: tLEeJzWVB1wXJZ+rJkMqYNe49hD80E90jYZncDj7m4w= Subject key identifier: D8:63:8D:6F:FB:0A:88:7F:33:7F:BE:1D:B5:FF:4F:95:47:94:7F:12 Authority key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B Certificate issuer: /CN=ea8b2cd11f85987898547450c9217811fcdea28b Certificate serial: 019AF20976E5D7E562D7318EABD168D0988B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft Manifest number: 1106 Signing time: Sat 06 Dec 2025 05:01:37 +0000 Manifest this update: Sat 06 Dec 2025 05:01:37 +0000 Manifest next update: Sun 07 Dec 2025 05:01:37 +0000 Files and hashes: 1: 6oss0R-FmHiYVHRQySF4Efzeoos.crl (hash: 9vwUDS3oMOGORLMVroQSNyixPMHOjTqq9s/38NkQf6c=) 2: Wwi6glxCUUOadZqgxrOkdmMrALQ.roa (hash: ojxf/c/q5Kwb/LwjbQGsJ4lb3PD40U6FhYMP3ryQG10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:76:e5:d7:e5:62:d7:31:8e:ab:d1:68:d0:98:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea8b2cd11f85987898547450c9217811fcdea28b Validity Not Before: Dec 6 05:01:37 2025 GMT Not After : Dec 7 05:01:37 2025 GMT Subject: CN=d8638d6ffb0a887f337fbe1db5ff4f9547947f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:5b:4e:9c:4a:a4:38:08:66:56:c2:4d:02:b4: 88:d1:0f:81:44:5d:59:76:14:7f:ac:11:30:e0:d5: 07:45:40:14:18:6d:37:87:f4:c9:1d:8a:ea:78:e8: 41:99:01:ce:33:6a:ec:8c:64:b6:3f:9f:91:2a:82: 0e:1e:da:8e:c4:78:0d:be:dc:25:7f:6a:70:01:76: 9e:6b:a4:f8:13:5e:02:5a:46:de:53:bf:24:60:a7: a7:55:54:09:4a:47:9e:c2:6d:2f:65:a1:6f:2b:b5: 3c:ad:44:a2:ea:97:53:01:36:6a:b2:a5:62:fa:a0: 8c:86:fb:f1:7e:85:7e:a3:da:b8:6c:01:3e:1f:ec: 40:00:ab:0b:5d:31:62:7f:c1:22:d7:b8:9a:b2:1d: 22:99:1a:b1:d7:68:0a:50:fd:b7:d3:a9:93:23:84: 5f:ea:c2:d5:85:68:63:87:4e:11:b4:81:42:51:93: df:8e:16:72:5c:a6:1c:19:3c:bc:d5:31:62:23:2c: 0d:49:43:ac:96:53:b0:38:63:e4:8e:3d:a8:40:d5: 0a:2c:01:e9:f9:f1:f7:1b:7b:e7:c6:bc:a0:48:02: eb:00:c9:a5:71:d9:fa:5e:3e:fe:3c:06:0d:e7:87: c7:ff:ab:64:48:5a:ef:98:ac:a0:c9:de:01:df:5b: 6e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:63:8D:6F:FB:0A:88:7F:33:7F:BE:1D:B5:FF:4F:95:47:94:7F:12 X509v3 Authority Key Identifier: keyid:EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:24:c7:6e:20:38:cb:f7:18:73:29:2d:7d:e5:59:75:42:2f: e5:56:bc:dd:53:44:ad:6c:e5:4a:af:14:a9:f8:9f:8b:c5:31: 45:bf:c6:27:a3:d2:06:d1:9f:b1:51:a7:2c:56:bc:ab:6e:da: b0:13:d4:2f:6c:6a:76:bc:e9:b5:63:c1:77:78:f7:0d:cb:73: 81:aa:b5:58:33:0f:b6:6e:7b:1a:16:1c:8b:a0:af:17:39:64: 80:49:6b:9f:82:9d:70:cf:ab:d9:b0:e9:6e:0a:53:cf:8b:cb: 12:38:82:21:38:bc:c9:09:bf:78:67:a1:95:ca:68:88:1b:25: 95:30:13:2b:b5:d7:68:b9:37:74:82:bc:22:3a:a4:1c:e1:14: c7:c6:c5:71:8f:29:54:51:08:d2:07:8e:79:7e:0f:ff:62:06: f5:1f:43:0f:75:94:60:fa:15:71:b1:b6:3f:31:37:4b:7d:1e: db:3f:85:68:41:a3:56:22:56:1f:b3:bb:ed:0e:a1:b3:42:a9: 49:2b:51:1d:e2:9c:1d:57:7e:90:08:ee:9e:ab:19:31:f9:f1: da:42:97:48:72:12:bb:96:bf:44:78:57:e5:bc:80:f1:f7:5a: 22:4b:84:d7:d1:ae:45:1e:d2:24:3d:f3:7d:84:da:39:f1:db: ba:fe:c0:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXbl1+Vi1zGOq9Fo0JiLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhOGIyY2QxMWY4NTk4Nzg5ODU0NzQ1MGM5MjE3ODExZmNk ZWEyOGIwHhcNMjUxMjA2MDUwMTM3WhcNMjUxMjA3MDUwMTM3WjAzMTEwLwYDVQQD EyhkODYzOGQ2ZmZiMGE4ODdmMzM3ZmJlMWRiNWZmNGY5NTQ3OTQ3ZjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91tOnEqkOAhmVsJNArSI0Q+BRF1Z dhR/rBEw4NUHRUAUGG03h/TJHYrqeOhBmQHOM2rsjGS2P5+RKoIOHtqOxHgNvtwl f2pwAXaea6T4E14CWkbeU78kYKenVVQJSkeewm0vZaFvK7U8rUSi6pdTATZqsqVi +qCMhvvxfoV+o9q4bAE+H+xAAKsLXTFif8Ei17iash0imRqx12gKUP2306mTI4Rf 6sLVhWhjh04RtIFCUZPfjhZyXKYcGTy81TFiIywNSUOsllOwOGPkjj2oQNUKLAHp +fH3G3vnxrygSALrAMmlcdn6Xj7+PAYN54fH/6tkSFrvmKygyd4B31tufwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhjjW/7Coh/M3++HbX/T5VHlH8SMB8GA1UdIwQY MBaAFOqLLNEfhZh4mFR0UMkheBH83qKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8xZmY3ZWEtYmMxMy00YjU0LTg5OGQt MWQxY2QyMTUyNzVkLzEvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8xZmY3ZWEtYmMxMy00YjU0LTg5OGQtMWQxY2QyMTUyNzVk LzEvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyTHbiA4 y/cYcyktfeVZdUIv5Va83VNErWzlSq8Uqfifi8UxRb/GJ6PSBtGfsVGnLFa8q27a sBPUL2xqdrzptWPBd3j3Dctzgaq1WDMPtm57GhYci6CvFzlkgElrn4KdcM+r2bDp bgpTz4vLEjiCITi8yQm/eGehlcpoiBsllTATK7XXaLk3dIK8IjqkHOEUx8bFcY8p VFEI0geOeX4P/2IG9R9DD3WUYPoVcbG2PzE3S30e2z+FaEGjViJWH7O77Q6hs0Kp SStRHeKcHVd+kAjunqsZMfnx2kKXSHISu5a/RHhX5byA8fdaIkuE19GuRR7SJD3z fYTaOfHbuv7AhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:14 2025 by rpki-client