This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft File: _oN5mWfs0ExTYUie5M-gmM5DaHE.mft (raw, json) Hash identifier: 8qPwI9Mid1w7ycJhWBjWz8LsNDUSLgtYLu8zS2Tmj6g= Subject key identifier: 6A:F8:F6:E4:19:06:EC:55:DA:AA:13:CD:06:20:5A:0F:1A:C6:13:31 Authority key identifier: FE:83:79:99:67:EC:D0:4C:53:61:48:9E:E4:CF:A0:98:CE:43:68:71 Certificate issuer: /CN=fe83799967ecd04c5361489ee4cfa098ce436871 Certificate serial: 019AF31C20C08C627543E2987A6EDCA3B520 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:01:37 +0000 Manifest this update: Sat 06 Dec 2025 10:01:37 +0000 Manifest next update: Sun 07 Dec 2025 10:01:37 +0000 Files and hashes: 1: _oN5mWfs0ExTYUie5M-gmM5DaHE.crl (hash: l8TM4j45ZlGrd79SPH5ecM8yBAbGNuFNZE7UJYvzMJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.crl rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:20:c0:8c:62:75:43:e2:98:7a:6e:dc:a3:b5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe83799967ecd04c5361489ee4cfa098ce436871 Validity Not Before: Dec 6 10:01:37 2025 GMT Not After : Dec 7 10:01:37 2025 GMT Subject: CN=6af8f6e41906ec55daaa13cd06205a0f1ac61331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:15:aa:ad:fd:4d:4c:1a:a5:4b:52:f5:04:33: 24:45:43:f0:a5:c1:0d:4c:66:93:f5:5b:0e:37:9c: 79:62:42:82:f9:49:fb:d7:74:ce:97:c8:4f:f8:3a: 03:12:e1:02:d2:7e:fa:6f:1c:fd:5d:aa:54:c7:23: 97:aa:7e:50:06:28:74:10:10:45:97:82:87:f2:ae: ac:4b:3d:49:16:0b:da:da:1c:ae:f1:4b:c2:09:1e: e2:0d:99:23:53:f3:88:50:33:cc:b7:af:4d:3e:b2: 45:5b:e0:ce:bd:81:27:db:5a:54:84:3d:ab:46:82: 67:8c:04:b1:2e:4b:5f:9f:9a:c2:21:22:45:ec:b3: d2:40:4e:80:3e:62:96:57:1e:f9:89:77:82:f6:e3: c0:f0:d9:65:b5:78:1c:e3:6c:d0:23:bc:c0:94:98: 34:f8:f2:bf:25:ff:81:23:e5:d7:a8:56:dc:b8:11: 98:60:d3:d8:f4:08:a1:0b:ad:ca:57:09:d3:0a:9d: 0c:a0:5a:97:94:01:e2:0c:1d:fe:6c:9d:20:7b:bc: 57:cd:39:f3:fd:ab:eb:07:5f:f7:e9:a1:e5:c3:fe: 74:ba:cb:82:de:3c:f8:fa:80:30:8b:50:2e:58:55: 03:e6:e7:ca:2c:f6:10:f1:ee:c1:e8:25:0a:e0:fa: 71:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F8:F6:E4:19:06:EC:55:DA:AA:13:CD:06:20:5A:0F:1A:C6:13:31 X509v3 Authority Key Identifier: keyid:FE:83:79:99:67:EC:D0:4C:53:61:48:9E:E4:CF:A0:98:CE:43:68:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:a5:2f:75:76:b6:4a:7f:e8:52:69:5c:a4:3b:0d:61:1a:4b: e1:0e:78:55:de:9f:1e:ba:60:07:e9:3f:b8:be:f4:2a:03:b9: 