This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft File: o7HPJ-q7mfazXewahDm21lPc4zo.mft (raw, json) Hash identifier: ysA+3jZ/9Bcp/XVfT30GWrNo0CMvLxUn7E5o8kbKpnE= Subject key identifier: 60:8F:F9:14:8C:33:BD:80:B4:1F:07:05:E8:67:A4:8C:1A:B4:37:9F Authority key identifier: A3:B1:CF:27:EA:BB:99:F6:B3:5D:EC:1A:84:39:B6:D6:53:DC:E3:3A Certificate issuer: /CN=a3b1cf27eabb99f6b35dec1a8439b6d653dce33a Certificate serial: 019AF3899AB345CEF0783C77072DA8C11E9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7HPJ-q7mfazXewahDm21lPc4zo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 12:01:12 +0000 Manifest this update: Sat 06 Dec 2025 12:01:12 +0000 Manifest next update: Sun 07 Dec 2025 12:01:12 +0000 Files and hashes: 1: o7HPJ-q7mfazXewahDm21lPc4zo.crl (hash: a6JDqPcOYySLXnrrTqD4B7RNihHbrQa5xud8DJX4kXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft rsync://rpki.ripe.net/repository/DEFAULT/o7HPJ-q7mfazXewahDm21lPc4zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:9a:b3:45:ce:f0:78:3c:77:07:2d:a8:c1:1e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b1cf27eabb99f6b35dec1a8439b6d653dce33a Validity Not Before: Dec 6 12:01:12 2025 GMT Not After : Dec 7 12:01:12 2025 GMT Subject: CN=608ff9148c33bd80b41f0705e867a48c1ab4379f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:38:ce:a9:f0:20:4e:f1:82:9c:e4:7a:f9:b8: 2f:7f:73:e9:53:8e:32:7b:2f:e5:37:a4:a7:ec:86: 09:ce:7c:aa:80:c8:e9:6d:3d:2c:66:a7:47:7a:41: b2:ac:d8:76:47:c9:c6:b3:e8:a4:54:58:43:1a:e7: fc:2e:10:0f:a2:e0:81:07:d8:aa:2d:10:05:86:65: 4b:b2:6c:64:1a:52:37:5d:7f:7f:47:e9:3e:7b:6b: 3f:28:56:20:61:41:46:dc:7d:5a:e1:7e:02:9d:f9: f6:aa:d2:b8:9a:e5:af:85:f6:fd:12:87:55:a9:4d: 84:0a:eb:82:0a:2b:0c:c8:8c:76:da:6b:7e:c2:14: fe:e4:aa:a1:e5:e4:d6:ab:9a:5f:ce:4d:68:f0:d5: df:23:66:11:a6:d2:cb:fa:6d:98:b5:33:ad:1e:b4: 41:8c:4a:17:e3:18:8d:a3:ce:c2:0d:98:16:18:b2: 41:a1:6b:4d:20:6c:35:5b:49:40:fe:02:10:4c:64: 22:e4:54:cb:c2:fc:b9:4e:bd:f7:79:7a:4a:40:fa: 96:e8:90:93:0c:3f:6d:06:83:63:b9:0d:de:da:b6: 26:2f:75:94:31:77:fc:1b:b6:42:8e:d6:54:5b:d6: 23:88:21:be:95:93:f7:ae:d7:57:47:0e:a2:09:f4: 55:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8F:F9:14:8C:33:BD:80:B4:1F:07:05:E8:67:A4:8C:1A:B4:37:9F X509v3 Authority Key Identifier: keyid:A3:B1:CF:27:EA:BB:99:F6:B3:5D:EC:1A:84:39:B6:D6:53:DC:E3:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7HPJ-q7mfazXewahDm21lPc4zo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d7:7f:d4:51:58:07:05:dd:19:92:13:35:2b:10:41:33:25: 