This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft File: k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft (raw, json) Hash identifier: 6GfXVg0QP+nzgDIPDJ3NYO2EKirIAf3hAmnOmNtqPUI= Subject key identifier: 6A:09:BF:6B:22:BA:78:04:44:CE:A6:77:3C:E7:13:73:B0:15:9F:01 Authority key identifier: 93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE Certificate issuer: /CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde Certificate serial: 019AF2ADA4EF821107D0B4B30D0DD9BF7813 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft Manifest number: 06BB Signing time: Sat 06 Dec 2025 08:00:57 +0000 Manifest this update: Sat 06 Dec 2025 08:00:57 +0000 Manifest next update: Sun 07 Dec 2025 08:00:57 +0000 Files and hashes: 1: 28GUm6MyGmDzZNaWznfWcQv0e_Y.roa (hash: C7L+FDUEfqbFey+e0t8jNl/x+IFvC1I+YVSxl7oinY0=) 2: k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl (hash: YY5u4gb1btDx+MiqTH0hQ808keraNV1DkrZ7kRlLGEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a4:ef:82:11:07:d0:b4:b3:0d:0d:d9:bf:78:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde Validity Not Before: Dec 6 08:00:57 2025 GMT Not After : Dec 7 08:00:57 2025 GMT Subject: CN=6a09bf6b22ba780444cea6773ce71373b0159f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:23:91:41:13:a5:e9:56:ac:52:3a:24:89:12: fd:cb:d5:32:b3:86:e3:38:11:36:54:40:ff:3a:bc: 09:89:f3:42:7b:8b:a5:94:6f:e0:83:09:ba:53:d2: 4e:50:4b:3c:dd:e1:33:b8:5c:1d:c7:9b:40:e3:f4: a7:40:fb:71:23:0c:12:d6:c1:d9:a3:a6:07:6e:e9: 4c:a3:d7:43:4e:de:cb:1c:27:69:89:1a:4a:3c:c6: 61:02:0f:89:f3:59:ef:6a:15:13:4a:65:b6:5e:3d: 27:02:46:57:48:ea:67:93:83:ef:a9:24:ce:2c:4a: 09:07:d8:c3:94:54:9e:0c:90:f1:b8:c8:1d:ee:d1: 23:fa:e3:14:02:4b:b0:9f:c2:3b:9f:3d:20:75:cc: 41:5b:ff:7d:40:55:38:dc:c6:39:cf:89:f7:3a:3a: 8e:4f:45:dd:1e:3e:4a:31:40:0b:cb:1c:dd:9f:8d: c2:47:76:cf:f3:aa:9b:cf:a2:e1:53:4c:9a:d5:10: 75:5a:75:cd:14:f5:1d:c7:65:63:68:dc:82:62:08: 17:9c:83:2a:1b:8f:5d:1c:80:88:d7:2f:80:5e:85: e3:ad:fc:82:40:6c:96:c1:36:6e:9b:d0:80:ee:e0: f2:6c:35:a6:6a:2c:f1:80:38:70:e6:43:c3:61:06: b4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:09:BF:6B:22:BA:78:04:44:CE:A6:77:3C:E7:13:73:B0:15:9F:01 X509v3 Authority Key Identifier: keyid:93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e1:56:01:d4:bf:88:ba:1b:95:6d:37:5c:c8:89:f8:68:80: 9e:04:21:5c:06:ab:1c:c6:f3:92:9e:9c:11:c5:ff:2d:02:6e: b7:ec:d7:57:89:10:b4:c5:a2:1a:3d:66:19:2a:b7:99:c1:98: 7c:53:e5:28:c4:7b:67:4d:b0:1c:51:34:7c:56:99:92:b3:89: 96:37:2c:71:1e:d2:32:be:de:f3:0c:05:d3:16:d7:33:d3:2a: b8:ad:10:16:3c:7d:12:05:f1:a5:74:4d:e0:aa:96:ed:b6:c5: 0a:88:c9:7a:00:dd:27:86:6e:98:42:d4:9c:db:35:4a:3f:08: 4e:ae:b5:42:c4:10:87:8c:09:2c:69:b2:db:27:3f:b0:9c:38: c3:f8:a4:48:ad:7b:61:c1:3c:b2:60:a9:50:17:71:b8:2e:96: e1:46:33:22:c5:2e:3c:fb:bc:7b:ec:a9:80:fe:6b:48:43:18: 3c:22:7e:de:d1:a1:f9:f7:ac:d2:3b:b5:f9:74:10:8f:8f:a3: 56:7d:5d:5a:b9:ed:15:9d:92:1f:28:2a:26:3b:e2:3e:01:ea: 8d:ae:44:33:94:0d:4e:71:12:71:92:31:09:92:44:e5:ca:97: 0c:51:79:94:c3:5e:39:77:a7:fa:02:33:26:71:ee:d0:26:5f: 4f:a4:43:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryraTvghEH0LSzDQ3Zv3gTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZmExYTFkOTE3YTMwNDE3MzlhMmRlZTBmNDFjY2Y4MGM1 NTRkZGUwHhcNMjUxMjA2MDgwMDU3WhcNMjUxMjA3MDgwMDU3WjAzMTEwLwYDVQQD Eyg2YTA5YmY2YjIyYmE3ODA0NDRjZWE2NzczY2U3MTM3M2IwMTU5ZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyORQROl6VasUjokiRL9y9Uys4bj OBE2VED/OrwJifNCe4ullG/ggwm6U9JOUEs83eEzuFwdx5tA4/SnQPtxIwwS1sHZ o6YHbulMo9dDTt7LHCdpiRpKPMZhAg+J81nvahUTSmW2Xj0nAkZXSOpnk4PvqSTO LEoJB9jDlFSeDJDxuMgd7tEj+uMUAkuwn8I7nz0gdcxBW/99QFU43MY5z4n3OjqO T0XdHj5KMUALyxzdn43CR3bP86qbz6LhU0ya1RB1WnXNFPUdx2VjaNyCYggXnIMq G49dHICI1y+AXoXjrfyCQGyWwTZum9CA7uDybDWmaizxgDhw5kPDYQa02QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoJv2siungERM6mdzznE3OwFZ8BMB8GA1UdIwQY MBaAFJP6Gh2RejBBc5ot7g9BzPgMVU3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva19vYUhaRjZNRUZ6bWkzdUQwSE0tQXhWVGQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jMzlhMDctYTk3My00N2Y4LTliOWYt ZmVkMjFlZmYyMzM4LzEva19vYUhaRjZNRUZ6bWkzdUQwSE0tQXhWVGQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9jMzlhMDctYTk3My00N2Y4LTliOWYtZmVkMjFlZmYyMzM4 LzEva19vYUhaRjZNRUZ6bWkzdUQwSE0tQXhWVGQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAneFWAdS/ iLoblW03XMiJ+GiAngQhXAarHMbzkp6cEcX/LQJut+zXV4kQtMWiGj1mGSq3mcGY fFPlKMR7Z02wHFE0fFaZkrOJljcscR7SMr7e8wwF0xbXM9MquK0QFjx9EgXxpXRN 4KqW7bbFCojJegDdJ4ZumELUnNs1Sj8ITq61QsQQh4wJLGmy2yc/sJw4w/ikSK17 YcE8smCpUBdxuC6W4UYzIsUuPPu8e+ypgP5rSEMYPCJ+3tGh+fes0ju1+XQQj4+j Vn1dWrntFZ2SHygqJjviPgHqja5EM5QNTnEScZIxCZJE5cqXDFF5lMNeOXen+gIz JnHu0CZfT6RDMA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:56 2025 by rpki-client