This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft File: Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft (raw, json) Hash identifier: 2Tp9nfrDxp0OHMPGbCh2CJu/U2JUBL9HKKO+V94X9NE= Subject key identifier: 78:D6:3F:2E:F8:0B:F1:69:AC:48:4D:30:86:30:86:37:44:F9:38:B0 Authority key identifier: 39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE Certificate issuer: /CN=39ae828573f39413f806b51ee040cd34bc5f63ae Certificate serial: 019AF1D1954877B7592D53A72FFF9EFE389A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 04:00:35 +0000 Manifest this update: Sat 06 Dec 2025 04:00:35 +0000 Manifest next update: Sun 07 Dec 2025 04:00:35 +0000 Files and hashes: 1: Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl (hash: 79e2NLjqG47hPACqBGghnvfo4QZP0t4F7aUya16K8Ag=) 2: d4RsxxDF2qky1rlWD_iJofCuhN0.roa (hash: TcNufvctzuiZQt+YfPnOobzCexSj/+lFh6EqwA5TY9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:95:48:77:b7:59:2d:53:a7:2f:ff:9e:fe:38:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39ae828573f39413f806b51ee040cd34bc5f63ae Validity Not Before: Dec 6 04:00:35 2025 GMT Not After : Dec 7 04:00:35 2025 GMT Subject: CN=78d63f2ef80bf169ac484d308630863744f938b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c8:f3:07:de:5a:aa:bc:d2:2e:4a:b4:7a:b1: 98:62:b0:71:db:e2:85:f1:21:5c:bf:96:d7:28:3c: ca:c8:20:2a:d2:41:5e:ef:a7:cf:b3:d4:05:1d:de: 63:a8:9c:77:29:28:a6:e8:6a:f0:97:17:7b:b3:43: 9f:c9:84:55:41:1a:e5:d2:6c:c0:d3:3a:61:d8:2b: 93:ba:f3:e4:e6:81:68:00:d1:ee:fb:fb:27:1f:13: 4c:8a:14:cb:5e:10:db:7d:95:85:bc:4d:e0:9f:15: f2:49:5f:ff:19:71:5b:e2:de:8c:f9:c3:a2:80:82: c9:2e:31:c5:e4:94:6c:ea:b3:7f:b3:a6:81:45:2f: e9:7b:cd:5c:ad:c3:87:09:d3:49:d0:23:27:08:5e: 93:3e:e6:e3:5a:93:2a:ae:db:3b:c7:86:63:41:22: 6a:9e:92:ad:65:f5:af:79:92:00:70:81:f7:27:3c: 6d:0f:f5:b1:81:e1:a5:aa:0d:ec:9e:3a:2b:9f:f3: 95:48:a9:3d:e6:7a:52:5c:2d:0b:a2:3a:ec:54:70: d1:eb:23:57:e1:82:dc:6d:2b:0d:9f:38:2e:65:6d: ec:9f:32:a5:f0:c5:6d:6a:c5:ef:78:7b:5d:4c:6b: 47:7c:b0:a6:53:09:06:49:06:c5:02:26:1a:28:33: a7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D6:3F:2E:F8:0B:F1:69:AC:48:4D:30:86:30:86:37:44:F9:38:B0 X509v3 Authority Key Identifier: keyid:39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f7:cb:b9:8c:e4:7e:ac:44:76:71:7e:ae:a1:24:10:cc:c1: 58:9a:49:55:40:db:74:c7:59:e6:cb:7d:08:27:81:b7:80:ef: 