00:2a:0f:66:ec:76:5f:c7:d5:9a:9a:52:9f:cd:02:e9:04:36: d4:3a:ed:ed:cf:94:5e:57:ef:7a:9f:f6:8b:4f:4a:b9:78:d4: 66:33:37:41:f8:e2:f9:a4:8e:9f:0e:cd:45:a7:dd:ba:0a:e3: b9:1c:db:90:44:83:ff:60:74:6d:c9:45:d6:31:c6:7a:9f:68: 68:c6:61:e1:f7:3b:4b:d7:f2:eb:59:86:c0:f4:37:21:12:ef: 74:7c:a2:ea:b1:1b:9a:c5:2b:a4:bc:d9:bd:f6:23:dc:b4:d1: aa:ae:00:63:92:d3:f0:d1:23:dc:58:1e:19:f7:ef:d8:bc:8e: f5:04:96:fc:c2:53:03:f0:e3:4a:fc:10:62:50:60:fa:18:c4: 9d:34:d3:0b:8c:c9:8a:3f:3f:c4:89:4b:d0:ae:ea:63:1d:2d: e2:1f:7a:22:0d:30:bc:bc:e7:51:3e:0e:9a:07:87:2d:d8:4a: ae:90:de:7c:8f:b1:fd:6d:86:e8:08:f5:ff:5c:9f:3e:4f:52: 3b:ef:c0:01:15:f2:e1:81:7d:d6:c8:ae:58:24:d5:a0:52:3c: 46:62:70:f8:39:ac:59:05:68:67:19:f6:0f:e8:68:89:d9:4e: 89:fd:6c:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZqzRc7weDx3By2owR6aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYjFjZjI3ZWFiYjk5ZjZiMzVkZWMxYTg0MzliNmQ2NTNk Y2UzM2EwHhcNMjUxMjA2MTIwMTEyWhcNMjUxMjA3MTIwMTEyWjAzMTEwLwYDVQQD Eyg2MDhmZjkxNDhjMzNiZDgwYjQxZjA3MDVlODY3YTQ4YzFhYjQzNzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzjOqfAgTvGCnOR6+bgvf3PpU44y ey/lN6Sn7IYJznyqgMjpbT0sZqdHekGyrNh2R8nGs+ikVFhDGuf8LhAPouCBB9iq LRAFhmVLsmxkGlI3XX9/R+k+e2s/KFYgYUFG3H1a4X4Cnfn2qtK4muWvhfb9EodV qU2ECuuCCisMyIx22mt+whT+5Kqh5eTWq5pfzk1o8NXfI2YRptLL+m2YtTOtHrRB jEoX4xiNo87CDZgWGLJBoWtNIGw1W0lA/gIQTGQi5FTLwvy5Tr33eXpKQPqW6JCT DD9tBoNjuQ3e2rYmL3WUMXf8G7ZCjtZUW9YjiCG+lZP3rtdXRw6iCfRVEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCP+RSMM72AtB8HBehnpIwatDefMB8GA1UdIwQY MBaAFKOxzyfqu5n2s13sGoQ5ttZT3OM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzdIUEotcTdtZmF6WGV3YWhEbTIxbFBjNHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80MTY3NDItN2RkNi00MTAxLThjMTgt MDU3ODZiZmQ2ODU3LzEvbzdIUEotcTdtZmF6WGV3YWhEbTIxbFBjNHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy80MTY3NDItN2RkNi00MTAxLThjMTgtMDU3ODZiZmQ2ODU3 LzEvbzdIUEotcTdtZmF6WGV3YWhEbTIxbFBjNHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNd/1FFY BwXdGZITNSsQQTMlACoPZux2X8fVmppSn80C6QQ21Drt7c+UXlfvep/2i09KuXjU ZjM3Qfji+aSOnw7NRafdugrjuRzbkESD/2B0bclF1jHGep9oaMZh4fc7S9fy61mG wPQ3IRLvdHyi6rEbmsUrpLzZvfYj3LTRqq4AY5LT8NEj3FgeGffv2LyO9QSW/MJT A/DjSvwQYlBg+hjEnTTTC4zJij8/xIlL0K7qYx0t4h96Ig0wvLznUT4OmgeHLdhK rpDefI+x/W2G6Aj1/1yfPk9SO+/AARXy4YF91siuWCTVoFI8RmJw+DmsWQVoZxn2 D+hoidlOif1s5A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:49 2025 by rpki-client