This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft File: r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json) Hash identifier: zT0OT5cJC8w44/ZpvukDrNicV/LE5t5tZCcX2+cP05c= Subject key identifier: 81:F1:BB:21:12:46:05:7D:94:33:80:B4:71:04:1C:AA:1B:4E:2C:D7 Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Certificate serial: 019AF2769F3AD8A7D64B0C34B760C3F12518 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft Manifest number: 1638 Signing time: Sat 06 Dec 2025 07:00:51 +0000 Manifest this update: Sat 06 Dec 2025 07:00:51 +0000 Manifest next update: Sun 07 Dec 2025 07:00:51 +0000 Files and hashes: 1: 7BUAS9lNIJKrmgyqitmt4vjUchs.roa (hash: ZW63wkZvkBfaNmwpw8bvuYCpTs0W+QW7Uv70+dpsljM=) 2: 7DO8E30RGY4vAe7tIWHKTeq95P8.roa (hash: wO6AvUEPcj/+yaf4lye0oLqn75BJbLzeCB1mL+qhuus=) 3: Dc_MqXVzSSK77uzNogE5HgnhLwg.roa (hash: O7xD6oauj5YnrNkfW6IbaFJNVQOfp627wKoUhUJUb+c=) 4: F_q5_Z07qZI9DXW4KcpMFI_8MOY.roa (hash: UA+1oifvamJJirFIBnTAGXQVq0QT81TJRyTJ7BTxetg=) 5: HLeQFxpSAwO5N1pZKMX56Q-hB1w.roa (hash: +EuA9d7+91Ny4e4gzqH16NmmQUk9ZPnn92MghDjKpE8=) 6: QHGx9rBcGUaJTuZl4OFvkzmjZVA.roa (hash: ZZjwJdlY+j59oAR5+dW/8zpKf4al08hvm5qlRq5DDsA=) 7: iL0fpiq0g7Tpl8O9Cr71bc0UOYU.roa (hash: +0HQwj7rpV4acr+qdH/U1EOSgBMGpBNUkpCPoAIrOlE=) 8: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: 9oAEkmBfqAPC84u120zla+pRl+CUFe49cOgfgDs/zzg=) 9: xmfrzoBs6Rhbg64vPzeCbbD4I6U.roa (hash: X1lH5bbTPug3DKbEg/bKjT6QG10Inw9lELIZLmoF2Qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9f:3a:d8:a7:d6:4b:0c:34:b7:60:c3:f1:25:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Validity Not Before: Dec 6 07:00:51 2025 GMT Not After : Dec 7 07:00:51 2025 GMT Subject: CN=81f1bb211246057d943380b471041caa1b4e2cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6e:5e:1f:cf:90:8a:41:4a:68:64:d8:99:12: 91:76:6e:5a:62:62:1a:ab:13:dd:d7:8b:ca:8b:83: fc:10:4e:60:f9:5a:3e:0f:b7:2a:52:3a:4e:7b:9e: 5c:c9:40:c9:20:d9:52:35:54:38:f2:5c:99:11:c3: 25:0f:09:da:22:c4:87:c3:02:b8:34:e7:38:f8:e1: 36:9f:9b:a8:dd:5c:36:b7:5c:9e:32:24:0c:2f:65: 54:57:d6:75:37:8c:d5:2b:f4:9d:75:21:93:d3:a9: 4f:f0:7c:ab:80:5d:4e:49:37:c9:01:f7:00:09:8f: 4a:95:9f:21:e6:88:d4:2f:ea:76:ca:43:51:ed:de: b9:6a:c0:87:4a:b2:28:9a:e4:08:1e:4a:f7:5c:16: 00:d4:06:76:37:98:87:db:9f:83:e6:2c:26:d0:5d: b8:da:04:e7:ab:a4:d2:24:53:67:10:43:a3:6f:fe: d1:5b:96:42:e4:06:5a:72:3a:f5:4d:47:9d:77:f7: 79:f7:f1:e1:ec:4a:98:f3:c7:6c:fd:32:b3:91:99: 9a:3e:45:53:25:86:a4:fe:3a:5c:69:ed:3c:2e:fb: 4b:c8:20:cc:fa:db:a6:64:ee:14:06:c8:95:86:e6: 