This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json) Hash identifier: ojOkFnZSU9q+EmyY7AfxPPWfbv7x6x31Wz0UdGkfWHQ= Subject key identifier: E2:E8:BB:06:8B:FC:CE:72:79:CE:4E:85:38:5D:44:01:00:2B:4F:10 Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab Certificate serial: 019B318D0B20A233A1280255C0D0B040C335 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft Manifest number: 0B89 Signing time: Thu 18 Dec 2025 13:01:25 +0000 Manifest this update: Thu 18 Dec 2025 13:01:25 +0000 Manifest next update: Fri 19 Dec 2025 13:01:25 +0000 Files and hashes: 1: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: QaYVebUeTJ8xJIKN7SJsm2QYIPLi7Hh1tLnKdkcDmoM=) 2: oWc3B6RGO7S9pWcq4HKnbJyfKDk.roa (hash: dicu1vprnt1mxmGFnS2f3yDtWezJRT6KC1umgv5QkRo=) 3: yzmCfwKm_JPG030YXapakt0raKE.roa (hash: FgUsVc5q6Pi83IVxku3Q5cKwPTsj2kNtxaix/96GJI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8d:0b:20:a2:33:a1:28:02:55:c0:d0:b0:40:c3:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab Validity Not Before: Dec 18 13:01:25 2025 GMT Not After : Dec 19 13:01:25 2025 GMT Subject: CN=e2e8bb068bfcce7279ce4e85385d4401002b4f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:38:e1:7f:1f:4b:8d:c3:a1:b7:ab:12:f5:d4: 3e:e3:26:15:aa:86:13:cf:08:77:b8:ea:8c:ed:19: af:45:39:7c:79:33:a6:1a:ab:4b:3b:0c:49:85:43: 8d:83:c9:00:ea:66:6d:34:e5:1b:31:74:b1:07:da: 17:29:04:f0:08:8f:57:1d:12:ae:ba:d8:fc:52:3a: ec:0b:c1:72:2b:3a:bd:fc:10:c9:07:fe:2d:07:70: 97:11:08:6d:7d:02:bd:e6:c1:54:d8:a2:c2:74:bd: bb:ba:ca:46:3a:8d:d3:73:a2:6b:6c:95:94:00:40: 79:25:16:d9:32:08:28:f8:8c:ff:d0:29:0b:8f:2c: 31:73:6b:4a:2d:c1:e0:9a:8b:50:bd:cb:d3:76:b2: 02:86:7e:cd:41:7f:0f:86:7e:d5:7b:c4:ab:1e:14: 2c:1b:62:6f:ac:08:4c:d7:80:27:eb:e0:16:67:b4: fa:d0:68:4d:fa:60:15:37:59:fd:62:07:92:1d:76: aa:85:cf:97:c9:69:58:d8:86:96:92:39:48:60:9b: 98:12:7c:d5:83:92:3b:10:d9:b9:b9:56:37:dc:4c: 6e:f1:a3:0c:13:95:17:fb:62:e5:1f:2e:6a:cf:5d: 84:3b:00:6c:f4:c1:bf:9c:61:08:94:99:73:8c:7e: 96:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E8:BB:06:8B:FC:CE:72:79:CE:4E:85:38:5D:44:01:00:2B:4F:10 X509v3 Authority Key Identifier: keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:86:22:03:d0:f6:6e:7c:ec:72:43:d1:ce:42:7a:27:d9:62: bb:56:29:d8:1e:5e:f7:64:e3:d5:2a:d0:9e:c7:a5:22:88:40: b9:cc:9e:6a:98:d0:b7:76:d1:ef:48:bd:c3:c5:62:0f:bf:de: 03:be:1c:88:a3:de:25:f8:3a:b4:bd:cc:76:e7:d7:71:f6:39: d6:9c:ae:cc:9f:3e:d3:61:74:32:bb:e0:61:a9:4a:69:d5:52: 51:19:4d:f7:0d:50:da:20:e2:d6:0d:4c:ed:29:0e:c6:3a:07: b8:75:72:39:fe:1c:8e:96:52:1d:a4:12:fd:ee:40:a6:38:11: a0:cd:84:71:d1:50:31:e8:63:38:23:dd:55:84:19:31:cf:14: 72:97:e3:af:4d:46:6d:07:bf:5e:ba:c1:9e:08:5f:b3:98:6f: 4f:0c:35:6e:ef:c6:6d:e5:5c:4a:0c:7c:ca:43:94:4b:53:c9: b0:90:5d:b6:7f:8e:ef:5d:53:5c:4f:9b:18:35:2c:fe:a6:db: fd:8d:1c:2c:72:35:b5:97:62:50:60:2c:5b:ed:f2:f4:e7:51: 78:aa:1b:02:9c:90:5c:36:42:df:7f:e9:8d:dd:93:3f:6e:9e: 75:ee:70:09:ab:2b:a8:f9:c7:0a:bf:22:26:f3:34:81:eb:f7: 2f:78:7c:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjQsgojOhKAJVwNCwQMM1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYmExZDI0ZTcyYzQzOWVjN2E1Y2JkYzM5MTM1N2RkODlj Yjg2YWIwHhcNMjUxMjE4MTMwMTI1WhcNMjUxMjE5MTMwMTI1WjAzMTEwLwYDVQQD EyhlMmU4YmIwNjhiZmNjZTcyNzljZTRlODUzODVkNDQwMTAwMmI0ZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjjhfx9LjcOht6sS9dQ+4yYVqoYT zwh3uOqM7RmvRTl8eTOmGqtLOwxJhUONg8kA6mZtNOUbMXSxB9oXKQTwCI9XHRKu utj8UjrsC8FyKzq9/BDJB/4tB3CXEQhtfQK95sFU2KLCdL27uspGOo3Tc6JrbJWU AEB5JRbZMggo+Iz/0CkLjywxc2tKLcHgmotQvcvTdrIChn7NQX8Phn7Ve8SrHhQs G2JvrAhM14An6+AWZ7T60GhN+mAVN1n9YgeSHXaqhc+XyWlY2IaWkjlIYJuYEnzV g5I7ENm5uVY33Exu8aMME5UX+2LlHy5qz12EOwBs9MG/nGEIlJlzjH6WyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLouwaL/M5yec5OhThdRAEAK08QMB8GA1UdIwQY MBaAFGu6HSTnLEOex6XL3DkTV92Jy4arMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hOTRhNGMtYTU1Mi00NmY2LThhODEt Y2VmOTQ0ODEyNGIwLzEvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9hOTRhNGMtYTU1Mi00NmY2LThhODEtY2VmOTQ0ODEyNGIw LzEvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIYiA9D2 bnzsckPRzkJ6J9liu1Yp2B5e92Tj1SrQnselIohAucyeapjQt3bR70i9w8ViD7/e A74ciKPeJfg6tL3MdufXcfY51pyuzJ8+02F0MrvgYalKadVSURlN9w1Q2iDi1g1M 7SkOxjoHuHVyOf4cjpZSHaQS/e5ApjgRoM2EcdFQMehjOCPdVYQZMc8Ucpfjr01G bQe/XrrBnghfs5hvTww1bu/GbeVcSgx8ykOUS1PJsJBdtn+O711TXE+bGDUs/qbb /Y0cLHI1tZdiUGAsW+3y9OdReKobApyQXDZC33/pjd2TP26ede5wCasrqPnHCr8i JvM0gev3L3h8CA== -----END CERTIFICATE-----Generated at Thu Dec 18 19:08:51 2025 by rpki-client