This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft File: o05gF-H-A5MnjChZ9DBDsx7myJo.mft (raw, json) Hash identifier: m6skrLt/B9EpQGzKVZHWBPrS9R7IqCBmb5GbC3+5WtY= Subject key identifier: B0:4C:1A:06:46:67:44:4C:44:D0:89:7A:A3:E4:3B:55:10:8F:54:56 Authority key identifier: A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A Certificate issuer: /CN=a34e6017e1fe0393278c2859f43043b31ee6c89a Certificate serial: 019AF49C0BA73704AD83F2AA1D2D266C6E68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft Manifest number: 0427 Signing time: Sat 06 Dec 2025 17:00:58 +0000 Manifest this update: Sat 06 Dec 2025 17:00:58 +0000 Manifest next update: Sun 07 Dec 2025 17:00:58 +0000 Files and hashes: 1: aV0FKOuqhoqYjc8PhMRhlUk_Kr4.roa (hash: 4Zq9HZGSBWYChHHK82q9QSLtG6g08Vt9sV0+tQrBg5c=) 2: o05gF-H-A5MnjChZ9DBDsx7myJo.crl (hash: aLVQAiJdBXov4OKRi2BEgAZxbnurr0LSEbB7vpEEmLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:0b:a7:37:04:ad:83:f2:aa:1d:2d:26:6c:6e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a34e6017e1fe0393278c2859f43043b31ee6c89a Validity Not Before: Dec 6 17:00:58 2025 GMT Not After : Dec 7 17:00:58 2025 GMT Subject: CN=b04c1a064667444c44d0897aa3e43b55108f5456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:37:ab:60:7a:88:60:5a:2c:36:ea:a8:3f:8a: 19:e8:c9:ec:a5:30:40:f5:e2:f8:39:31:4c:8e:5b: f2:d1:93:e1:4e:67:71:c5:70:98:3e:9a:90:28:b1: a7:76:4d:dc:47:fd:8e:b7:0f:1d:6b:c6:07:57:86: 23:12:97:49:25:89:b1:4b:7b:ff:dc:e0:cc:52:6f: 7b:e8:4e:04:ff:77:a0:9e:3c:49:2e:2b:bf:0b:d3: 5e:d2:fb:2f:69:b3:b8:23:36:52:b0:f3:4f:a8:06: 26:49:a0:11:c1:5d:e0:dc:70:7c:f4:3f:7c:14:dc: c6:31:77:ee:c3:3f:e7:d3:8a:5e:d6:15:34:6c:38: 9b:be:f7:13:4c:79:5b:92:ab:6d:f5:63:1e:bb:92: ef:37:f7:e7:63:1f:88:6c:08:15:9e:38:2d:84:f3: 19:9c:83:64:6b:dd:bd:64:41:05:7e:8a:5b:78:72: 56:b2:a5:c1:51:8c:38:b8:ee:7f:fc:d0:c3:fd:b2: 22:45:d7:db:82:dd:7e:dd:3d:c0:ab:cf:cd:e3:12: 25:ea:fe:a8:83:cc:a6:44:e7:8f:af:4f:7f:62:0c: 9b:82:0d:d3:15:79:df:1f:92:ad:3b:a2:c1:4d:76: cd:af:c9:ed:72:4a:f8:7e:a7:2d:be:51:ac:ab:20: b0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4C:1A:06:46:67:44:4C:44:D0:89:7A:A3:E4:3B:55:10:8F:54:56 X509v3 Authority Key Identifier: keyid:A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:79:06:af:cd:b6:68:45:40:fd:09:1c:79:48:4e:f2:56:cf: bd:6a:be:2f:9f:44:79:53:6f:a5:3a:f4:93:a1:56:a0:a8:c8: 