This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft File: o6VWBFl7BrDqzoivsakP_5N9l-o.mft (raw, json) Hash identifier: f0iDd9oIgmuSCVQnC3aiAl1CWgtEAXq9ApXP5Ft0gqI= Subject key identifier: 8B:8E:0C:43:7E:D7:2C:69:D9:F8:A7:54:7A:24:D0:7F:20:32:C3:5A Authority key identifier: A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA Certificate issuer: /CN=a3a55604597b06b0eace88afb1a90fff937d97ea Certificate serial: 019AF50BC682721C2204D82F3DBC1C0BE4EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 19:03:00 +0000 Manifest this update: Sat 06 Dec 2025 19:03:00 +0000 Manifest next update: Sun 07 Dec 2025 19:03:00 +0000 Files and hashes: 1: o6VWBFl7BrDqzoivsakP_5N9l-o.crl (hash: VsdzQhkLi29JppHv3W4x7dX0fjPDYw7ekNASaRMfcpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:c6:82:72:1c:22:04:d8:2f:3d:bc:1c:0b:e4:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3a55604597b06b0eace88afb1a90fff937d97ea Validity Not Before: Dec 6 19:03:00 2025 GMT Not After : Dec 7 19:03:00 2025 GMT Subject: CN=8b8e0c437ed72c69d9f8a7547a24d07f2032c35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f5:bf:83:e2:cc:cd:72:7e:9a:4d:b0:5b:80: d8:2f:1b:fc:2a:64:76:39:ae:4e:28:e1:8f:1d:af: 01:8a:7a:c7:4b:46:43:07:3d:f6:36:b1:12:9c:c7: 3d:71:08:0f:2c:55:c4:25:fc:73:9f:3e:69:bb:fe: 37:b5:43:ce:da:b0:06:1f:eb:7f:86:24:9f:c3:90: 81:2d:b5:2c:51:99:1d:f2:36:5b:b9:7d:45:42:95: fe:04:02:53:45:79:34:87:7a:d6:88:a9:19:bb:ec: 98:c4:ba:8d:fa:9b:75:55:f4:d1:05:27:b6:54:b3: 20:09:78:11:cb:8f:57:09:99:79:47:ff:23:90:3c: 6c:4d:a3:11:0f:25:cc:63:0b:bc:b9:8c:a0:de:0a: f3:0e:e1:4b:f4:2d:7a:2c:9b:7b:3c:86:a8:87:7b: f7:b3:cd:4d:ee:d1:27:13:1f:e4:7a:33:cc:81:57: 98:4b:1f:a5:5f:10:32:c4:3c:72:d9:38:b1:ff:e6: 11:93:87:b1:a8:a3:c2:29:fc:79:cd:9c:93:10:d9: 5d:b1:55:7f:90:87:33:62:0d:46:a3:8e:90:a8:50: 13:eb:bb:86:af:49:de:44:8a:e2:7e:23:d7:14:48: 42:fc:f4:e4:7f:e3:79:0d:4a:d2:e3:06:b8:0c:ed: 23:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8E:0C:43:7E:D7:2C:69:D9:F8:A7:54:7A:24:D0:7F:20:32:C3:5A X509v3 Authority Key Identifier: keyid:A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:76:31:1d:76:83:a0:85:51:dc:6b:71:c9:48:c5:47:f8:ff: 3e:71:9d:59:82:6b:ed:a4:09:40:0b:96:72:2e:14:2c:46:14: a4:ac:5c:db:fc:e8:10:eb:f7:42:61:46:2b:cf:15:0a:91:db: 04:42:a4:a5:b5:f9:33:a4:e1:10:37:40:a8:5e:c2:6a:a5:28: 84:8e:0a:60:d8:a2:29:37:d4:a4:a6:f7:9f:29:79:f1:b8:54: 97:74:52:b9:5b:cb:1e:14:c7:75:91:23:d0:ee:7b:8f:13:52: 10:89:4f:71:84:3e:19:a1:36:b6:20:85:f0:f6:59:93:b0:f3: 0e:4d:60:8c:b9:d7:74:02:c4:22:40:7e:34:91:b1:e4:15:29: a8:2e:a8:e1:00:01:6e:44:39:5b:42:d9:55:ed:06:02:1c:08: e4:04:28:2e:4c:e5:57:1c:94:2c:30:be:8c:a1:43:bf:16:b1: b5:bb:f9:cc:c7:99:11:10:b0:e1:89:c6:04:f3:01:21:16:55: 53:81:8a:23:7a:e0:96:5f:37:6a:48:eb:2d:b4:eb:12:72:8f: e4:d4:71:64:93:52:44:ab:4d:97:28:c5:30:ee:2a:27:0e:ec: 32:45:71:c6:0b:82:4e:4c:18:26:d3:dd:3f:1b:81:95:55:93: 1b:f3:aa:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C8aCchwiBNgvPbwcC+TsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYTU1NjA0NTk3YjA2YjBlYWNlODhhZmIxYTkwZmZmOTM3 ZDk3ZWEwHhcNMjUxMjA2MTkwMzAwWhcNMjUxMjA3MTkwMzAwWjAzMTEwLwYDVQQD Eyg4YjhlMGM0MzdlZDcyYzY5ZDlmOGE3NTQ3YTI0ZDA3ZjIwMzJjMzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/W/g+LMzXJ+mk2wW4DYLxv8KmR2 Oa5OKOGPHa8BinrHS0ZDBz32NrESnMc9cQgPLFXEJfxznz5pu/43tUPO2rAGH+t/ hiSfw5CBLbUsUZkd8jZbuX1FQpX+BAJTRXk0h3rWiKkZu+yYxLqN+pt1VfTRBSe2 VLMgCXgRy49XCZl5R/8jkDxsTaMRDyXMYwu8uYyg3grzDuFL9C16LJt7PIaoh3v3 s81N7tEnEx/kejPMgVeYSx+lXxAyxDxy2Tix/+YRk4exqKPCKfx5zZyTENldsVV/ kIczYg1Go46QqFAT67uGr0neRIrifiPXFEhC/PTkf+N5DUrS4wa4DO0jGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuODEN+1yxp2finVHok0H8gMsNaMB8GA1UdIwQY MBaAFKOlVgRZewaw6s6Ir7GpD/+TfZfqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mOWZmMWItODM3OS00OWQxLWI4MGEt ZmFjNGJiODNlZDI4LzEvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mOWZmMWItODM3OS00OWQxLWI4MGEtZmFjNGJiODNlZDI4 LzEvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3YxHXaD oIVR3GtxyUjFR/j/PnGdWYJr7aQJQAuWci4ULEYUpKxc2/zoEOv3QmFGK88VCpHb BEKkpbX5M6ThEDdAqF7CaqUohI4KYNiiKTfUpKb3nyl58bhUl3RSuVvLHhTHdZEj 0O57jxNSEIlPcYQ+GaE2tiCF8PZZk7DzDk1gjLnXdALEIkB+NJGx5BUpqC6o4QAB bkQ5W0LZVe0GAhwI5AQoLkzlVxyULDC+jKFDvxaxtbv5zMeZERCw4YnGBPMBIRZV U4GKI3rgll83akjrLbTrEnKP5NRxZJNSRKtNlyjFMO4qJw7sMkVxxguCTkwYJtPd PxuBlVWTG/Oqyw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:34 2025 by rpki-client