73:27:9c:b6:cd:bf:7c:6a:2c:57:90:dd:9b:5f:a2:0f:ea:75: 32:d0:41:ab:b1:6d:ff:11:39:1f:f0:49:0f:4f:1c:c6:2a:1d: 57:1e:c2:e5:70:35:99:3e:45:c4:19:26:1f:75:fa:bd:03:e6: d1:20:dc:98:6c:02:6b:4b:05:72:97:cd:2e:13:86:3d:de:7c: f1:53:5e:70:ba:22:e2:7b:55:f1:42:1f:78:d7:31:65:fb:ad: fa:f1:a2:75:d1:af:65:8d:d8:ce:3e:21:80:c3:44:05:1c:a2: 68:dc:86:3e:e5:82:fb:12:0f:f4:0f:a7:71:ce:21:94:7e:83: 9a:b3:a4:68:b5:f9:13:e2:b6:36:e6:04:94:3e:cb:a3:63:ee: 3d:5a:99:8b:9f:b8:97:c7:45:6c:87:2b:80:e8:0a:2c:68:21: d7:3c:54:b2:12:bd:bf:d0:dd:e9:19:09:ab:cf:c0:63:8c:33: dd:b5:54:10:f2:6a:e1:ff:d7:98:19:86:62:d8:96:f2:a7:b1: 28:3c:43:e4:b9:dd:73:32:5c:72:66:70:78:ee:be:76:81:23: cb:61:5e:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZVId7dZLVOnL/+e/jiaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YWU4Mjg1NzNmMzk0MTNmODA2YjUxZWUwNDBjZDM0YmM1 ZjYzYWUwHhcNMjUxMjA2MDQwMDM1WhcNMjUxMjA3MDQwMDM1WjAzMTEwLwYDVQQD Eyg3OGQ2M2YyZWY4MGJmMTY5YWM0ODRkMzA4NjMwODYzNzQ0ZjkzOGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssjzB95aqrzSLkq0erGYYrBx2+KF 8SFcv5bXKDzKyCAq0kFe76fPs9QFHd5jqJx3KSim6Grwlxd7s0OfyYRVQRrl0mzA 0zph2CuTuvPk5oFoANHu+/snHxNMihTLXhDbfZWFvE3gnxXySV//GXFb4t6M+cOi gILJLjHF5JRs6rN/s6aBRS/pe81crcOHCdNJ0CMnCF6TPubjWpMqrts7x4ZjQSJq npKtZfWveZIAcIH3JzxtD/WxgeGlqg3snjorn/OVSKk95npSXC0LojrsVHDR6yNX 4YLcbSsNnzguZW3snzKl8MVtasXveHtdTGtHfLCmUwkGSQbFAiYaKDOn9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjWPy74C/FprEhNMIYwhjdE+TiwMB8GA1UdIwQY MBaAFDmugoVz85QT+Aa1HuBAzTS8X2OuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2E2Q2hYUHpsQlA0QnJVZTRFRE5OTHhmWTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9iNjFhMWMtYmE2Zi00MzI3LWJhY2Qt ODk3MThlYmMzODQ3LzEvT2E2Q2hYUHpsQlA0QnJVZTRFRE5OTHhmWTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9iNjFhMWMtYmE2Zi00MzI3LWJhY2QtODk3MThlYmMzODQ3 LzEvT2E2Q2hYUHpsQlA0QnJVZTRFRE5OTHhmWTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvfLuYzk fqxEdnF+rqEkEMzBWJpJVUDbdMdZ5st9CCeBt4Dvcyects2/fGosV5Ddm1+iD+p1 MtBBq7Ft/xE5H/BJD08cxiodVx7C5XA1mT5FxBkmH3X6vQPm0SDcmGwCa0sFcpfN LhOGPd588VNecLoi4ntV8UIfeNcxZfut+vGiddGvZY3Yzj4hgMNEBRyiaNyGPuWC +xIP9A+ncc4hlH6DmrOkaLX5E+K2NuYElD7Lo2PuPVqZi5+4l8dFbIcrgOgKLGgh 1zxUshK9v9Dd6RkJq8/AY4wz3bVUEPJq4f/XmBmGYtiW8qexKDxD5LndczJccmZw eO6+doEjy2Fesg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:42 2025 by rpki-client