This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft File: rkopxhOOLZPVSjYyi5TLH4o4Kms.mft (raw, json) Hash identifier: HBgqyCsqRW7hmChyfV0bV2uXZKd6UUy1cLSbhCKlp0c= Subject key identifier: A7:E3:11:0C:4D:4E:B4:7A:48:F8:C0:53:CC:A0:1F:E4:D7:79:4F:5B Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B Certificate issuer: /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b Certificate serial: 019AF163F0A37998B77F3ECCA5AD1897D33E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft Manifest number: 0C20 Signing time: Sat 06 Dec 2025 02:00:49 +0000 Manifest this update: Sat 06 Dec 2025 02:00:49 +0000 Manifest next update: Sun 07 Dec 2025 02:00:49 +0000 Files and hashes: 1: BrYhHrEUiC6KPPt0z5zIenofLis.roa (hash: DE5/RvrYo8fEFuVG34PaeU1d6iLiNdb+LH6pRfnNAg0=) 2: M2qfiHxlvyqX5khJIeCk4BAzw-M.roa (hash: 2wSt8AsR9BQPYP7f67EqXqK56sykUCRKKl1aHVsfKpw=) 3: rkopxhOOLZPVSjYyi5TLH4o4Kms.crl (hash: dAGQ9DbwGa7QfrvTKyg9Sipdo0I3WXydM0pExBViiEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f0:a3:79:98:b7:7f:3e:cc:a5:ad:18:97:d3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b Validity Not Before: Dec 6 02:00:49 2025 GMT Not After : Dec 7 02:00:49 2025 GMT Subject: CN=a7e3110c4d4eb47a48f8c053cca01fe4d7794f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a7:62:b6:d3:3b:8e:f6:1f:1d:b0:f0:b3:e5: 9a:9c:5c:f4:92:67:6e:e1:07:1c:52:65:57:c2:b8: 1c:42:49:de:7b:ae:a3:b3:17:89:93:55:38:d1:d8: 0a:3d:cd:57:28:cd:17:3e:10:45:3a:2a:28:28:3d: af:0f:4f:81:56:87:ee:dd:5f:00:ea:69:d3:40:68: 34:74:4d:11:9e:41:44:e5:4f:73:fd:12:d0:35:3f: 1f:11:b5:59:26:8d:32:b8:23:d0:84:50:fe:cc:47: 59:ed:74:95:19:40:ba:eb:0c:6b:26:a2:ff:9a:99: fe:fd:65:81:c6:6c:02:6b:cd:c1:1b:63:85:01:6b: e8:c7:51:05:34:ba:d4:38:1b:e4:32:3f:66:e5:4e: be:ba:a9:17:3c:a1:61:e4:65:5f:f1:2b:77:53:57: 2e:6c:66:7d:44:bc:f1:4f:ab:de:dd:83:4c:4f:63: 2b:4a:72:27:a4:80:50:45:b2:0a:43:ce:a1:11:28: 04:39:ab:e8:63:9c:fb:c3:ce:23:c7:b2:82:95:8d: 3c:1b:a4:ac:0c:d0:a4:89:16:64:10:ed:a8:bc:9a: 74:46:db:d0:38:97:a2:79:cf:2a:96:0c:f2:8e:ce: af:db:42:2f:2a:c9:d6:53:20:da:e4:73:f3:93:49: b5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E3:11:0C:4D:4E:B4:7A:48:F8:C0:53:CC:A0:1F:E4:D7:79:4F:5B X509v3 Authority Key Identifier: keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:5a:f2:4e:6e:19:ad:0d:38:f8:fe:46:d6:8e:01:9d:0b:ba: 