This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft File: aOi66pXUBANI8KiexOS9FSdfbDk.mft (raw, json) Hash identifier: UU5pqz0Nr/CW91Ly/oAdjTP3XZFU0p7D9jGkcnCkanM= Subject key identifier: 33:55:AF:4F:79:8B:16:7E:08:8F:C3:DF:91:99:76:6E:2D:F3:9C:07 Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39 Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39 Certificate serial: 019AF465236DE19EE1D99CA54C6074B07D23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 16:01:00 +0000 Manifest this update: Sat 06 Dec 2025 16:01:00 +0000 Manifest next update: Sun 07 Dec 2025 16:01:00 +0000 Files and hashes: 1: G3jkppDUZ7UShIbg3wj67wwITjQ.roa (hash: IM9aMDCOjn2pDhh5r2plZvteAbzhdwZ0L/lTf4RJayk=) 2: Tz1CIM1JoghruWTN6nGpazj8zTs.roa (hash: VV/wpFoAA0PEYjeaECSEYgoe19Q1uDYWZTbwDnhLY+0=) 3: aOi66pXUBANI8KiexOS9FSdfbDk.crl (hash: TLNfVWsGcXWQ9G3E5Uz75V3Me3LwL2TThME8AIDFsAg=) 4: qOyspdHf0vEJQuyvIz0XkgRHk_0.roa (hash: yR7LTFxNYmFcq/nxWYOH7mZupl2rRRW8SrPwUWcJB0k=) 5: uiGdfZv36ngdlEPtH0Dctu5_0kI.roa (hash: kwlBzu/ziaLKG7neS7FV84L3FCZ7YdUCR1fgHvPBMoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:23:6d:e1:9e:e1:d9:9c:a5:4c:60:74:b0:7d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39 Validity Not Before: Dec 6 16:01:00 2025 GMT Not After : Dec 7 16:01:00 2025 GMT Subject: CN=3355af4f798b167e088fc3df9199766e2df39c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:21:00:74:73:db:f5:0c:90:01:c0:a2:76:77: 11:9e:84:d1:02:a5:b0:d9:44:57:4a:15:25:e3:ce: d9:92:78:28:08:9b:f2:d8:66:4f:6d:e7:38:6a:73: 14:f2:8b:23:78:eb:9d:78:be:8d:f9:d9:5d:e4:87: 11:26:25:7d:40:38:f7:94:88:5c:3a:e7:d4:76:e1: ca:9b:e9:8d:49:d5:34:31:0d:93:77:08:b8:82:9c: c2:fe:34:d9:c3:12:1f:e8:bd:81:80:ed:a9:48:3d: d6:17:40:54:96:0f:18:2b:b0:14:2d:d8:0d:93:e3: da:e3:c0:9b:61:13:1e:ca:5e:56:c0:8c:10:a7:11: 3b:b5:68:79:d3:ba:3b:80:57:d4:f2:0e:65:60:38: 4a:b8:b0:54:93:8a:d8:d8:14:8d:f0:3f:e9:b5:34: d5:52:cc:d2:a3:64:38:be:d3:2e:99:76:49:48:a2: 17:7b:9a:29:35:0a:00:db:a8:e9:42:1c:f7:62:b8: e3:59:c8:a4:e3:ac:6f:da:60:83:70:26:4f:db:66: d8:d3:1e:4d:a0:12:69:96:6e:4c:1a:f4:26:a6:0a: 8a:75:70:68:a3:b2:c0:0c:d9:db:2b:3d:b6:6c:e1: b3:ee:e9:61:61:72:dc:cd:85:57:d5:69:3e:0a:d7: 62:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:55:AF:4F:79:8B:16:7E:08:8F:C3:DF:91:99:76:6E:2D:F3:9C:07 X509v3 Authority Key Identifier: keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:0d:e1:cc:0d:cb:c3:23:57:f6:11:d6:51:e9:cb:1c:61:a5: 9e:8f:d4:2f:87:8f:9c:59:18:e7:14:e6:55:75:a0:a4:01:03: a0:bc:c8:9d:98:cb:a5:f8:ed:02:96:63:e0:00:c2:be:b0:69: 63:25:72:30:01:a8:71:6f:6e:07:f0:95:02:5a:b4:7c:65:5f: 48:15:b6:21:fd:74:f0:25:15:b0:6d:dc:b3:01:41:0c:92:57: 47:81:45:71:49:83:99:49:0e:f0:af:02:1e:30:b5:b8:35:3e: 38:42:88:75:30:49:cc:08:17:86:0e:31:11:e2:81:9a:bd:57: 9d:30:76:05:46:04:96:f9:2e:70:f6:69:35:86:69:46:c6:bb: e8:50:3e:0f:27:b9:a7:8f:61:fa:2e:0e:3e:63:16:26:db:75: b1:d7:7b:6d:3f:1c:bf:4c:67:32:bb:71:b0:e9:8f:31:8f:bc: 18:28:96:0f:46:a6:18:45:b4:76:6b:ca:81:b4:c9:4b:8c:5a: df:df:b1:b2:e6:82:21:20:2c:94:6d:a2:8c:89:89:96:4d:4f: 80:7a:91:21:51:55:cb:e7:dd:00:59:a0:51:89:7c:63:dc:76: 72:a8:60:0b:38:32:a3:f0:53:95:cb:1f:25:a4:13:10:ae:6c: 98:a0:02:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZSNt4Z7h2ZylTGB0sH0jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZThiYWVhOTVkNDA0MDM0OGYwYTg5ZWM0ZTRiZDE1Mjc1 ZjZjMzkwHhcNMjUxMjA2MTYwMTAwWhcNMjUxMjA3MTYwMTAwWjAzMTEwLwYDVQQD EygzMzU1YWY0Zjc5OGIxNjdlMDg4ZmMzZGY5MTk5NzY2ZTJkZjM5YzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iEAdHPb9QyQAcCidncRnoTRAqWw 2URXShUl487ZkngoCJvy2GZPbec4anMU8osjeOudeL6N+dld5IcRJiV9QDj3lIhc OufUduHKm+mNSdU0MQ2Tdwi4gpzC/jTZwxIf6L2BgO2pSD3WF0BUlg8YK7AULdgN k+Pa48CbYRMeyl5WwIwQpxE7tWh507o7gFfU8g5lYDhKuLBUk4rY2BSN8D/ptTTV UszSo2Q4vtMumXZJSKIXe5opNQoA26jpQhz3YrjjWcik46xv2mCDcCZP22bY0x5N oBJplm5MGvQmpgqKdXBoo7LADNnbKz22bOGz7ulhYXLczYVX1Wk+CtdiuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNVr095ixZ+CI/D35GZdm4t85wHMB8GA1UdIwQY MBaAFGjouuqV1AQDSPConsTkvRUnX2w5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NjUzZTAtOGE3Mi00MzUxLWJmY2Ut MzcxMWZhZThjYTc3LzEvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83NjUzZTAtOGE3Mi00MzUxLWJmY2UtMzcxMWZhZThjYTc3 LzEvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHA3hzA3L wyNX9hHWUenLHGGlno/UL4ePnFkY5xTmVXWgpAEDoLzInZjLpfjtApZj4ADCvrBp YyVyMAGocW9uB/CVAlq0fGVfSBW2If108CUVsG3cswFBDJJXR4FFcUmDmUkO8K8C HjC1uDU+OEKIdTBJzAgXhg4xEeKBmr1XnTB2BUYElvkucPZpNYZpRsa76FA+Dye5 p49h+i4OPmMWJtt1sdd7bT8cv0xnMrtxsOmPMY+8GCiWD0amGEW0dmvKgbTJS4xa 39+xsuaCISAslG2ijImJlk1PgHqRIVFVy+fdAFmgUYl8Y9x2cqhgCzgyo/BTlcsf JaQTEK5smKACuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:46:08 2025 by rpki-client