This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft File: 6Oz45OybRCqVN0wqPH54Swdhh8w.mft (raw, json) Hash identifier: xunLRtrerY++PqnKlG30mmHvjEyieCpzZ9eZaWnP0YA= Subject key identifier: DC:7C:23:73:5B:6D:E8:E6:54:40:42:29:A3:5C:DF:05:CC:6C:44:8B Authority key identifier: E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC Certificate issuer: /CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc Certificate serial: 019AF54073E0A4C48A561B840E86E6A1D5C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 20:00:33 +0000 Manifest this update: Sat 06 Dec 2025 20:00:33 +0000 Manifest next update: Sun 07 Dec 2025 20:00:33 +0000 Files and hashes: 1: 1favdYYY_m115fJbPCqnNQTQC-4.roa (hash: JqdrpIAPsvsNkIpUiM7hC8jOVuzgCWUVOGVp30lphlM=) 2: 6Oz45OybRCqVN0wqPH54Swdhh8w.crl (hash: iSlkqmagSijK8nuVvm8vbOHuBMtLZPwni3jJfspbEhs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:73:e0:a4:c4:8a:56:1b:84:0e:86:e6:a1:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc Validity Not Before: Dec 6 20:00:33 2025 GMT Not After : Dec 7 20:00:33 2025 GMT Subject: CN=dc7c23735b6de8e654404229a35cdf05cc6c448b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:ed:67:4c:3e:1b:28:21:0c:98:37:e3:09: cc:08:81:9a:b9:ca:a6:ec:87:6a:39:a0:2b:e3:f9: d7:91:6b:27:83:14:a5:18:dc:eb:61:54:5f:30:73: e7:cb:26:e3:72:53:7e:a0:fc:36:49:14:4f:4d:b1: 64:5a:c3:a6:81:f5:98:2c:7e:54:0c:b0:33:5a:8a: c9:37:d8:0a:c9:ae:3d:66:c6:85:55:db:60:a9:dc: 6f:a4:67:ea:36:fc:34:b7:d6:73:2f:94:18:c5:6e: c4:93:32:61:9f:96:d8:a3:c7:58:b3:7e:bf:ad:13: 23:9b:a3:49:22:6b:c2:a8:72:1b:ea:f0:2b:a3:29: 42:35:3e:ae:8f:03:13:8c:f5:f9:bb:9d:a6:c3:64: 3b:dc:40:b1:cf:c6:67:fb:a6:6a:4a:db:5e:aa:cc: 63:e7:4c:9c:4e:aa:c7:09:9b:e5:03:d3:f8:43:da: 97:c2:90:96:d0:f7:eb:91:23:d2:24:eb:4b:1e:75: ea:7f:b6:c4:16:f4:2a:8a:5f:b5:54:7f:89:9e:a9: 2a:38:78:c3:06:b9:2e:d4:60:40:20:47:2b:2e:51: 1e:37:c7:4c:2f:e7:56:64:89:51:44:a2:b4:a6:27: b7:0a:76:7d:07:ab:41:f3:21:e0:31:55:7f:8e:62: e1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7C:23:73:5B:6D:E8:E6:54:40:42:29:A3:5C:DF:05:CC:6C:44:8B X509v3 Authority Key Identifier: keyid:E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:41:db:e4:0a:96:17:eb:0d:c6:32:4a:c4:2e:5e:f1:ff:aa: 4a:27:aa:ec:eb:07:f9:72:4d:ce:3c:4a:92:21:54:d4:3a:81: 27:74:c3:7a:0b:d0:ad:19:a8:20:7d:72:e6:bb:ae:a5:25:82: d7:a4:16:1d:82:00:67:4b:ff:13:ec:80:3e:d0:d6:d9:33:3a: 12:0b:69:e1:98:12:92:a7:b6:09:08:26:95:ba:7c:fe:85:70: 39:41:aa:9b:9a:a7:19:4d:a1:61:8b:9e:d2:c3:3a:4b:46:d6: 42:1c:d0:e0:f6:38:90:75:b5:cd:6c:45:a1:43:0b:5d:cb:8c: 5a:a7:08:a0:10:70:38:52:89:90:a0:5c:40:bc:18:69:f6:01: 7d:fb:6f:69:b1:c8:d2:c3:e6:6f:49:73:84:de:65:d4:86:fd: 9b:a7:42:c5:eb:cf:91:d9:4c:01:7a:f4:2c:23:68:23:f2:42: ec:54:e9:76:db:98:e5:88:6c:29:9a:55:24:f5:61:c4:8b:f8: 35:36:7e:13:2b:f0:99:78:87:98:bc:5a:91:9c:75:68:7b:51: c9:b0:6a:9a:25:01:20:15:d9:aa:4d:68:e2:b1:0a:47:39:71: cb:12:e7:5d:b5:64:d1:24:36:4b:a7:dd:6c:fb:6e:1f:3b:ee: 52:e4:d5:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QHPgpMSKVhuEDobmodXAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZWNmOGU0ZWM5YjQ0MmE5NTM3NGMyYTNjN2U3ODRiMDc2 MTg3Y2MwHhcNMjUxMjA2MjAwMDMzWhcNMjUxMjA3MjAwMDMzWjAzMTEwLwYDVQQD EyhkYzdjMjM3MzViNmRlOGU2NTQ0MDQyMjlhMzVjZGYwNWNjNmM0NDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUTtZ0w+GyghDJg34wnMCIGaucqm 7IdqOaAr4/nXkWsngxSlGNzrYVRfMHPnyybjclN+oPw2SRRPTbFkWsOmgfWYLH5U DLAzWorJN9gKya49ZsaFVdtgqdxvpGfqNvw0t9ZzL5QYxW7EkzJhn5bYo8dYs36/ rRMjm6NJImvCqHIb6vAroylCNT6ujwMTjPX5u52mw2Q73ECxz8Zn+6ZqStteqsxj 50ycTqrHCZvlA9P4Q9qXwpCW0PfrkSPSJOtLHnXqf7bEFvQqil+1VH+JnqkqOHjD Brku1GBAIEcrLlEeN8dML+dWZIlRRKK0pie3CnZ9B6tB8yHgMVV/jmLhXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNx8I3NbbejmVEBCKaNc3wXMbESLMB8GA1UdIwQY MBaAFOjs+OTsm0QqlTdMKjx+eEsHYYfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81ZTgwYjQtY2IxNi00YTM1LWI0Mjkt MjI5YWU5ZjcyOGQ2LzEvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81ZTgwYjQtY2IxNi00YTM1LWI0MjktMjI5YWU5ZjcyOGQ2 LzEvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIkHb5AqW F+sNxjJKxC5e8f+qSieq7OsH+XJNzjxKkiFU1DqBJ3TDegvQrRmoIH1y5ruupSWC 16QWHYIAZ0v/E+yAPtDW2TM6Egtp4ZgSkqe2CQgmlbp8/oVwOUGqm5qnGU2hYYue 0sM6S0bWQhzQ4PY4kHW1zWxFoUMLXcuMWqcIoBBwOFKJkKBcQLwYafYBfftvabHI 0sPmb0lzhN5l1Ib9m6dCxevPkdlMAXr0LCNoI/JC7FTpdtuY5YhsKZpVJPVhxIv4 NTZ+EyvwmXiHmLxakZx1aHtRybBqmiUBIBXZqk1o4rEKRzlxyxLnXbVk0SQ2S6fd bPtuHzvuUuTVLA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:01:36 2025 by rpki-client