4c:d6:f5:c3:7a:28:e9:3e:8d:d4:96:32:68:72:0f:73:d7:99: bc:4a:9b:ad:29:e0:0f:19:e3:82:1d:ef:fc:e4:d3:05:fb:a6: 4b:dd:e8:51:85:34:92:03:2f:3d:90:c1:1a:91:bb:89:b3:88: ff:3f:25:76:1a:b6:67:ac:d6:62:03:b0:7e:b8:8d:a6:3f:be: b5:10:b9:07:3f:67:34:75:ab:3c:ba:ce:b8:ae:f8:d8:fd:e7: 35:f9:21:3b:4e:b7:7a:09:f2:0c:00:a7:b3:6d:1d:51:db:0f: 02:d3:71:f4:d5:db:6f:1e:81:ff:77:81:b9:23:1e:da:3e:a4: b6:30:31:e9:65:d0:75:ff:ac:f4:ce:b7:78:7b:8c:89:92:07: 09:74:46:39:3d:11:c4:2e:92:67:a0:fa:48:83:6f:94:68:54: d1:68:f4:aa:2f:73:6f:4f:09:c5:40:99:b7:23:07:34:8e:29: 57:c0:1f:9e:ff:55:59:88:e3:24:72:44:df:2f:29:c0:4f:fd: a0:0b:b1:e8:3d:de:7a:63:d9:51:23:55:04:25:e3:07:07:67: ce:1c:a5:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nAunNwStg/KqHS0mbG5oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNGU2MDE3ZTFmZTAzOTMyNzhjMjg1OWY0MzA0M2IzMWVl NmM4OWEwHhcNMjUxMjA2MTcwMDU4WhcNMjUxMjA3MTcwMDU4WjAzMTEwLwYDVQQD EyhiMDRjMWEwNjQ2Njc0NDRjNDRkMDg5N2FhM2U0M2I1NTEwOGY1NDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszerYHqIYFosNuqoP4oZ6MnspTBA 9eL4OTFMjlvy0ZPhTmdxxXCYPpqQKLGndk3cR/2Otw8da8YHV4YjEpdJJYmxS3v/ 3ODMUm976E4E/3egnjxJLiu/C9Ne0vsvabO4IzZSsPNPqAYmSaARwV3g3HB89D98 FNzGMXfuwz/n04pe1hU0bDibvvcTTHlbkqtt9WMeu5LvN/fnYx+IbAgVnjgthPMZ nINka929ZEEFfopbeHJWsqXBUYw4uO5//NDD/bIiRdfbgt1+3T3Aq8/N4xIl6v6o g8ymROePr09/Ygybgg3TFXnfH5KtO6LBTXbNr8ntckr4fqctvlGsqyCwzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBMGgZGZ0RMRNCJeqPkO1UQj1RWMB8GA1UdIwQY MBaAFKNOYBfh/gOTJ4woWfQwQ7Me5siaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzA1Z0YtSC1BNU1uakNoWjlEQkRzeDdteUpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC82ZDYyNWMtN2U2MC00NTIzLTk0OTEt ZDExMjI5OWZmNjk1LzEvbzA1Z0YtSC1BNU1uakNoWjlEQkRzeDdteUpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC82ZDYyNWMtN2U2MC00NTIzLTk0OTEtZDExMjI5OWZmNjk1 LzEvbzA1Z0YtSC1BNU1uakNoWjlEQkRzeDdteUpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHkGr822 aEVA/QkceUhO8lbPvWq+L59EeVNvpTr0k6FWoKjITNb1w3oo6T6N1JYyaHIPc9eZ vEqbrSngDxnjgh3v/OTTBfumS93oUYU0kgMvPZDBGpG7ibOI/z8ldhq2Z6zWYgOw friNpj++tRC5Bz9nNHWrPLrOuK742P3nNfkhO063egnyDACns20dUdsPAtNx9NXb bx6B/3eBuSMe2j6ktjAx6WXQdf+s9M63eHuMiZIHCXRGOT0RxC6SZ6D6SINvlGhU 0Wj0qi9zb08JxUCZtyMHNI4pV8Afnv9VWYjjJHJE3y8pwE/9oAux6D3eemPZUSNV BCXjBwdnzhyldQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:34 2025 by rpki-client