This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft File: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json) Hash identifier: 13e+GtxzXblXIJfjgB61FsfBTvkEA3sQy7fkJGgkMc0= Subject key identifier: 78:1B:32:CE:34:A2:44:27:0B:3A:8A:3C:D0:10:F0:3E:CD:3A:5E:1E Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8 Certificate issuer: /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8 Certificate serial: 019AF5E582CD03B340BA65795E803AE47F3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft Manifest number: 05A9 Signing time: Sat 06 Dec 2025 23:00:50 +0000 Manifest this update: Sat 06 Dec 2025 23:00:50 +0000 Manifest next update: Sun 07 Dec 2025 23:00:50 +0000 Files and hashes: 1: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: DahwINQ+B11EmiWWzM+3YRVkadYPHvJq2k22p1O67Ww=) 2: waNULbcRhTUiNsANSLGcB4J4itI.roa (hash: 9dW8NgonrZBc4IChXkCIdxerNGPGCgwx9gaoEJblTYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:82:cd:03:b3:40:ba:65:79:5e:80:3a:e4:7f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8 Validity Not Before: Dec 6 23:00:50 2025 GMT Not After : Dec 7 23:00:50 2025 GMT Subject: CN=781b32ce34a244270b3a8a3cd010f03ecd3a5e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d2:e3:ba:0b:c7:6a:a2:67:08:41:c3:8b:40: c5:e6:f2:c3:f8:63:2d:b7:f3:a9:a2:6f:de:a4:f8: 39:5f:07:9f:f9:15:6d:5d:e3:33:59:4b:2b:dc:d5: d2:c9:7a:5b:2c:f2:2e:fe:fb:f6:4b:9e:d0:9e:98: 95:3c:f0:b3:94:aa:3f:1a:d2:a0:88:cd:37:eb:f8: b5:92:70:da:e4:b9:3c:c6:bb:00:58:d8:72:79:9e: 7a:86:20:4b:42:03:a9:c6:14:cb:a3:6b:e5:b7:94: bf:5c:72:ac:54:a4:93:94:be:28:a5:2f:f3:e3:49: 0b:14:42:85:17:2c:1f:c1:30:bf:c3:26:f4:0c:49: 37:aa:c6:d9:9f:f5:8d:7c:9c:98:49:b7:4e:d2:6d: 5e:29:db:55:de:3f:73:24:7f:5f:1a:f0:31:16:fb: b5:51:37:d4:bd:39:e0:6f:15:d8:80:e7:1f:94:12: 00:1a:1d:60:0e:42:72:c5:05:cc:22:7e:fb:e5:69: 4f:d7:ea:83:d5:69:fb:6d:08:92:ed:ae:da:dd:a8: 97:ba:4d:77:82:91:5b:30:2c:60:6e:99:c7:af:97: b0:6d:a5:dd:97:16:1e:b1:ec:71:32:1d:7a:fa:55: bc:6a:c1:1b:9a:d8:6b:8a:68:2a:78:0c:a7:06:32: 34:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1B:32:CE:34:A2:44:27:0B:3A:8A:3C:D0:10:F0:3E:CD:3A:5E:1E X509v3 Authority Key Identifier: keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:fc:6e:0d:d0:af:33:cb:fe:9b:cf:4a:90:3b:33:b9:16:7a: 3c:a8:a0:9a:76:ce:29:d1:02:99:99:c4:ae:be:52:4a:43:31: 0a:d3:49:46:ee:5d:d8:6d:cc:97:8a:be:dc:f3:37:21:1a:8d: 69:8c:6f:f9:18:35:10:8b:dc:15:9a:48:91:6a:da:24:df:e3: b0:83:9d:4c:4a:ed:82:13:02:ba:85:59:e5:bf:1a:a2:df:5d: 51:d2:a3:fc:04:a8:60:1e:26:3c:90:d4:8d:80:7a:c3:18:26: 89:c2:a4:04:0e:9f:f8:1e:46:41:cb:2e:a1:36:8b:54:ed:9a: ed:5d:a2:31:41:9a:98:30:d9:89:69:1f:89:ff:93:6d:cd:09: 2a:98:7c:c4:64:f0:4c:a8:0c:59:25:ef:a6:d8:fc:ed:ac:f8: 88:7a:d8:dd:aa:fc:52:aa:bf:66:0a:e7:c6:ea:c9:64:55:4e: 2c:06:e2:29:13:b0:b0:9b:02:ee:88:48:e3:a7:fb:0d:aa:71: 7c:77:4e:03:7e:74:e6:f7:38:ec:5b:f6:b5:84:ec:92:bc:20: 7a:80:29:cc:01:fa:ce:8c:09:88:4e:26:99:31:86:b0:86:a4: 6d:59:24:3b:3f:d0:2e:cc:78:e6:04:a5:1e:c9:cd:2c:c6:83: 3a:7b:36:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15YLNA7NAumV5XoA65H88MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZjg4ZTgyYjM1YTBhZDZkMGZmMzE1NmFmMTMxOWRmYzE2 MmY4ZTgwHhcNMjUxMjA2MjMwMDUwWhcNMjUxMjA3MjMwMDUwWjAzMTEwLwYDVQQD Eyg3ODFiMzJjZTM0YTI0NDI3MGIzYThhM2NkMDEwZjAzZWNkM2E1ZTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dLjugvHaqJnCEHDi0DF5vLD+GMt t/Opom/epPg5Xwef+RVtXeMzWUsr3NXSyXpbLPIu/vv2S57QnpiVPPCzlKo/GtKg iM036/i1knDa5Lk8xrsAWNhyeZ56hiBLQgOpxhTLo2vlt5S/XHKsVKSTlL4opS/z 40kLFEKFFywfwTC/wyb0DEk3qsbZn/WNfJyYSbdO0m1eKdtV3j9zJH9fGvAxFvu1 UTfUvTngbxXYgOcflBIAGh1gDkJyxQXMIn775WlP1+qD1Wn7bQiS7a7a3aiXuk13 gpFbMCxgbpnHr5ewbaXdlxYesexxMh16+lW8asEbmthrimgqeAynBjI0SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgbMs40okQnCzqKPNAQ8D7NOl4eMB8GA1UdIwQY MBaAFGv4joKzWgrW0P8xVq8TGd/BYvjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEt YmZiZDU2OTRhOTRkLzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEtYmZiZDU2OTRhOTRk LzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPxuDdCv M8v+m89KkDszuRZ6PKigmnbOKdECmZnErr5SSkMxCtNJRu5d2G3Ml4q+3PM3IRqN aYxv+Rg1EIvcFZpIkWraJN/jsIOdTErtghMCuoVZ5b8aot9dUdKj/ASoYB4mPJDU jYB6wxgmicKkBA6f+B5GQcsuoTaLVO2a7V2iMUGamDDZiWkfif+Tbc0JKph8xGTw TKgMWSXvptj87az4iHrY3ar8Uqq/ZgrnxurJZFVOLAbiKROwsJsC7ohI46f7Dapx fHdOA3505vc47Fv2tYTskrwgeoApzAH6zowJiE4mmTGGsIakbVkkOz/QLsx45gSl HsnNLMaDOns2DA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:44:56 2025 by rpki-client