This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft File: aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json) Hash identifier: hHXH6j2XWmYKG3D807mUEOhWjpeSp4/HJLhi7PwGFVQ= Subject key identifier: 85:70:7B:F5:02:DF:5C:57:B9:69:8D:63:32:EC:32:06:7C:D2:CE:08 Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70 Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670 Certificate serial: 019AF0F5CF16C804354E74D3B51094EE7983 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft Manifest number: 0E38 Signing time: Sat 06 Dec 2025 00:00:32 +0000 Manifest this update: Sat 06 Dec 2025 00:00:32 +0000 Manifest next update: Sun 07 Dec 2025 00:00:32 +0000 Files and hashes: 1: VwGWvDQ1yZ1m9qd6Qjq6ZmEis2Q.roa (hash: NXsj+T/BQfpZjDU55fDpRASUPCV40ml/FEaUgz3NxTI=) 2: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: Az9Og8WF3GNeARLgmCCjOuSeMik79d9esBFM7yZIPfk=) 3: mShmo_W6HwOVfRB9AY5LNAbBfho.roa (hash: 6BJcHM6l3PuBUi+3plKY0AbWfl02EmVTYEtLpT66zmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:cf:16:c8:04:35:4e:74:d3:b5:10:94:ee:79:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670 Validity Not Before: Dec 6 00:00:32 2025 GMT Not After : Dec 7 00:00:32 2025 GMT Subject: CN=85707bf502df5c57b9698d6332ec32067cd2ce08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c9:a9:30:b4:75:36:df:32:1c:60:f1:7a:7d: a1:02:48:a6:09:a5:a0:88:e7:dd:0e:8d:c2:93:84: 03:8a:a2:23:a6:3d:ba:25:22:95:10:e8:2d:4e:da: fa:5c:ea:b7:be:c7:14:7e:df:ba:2a:38:a4:84:56: 65:aa:05:25:8c:9e:eb:3c:18:73:5c:07:aa:7a:8a: 79:c7:ee:ff:5d:f5:f6:1c:fe:f8:79:d6:52:70:8b: 9f:4f:a2:17:02:f1:9c:8e:82:0b:13:d8:c0:fd:96: 99:22:c2:57:cc:bc:78:55:14:69:20:9e:29:15:6c: bd:96:bf:e6:94:5b:be:9b:35:87:d1:35:db:cc:ce: b3:80:3b:13:14:a3:d4:f3:c3:6b:77:79:fb:d5:ab: 7c:a3:e4:f3:1e:81:66:a5:0f:27:80:6b:b5:b2:cc: 15:ce:8b:fa:3a:91:1f:79:3b:05:8b:61:a8:20:dc: ef:cd:ef:9f:20:04:5c:9a:1f:e2:a7:a4:7d:ad:ec: 63:f7:5d:fd:be:e6:c5:53:83:09:97:04:85:dd:36: 8c:25:e2:a6:71:bd:d8:10:d3:c4:c4:e1:5f:c8:2e: 16:fd:2d:9a:84:68:a8:01:0d:66:4d:9c:26:86:8a: 46:d0:47:05:56:92:b3:f4:b2:78:2a:83:6a:d7:e0: b5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:70:7B:F5:02:DF:5C:57:B9:69:8D:63:32:EC:32:06:7C:D2:CE:08 X509v3 Authority Key Identifier: keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:bd:c5:6d:33:09:66:ef:ac:07:b3:66:66:2c:fa:53:84:18: e9:2a:7f:16:bf:8b:1f:25:2e:aa:ac:c3:fd:a2:8c:b3:1c:e7: 73:f4:15:95:85:88:69:ff:ad:7d:7f:04:18:fb:23:1c:46:a3: f8:c8:9f:ee:94:8c:e4:aa:e0:ee:a1:77:2e:3e:a7:34:e8:3b: b9:3d:ae:51:a7:5d:7c:c5:7e:3a:b5:f4:5a:5a:f6:8f:cc:81: 65:2a:fd:2f:77:33:b3:9a:90:87:3b:63:be:47:09:40:a6:cc: a5:88:a6:39:49:5d:4d:7b:4a:76:7f:fc:f3:db:82:fb:f4:ef: a3:98:45:10:cf:3c:37:72:d2:1b:de:db:11:06:92:30:bb:d2: da:33:5d:e8:fd:9a:98:36:a9:b0:ef:f1:f8:3e:f2:c6:6c:a3: c5:41:a2:dd:c4:76:09:16:91:ae:2d:bd:99:a5:df:52:20:19: 11:aa:65:a9:8a:ab:bd:aa:be:99:fa:69:e0:fb:92:73:38:81: 09:c1:ec:4c:93:0a:0c:96:40:70:f8:b8:61:f4:89:a5:95:43: a3:00:db:da:9a:e8:bf:cf:9e:33:0b:7a:78:48:d9:15:7b:aa: c9:88:e4:b9:d1:97:35:94:aa:c7:9c:1e:75:61:52:71:f8:00: 29:88:05:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9c8WyAQ1TnTTtRCU7nmDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOGI1YTM3NGYxNDZkN2I2YTZkYzdkMzE2ZThlYmIxMmRl ZWE2NzAwHhcNMjUxMjA2MDAwMDMyWhcNMjUxMjA3MDAwMDMyWjAzMTEwLwYDVQQD Eyg4NTcwN2JmNTAyZGY1YzU3Yjk2OThkNjMzMmVjMzIwNjdjZDJjZTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48mpMLR1Nt8yHGDxen2hAkimCaWg iOfdDo3Ck4QDiqIjpj26JSKVEOgtTtr6XOq3vscUft+6KjikhFZlqgUljJ7rPBhz XAeqeop5x+7/XfX2HP74edZScIufT6IXAvGcjoILE9jA/ZaZIsJXzLx4VRRpIJ4p FWy9lr/mlFu+mzWH0TXbzM6zgDsTFKPU88Nrd3n71at8o+TzHoFmpQ8ngGu1sswV zov6OpEfeTsFi2GoINzvze+fIARcmh/ip6R9rexj9139vubFU4MJlwSF3TaMJeKm cb3YENPExOFfyC4W/S2ahGioAQ1mTZwmhopG0EcFVpKz9LJ4KoNq1+C1LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVwe/UC31xXuWmNYzLsMgZ80s4IMB8GA1UdIwQY MBaAFGqLWjdPFG17am3H0xbo67Et7qZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQt NDQyNDFmZWMxYTlmLzEvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQtNDQyNDFmZWMxYTlm LzEvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARr3FbTMJ Zu+sB7NmZiz6U4QY6Sp/Fr+LHyUuqqzD/aKMsxznc/QVlYWIaf+tfX8EGPsjHEaj +Mif7pSM5Krg7qF3Lj6nNOg7uT2uUaddfMV+OrX0Wlr2j8yBZSr9L3czs5qQhztj vkcJQKbMpYimOUldTXtKdn/889uC+/Tvo5hFEM88N3LSG97bEQaSMLvS2jNd6P2a mDapsO/x+D7yxmyjxUGi3cR2CRaRri29maXfUiAZEaplqYqrvaq+mfpp4PuScziB CcHsTJMKDJZAcPi4YfSJpZVDowDb2prov8+eMwt6eEjZFXuqyYjkudGXNZSqx5we dWFScfgAKYgFPg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:28 2025 by rpki-client