This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft File: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft (raw, json) Hash identifier: 5+86FArVpM2czxp3N6VW/gAoRLSFd03MPXh0ABg+5sA= Subject key identifier: 04:88:20:F3:C4:8B:0E:9C:C1:38:A3:8B:0C:8F:2E:9A:D2:1F:8C:B2 Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e Certificate serial: 019AF087EC8FD12A038ACDDEF4F4E919E46E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft Manifest number: 069F Signing time: Fri 05 Dec 2025 22:00:31 +0000 Manifest this update: Fri 05 Dec 2025 22:00:31 +0000 Manifest next update: Sat 06 Dec 2025 22:00:31 +0000 Files and hashes: 1: UxDhbbGiLqhG0cjqvQTDDPyodT8.roa (hash: /jH4fHuxOiDmcdoWH8bkN08eFhE6HPAkApmfAQgC6ts=) 2: iV5FZuMGLlixAMw0jkwzk7P8BYc.roa (hash: C9ucIF2yO9TSTl7qwXNqjkxkNJQX9XDq0UvZWNrPjQU=) 3: inOwk0rr2hBBrYALexzKTS-HXaE.roa (hash: BGYPbxUWdEW8PUtIUA1rv4TAk1J/uLjxsHUKD6zhw0w=) 4: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl (hash: kTXCpugurfCluOuf7Cmt1btMaU42jknyV9dZIWPL6Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:ec:8f:d1:2a:03:8a:cd:de:f4:f4:e9:19:e4:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e Validity Not Before: Dec 5 22:00:31 2025 GMT Not After : Dec 6 22:00:31 2025 GMT Subject: CN=048820f3c48b0e9cc138a38b0c8f2e9ad21f8cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e7:d2:78:10:90:fa:b1:36:74:1b:08:4e:a7: c3:02:ba:b1:45:8c:21:0f:7d:ad:14:9a:68:98:49: 16:d3:e8:d6:4a:2b:d3:4e:25:77:53:84:55:5f:43: db:f9:0c:64:9a:39:3a:c9:2a:5f:99:7b:56:9c:0c: 13:f9:63:64:65:ba:96:30:6b:04:1f:51:a1:d7:39: c5:cb:a4:eb:f4:2f:c8:87:27:4b:a3:fa:49:56:ed: c6:ff:0f:da:df:27:cc:17:f9:e8:77:1e:57:43:8f: d6:1d:59:20:80:df:e2:f3:c9:7c:a6:cf:5e:2e:5e: 5b:97:32:3b:03:b4:81:44:9f:8c:0a:ac:e9:de:ae: 31:8e:57:95:f5:fe:e9:b3:b1:01:7f:5c:c5:e2:03: 3b:99:77:dd:bb:aa:21:b1:c0:23:8a:84:80:dd:e6: ef:63:e4:b2:65:3e:36:07:4e:cf:3a:62:2b:39:7f: 4f:39:be:f2:07:19:08:06:1a:c9:c3:71:8f:f3:a9: 11:f7:07:39:d8:53:dd:4e:ab:26:f6:0d:93:c6:9a: fd:08:65:75:f4:8e:1a:d7:e9:06:99:c1:72:53:60: b2:0a:9c:77:0b:ff:aa:e8:c2:f3:87:37:81:ff:38: aa:2d:e4:bd:13:8f:60:03:41:53:fb:21:c2:34:a5: a0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:88:20:F3:C4:8B:0E:9C:C1:38:A3:8B:0C:8F:2E:9A:D2:1F:8C:B2 X509v3 Authority Key Identifier: keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:5d:10:3d:49:b1:af:83:75:04:2d:40:08:89:5b:2f:81:f2: 