This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json) Hash identifier: WiJdGZCo/68Lvpve1MEPzABJ5s3F6AAJhgSxqZ2x3bM= Subject key identifier: AC:6D:9D:9F:09:41:DA:09:33:E2:DD:0F:3B:4D:73:0A:48:C6:9B:79 Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab Certificate serial: 019AF1D218802B685048FB1E823619BE9F02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft Manifest number: 0B68 Signing time: Sat 06 Dec 2025 04:01:09 +0000 Manifest this update: Sat 06 Dec 2025 04:01:09 +0000 Manifest next update: Sun 07 Dec 2025 04:01:09 +0000 Files and hashes: 1: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: wSZhYnSaVOU+opRApLK6phEmgwDmqLy/RpBubySz5Hs=) 2: oWc3B6RGO7S9pWcq4HKnbJyfKDk.roa (hash: dicu1vprnt1mxmGFnS2f3yDtWezJRT6KC1umgv5QkRo=) 3: yzmCfwKm_JPG030YXapakt0raKE.roa (hash: FgUsVc5q6Pi83IVxku3Q5cKwPTsj2kNtxaix/96GJI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:18:80:2b:68:50:48:fb:1e:82:36:19:be:9f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab Validity Not Before: Dec 6 04:01:09 2025 GMT Not After : Dec 7 04:01:09 2025 GMT Subject: CN=ac6d9d9f0941da0933e2dd0f3b4d730a48c69b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cb:ad:b4:1c:bb:a9:76:1d:a5:c5:36:a8:3a: f7:21:f5:87:af:31:e3:ad:14:9f:af:c8:95:fe:4a: b3:15:29:13:87:70:41:2c:2c:4b:f7:6a:c8:9c:4f: c0:22:7f:d9:cc:9e:6e:09:ac:e5:08:6f:49:95:bb: c1:a7:fe:46:3b:e4:f5:ea:f7:eb:37:7e:9e:d0:0f: 55:6c:d6:58:e0:bf:d8:61:98:ba:de:f5:2a:c5:16: f9:f6:a7:d8:62:95:09:b9:ef:29:e5:16:a3:b9:8d: a9:31:35:87:79:97:85:50:fe:e7:7e:0c:64:cc:aa: c7:a0:c7:46:bb:b0:fa:21:2b:08:4f:17:39:65:0d: e3:1e:f3:52:99:2b:71:87:8f:0a:8b:f3:c9:8c:86: 5a:48:79:07:76:a7:89:c3:f5:3b:cf:31:0e:5e:51: 59:ba:5a:9f:c0:44:80:fa:37:e7:6e:8f:18:c9:e2: b2:da:c0:74:e6:38:34:b9:ba:54:83:f0:33:36:07: 34:3d:a6:c0:a3:0d:3f:e8:b2:22:70:04:2b:9b:f4: d9:a3:07:19:f3:67:f0:6a:45:1f:48:40:a9:37:b4: 5e:0f:eb:e4:71:2e:f3:61:ca:66:50:91:03:02:8e: b4:6a:34:d9:cb:5e:f0:4e:af:63:cf:8c:16:0f:e6: cc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6D:9D:9F:09:41:DA:09:33:E2:DD:0F:3B:4D:73:0A:48:C6:9B:79 X509v3 Authority Key Identifier: keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9f:4c:2f:ca:27:98:6f:ea:a1:2e:bf:17:bd:0b:f9:f5:99: 7c:8a:5e:5f:3d:16:87:74:cd:96:e9:e2:38:dc:ca:c1:35:e8: 7f:44:f1:e9:75:40:7c:98:8a:40:c5:47:a6:3c:76:80:10:3d: 3c:27:08:dd:e3:0f:bf:23:6b:87:ff:7e:f9:8c:3d:a3:ef:35: 76:7d:61:4d:db:f1:10:65:5f:89:29:51:3f:d2:70:65:7b:19: 02:2f:32:1b:01:3d:12:cc:a2:ab:da:e0:2c:9c:80:d0:e4:18: cc:ea:69:88:f0:4e:77:bc:e2:ed:a6:ea:80:1c:c1:b3:52:5a: a6:b7:55:8e:d9:5f:bd:38:27:eb:ad:eb:f5:58:94:6b:61:d3: 22:59:a3:34:4e:35:f9:ae:63:58:47:32:14:82:f4:6a:ca:62: 75:21:5e:09:06:c9:c9:64:d1:68:c0:3e:66:02:6f:93:e0:0c: 99:6a:cc:fc:e3:f6:9a:a9:a7:22:69:0a:49:ce:2e:22:12:77: b3:77:97:b5:b1:bf:1c:c9:da:d0:ba:69:3d:3e:5d:18:71:10: 8f:75:ba:e1:ff:bb:32:fa:08:48:73:a1:ae:80:4e:8c:96:2f: 1f:42:82:61:c7:72:72:d9:18:b1:62:57:d4:32:1e:ce:af:96: e9:cf:0a:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hiAK2hQSPsegjYZvp8CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYmExZDI0ZTcyYzQzOWVjN2E1Y2JkYzM5MTM1N2RkODlj Yjg2YWIwHhcNMjUxMjA2MDQwMTA5WhcNMjUxMjA3MDQwMTA5WjAzMTEwLwYDVQQD EyhhYzZkOWQ5ZjA5NDFkYTA5MzNlMmRkMGYzYjRkNzMwYTQ4YzY5Yjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8uttBy7qXYdpcU2qDr3IfWHrzHj rRSfr8iV/kqzFSkTh3BBLCxL92rInE/AIn/ZzJ5uCazlCG9JlbvBp/5GO+T16vfr N36e0A9VbNZY4L/YYZi63vUqxRb59qfYYpUJue8p5RajuY2pMTWHeZeFUP7nfgxk zKrHoMdGu7D6ISsITxc5ZQ3jHvNSmStxh48Ki/PJjIZaSHkHdqeJw/U7zzEOXlFZ ulqfwESA+jfnbo8YyeKy2sB05jg0ubpUg/AzNgc0PabAow0/6LIicAQrm/TZowcZ 82fwakUfSECpN7ReD+vkcS7zYcpmUJEDAo60ajTZy17wTq9jz4wWD+bM+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxtnZ8JQdoJM+LdDztNcwpIxpt5MB8GA1UdIwQY MBaAFGu6HSTnLEOex6XL3DkTV92Jy4arMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hOTRhNGMtYTU1Mi00NmY2LThhODEt Y2VmOTQ0ODEyNGIwLzEvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9hOTRhNGMtYTU1Mi00NmY2LThhODEtY2VmOTQ0ODEyNGIw LzEvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJ9ML8on mG/qoS6/F70L+fWZfIpeXz0Wh3TNluniONzKwTXof0Tx6XVAfJiKQMVHpjx2gBA9 PCcI3eMPvyNrh/9++Yw9o+81dn1hTdvxEGVfiSlRP9JwZXsZAi8yGwE9Esyiq9rg LJyA0OQYzOppiPBOd7zi7abqgBzBs1JaprdVjtlfvTgn663r9ViUa2HTIlmjNE41 +a5jWEcyFIL0aspidSFeCQbJyWTRaMA+ZgJvk+AMmWrM/OP2mqmnImkKSc4uIhJ3 s3eXtbG/HMna0LppPT5dGHEQj3W64f+7MvoISHOhroBOjJYvH0KCYcdyctkYsWJX 1DIezq+W6c8KXg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:47 2025 by rpki-client