This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft File: a-OcMb6T9W5jvSbVscBy3HdTGeY.mft (raw, json) Hash identifier: bmrunPvfEAsrEuSggffWUM3H0dtK6vaT1xjORdX6uGc= Subject key identifier: A3:8D:3D:44:FB:3B:D3:35:C3:31:6F:9F:13:2C:D2:4C:FE:E6:65:30 Authority key identifier: 6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6 Certificate issuer: /CN=6be39c31be93f56e63bd26d5b1c072dc775319e6 Certificate serial: 019AF2771804B6E20590A6EBABABFA1923C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft Manifest number: 0532 Signing time: Sat 06 Dec 2025 07:01:22 +0000 Manifest this update: Sat 06 Dec 2025 07:01:22 +0000 Manifest next update: Sun 07 Dec 2025 07:01:22 +0000 Files and hashes: 1: a-OcMb6T9W5jvSbVscBy3HdTGeY.crl (hash: CRAT7plWHp8Rf8DS2LUkUV8eFQOsjQSCypfOzBy5Mxo=) 2: avdVBk-rHRbW-M4AabpJX7CSjxg.roa (hash: XlwxkSLG5mJnTFp/kB80ylCJ16RiA9KQHhkduE06FV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:18:04:b6:e2:05:90:a6:eb:ab:ab:fa:19:23:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6be39c31be93f56e63bd26d5b1c072dc775319e6 Validity Not Before: Dec 6 07:01:22 2025 GMT Not After : Dec 7 07:01:22 2025 GMT Subject: CN=a38d3d44fb3bd335c3316f9f132cd24cfee66530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6d:96:a7:34:75:22:2e:11:78:ef:2f:21:db: d1:d0:9a:6c:1e:75:45:70:58:91:db:5c:ad:b3:2d: ff:e6:8b:08:eb:6d:69:49:2b:d5:26:b0:db:ae:29: e7:f6:11:41:48:e4:58:b1:0b:84:9a:5e:c2:23:89: 3e:f6:c9:68:7a:6c:53:8f:f7:79:9a:9c:40:35:eb: f6:d9:3c:c3:3c:2d:e7:8f:82:76:66:76:a1:6c:4f: 53:cb:27:d5:65:20:8d:a1:b9:a7:71:bd:5e:3c:2e: 52:a0:64:29:11:2a:ae:4d:83:bf:a5:1b:59:9d:21: 5f:8b:9d:11:bd:5a:5b:06:96:b4:7f:49:90:c6:f5: 5f:db:b7:9b:86:24:f2:ae:f0:38:da:87:58:48:f7: 70:9e:58:e7:1b:1c:87:41:90:68:ad:88:68:0d:7c: c9:cd:f1:54:7d:71:0f:46:1c:cd:e5:1f:8e:e9:f1: d2:bc:16:cf:5d:b2:35:67:7c:78:b1:11:a1:bd:42: 79:95:84:cf:e8:e6:c7:6d:4a:5f:74:5f:58:2c:9d: 35:28:2c:e1:8d:b3:b5:df:3b:61:e4:b2:ce:1b:25: 4e:80:39:1b:71:89:33:7e:30:85:4e:f6:40:a8:25: 77:57:7b:ce:d4:43:98:0d:25:19:e6:5a:f2:23:ce: 6c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8D:3D:44:FB:3B:D3:35:C3:31:6F:9F:13:2C:D2:4C:FE:E6:65:30 X509v3 Authority Key Identifier: keyid:6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:4c:8c:d5:b2:a6:42:4a:e8:c8:c3:ba:49:c6:98:8d:c3:65: 45:b4:c8:cb:94:b1:15:85:ab:db:ba:f4:1d:f7:98:9e:5b:77: f4:50:b0:e5:91:df:a0:8a:d6:fc:26:b3:fb:a1:20:24:61:35: c4:58:7d:45:5a:cc:df:37:0e:48:cc:de:ce:3c:5e:17:ca:25: d0:c0:48:72:f2:9c:36:5c:92:ff:72:28:f1:8a:7f:f7:a5:bb: c3:16:ae:0b:42:c3:c3:9f:36:8a:05:72:74:95:2b:56:f5:ab: 56:ab:0b:e2:d4:5f:50:e3:25:b0:85:9e:79:cc:8d:a0:31:49: 13:4f:c4:25:76:7c:bc:4e:de:9f:f4:4b:70:6c:13:9e:47:d1: 7d:91:71:1b:22:d1:fa:71:24:5a:86:8c:76:95:98:e7:78:00: d8:a0:e7:ab:22:87:3b:2c:94:00:f4:04:01:ae:ff:6c:f2:d2: 32:ff:94:bb:73:3f:bf:5c:99:f4:a0:90:3c:14:16:a0:c8:d7: 5f:95:c5:d2:8b:56:ec:29:b9:5c:2b:9e:bd:74:9d:fa:5b:ab: 36:a3:32:10:f3:d8:46:a4:4b:dd:24:1e:4b:98:78:2e:b6:13: ac:f2:d2:b6:5e:5c:13:c5:81:e2:8d:3d:d3:27:49:39:0a:c7: 1c:43:4b:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxgEtuIFkKbrq6v6GSPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZTM5YzMxYmU5M2Y1NmU2M2JkMjZkNWIxYzA3MmRjNzc1 MzE5ZTYwHhcNMjUxMjA2MDcwMTIyWhcNMjUxMjA3MDcwMTIyWjAzMTEwLwYDVQQD EyhhMzhkM2Q0NGZiM2JkMzM1YzMzMTZmOWYxMzJjZDI0Y2ZlZTY2NTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq22WpzR1Ii4ReO8vIdvR0JpsHnVF cFiR21ytsy3/5osI621pSSvVJrDbrinn9hFBSORYsQuEml7CI4k+9sloemxTj/d5 mpxANev22TzDPC3nj4J2ZnahbE9TyyfVZSCNobmncb1ePC5SoGQpESquTYO/pRtZ nSFfi50RvVpbBpa0f0mQxvVf27ebhiTyrvA42odYSPdwnljnGxyHQZBorYhoDXzJ zfFUfXEPRhzN5R+O6fHSvBbPXbI1Z3x4sRGhvUJ5lYTP6ObHbUpfdF9YLJ01KCzh jbO13zth5LLOGyVOgDkbcYkzfjCFTvZAqCV3V3vO1EOYDSUZ5lryI85soQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKONPUT7O9M1wzFvnxMs0kz+5mUwMB8GA1UdIwQY MBaAFGvjnDG+k/VuY70m1bHActx3UxnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYS1PY01iNlQ5VzVqdlNiVnNjQnkzSGRUR2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wM2M5ZDMtMGUyNS00Y2M3LTk2YTMt MTE3YmY0Mjk0MWNhLzEvYS1PY01iNlQ5VzVqdlNiVnNjQnkzSGRUR2VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wM2M5ZDMtMGUyNS00Y2M3LTk2YTMtMTE3YmY0Mjk0MWNh LzEvYS1PY01iNlQ5VzVqdlNiVnNjQnkzSGRUR2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkyM1bKm QkroyMO6ScaYjcNlRbTIy5SxFYWr27r0HfeYnlt39FCw5ZHfoIrW/Caz+6EgJGE1 xFh9RVrM3zcOSMzezjxeF8ol0MBIcvKcNlyS/3Io8Yp/96W7wxauC0LDw582igVy dJUrVvWrVqsL4tRfUOMlsIWeecyNoDFJE0/EJXZ8vE7en/RLcGwTnkfRfZFxGyLR +nEkWoaMdpWY53gA2KDnqyKHOyyUAPQEAa7/bPLSMv+Uu3M/v1yZ9KCQPBQWoMjX X5XF0otW7Cm5XCuevXSd+lurNqMyEPPYRqRL3SQeS5h4LrYTrPLStl5cE8WB4o09 0ydJOQrHHENLAw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:31 2025 by rpki-client