8b:fc:99:90:a8:72:ec:1a:87:4d:95:c8:1b:f6:37:f4:7b:39: 6e:94:d7:3a:dd:e8:31:9e:27:74:80:96:2e:ea:75:4d:fa:45: 1d:61:9e:6b:51:3d:2a:3b:25:f9:ef:ff:dc:ed:4e:ff:a4:ce: 46:f2:a1:ff:ca:29:77:49:59:8c:7d:db:21:7f:45:4b:08:da: 6b:e3:05:56:7a:b4:df:a2:0e:a8:14:a8:9f:6e:41:dd:95:da: 16:1e:b4:6d:e5:41:c8:d4:b0:d1:10:69:61:16:ba:26:a9:e8: 80:02:9d:d5:28:65:b8:62:e4:d6:45:0e:80:2e:43:df:70:bc: 99:55:8e:eb:cf:3b:09:ad:9f:86:a4:45:21:64:4a:8d:3f:b8: 7e:03:d6:98:82:8d:89:ea:1b:36:c9:65:fc:6e:24:f7:26:d9: d6:3b:84:61:2e:bf:e3:37:20:d6:f2:ad:16:ea:bf:92:37:dd: cb:9e:7d:d8:06:f2:da:6a:0a:f2:83:85:f7:be:b9:af:8c:f7: a8:d6:ea:b7:f0:e5:51:a5:8a:e6:d8:a5:8d:29:02:bb:35:d7: 4a:6c:08:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCDAjGJ1Q+KYem7co7UgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlODM3OTk5NjdlY2QwNGM1MzYxNDg5ZWU0Y2ZhMDk4Y2U0 MzY4NzEwHhcNMjUxMjA2MTAwMTM3WhcNMjUxMjA3MTAwMTM3WjAzMTEwLwYDVQQD Eyg2YWY4ZjZlNDE5MDZlYzU1ZGFhYTEzY2QwNjIwNWEwZjFhYzYxMzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBWqrf1NTBqlS1L1BDMkRUPwpcEN TGaT9VsON5x5YkKC+Un713TOl8hP+DoDEuEC0n76bxz9XapUxyOXqn5QBih0EBBF l4KH8q6sSz1JFgva2hyu8UvCCR7iDZkjU/OIUDPMt69NPrJFW+DOvYEn21pUhD2r RoJnjASxLktfn5rCISJF7LPSQE6APmKWVx75iXeC9uPA8NlltXgc42zQI7zAlJg0 +PK/Jf+BI+XXqFbcuBGYYNPY9AihC63KVwnTCp0MoFqXlAHiDB3+bJ0ge7xXzTnz /avrB1/36aHlw/50usuC3jz4+oAwi1AuWFUD5ufKLPYQ8e7B6CUK4PpxtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGr49uQZBuxV2qoTzQYgWg8axhMxMB8GA1UdIwQY MBaAFP6DeZln7NBMU2FInuTPoJjOQ2hxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX29ONW1XZnMwRXhUWVVpZTVNLWdtTTVEYUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85YWYwMzMtMjM0ZC00NDA0LTgwOTYt YzczYmVkY2RjYTZkLzEvX29ONW1XZnMwRXhUWVVpZTVNLWdtTTVEYUhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC85YWYwMzMtMjM0ZC00NDA0LTgwOTYtYzczYmVkY2RjYTZk LzEvX29ONW1XZnMwRXhUWVVpZTVNLWdtTTVEYUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqUvdXa2 Sn/oUmlcpDsNYRpL4Q54Vd6fHrpgB+k/uL70KgO5i/yZkKhy7BqHTZXIG/Y39Hs5 bpTXOt3oMZ4ndICWLup1TfpFHWGea1E9Kjsl+e//3O1O/6TORvKh/8opd0lZjH3b IX9FSwjaa+MFVnq036IOqBSon25B3ZXaFh60beVByNSw0RBpYRa6JqnogAKd1Shl uGLk1kUOgC5D33C8mVWO6887Ca2fhqRFIWRKjT+4fgPWmIKNieobNsll/G4k9ybZ 1juEYS6/4zcg1vKtFuq/kjfdy5592Aby2moK8oOF9765r4z3qNbqt/DlUaWK5til jSkCuzXXSmwIsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:47 2025 by rpki-client