This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft File: a0I7KaGCk2si34-YJt1YOgBZE0o.mft (raw, json) Hash identifier: PsT/SOqqJ16nL/u8E5dF1eLqUxgp4w3W84GpVChPGis= Subject key identifier: 35:B8:07:70:E9:CD:2F:46:26:3B:AF:24:B6:FA:16:47:57:4F:04:BE Authority key identifier: 6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A Certificate issuer: /CN=6b423b29a182936b22df8f9826dd583a0059134a Certificate serial: 019AF12E8D72F277B51F8A18E2268C8B56D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft Manifest number: 0886 Signing time: Sat 06 Dec 2025 01:02:30 +0000 Manifest this update: Sat 06 Dec 2025 01:02:30 +0000 Manifest next update: Sun 07 Dec 2025 01:02:30 +0000 Files and hashes: 1: U_Lbl4dQRImqSP6zV_MXvnCzVro.roa (hash: k+fOfvjUjOj8hU8vOKkhlBwBO0V4NXX3JC8vdkG/viY=) 2: a0I7KaGCk2si34-YJt1YOgBZE0o.crl (hash: tGu6T1xBd7TwRdb7zHwddXVtVQrR7DPKa3/s6w+pDvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:8d:72:f2:77:b5:1f:8a:18:e2:26:8c:8b:56:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b423b29a182936b22df8f9826dd583a0059134a Validity Not Before: Dec 6 01:02:30 2025 GMT Not After : Dec 7 01:02:30 2025 GMT Subject: CN=35b80770e9cd2f46263baf24b6fa1647574f04be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0e:06:44:de:ea:37:a7:f9:78:80:2f:e1:72: 2c:8c:75:c6:49:93:68:39:16:fd:bd:fc:02:9e:45: 9c:39:bc:31:d1:de:b8:1f:b9:29:69:43:74:84:98: 07:4b:a9:b8:00:bb:27:fa:15:c8:77:27:d0:2a:da: ea:b8:2a:63:93:d8:73:08:67:c5:d7:cc:27:cb:d3: ac:de:14:37:00:8f:c5:21:f6:3a:01:95:d8:0d:5c: 68:3a:09:c0:2a:ab:25:10:11:d6:35:fd:f4:1c:f8: 8e:8b:2a:0e:71:a0:f8:4c:8c:aa:86:6d:ed:43:d1: 75:de:bc:93:f3:cb:18:7b:1d:99:8f:01:26:9b:8a: ec:d2:4d:d2:8c:68:42:fb:0b:a0:84:79:77:82:21: b5:4d:e9:97:45:8f:9c:d0:95:2e:58:f0:c2:c6:8f: bb:68:57:71:3c:6d:09:5e:4f:6b:fa:3d:63:2e:01: 40:7c:96:c2:13:5b:30:81:1f:40:91:63:3b:37:11: 9a:f6:27:c1:e4:0c:4a:6c:c5:46:ca:1b:cd:14:65: 78:29:ad:cc:c1:5f:b1:8e:4f:04:2a:2b:41:3d:8e: e8:ab:1c:36:26:ec:8a:61:a7:a7:17:2a:78:a5:cd: c1:3f:1d:5e:8b:a7:29:b6:84:87:8a:7b:d5:a4:32: fa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B8:07:70:E9:CD:2F:46:26:3B:AF:24:B6:FA:16:47:57:4F:04:BE X509v3 Authority Key Identifier: keyid:6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:47:2e:c8:c4:b5:d6:00:6f:7d:1a:4c:a3:87:95:95:b9:f9: eb:94:6a:9f:68:17:37:5c:f6:4b:c3:77:35:14:4e:b0:90:49: 