This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json) Hash identifier: 9mpKI9KCqgtcgfy3W6uBXgCDiTi8sR6++fMw+v/K1TE= Subject key identifier: 09:67:C8:5B:D9:CE:CA:5B:1D:4D:D0:EE:A1:A1:20:01:FB:40:54:BA Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14 Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314 Certificate serial: 019AF50B09CA16BFC624CE76C121C5856E2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 19:02:12 +0000 Manifest this update: Sat 06 Dec 2025 19:02:12 +0000 Manifest next update: Sun 07 Dec 2025 19:02:12 +0000 Files and hashes: 1: EPNaozHQAjVOYQy-Vt2Z_kxiWS0.roa (hash: WsqXo+AMtH2w9AGoDi4Cn3lAEUdfpStLLlDa9sz3f6I=) 2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: 6UOPOD3uPXpHj4T4VgqmRV/EBJHs5qbch9KQ9vSfHtk=) 3: oyDkuFI7Lh8_-ReZkAMKowiORyM.roa (hash: 3yAZCKM7m/E+YP0xth4LuRn5Dda6av4q64pWFUUvg/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:09:ca:16:bf:c6:24:ce:76:c1:21:c5:85:6e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314 Validity Not Before: Dec 6 19:02:12 2025 GMT Not After : Dec 7 19:02:12 2025 GMT Subject: CN=0967c85bd9ceca5b1d4dd0eea1a12001fb4054ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3e:15:a5:38:32:e8:4c:dc:c6:d6:a7:01:00: 8b:be:b6:07:94:2e:35:9a:c0:b5:17:f5:02:6d:5a: ab:0c:53:af:e2:04:b9:72:e4:88:3b:b6:89:66:61: 0d:f8:eb:b2:36:b8:a2:88:98:54:3d:6b:c8:e7:e7: be:ec:4e:d5:a0:97:7a:28:f7:fe:f0:50:cb:00:ce: 3b:f5:16:e8:30:1b:83:a5:f3:9f:cf:8e:4a:21:82: 91:04:bc:53:87:30:42:4c:d2:5b:32:f1:0c:ed:2e: d2:98:c5:e8:c9:4f:76:67:12:d3:92:23:f8:e5:43: 98:72:ee:7f:e5:f6:e6:3c:84:3f:06:e6:c8:30:a7: a7:64:06:e6:f0:d9:9a:ff:b9:bc:14:ff:30:31:ab: 4e:04:39:4e:32:13:5f:d4:09:4a:5a:93:4d:e8:11: 46:78:2c:23:b9:50:40:5b:b6:21:80:9c:b5:1c:35: 55:92:e9:f7:cf:ac:ad:4f:73:ee:37:1a:5e:62:9a: 4b:22:5b:b4:e9:42:bd:52:5a:bf:08:cf:67:25:9f: b0:85:44:ef:29:7c:a5:29:c7:39:46:13:09:0c:07: d1:0b:26:ec:23:bf:cf:31:dd:b1:e7:67:01:62:14: 41:93:4f:39:2d:1f:95:4e:83:ba:d5:0d:4d:42:10: e3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:67:C8:5B:D9:CE:CA:5B:1D:4D:D0:EE:A1:A1:20:01:FB:40:54:BA X509v3 Authority Key Identifier: keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:3f:93:13:6a:66:8f:61:f5:67:e3:fc:7a:48:66:89:13:37: 43:fa:c4:77:b4:f1:cc:9e:e7:ba:c6:0a:e4:27:df:9a:0a:47: 1c:84:cf:7d:d5:43:cc:45:46:c8:74:27:9b:d1:e3:f4:21:5a: 90:49:e3:9a:ad:8d:2a:de:5d:bf:a8:72:7b:d8:31:60:3e:35: bb:7a:b0:a6:16:30:2d:ca:5a:54:1a:7c:0d:57:66:d9:43:5f: 3f:8d:81:17:80:b2:d6:48:d2:f2:14:bd:fd:05:dd:43:44:fd: ff:60:39:0f:2c:3d:3e:44:1a:94:b0:3d:65:07:86:a2:8a:e0: 96:c0:7f:65:8a:37:fa:c6:f4:d3:cd:af:31:04:d4:ae:e8:1b: 13:42:33:8e:ec:92:8f:d3:95:97:b4:4d:31:d5:54:af:a4:3a: 59:92:78:74:61:73:65:91:36:58:0a:0a:2f:67:f0:a8:82:cc: 05:81:b1:db:a1:ea:9c:90:86:52:f5:43:9d:59:63:eb:37:91: 29:24:cd:6f:8e:9e:8d:cc:2e:e7:25:c4:3f:37:14:90:3d:e0: 66:77:24:f7:26:d2:36:93:7e:a2:64:e4:ae:bc:c7:ba:a3:c1: 48:d4:12:d4:d4:38:78:5d:68:83:ad:22:85:f1:03:e5:dd:f6: 8c:aa:f6:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CwnKFr/GJM52wSHFhW4uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZTNiYTg3ZTNhOTM0NjhjYzNiM2MzZjYwZmE2M2Q1ZTg1 M2MzMTQwHhcNMjUxMjA2MTkwMjEyWhcNMjUxMjA3MTkwMjEyWjAzMTEwLwYDVQQD EygwOTY3Yzg1YmQ5Y2VjYTViMWQ0ZGQwZWVhMWExMjAwMWZiNDA1NGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D4VpTgy6EzcxtanAQCLvrYHlC41 msC1F/UCbVqrDFOv4gS5cuSIO7aJZmEN+OuyNriiiJhUPWvI5+e+7E7VoJd6KPf+ 8FDLAM479RboMBuDpfOfz45KIYKRBLxThzBCTNJbMvEM7S7SmMXoyU92ZxLTkiP4 5UOYcu5/5fbmPIQ/BubIMKenZAbm8Nma/7m8FP8wMatOBDlOMhNf1AlKWpNN6BFG eCwjuVBAW7YhgJy1HDVVkun3z6ytT3PuNxpeYppLIlu06UK9Ulq/CM9nJZ+whUTv KXylKcc5RhMJDAfRCybsI7/PMd2x52cBYhRBk085LR+VToO61Q1NQhDjdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlnyFvZzspbHU3Q7qGhIAH7QFS6MB8GA1UdIwQY MBaAFGjjuofjqTRozDs8P2D6Y9XoU8MUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xZWZmMTctNjVlYy00NWVhLWE3NWQt OTZlYjA3Zjc4MjViLzEvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8xZWZmMTctNjVlYy00NWVhLWE3NWQtOTZlYjA3Zjc4MjVi LzEvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbT+TE2pm j2H1Z+P8ekhmiRM3Q/rEd7TxzJ7nusYK5CffmgpHHITPfdVDzEVGyHQnm9Hj9CFa kEnjmq2NKt5dv6hye9gxYD41u3qwphYwLcpaVBp8DVdm2UNfP42BF4Cy1kjS8hS9 /QXdQ0T9/2A5Dyw9PkQalLA9ZQeGoorglsB/ZYo3+sb0082vMQTUrugbE0IzjuyS j9OVl7RNMdVUr6Q6WZJ4dGFzZZE2WAoKL2fwqILMBYGx26HqnJCGUvVDnVlj6zeR KSTNb46ejcwu5yXEPzcUkD3gZnck9ybSNpN+omTkrrzHuqPBSNQS1NQ4eF1og60i hfED5d32jKr21Q== -----END CERTIFICATE-----Generated at Sat Dec 6 21:43:06 2025 by rpki-client