This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft File: roOCT9wp6-SsKGygGETfhtTXXsA.mft (raw, json) Hash identifier: dw4lL0VN6gPpesS5XM93f2VS/JomjO3J40rMD4Pfzcw= Subject key identifier: A3:75:71:70:A0:B5:AA:39:EF:C2:A8:BB:2B:1B:A8:F6:32:0A:96:2E Authority key identifier: AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0 Certificate issuer: /CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0 Certificate serial: 019AF540AF40BBA7EBEBA905949E543A1094 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft Manifest number: 0388 Signing time: Sat 06 Dec 2025 20:00:48 +0000 Manifest this update: Sat 06 Dec 2025 20:00:48 +0000 Manifest next update: Sun 07 Dec 2025 20:00:48 +0000 Files and hashes: 1: jHCjx-TBB5oXKBhOsM_EWQyL88A.roa (hash: rucNPqCxXwLKo5x3absYJUk2L/e2sCkpCPYtoCEmNPo=) 2: roOCT9wp6-SsKGygGETfhtTXXsA.crl (hash: 7FAHmEkzyYy8Qi7fDgnEne3wK6J4CHnBLVa3AjEFHzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:af:40:bb:a7:eb:eb:a9:05:94:9e:54:3a:10:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0 Validity Not Before: Dec 6 20:00:48 2025 GMT Not After : Dec 7 20:00:48 2025 GMT Subject: CN=a3757170a0b5aa39efc2a8bb2b1ba8f6320a962e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4c:df:9c:dc:da:76:5b:99:9f:17:30:bf:43: c3:5c:7c:8e:0f:a9:0c:de:90:fc:5b:a8:65:77:e1: 98:b2:3c:99:ec:49:4f:46:99:bd:3b:c5:0c:e3:b8: a9:e4:e3:30:c2:66:58:2c:b6:32:6a:cb:84:73:cc: d5:6b:f8:57:6f:3e:c2:89:ae:ef:8e:37:80:ef:ea: e5:5a:56:b4:14:f1:68:98:c6:69:42:91:d1:f3:43: cb:53:84:28:56:71:71:a5:22:d3:92:79:45:dd:42: cb:a9:2c:b8:19:b9:a0:c8:bb:3f:34:34:6f:bf:ae: fe:eb:3f:11:d1:9c:f4:2b:50:10:9c:4a:68:14:3f: 78:d2:bd:71:e9:7e:f7:55:b4:d6:40:db:b9:c7:ea: 6c:10:b9:e5:91:d8:64:d7:5f:39:cd:ac:64:5e:42: 1f:39:73:e4:63:1d:6c:dd:77:c9:e2:3a:e4:20:ab: 48:42:88:ae:fc:f2:88:9a:3a:54:3c:f5:98:f1:eb: bd:45:ab:60:c0:b0:4b:2a:d4:0c:a1:0c:fc:56:74: 3d:84:35:cb:ae:eb:dc:ea:83:67:cb:3e:33:c7:42: 96:73:2c:86:6a:c3:60:96:c0:2a:6f:52:87:23:ac: 74:b9:d5:ea:6b:e3:ed:f3:b1:f8:14:ad:f2:a0:32: 22:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:75:71:70:A0:B5:AA:39:EF:C2:A8:BB:2B:1B:A8:F6:32:0A:96:2E X509v3 Authority Key Identifier: keyid:AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:35:4b:f2:cf:d1:9f:a7:ce:81:0e:a5:78:06:00:7f:94:8a: 10:49:57:23:61:78:ba:b0:d0:03:c6:ad:22:1b:76:bf:49:58: d0:a3:c7:5c:29:83:12:2a:60:91:94:ae:14:d2:e9:b6:05:72: 78:e1:66:65:b4:a4:e4:31:fb:66:f6:bd:a5:76:ee:23:db:83: f8:01:58:c6:08:e7:4d:f3:44:ee:e1:f5:8c:ad:1d:22:d3:96: 4d:8d:f4:cd:7a:10:8f:cb:d3:11:71:82:54:b4:9f:78:b3:a9: bb:d4:86:3f:be:19:1a:15:b1:33:47:8d:38:c3:c0:1a:85:9b: cd:f6:4f:1f:d4:02:2a:af:71:77:e1:3e:55:55:81:c9:2b:85: 72:34:cd:05:d2:b8:fd:75:35:af:63:a4:2b:ac:c2:91:07:21: 43:ce:ee:dc:0a:d4:76:34:83:bb:a7:55:5d:86:08:6f:f5:8c: ba:39:82:45:46:f6:31:56:85:d7:f8:20:4d:9a:2d:df:a4:a8: aa:56:b3:71:27:15:bb:ac:2c:56:f1:05:78:20:22:ee:1c:f6: cb:34:2d:cd:cd:51:f9:6d:52:ad:44:5f:ae:72:f0:50:d6:ed: a4:d3:04:d7:77:f7:a5:fb:e1:a2:62:53:94:76:f9:79:3a:ed: 33:70:86:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QK9Au6fr66kFlJ5UOhCUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlODM4MjRmZGMyOWViZTRhYzI4NmNhMDE4NDRkZjg2ZDRk NzVlYzAwHhcNMjUxMjA2MjAwMDQ4WhcNMjUxMjA3MjAwMDQ4WjAzMTEwLwYDVQQD EyhhMzc1NzE3MGEwYjVhYTM5ZWZjMmE4YmIyYjFiYThmNjMyMGE5NjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0zfnNzadluZnxcwv0PDXHyOD6kM 3pD8W6hld+GYsjyZ7ElPRpm9O8UM47ip5OMwwmZYLLYyasuEc8zVa/hXbz7Cia7v jjeA7+rlWla0FPFomMZpQpHR80PLU4QoVnFxpSLTknlF3ULLqSy4GbmgyLs/NDRv v67+6z8R0Zz0K1AQnEpoFD940r1x6X73VbTWQNu5x+psELnlkdhk1185zaxkXkIf OXPkYx1s3XfJ4jrkIKtIQoiu/PKImjpUPPWY8eu9RatgwLBLKtQMoQz8VnQ9hDXL ruvc6oNnyz4zx0KWcyyGasNglsAqb1KHI6x0udXqa+Pt87H4FK3yoDIiRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKN1cXCgtao578KouysbqPYyCpYuMB8GA1UdIwQY MBaAFK6Dgk/cKevkrChsoBhE34bU117AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm9PQ1Q5d3A2LVNzS0d5Z0dFVGZodFRYWHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC83MTc0ZWUtMzA3Ni00OTZjLWIyNTkt OTcwMDU0NmI1NzExLzEvcm9PQ1Q5d3A2LVNzS0d5Z0dFVGZodFRYWHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC83MTc0ZWUtMzA3Ni00OTZjLWIyNTktOTcwMDU0NmI1NzEx LzEvcm9PQ1Q5d3A2LVNzS0d5Z0dFVGZodFRYWHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqTVL8s/R n6fOgQ6leAYAf5SKEElXI2F4urDQA8atIht2v0lY0KPHXCmDEipgkZSuFNLptgVy eOFmZbSk5DH7Zva9pXbuI9uD+AFYxgjnTfNE7uH1jK0dItOWTY30zXoQj8vTEXGC VLSfeLOpu9SGP74ZGhWxM0eNOMPAGoWbzfZPH9QCKq9xd+E+VVWBySuFcjTNBdK4 /XU1r2OkK6zCkQchQ87u3ArUdjSDu6dVXYYIb/WMujmCRUb2MVaF1/ggTZot36So qlazcScVu6wsVvEFeCAi7hz2yzQtzc1R+W1SrURfrnLwUNbtpNME13f3pfvhomJT lHb5eTrtM3CGDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:56:59 2025 by rpki-client