29:3c:5c:49:a8:4f:02:ef:b6:7b:68:51:a2:60:7a:6d:93:f9: ba:6d:3c:d6:8b:2a:c0:f8:fa:c0:4c:f7:23:d4:b2:a3:86:3a: 45:93:06:87:69:5f:fc:e6:46:ed:89:10:92:8d:5a:cd:9d:2e: c9:9c:b9:6e:87:77:a5:4c:0e:4f:4a:1b:79:0b:1a:03:b0:10: 94:b1:bf:08:08:85:e5:ca:20:48:84:b3:a4:59:5b:f3:d0:1f: 5c:c6:ca:ba:0c:12:55:f6:32:a4:71:9d:8a:74:46:ef:f5:34: 52:4b:ca:07:7a:85:53:68:81:bc:b3:c0:b9:f5:72:17:3e:17: ee:25:05:dd:8b:6f:a3:f2:97:72:b8:ec:25:f7:85:6b:8f:c3: 36:ef:71:69:37:e9:94:51:d0:91:1d:c3:18:ab:2d:2c:41:0a: 89:7a:01:19:bd:b2:e4:c6:56:dc:3d:52:0d:54:5a:bd:60:64: c7:06:ca:0a:4f:bd:0e:40:dd:0a:38:5a:40:a5:f7:64:05:e1: 19:79:fa:01:33:ea:5f:84:dc:d5:10:8d:0e:b2:32:a3:95:a0: 61:77:b1:4f:a0:fa:7b:72:51:8d:97:2e:00:d1:71:e0:67:07: 54:5b:12:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/CjeZi3fz7Mpa0Yl9M+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNGEyOWM2MTM4ZTJkOTNkNTRhMzYzMjhiOTRjYjFmOGEz ODJhNmIwHhcNMjUxMjA2MDIwMDQ5WhcNMjUxMjA3MDIwMDQ5WjAzMTEwLwYDVQQD EyhhN2UzMTEwYzRkNGViNDdhNDhmOGMwNTNjY2EwMWZlNGQ3Nzk0ZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qdittM7jvYfHbDws+WanFz0kmdu 4QccUmVXwrgcQknee66jsxeJk1U40dgKPc1XKM0XPhBFOiooKD2vD0+BVofu3V8A 6mnTQGg0dE0RnkFE5U9z/RLQNT8fEbVZJo0yuCPQhFD+zEdZ7XSVGUC66wxrJqL/ mpn+/WWBxmwCa83BG2OFAWvox1EFNLrUOBvkMj9m5U6+uqkXPKFh5GVf8St3U1cu bGZ9RLzxT6ve3YNMT2MrSnInpIBQRbIKQ86hESgEOavoY5z7w84jx7KClY08G6Ss DNCkiRZkEO2ovJp0RtvQOJeiec8qlgzyjs6v20IvKsnWUyDa5HPzk0m1AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfjEQxNTrR6SPjAU8ygH+TXeU9bMB8GA1UdIwQY MBaAFK5KKcYTji2T1Uo2MouUyx+KOCprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zNWJlMDQtZDViNy00NGFhLWFkZTQt MTM0MDFkMWYyMmQyLzEvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zNWJlMDQtZDViNy00NGFhLWFkZTQtMTM0MDFkMWYyMmQy LzEvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflryTm4Z rQ04+P5G1o4BnQu6KTxcSahPAu+2e2hRomB6bZP5um081osqwPj6wEz3I9Syo4Y6 RZMGh2lf/OZG7YkQko1azZ0uyZy5bod3pUwOT0obeQsaA7AQlLG/CAiF5cogSISz pFlb89AfXMbKugwSVfYypHGdinRG7/U0UkvKB3qFU2iBvLPAufVyFz4X7iUF3Ytv o/KXcrjsJfeFa4/DNu9xaTfplFHQkR3DGKstLEEKiXoBGb2y5MZW3D1SDVRavWBk xwbKCk+9DkDdCjhaQKX3ZAXhGXn6ATPqX4Tc1RCNDrIyo5WgYXexT6D6e3JRjZcu ANFx4GcHVFsS0w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:09 2025 by rpki-client