This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft File: o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json) Hash identifier: +t7+Q5RJWgibVHHIA3NoIDH0/erzRrJ8XgFCPnDB0qw= Subject key identifier: E3:BE:D6:61:C8:3F:0B:CB:17:3F:7C:98:CF:0F:B9:7D:C4:A5:C3:6D Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38 Certificate issuer: /CN=a3a82ee9aa1106ed720d63c3844e666440e34438 Certificate serial: 019AF2094FD416AEA1A79B6B7A7F05F0E7B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft Manifest number: 0C96 Signing time: Sat 06 Dec 2025 05:01:27 +0000 Manifest this update: Sat 06 Dec 2025 05:01:27 +0000 Manifest next update: Sun 07 Dec 2025 05:01:27 +0000 Files and hashes: 1: c6Nj79I3Har3nGytaNZUrH4rLp8.roa (hash: pFirwTzGIzOGXK1Oft6HDqGlSVO899FoeQfzjWxGxFc=) 2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: Y6aQtWidLv2qX7fKXsm7VjJTQP4YX0NQ+2/SW3clh8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:4f:d4:16:ae:a1:a7:9b:6b:7a:7f:05:f0:e7:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438 Validity Not Before: Dec 6 05:01:27 2025 GMT Not After : Dec 7 05:01:27 2025 GMT Subject: CN=e3bed661c83f0bcb173f7c98cf0fb97dc4a5c36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5c:19:1c:0b:ee:f0:43:a0:8c:2d:10:c0:2b: c9:e2:68:76:1d:b2:59:e7:18:ce:58:c5:f9:20:ef: 4e:71:7d:86:a1:aa:00:b8:c4:1d:2d:b9:40:a1:82: c2:ff:da:cf:bb:fb:10:38:74:17:67:25:80:55:b2: f2:c7:24:a1:34:f6:1b:48:26:bd:d3:cc:4a:1a:06: 07:be:08:ef:83:43:f6:29:49:08:43:25:1b:d5:9e: c6:93:cb:ea:34:6e:7c:b1:85:6b:01:b8:84:88:d2: 61:17:8e:0b:0c:fa:31:19:da:64:e5:d9:8b:a6:66: b5:43:e6:ec:8e:89:63:44:e1:af:13:af:a4:c4:b2: c1:60:d1:86:f8:67:f9:31:14:6d:27:90:ef:61:99: 38:8e:b9:b9:c2:96:cb:35:9a:d8:1d:fd:0f:b6:14: 92:f0:97:66:24:21:37:e4:24:01:9b:ac:f4:6e:eb: 70:cd:54:d0:42:03:aa:36:d2:35:48:c7:a5:55:f7: ee:b5:72:cf:40:a0:69:55:e3:65:73:e1:a3:0a:21: 2a:b1:ad:90:3a:54:e1:22:5c:a6:30:19:90:e5:6e: a1:de:c9:f8:09:38:20:54:41:e5:4e:9b:a4:bc:ec: a6:fc:1c:8f:4f:e0:41:da:b0:b3:4a:95:06:8c:e2: fc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BE:D6:61:C8:3F:0B:CB:17:3F:7C:98:CF:0F:B9:7D:C4:A5:C3:6D X509v3 Authority Key Identifier: keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:bd:a3:08:f3:ca:ae:61:61:19:00:e2:49:e2:ee:9d:6e:0a: 86:4b:ce:6e:4d:6b:b5:27:24:4a:86:70:53:c2:50:63:c3:2e: 