52:11:74:f1:0a:f9:e7:10:16:50:60:dd:18:f2:cc:1a:c5:91: c8:c9:68:55:1e:f7:0e:30:91:fc:fe:b7:0b:5c:02:be:96:e6: 69:d6:dd:29:8b:20:c5:ad:db:05:7f:91:0b:ad:75:ab:18:ed: 96:b4:20:c7:00:91:61:58:14:01:8e:3c:ad:af:a9:d8:0d:e8: 99:85:e1:3c:28:8f:08:b7:4c:b2:61:d1:30:85:04:9b:64:18: 1e:a5:30:26:99:1b:9d:d4:0c:e8:bb:f4:f8:0f:bd:82:78:00: 04:0c:21:8d:d0:e0:78:ed:76:6d:f2:89:56:52:72:97:fc:3e: 41:03:f6:92:93:ca:2d:26:d1:62:a7:7a:1a:93:ab:12:22:b4: 16:46:63:27:d6:9a:85:4c:d0:e6:73:96:b1:1f:93:30:09:4c: c1:38:64:a3:fb:52:b4:57:15:0d:c3:f2:f4:0c:55:07:c5:d3: 78:91:39:d2:8f:7f:ae:a3:a6:99:92:09:f0:9c:1d:89:e9:ef: 93:8b:02:5a:7e:ee:1a:b9:5e:7c:84:da:12:bd:d2:58:cc:ac: b2:70:79:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLo1y8ne1H4oY4iaMi1bZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNDIzYjI5YTE4MjkzNmIyMmRmOGY5ODI2ZGQ1ODNhMDA1 OTEzNGEwHhcNMjUxMjA2MDEwMjMwWhcNMjUxMjA3MDEwMjMwWjAzMTEwLwYDVQQD EygzNWI4MDc3MGU5Y2QyZjQ2MjYzYmFmMjRiNmZhMTY0NzU3NGYwNGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA4GRN7qN6f5eIAv4XIsjHXGSZNo ORb9vfwCnkWcObwx0d64H7kpaUN0hJgHS6m4ALsn+hXIdyfQKtrquCpjk9hzCGfF 18wny9Os3hQ3AI/FIfY6AZXYDVxoOgnAKqslEBHWNf30HPiOiyoOcaD4TIyqhm3t Q9F13ryT88sYex2ZjwEmm4rs0k3SjGhC+wughHl3giG1TemXRY+c0JUuWPDCxo+7 aFdxPG0JXk9r+j1jLgFAfJbCE1swgR9AkWM7NxGa9ifB5AxKbMVGyhvNFGV4Ka3M wV+xjk8EKitBPY7oqxw2JuyKYaenFyp4pc3BPx1ei6cptoSHinvVpDL6eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDW4B3DpzS9GJjuvJLb6FkdXTwS+MB8GA1UdIwQY MBaAFGtCOymhgpNrIt+PmCbdWDoAWRNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTBJN0thR0NrMnNpMzQtWUp0MVlPZ0JaRTBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iYTBmZjAtMmJlMi00Mjg2LWEyZDct NThhOGEzM2Q1NGE2LzEvYTBJN0thR0NrMnNpMzQtWUp0MVlPZ0JaRTBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iYTBmZjAtMmJlMi00Mjg2LWEyZDctNThhOGEzM2Q1NGE2 LzEvYTBJN0thR0NrMnNpMzQtWUp0MVlPZ0JaRTBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0cuyMS1 1gBvfRpMo4eVlbn565Rqn2gXN1z2S8N3NRROsJBJUhF08Qr55xAWUGDdGPLMGsWR yMloVR73DjCR/P63C1wCvpbmadbdKYsgxa3bBX+RC611qxjtlrQgxwCRYVgUAY48 ra+p2A3omYXhPCiPCLdMsmHRMIUEm2QYHqUwJpkbndQM6Lv0+A+9gngABAwhjdDg eO12bfKJVlJyl/w+QQP2kpPKLSbRYqd6GpOrEiK0FkZjJ9aahUzQ5nOWsR+TMAlM wThko/tStFcVDcPy9AxVB8XTeJE50o9/rqOmmZIJ8Jwdienvk4sCWn7uGrlefITa Er3SWMyssnB5ug== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:39 2025 by rpki-client