This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft File: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json) Hash identifier: d8Pc/VroCDeyxqzSymNZ5oNU9JA2NZFaW1P9KT9w37o= Subject key identifier: 6E:E5:B9:9A:17:BF:B4:8A:B2:29:C5:F2:0D:58:E4:49:B0:EC:0F:B8 Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4 Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4 Certificate serial: 019AF12DD37882CFED3AF4FC80F2B5510E50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft Manifest number: 0D38 Signing time: Sat 06 Dec 2025 01:01:43 +0000 Manifest this update: Sat 06 Dec 2025 01:01:43 +0000 Manifest next update: Sun 07 Dec 2025 01:01:43 +0000 Files and hashes: 1: MKb9wXtbqGWtE_ve_s7Ybrn63Fw.roa (hash: 70yTR5hwY1yOvZbE5DDGYInarTbe9F4DtBLzW3EAThU=) 2: OqtJcNmb1J50tLIWF6D7y01VxA4.roa (hash: 1ov/KhQ3AFXvHLspCojYHQyYdAVdY1WazSh2AhXG8Y8=) 3: RFaEpCIQ7DiA3iF7lwwQ29jefIA.roa (hash: GOJnWj8oflUm6VfGwYR1lKiwH9eNwUJaLP/8I/2Ya6I=) 4: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: juhcU4PawXYbK0mhF36k2RA86qvs1ArmD3IcavgjsFA=) 5: _tDDtYeC4guX6wO-zUHsidoSz_E.roa (hash: 8nbY0JFVrWrDRZsP3hnIFWTN85PCkZ4W8FZDcNxDifM=) 6: knqD2Ha_mIK6TeaUs6rdEtXjm7Y.roa (hash: IG4vqFBPbvWgHsxQujBWqMW5v3cVtaifoxJ+vZ5e8BU=) 7: t9sNc0uQI6gHaHDMTUeW7X8c5pI.roa (hash: I2z+OvE8dHq8WvzVKbss4tbH6KggeV9GWqIKnOXdtk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d3:78:82:cf:ed:3a:f4:fc:80:f2:b5:51:0e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4 Validity Not Before: Dec 6 01:01:43 2025 GMT Not After : Dec 7 01:01:43 2025 GMT Subject: CN=6ee5b99a17bfb48ab229c5f20d58e449b0ec0fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f7:df:66:96:9c:db:19:b4:a6:1a:66:5f:68: 43:e4:bc:3d:cb:6e:13:92:9c:7f:a0:00:fb:04:91: c9:7a:d1:e5:c5:02:c9:34:20:54:d2:04:50:68:7b: 30:db:b6:45:9a:d2:b0:03:b4:cf:ec:3e:0d:a9:84: 92:cb:8a:7f:06:99:1d:c7:9e:bd:92:77:c5:92:e7: 34:04:f9:26:db:43:91:a4:5e:bf:9d:d0:5a:f3:4b: 7e:b3:90:e9:de:1a:59:e9:48:11:7e:5a:b7:85:f2: df:20:88:51:98:30:4a:d3:c7:f8:6b:8f:a4:1d:75: 13:16:9c:34:9a:70:35:2e:d3:b7:59:d6:8a:1f:75: 51:0e:c0:16:2e:32:c7:69:23:9e:d9:96:91:2c:af: 1e:23:c9:0e:c6:9d:d6:ce:f3:88:35:22:ac:98:f6: 13:6a:56:a0:ae:55:19:55:a4:fb:28:e8:9b:ce:e7: 87:03:bd:1d:b3:f5:0d:54:5e:c7:89:39:76:39:ce: 82:9c:4d:45:2e:3a:30:77:0c:ca:fd:82:3c:f6:e1: e0:c6:e9:83:99:e7:0a:21:4d:fe:ae:7f:db:5c:e1: 3d:b7:67:fe:40:46:92:9d:31:c4:cd:4e:86:92:3d: b1:13:e6:1e:6d:9d:c2:1d:5b:a9:17:16:3e:c1:eb: 44:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E5:B9:9A:17:BF:B4:8A:B2:29:C5:F2:0D:58:E4:49:B0:EC:0F:B8 X509v3 Authority Key Identifier: keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:fa:a3:e4:e1:58:08:4c:8e:32:62:d5:2b:10:6d:0f:14:7a: 8c:89:7c:c8:98:d0:b6:39:6e:a9:32:ef:6d:2c:c5:b9:4a:33: 7a:78:4d:4e:90:7e:f2:8f:df:43:f7:7e:91:c9:10:67:57:29: c6:2d:ce:6b:80:2e:61:e0:ee:93:da:5e:2a:24:78:74:8c:ba: de:9e:05:a1:81:60:fb:c7:0c:5e:c6:a7:49:88:e0:5e:33:cf: 27:59:1d:d2:0c:39:62:2c:b4:6f:b3:ce:83:5a:82:17:63:31: 88:69:bf:c9:46:e0:c0:17:cb:c5:0b:5c:d8:41:48:ea:ef:a5: e3:24:aa:33:19:2e:e2:70:6f:5c:25:7e:08:b0:6d:13:09:50: ef:4c:a5:aa:09:8b:0a:d5:c2:6f:5c:f8:25:69:c3:32:11:bb: de:70:c9:fd:c9:e3:73:ea:1b:b8:62:ce:66:01:6e:b5:58:60: b4:78:c4:08:ae:fb:64:40:cb:9c:11:7c:57:31:fc:4c:6b:d7: 36:23:48:93:29:0e:79:17:be:a2:af:b7:e5:31:99:bc:c4:cd: 1a:e7:ba:bd:ae:55:9f:b4:5c:a4:7b:95:fe:e4:24:8f:d8:6b: fd:d1:ec:41:59:61:fe:de:b7:80:8b:27:f7:91:4d:7f:47:98: ac:0a:ff:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdN4gs/tOvT8gPK1UQ5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlODE5OWU4MzQ1NTY3ZDg1MTZiNzg4ZmUyZTFkMzk3ZTI3 YzczYTQwHhcNMjUxMjA2MDEwMTQzWhcNMjUxMjA3MDEwMTQzWjAzMTEwLwYDVQQD Eyg2ZWU1Yjk5YTE3YmZiNDhhYjIyOWM1ZjIwZDU4ZTQ0OWIwZWMwZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvffZpac2xm0phpmX2hD5Lw9y24T kpx/oAD7BJHJetHlxQLJNCBU0gRQaHsw27ZFmtKwA7TP7D4NqYSSy4p/Bpkdx569 knfFkuc0BPkm20ORpF6/ndBa80t+s5Dp3hpZ6UgRflq3hfLfIIhRmDBK08f4a4+k HXUTFpw0mnA1LtO3WdaKH3VRDsAWLjLHaSOe2ZaRLK8eI8kOxp3WzvOINSKsmPYT alagrlUZVaT7KOibzueHA70ds/UNVF7HiTl2Oc6CnE1FLjowdwzK/YI89uHgxumD mecKIU3+rn/bXOE9t2f+QEaSnTHEzU6Gkj2xE+YebZ3CHVupFxY+wetEjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7luZoXv7SKsinF8g1Y5Emw7A+4MB8GA1UdIwQY MBaAFP6Bmeg0VWfYUWt4j+Lh05fifHOkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQt ODQwY2NiMzRiM2Y1LzEvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQtODQwY2NiMzRiM2Y1 LzEvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvqj5OFY CEyOMmLVKxBtDxR6jIl8yJjQtjluqTLvbSzFuUozenhNTpB+8o/fQ/d+kckQZ1cp xi3Oa4AuYeDuk9peKiR4dIy63p4FoYFg+8cMXsanSYjgXjPPJ1kd0gw5Yiy0b7PO g1qCF2MxiGm/yUbgwBfLxQtc2EFI6u+l4ySqMxku4nBvXCV+CLBtEwlQ70ylqgmL CtXCb1z4JWnDMhG73nDJ/cnjc+obuGLOZgFutVhgtHjECK77ZEDLnBF8VzH8TGvX NiNIkykOeRe+oq+35TGZvMTNGue6va5Vn7RcpHuV/uQkj9hr/dHsQVlh/t63gIsn 95FNf0eYrAr/bg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:11 2025 by rpki-client