This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json) Hash identifier: BL6X2Klyr/o/46Gwi6Meu1jjEuXFrfQJU4eXBh0G9lk= Subject key identifier: DB:F3:7E:FF:F8:4B:4D:CA:D3:78:6A:A8:6D:90:05:26:E5:A8:6B:B8 Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52 Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352 Certificate serial: 019AF31B94A7364E8E4FA5B00ACFC8ABBE8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 10:01:02 +0000 Manifest this update: Sat 06 Dec 2025 10:01:02 +0000 Manifest next update: Sun 07 Dec 2025 10:01:02 +0000 Files and hashes: 1: 3jF5JkqZzpwDg2CUyKrMHDx4QqM.roa (hash: Ct22y3Kn4dpY61h6fsUyGmJkOxPrtpccRirSLUmpVtY=) 2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: e49jl3GJNlQ5gjzvcrwfYeAxK+/eIcBabIsMDkCKdEY=) 3: caUBuUxU945I82DD831l9nsD-jo.roa (hash: fcv+cYVXy7t+Ay1RhyoB8XEGTuHAujkCAZt9GTjK/IA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:94:a7:36:4e:8e:4f:a5:b0:0a:cf:c8:ab:be:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352 Validity Not Before: Dec 6 10:01:02 2025 GMT Not After : Dec 7 10:01:02 2025 GMT Subject: CN=dbf37efff84b4dcad3786aa86d900526e5a86bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e4:ed:67:40:6a:79:04:3d:b4:24:b9:7d:f3: d7:b5:a8:fd:fa:9b:a0:ae:03:60:8f:71:62:14:27: ba:f7:74:6f:bb:65:c1:22:3a:4c:8b:5d:e1:b2:57: 34:46:9d:dd:65:55:14:9a:88:11:a0:65:f9:e3:1b: 27:b1:5d:9d:17:28:70:06:01:4c:86:b1:aa:1d:ef: ff:a4:f2:ca:00:19:ac:d4:b1:0e:d1:82:39:87:47: 0c:5b:9a:78:a1:72:24:9a:ed:c9:33:00:29:9a:d9: ab:a0:88:13:c4:c1:88:92:a0:40:29:41:08:cd:31: b0:7f:85:df:1c:fa:35:5f:16:01:3b:79:b1:82:cb: 94:3f:24:aa:6a:3b:b8:ff:21:11:f2:6d:a9:f8:d9: e9:57:06:ca:1c:79:3d:51:96:2b:fd:2f:3e:a0:fa: c5:9f:b1:d5:cd:2d:1f:8b:4d:be:f0:07:6d:37:3a: e8:58:99:e0:db:18:07:c2:91:df:0f:42:98:0b:4e: 95:35:2a:e3:16:9a:72:ac:0b:25:c8:76:60:63:fd: 71:0c:19:43:41:1c:34:f9:00:7d:04:77:2a:a8:90: e2:97:f6:41:30:d9:49:8f:2a:aa:29:9c:66:a4:13: 14:eb:79:2a:c0:3f:b4:45:1a:dc:4d:ea:37:df:98: e5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F3:7E:FF:F8:4B:4D:CA:D3:78:6A:A8:6D:90:05:26:E5:A8:6B:B8 X509v3 Authority Key Identifier: keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:6f:c6:72:a7:4d:97:6c:e2:e3:b2:a3:0b:20:35:f5:3e:cf: 03:e1:f1:26:ff:f4:86:39:36:8f:b6:92:f8:a7:65:53:bc:2b: 3e:de:34:75:30:8b:ed:79:9a:b5:f8:24:f5:f3:22:50:4b:4a: 1e:d1:5c:7e:47:94:55:55:37:0d:cb:9f:8d:c5:82:17:c7:8b: 13:c2:da:9f:00:11:6e:ad:ae:9c:66:8c:ee:1d:37:a7:0e:0a: 46:ec:84:8a:cb:77:aa:eb:3a:a5:3f:d4:cc:30:63:6a:4f:3d: 91:8f:30:13:7d:61:d9:71:f9:8d:30:a8:e0:9f:75:06:db:73: 1a:dc:88:2f:eb:05:f5:f6:c2:cc:83:49:c5:a6:45:d5:7a:5a: bb:09:2d:d2:57:46:bb:c6:2e:06:56:59:59:47:43:f7:58:dd: da:23:64:7f:52:44:65:ce:98:5d:9e:a1:49:60:22:2f:f1:28: 32:53:c8:d2:42:88:47:09:51:63:61:48:b5:e1:01:1f:8a:fb: 6f:49:5b:0d:8e:bd:3c:55:b1:a0:94:a7:03:04:8d:fb:d8:fb: 0e:87:45:1a:b6:38:0c:f8:99:98:34:c9:c0:d3:96:4c:03:2e: 90:23:60:dd:dc:00:ba:ca:cb:fc:a6:68:c4:10:cf:04:da:88: 48:9b:f1:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5SnNk6OT6WwCs/Iq76PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYTE3ODJiNmFmYmE3YzZiY2YwNzBiOTNmZWQ0Y2M4NGFm NDEzNTIwHhcNMjUxMjA2MTAwMTAyWhcNMjUxMjA3MTAwMTAyWjAzMTEwLwYDVQQD EyhkYmYzN2VmZmY4NGI0ZGNhZDM3ODZhYTg2ZDkwMDUyNmU1YTg2YmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OTtZ0BqeQQ9tCS5ffPXtaj9+pug rgNgj3FiFCe693Rvu2XBIjpMi13hslc0Rp3dZVUUmogRoGX54xsnsV2dFyhwBgFM hrGqHe//pPLKABms1LEO0YI5h0cMW5p4oXIkmu3JMwApmtmroIgTxMGIkqBAKUEI zTGwf4XfHPo1XxYBO3mxgsuUPySqaju4/yER8m2p+NnpVwbKHHk9UZYr/S8+oPrF n7HVzS0fi02+8AdtNzroWJng2xgHwpHfD0KYC06VNSrjFppyrAslyHZgY/1xDBlD QRw0+QB9BHcqqJDil/ZBMNlJjyqqKZxmpBMU63kqwD+0RRrcTeo335jl9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvzfv/4S03K03hqqG2QBSblqGu4MB8GA1UdIwQY MBaAFDuheCtq+6fGvPBwuT/tTMhK9BNSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZDdhYzMtYjhhZC00MmIwLWFkMmEt YWU5NjdkNzM5ZGQzLzEvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hZDdhYzMtYjhhZC00MmIwLWFkMmEtYWU5NjdkNzM5ZGQz LzEvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApG/GcqdN l2zi47KjCyA19T7PA+HxJv/0hjk2j7aS+KdlU7wrPt40dTCL7Xmatfgk9fMiUEtK HtFcfkeUVVU3DcufjcWCF8eLE8LanwARbq2unGaM7h03pw4KRuyEist3qus6pT/U zDBjak89kY8wE31h2XH5jTCo4J91BttzGtyIL+sF9fbCzINJxaZF1Xpauwkt0ldG u8YuBlZZWUdD91jd2iNkf1JEZc6YXZ6hSWAiL/EoMlPI0kKIRwlRY2FIteEBH4r7 b0lbDY69PFWxoJSnAwSN+9j7DodFGrY4DPiZmDTJwNOWTAMukCNg3dwAusrL/KZo xBDPBNqISJvxgw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:51:14 2025 by rpki-client