08:60:46:c9:09:21:ee:ae:c1:ba:c9:0b:cd:ba:25:66:f6:80: da:55:97:7e:b7:d2:b8:f1:6a:66:60:c5:88:d6:0e:66:b5:66: 2b:fe:c5:1f:87:0c:7d:a4:2b:ac:37:95:69:09:56:73:d1:0c: 2b:99:1f:d6:40:c6:e3:07:c7:dc:67:17:fd:5a:18:ad:65:43: a7:91:bf:07:7c:40:00:93:16:5a:08:5a:b7:b8:27:51:af:fb: ef:4c:0d:18:d3:1e:fe:11:9c:59:03:bb:56:25:82:8b:ee:4d: 7d:85:1e:58:a4:cf:02:ff:cc:8d:cb:f6:98:70:e5:44:f5:88: 32:1b:16:c5:d9:b5:07:fd:63:37:76:7a:ff:57:64:74:fc:66: b9:56:d0:bd:5a:c1:79:7b:14:ee:b5:4d:0c:6c:95:f9:6b:d9: b9:17:e6:c0:16:31:43:5b:df:44:a2:81:6b:5e:10:e0:a5:91: 01:50:42:ce:4a:0c:17:6f:83:51:fb:8f:12:a2:8d:d9:0b:f6: 82:7a:d2:16:f1:76:4c:df:0f:f1:a8:a0:b8:2f:3e:89:29:aa: ec:65:43:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCU/UFq6hp5tren8F8Oe2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYTgyZWU5YWExMTA2ZWQ3MjBkNjNjMzg0NGU2NjY0NDBl MzQ0MzgwHhcNMjUxMjA2MDUwMTI3WhcNMjUxMjA3MDUwMTI3WjAzMTEwLwYDVQQD EyhlM2JlZDY2MWM4M2YwYmNiMTczZjdjOThjZjBmYjk3ZGM0YTVjMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFwZHAvu8EOgjC0QwCvJ4mh2HbJZ 5xjOWMX5IO9OcX2GoaoAuMQdLblAoYLC/9rPu/sQOHQXZyWAVbLyxyShNPYbSCa9 08xKGgYHvgjvg0P2KUkIQyUb1Z7Gk8vqNG58sYVrAbiEiNJhF44LDPoxGdpk5dmL pma1Q+bsjoljROGvE6+kxLLBYNGG+Gf5MRRtJ5DvYZk4jrm5wpbLNZrYHf0PthSS 8JdmJCE35CQBm6z0butwzVTQQgOqNtI1SMelVffutXLPQKBpVeNlc+GjCiEqsa2Q OlThIlymMBmQ5W6h3sn4CTggVEHlTpukvOym/ByPT+BB2rCzSpUGjOL8UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOO+1mHIPwvLFz98mM8PuX3EpcNtMB8GA1UdIwQY MBaAFKOoLumqEQbtcg1jw4ROZmRA40Q4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzZndTZhb1JCdTF5RFdQRGhFNW1aRURqUkRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jNzIwYjQtMWFjYi00NzAzLWJjMjQt NDY3ZTAwOWRhZWQwLzEvbzZndTZhb1JCdTF5RFdQRGhFNW1aRURqUkRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9jNzIwYjQtMWFjYi00NzAzLWJjMjQtNDY3ZTAwOWRhZWQw LzEvbzZndTZhb1JCdTF5RFdQRGhFNW1aRURqUkRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHL2jCPPK rmFhGQDiSeLunW4KhkvObk1rtSckSoZwU8JQY8MuCGBGyQkh7q7BuskLzbolZvaA 2lWXfrfSuPFqZmDFiNYOZrVmK/7FH4cMfaQrrDeVaQlWc9EMK5kf1kDG4wfH3GcX /VoYrWVDp5G/B3xAAJMWWghat7gnUa/770wNGNMe/hGcWQO7ViWCi+5NfYUeWKTP Av/Mjcv2mHDlRPWIMhsWxdm1B/1jN3Z6/1dkdPxmuVbQvVrBeXsU7rVNDGyV+WvZ uRfmwBYxQ1vfRKKBa14Q4KWRAVBCzkoMF2+DUfuPEqKN2Qv2gnrSFvF2TN8P8aig uC8+iSmq7GVD8w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:19 2025 by rpki-client