This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft File: r_NeOD6c1EpySaxdQbbfrfQ1e08.mft (raw, json) Hash identifier: xw5J0vmNjHm6RqVPHbh5L/dsfGY8gfIfUDHTjbDlAyk= Subject key identifier: 0D:4A:A7:60:83:50:68:56:ED:CB:0E:A4:B2:B1:D7:B9:97:91:2E:43 Authority key identifier: AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F Certificate issuer: /CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f Certificate serial: 019AF352CA4BCBFE10EF2F26F5A0F97B015B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft Manifest number: 0AEE Signing time: Sat 06 Dec 2025 11:01:20 +0000 Manifest this update: Sat 06 Dec 2025 11:01:20 +0000 Manifest next update: Sun 07 Dec 2025 11:01:20 +0000 Files and hashes: 1: EdKEOZXwSgqw7Bu_DizXNwNUu7g.roa (hash: YaLUi/WCyF+z1PE1hT5J9Z4ZVraA/YT5/9yCeg4jCDs=) 2: r_NeOD6c1EpySaxdQbbfrfQ1e08.crl (hash: 1/GoiKWuB22I5zHXEq6ZDGO3lXPtVk7N4JelcPxQzhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:ca:4b:cb:fe:10:ef:2f:26:f5:a0:f9:7b:01:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f Validity Not Before: Dec 6 11:01:20 2025 GMT Not After : Dec 7 11:01:20 2025 GMT Subject: CN=0d4aa76083506856edcb0ea4b2b1d7b997912e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6a:35:66:50:b6:13:41:46:22:04:03:41:32: 0f:b5:2d:e8:45:20:fd:b5:c6:14:b8:5f:8a:55:52: 85:86:e3:af:d8:e5:4a:15:34:ba:cf:b8:cf:6d:7e: b8:a9:cc:d8:40:c3:36:07:e8:83:1c:1a:7b:a3:50: 49:a9:35:61:bd:35:b7:9d:dd:84:6a:6e:f8:06:84: cb:45:c6:aa:67:59:47:11:4b:8b:de:63:51:65:c9: 81:a5:47:e7:0a:33:46:c4:0e:ef:ea:d6:e8:2b:d7: cb:75:6b:6b:da:fe:eb:2c:e8:30:b4:5f:ea:9f:53: 07:12:84:85:5e:13:a6:2e:a1:28:fe:50:40:e3:62: 2f:7f:aa:2a:83:ac:cb:37:98:f3:07:19:b9:f0:96: d7:33:68:dc:18:9c:d6:b1:89:42:cf:98:fb:fa:a0: 65:0a:00:fd:03:75:b7:61:7c:72:5b:72:c0:4d:cc: c2:ac:1e:c5:6d:22:30:47:da:a5:fc:5c:14:db:75: a0:b5:e2:5d:11:ae:38:ce:a5:ae:de:ca:95:a7:5e: f8:b3:9f:a7:bc:bd:f4:59:b8:32:b2:9c:f4:66:04: 21:6e:b3:a7:0b:fe:dc:94:da:7b:08:c5:16:8b:30: 75:df:cf:1e:0f:73:fd:e1:d6:cc:56:76:ba:b9:db: 6d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4A:A7:60:83:50:68:56:ED:CB:0E:A4:B2:B1:D7:B9:97:91:2E:43 X509v3 Authority Key Identifier: keyid:AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ec:6f:bb:e6:4e:d6:6f:c9:21:34:36:1e:72:2a:bc:cb:53: 04:86:50:d9:df:2a:21:b7:76:f0:78:4f:fd:77:96:66:9a:42: ed:2d:75:86:23:9a:2e:09:19:31:6e:c7:9a:e6:94:6c:eb:f4: fa:48:4b:b5:5c:6f:71:23:05:5c:3a:5c:ee:06:62:9a:70:98: a0:5c:d8:4b:d2:f2:60:bb:d2:37:ec:62:a5:12:0b:32:55:86: 89:e2:b1:25:c4:39:d2:33:01:04:91:45:19:36:d7:26:e6:9a: 09:66:75:16:2f:2a:96:e9:70:47:b4:84:1d:36:58:b4:ce:ce: 69:58:1f:25:52:bf:ef:d9:7b:cc:71:a8:49:a7:75:66:81:ad: d4:4c:be:59:fb:03:c3:10:15:b6:8d:90:ae:8c:51:c2:07:72: c1:9f:34:52:69:83:a5:d5:82:bb:a3:b7:b1:f4:7f:c7:b1:39: bc:ed:95:80:3e:8b:ed:29:6b:63:50:ce:58:bf:40:68:dd:9a: 1b:2e:15:03:45:f4:32:8a:b6:ca:b4:d9:a3:4f:21:38:40:9e: cb:ac:cf:67:0c:e9:14:06:de:d5:8e:7b:9d:49:4a:8b:fd:c3: 6b:aa:31:8a:c2:26:b5:10:60:74:a3:65:f2:d5:7b:f9:51:c6: 9b:7c:4f:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUspLy/4Q7y8m9aD5ewFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZjM1ZTM4M2U5Y2Q0NGE3MjQ5YWM1ZDQxYjZkZmFkZjQz NTdiNGYwHhcNMjUxMjA2MTEwMTIwWhcNMjUxMjA3MTEwMTIwWjAzMTEwLwYDVQQD EygwZDRhYTc2MDgzNTA2ODU2ZWRjYjBlYTRiMmIxZDdiOTk3OTEyZTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmo1ZlC2E0FGIgQDQTIPtS3oRSD9 tcYUuF+KVVKFhuOv2OVKFTS6z7jPbX64qczYQMM2B+iDHBp7o1BJqTVhvTW3nd2E am74BoTLRcaqZ1lHEUuL3mNRZcmBpUfnCjNGxA7v6tboK9fLdWtr2v7rLOgwtF/q n1MHEoSFXhOmLqEo/lBA42Ivf6oqg6zLN5jzBxm58JbXM2jcGJzWsYlCz5j7+qBl CgD9A3W3YXxyW3LATczCrB7FbSIwR9ql/FwU23WgteJdEa44zqWu3sqVp174s5+n vL30Wbgyspz0ZgQhbrOnC/7clNp7CMUWizB1388eD3P94dbMVna6udttCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1Kp2CDUGhW7csOpLKx17mXkS5DMB8GA1UdIwQY MBaAFK/zXjg+nNRKckmsXUG23630NXtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTIt NTcwYWVkNThjMTk0LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTItNTcwYWVkNThjMTk0 LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+xvu+ZO 1m/JITQ2HnIqvMtTBIZQ2d8qIbd28HhP/XeWZppC7S11hiOaLgkZMW7HmuaUbOv0 +khLtVxvcSMFXDpc7gZimnCYoFzYS9LyYLvSN+xipRILMlWGieKxJcQ50jMBBJFF GTbXJuaaCWZ1Fi8qlulwR7SEHTZYtM7OaVgfJVK/79l7zHGoSad1ZoGt1Ey+WfsD wxAVto2QroxRwgdywZ80UmmDpdWCu6O3sfR/x7E5vO2VgD6L7SlrY1DOWL9AaN2a Gy4VA0X0Moq2yrTZo08hOECey6zPZwzpFAbe1Y57nUlKi/3Da6oxisImtRBgdKNl 8tV7+VHGm3xP6A== -----END CERTIFICATE-----Generated at Sat Dec 6 20:16:38 2025 by rpki-client