This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json) Hash identifier: BKXWfT4LTljuzCaljJbnt5KemEsrg81cMvVo1WW94CU= Subject key identifier: 13:6C:73:31:BE:FC:2E:E3:9D:AC:83:EE:6E:5C:9A:16:7B:92:DC:CA Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18 Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818 Certificate serial: 019AF23FF6E1FF80042B2C37FB480B3C9987 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft Manifest number: 10E0 Signing time: Sat 06 Dec 2025 06:01:09 +0000 Manifest this update: Sat 06 Dec 2025 06:01:09 +0000 Manifest next update: Sun 07 Dec 2025 06:01:09 +0000 Files and hashes: 1: 1gXM5D3Y0GBi3FbOxC76Tbkj0Qc.roa (hash: GOT5movWxVskxoFlITVT8JKb8WEyioA1Mn3nxWwt5ow=) 2: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: f6cnzSTGEmQarMIM3LXSODx1ff6vqTcBpYoksjqyvdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f6:e1:ff:80:04:2b:2c:37:fb:48:0b:3c:99:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818 Validity Not Before: Dec 6 06:01:09 2025 GMT Not After : Dec 7 06:01:09 2025 GMT Subject: CN=136c7331befc2ee39dac83ee6e5c9a167b92dcca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d2:67:bd:95:ae:ab:e0:83:fc:81:79:a6:a6: a0:bf:3a:d6:de:b4:e6:65:06:72:34:81:53:cc:e4: 45:81:02:af:85:0e:79:36:3c:8b:01:dd:71:c3:59: bd:f8:f1:5b:ae:d4:da:33:39:2b:6a:72:57:54:91: 21:48:dc:8e:b7:10:88:f5:33:10:aa:c9:7e:c2:f0: 09:56:a1:f1:83:46:59:31:b6:4e:b1:76:7f:ed:19: 42:d3:5c:fe:dc:d3:40:ac:9c:83:f7:d3:3d:00:2f: 22:00:d4:d7:7d:9f:c6:cb:ec:83:26:24:d0:78:d1: ad:1e:b1:8f:57:2c:12:1f:54:64:32:2b:b3:87:09: 5e:10:26:f9:51:0b:ef:6c:74:d3:29:28:31:9f:18: fc:eb:41:c2:e3:de:2f:6e:b4:ed:12:31:2e:a6:bd: 20:4f:1f:71:8c:75:bf:ca:2a:de:40:86:8b:e8:86: 90:35:d8:4b:0b:c2:a2:2d:c2:ba:72:36:92:c1:17: 1b:21:ff:b3:7a:de:53:71:b1:b5:b7:8b:bb:a2:35: 06:5a:8a:ac:bd:09:1a:eb:cd:48:7f:8a:6c:6b:df: d8:37:41:b1:b9:7b:dc:ed:72:d2:ac:f5:b3:47:e7: df:f2:fd:dc:d1:6b:7f:1d:73:9e:f7:9d:a9:aa:a6: b9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6C:73:31:BE:FC:2E:E3:9D:AC:83:EE:6E:5C:9A:16:7B:92:DC:CA X509v3 Authority Key Identifier: keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:0a:f1:c7:ce:6b:c8:3d:75:7c:e4:0c:d9:46:df:a8:69:e8: de:26:9e:1f:72:56:1f:e6:15:60:11:6a:28:b8:33:47:19:81: 7c:25:4e:95:13:bd:6c:f4:8d:af:c5:31:d8:88:0c:89:45:31: 49:64:ca:61:3c:68:b3:04:6c:bd:19:2b:9f:ae:7a:f9:dc:b5: 40:37:6c:36:8e:8a:5d:22:15:46:f8:b9:5a:35:92:7e:46:5f: ba:1a:e9:5f:9a:43:ca:c5:68:cb:13:67:e9:fd:28:fd:40:50: 2b:76:0d:1a:4a:15:11:3c:6d:4d:77:44:84:7f:9a:4c:7f:96: f0:f9:0e:87:38:6b:a2:90:b3:cf:23:55:be:62:09:8a:81:64: ea:9b:d3:bb:ca:81:55:c6:38:35:45:87:ee:04:0a:e5:2e:8c: e8:ab:7c:34:b6:6c:17:3f:0f:07:fa:1c:b7:a8:90:71:9b:65: 21:91:a8:7d:ff:54:da:27:6d:87:89:e7:26:e9:5f:cb:a1:39: 04:0b:4c:45:5b:60:56:41:34:68:3e:3e:30:8f:55:a4:98:56: 93:7c:87:98:60:19:68:70:e1:35:4b:3a:9d:a9:83:a3:72:44: 19:a3:18:59:df:48:62:00:42:dd:91:21:c0:96:31:84:21:d9: 71:d6:a7:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/bh/4AEKyw3+0gLPJmHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYTM5ZjFkYjg1OGIxNTVmMjViYzM0Mzc1OWY1YmUyYjcz NmM4MTgwHhcNMjUxMjA2MDYwMTA5WhcNMjUxMjA3MDYwMTA5WjAzMTEwLwYDVQQD EygxMzZjNzMzMWJlZmMyZWUzOWRhYzgzZWU2ZTVjOWExNjdiOTJkY2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdJnvZWuq+CD/IF5pqagvzrW3rTm ZQZyNIFTzORFgQKvhQ55NjyLAd1xw1m9+PFbrtTaMzkranJXVJEhSNyOtxCI9TMQ qsl+wvAJVqHxg0ZZMbZOsXZ/7RlC01z+3NNArJyD99M9AC8iANTXfZ/Gy+yDJiTQ eNGtHrGPVywSH1RkMiuzhwleECb5UQvvbHTTKSgxnxj860HC494vbrTtEjEupr0g Tx9xjHW/yireQIaL6IaQNdhLC8KiLcK6cjaSwRcbIf+zet5TcbG1t4u7ojUGWoqs vQka681If4psa9/YN0GxuXvc7XLSrPWzR+ff8v3c0Wt/HXOe952pqqa5owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNsczG+/C7jnayD7m5cmhZ7ktzKMB8GA1UdIwQY MBaAFKOjnx24WLFV8lvDQ3WfW+K3NsgYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84YzgzY2EtMjI3OC00ZDU2LWJjZTgt NDUwZDIyOTViYTQ5LzEvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi84YzgzY2EtMjI3OC00ZDU2LWJjZTgtNDUwZDIyOTViYTQ5 LzEvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOArxx85r yD11fOQM2UbfqGno3iaeH3JWH+YVYBFqKLgzRxmBfCVOlRO9bPSNr8Ux2IgMiUUx SWTKYTxoswRsvRkrn656+dy1QDdsNo6KXSIVRvi5WjWSfkZfuhrpX5pDysVoyxNn 6f0o/UBQK3YNGkoVETxtTXdEhH+aTH+W8PkOhzhropCzzyNVvmIJioFk6pvTu8qB VcY4NUWH7gQK5S6M6Kt8NLZsFz8PB/oct6iQcZtlIZGoff9U2idth4nnJulfy6E5 BAtMRVtgVkE0aD4+MI9VpJhWk3yHmGAZaHDhNUs6namDo3JEGaMYWd9IYgBC3ZEh wJYxhCHZcdandA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:39:02 2025 by rpki-client