7c:14:b9:15:1b:d2:89:b4:a2:0b:50:64:b0:05:f3:72:4e:1a: f7:47:01:a7:17:1b:e8:95:d9:aa:17:20:97:ae:10:3e:71:78: 1d:92:7d:c2:06:9f:a9:a1:66:ab:e7:0a:85:a1:d7:59:e8:c7: 08:48:05:fe:57:f8:92:e8:01:41:03:9d:b1:03:d5:f4:27:45: 99:4a:28:4b:1b:af:25:3b:06:dd:f3:f3:bf:02:ae:69:e5:ad: 9f:8c:d5:a8:b2:33:a9:a6:56:fa:fe:45:f0:15:92:23:c7:c0: 18:bb:c8:05:84:83:06:fe:20:f2:69:aa:c4:bc:b4:1d:0b:bd: f9:db:fc:b6:a8:f1:be:60:3d:4d:3f:b4:62:94:70:e4:14:37: 35:36:6b:da:42:1e:90:4b:ff:14:8f:ee:f9:dd:c9:be:33:6e: 23:1a:d2:88:a3:82:fe:e4:e1:0a:88:f7:80:ab:d6:f2:92:ae: 0f:25:ed:75:0b:f7:20:1a:06:5b:09:8b:08:60:ea:84:08:86: b1:5b:0b:9a:86:5c:fb:78:fa:bb:f5:77:36:ae:0e:9d:88:ad: 29:5e:f5:67:27:9b:45:ba:a6:1a:12:36:dd:36:33:80:71:fd: 7f:c4:85:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh+yP0SoDis3e9PTpGeRuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZjFiMjJiMjA1NDUwMmJmZDM4ODkxMzgyOTExMDNkODNi NmE1MGUwHhcNMjUxMjA1MjIwMDMxWhcNMjUxMjA2MjIwMDMxWjAzMTEwLwYDVQQD EygwNDg4MjBmM2M0OGIwZTljYzEzOGEzOGIwYzhmMmU5YWQyMWY4Y2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOfSeBCQ+rE2dBsITqfDArqxRYwh D32tFJpomEkW0+jWSivTTiV3U4RVX0Pb+Qxkmjk6ySpfmXtWnAwT+WNkZbqWMGsE H1Gh1znFy6Tr9C/IhydLo/pJVu3G/w/a3yfMF/nodx5XQ4/WHVkggN/i88l8ps9e Ll5blzI7A7SBRJ+MCqzp3q4xjleV9f7ps7EBf1zF4gM7mXfdu6ohscAjioSA3ebv Y+SyZT42B07POmIrOX9POb7yBxkIBhrJw3GP86kR9wc52FPdTqsm9g2Txpr9CGV1 9I4a1+kGmcFyU2CyCpx3C/+q6MLzhzeB/ziqLeS9E49gA0FT+yHCNKWgXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASIIPPEiw6cwTijiwyPLprSH4yyMB8GA1UdIwQY MBaAFKPxsisgVFAr/TiJE4KRED2DtqUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb19HeUt5QlVVQ3Y5T0lrVGdwRVFQWU8ycFE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hOGFhZmYtMTJhMS00NjQxLThiOWQt MjRkMjcyY2UxMWUzLzEvb19HeUt5QlVVQ3Y5T0lrVGdwRVFQWU8ycFE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9hOGFhZmYtMTJhMS00NjQxLThiOWQtMjRkMjcyY2UxMWUz LzEvb19HeUt5QlVVQ3Y5T0lrVGdwRVFQWU8ycFE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdl0QPUmx r4N1BC1ACIlbL4HyfBS5FRvSibSiC1BksAXzck4a90cBpxcb6JXZqhcgl64QPnF4 HZJ9wgafqaFmq+cKhaHXWejHCEgF/lf4kugBQQOdsQPV9CdFmUooSxuvJTsG3fPz vwKuaeWtn4zVqLIzqaZW+v5F8BWSI8fAGLvIBYSDBv4g8mmqxLy0HQu9+dv8tqjx vmA9TT+0YpRw5BQ3NTZr2kIekEv/FI/u+d3JvjNuIxrSiKOC/uThCoj3gKvW8pKu DyXtdQv3IBoGWwmLCGDqhAiGsVsLmoZc+3j6u/V3Nq4OnYitKV71ZyebRbqmGhI2 3TYzgHH9f8SFLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:52 2025 by rpki-client