0e:8f:28:71:ee:2e:c0:37:9f:cc:a6:87:26:4a:ea: b1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F1:BB:21:12:46:05:7D:94:33:80:B4:71:04:1C:AA:1B:4E:2C:D7 X509v3 Authority Key Identifier: keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d0:2c:fb:3b:83:86:d0:e6:50:7a:4f:1d:3c:ce:54:19:88: 59:47:2c:b3:36:75:a7:ea:f7:76:b6:98:a3:bc:c9:11:77:7b: 18:fe:54:32:76:6f:78:01:59:7f:5c:c0:54:21:85:05:20:8a: 63:fd:61:c7:e0:77:fc:71:b1:89:be:2d:6d:cd:a6:bb:c1:d3: 18:4d:09:17:ed:d4:7f:ea:50:1b:d1:bd:fa:58:71:b7:02:23: 96:55:05:e4:95:d9:62:ad:50:c3:19:28:49:50:7c:67:4e:2b: 4c:52:31:89:b5:5e:6b:b4:72:c1:8c:78:00:be:aa:27:75:a1: bc:8f:c4:5f:d9:96:d3:b5:23:9a:49:e9:b7:a6:39:1d:3d:ce: c0:d5:b3:c8:39:58:f9:e3:e2:49:91:66:8a:a9:41:dc:b7:50: 71:c4:9b:f5:eb:d8:4d:64:de:c3:c1:17:5c:1a:20:c9:63:86: ef:6e:4f:ec:87:01:8d:18:ea:11:cb:e4:d3:34:a4:cc:a0:1c: aa:bb:d7:dd:66:48:08:9a:42:04:ec:6d:00:c7:2a:53:a1:eb: 28:de:5e:4e:fd:f8:0d:d7:0d:86:c7:6b:a5:38:ae:79:33:db: 18:34:58:9d:dc:35:82:1c:ca:05:0c:b7:e6:11:26:30:41:a8: 2d:e1:bb:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydp862KfWSww0t2DD8SUYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZmExM2YxYWUwNTM5MTYyODBlYzY4ZWUxYjA5NzZmOWVi ZDNlYTgwHhcNMjUxMjA2MDcwMDUxWhcNMjUxMjA3MDcwMDUxWjAzMTEwLwYDVQQD Eyg4MWYxYmIyMTEyNDYwNTdkOTQzMzgwYjQ3MTA0MWNhYTFiNGUyY2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG5eH8+QikFKaGTYmRKRdm5aYmIa qxPd14vKi4P8EE5g+Vo+D7cqUjpOe55cyUDJINlSNVQ48lyZEcMlDwnaIsSHwwK4 NOc4+OE2n5uo3Vw2t1yeMiQML2VUV9Z1N4zVK/SddSGT06lP8HyrgF1OSTfJAfcA CY9KlZ8h5ojUL+p2ykNR7d65asCHSrIomuQIHkr3XBYA1AZ2N5iH25+D5iwm0F24 2gTnq6TSJFNnEEOjb/7RW5ZC5AZacjr1TUedd/d59/Hh7EqY88ds/TKzkZmaPkVT JYak/jpcae08LvtLyCDM+tumZO4UBsiVhuYOjyhx7i7AN5/MpocmSuqxKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHxuyESRgV9lDOAtHEEHKobTizXMB8GA1UdIwQY MBaAFK/6E/GuBTkWKA7GjuGwl2+evT6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAt NDc4YzJjOGNiMmEwLzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAtNDc4YzJjOGNiMmEw LzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdAs+zuD htDmUHpPHTzOVBmIWUcsszZ1p+r3draYo7zJEXd7GP5UMnZveAFZf1zAVCGFBSCK Y/1hx+B3/HGxib4tbc2mu8HTGE0JF+3Uf+pQG9G9+lhxtwIjllUF5JXZYq1Qwxko SVB8Z04rTFIxibVea7RywYx4AL6qJ3WhvI/EX9mW07Ujmknpt6Y5HT3OwNWzyDlY +ePiSZFmiqlB3LdQccSb9evYTWTew8EXXBogyWOG725P7IcBjRjqEcvk0zSkzKAc qrvX3WZICJpCBOxtAMcqU6HrKN5eTv34DdcNhsdrpTiueTPbGDRYndw1ghzKBQy3 5hEmMEGoLeG7Nw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:52:34 2025 by rpki-client