This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft File: a1zOqpdLKQWssmKvRSwCKAMWqrs.mft (raw, json) Hash identifier: 4+8/QBvQfpXgyO6+fmsLkHZnML+Qz9aaNLdVrq2vuTc= Subject key identifier: 78:3F:0C:5D:2F:2F:74:AB:84:F0:9D:15:75:7A:C3:56:8D:B5:79:6A Authority key identifier: 6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB Certificate issuer: /CN=6b5cceaa974b2905acb262af452c02280316aabb Certificate serial: 019AF5E5D2FC89372071C088244DCE6D70CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft Manifest number: 06A1 Signing time: Sat 06 Dec 2025 23:01:10 +0000 Manifest this update: Sat 06 Dec 2025 23:01:10 +0000 Manifest next update: Sun 07 Dec 2025 23:01:10 +0000 Files and hashes: 1: a1zOqpdLKQWssmKvRSwCKAMWqrs.crl (hash: 5Hafdu6RtSur1jeuLm64OzhD69YjLx5lPM6tzVBOhzc=) 2: bItIvz4oTSzEDWqrAWUpQQfUMhI.roa (hash: F1ATAeaXzdv7TC8vaBAXGNSvaND60c6EFcHFAEWNuFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:d2:fc:89:37:20:71:c0:88:24:4d:ce:6d:70:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5cceaa974b2905acb262af452c02280316aabb Validity Not Before: Dec 6 23:01:10 2025 GMT Not After : Dec 7 23:01:10 2025 GMT Subject: CN=783f0c5d2f2f74ab84f09d15757ac3568db5796a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:13:21:9b:8e:be:10:dd:84:f7:9b:6e:6e:ca: 92:ad:18:8d:4a:22:1a:32:0b:21:25:6f:7b:03:9f: 0a:29:73:34:51:97:94:58:73:2f:02:37:a2:af:42: 92:e9:5f:f4:25:aa:06:8c:a9:b3:32:74:cd:b3:78: 86:40:19:59:0f:90:98:59:94:79:01:67:22:c9:c0: e7:58:b8:39:ba:8c:91:0c:84:cd:0e:6e:c5:4d:b2: 15:09:33:2d:0e:35:49:e9:52:a7:eb:a3:89:34:0b: 2c:2f:fb:35:1d:9a:b1:63:47:fa:91:13:9b:6a:2f: 68:92:89:88:d9:e1:b5:8c:5e:76:66:f4:dc:ab:db: 93:9d:15:3a:69:69:54:8c:93:6a:e5:0e:8f:1b:5f: 7f:a6:4d:d3:53:e9:b9:47:d7:f6:7e:fd:1f:3c:3f: a1:81:5f:ee:d1:86:5e:09:29:14:d4:c3:a8:2e:e8: 2f:44:d6:71:a4:3b:e1:ab:7c:14:0b:ba:c8:ea:6c: 68:f7:88:1c:88:17:ea:9f:c0:ec:c2:6b:74:7c:b3: db:f0:77:51:35:31:f5:6f:0e:96:96:51:c1:20:a0: 1e:cb:bc:a0:05:cf:84:0c:70:5f:49:af:bc:2f:e4: bf:8b:b9:6d:c2:30:8a:f4:c6:e6:3b:37:9c:6b:36: c1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3F:0C:5D:2F:2F:74:AB:84:F0:9D:15:75:7A:C3:56:8D:B5:79:6A X509v3 Authority Key Identifier: keyid:6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:72:30:81:ca:6a:a2:c8:9e:13:95:4b:e0:23:7c:56:f9:95: 61:e8:c4:dc:51:51:90:b6:10:bc:ff:4c:d8:db:58:aa:7d:64: 3d:87:a2:d9:34:65:cf:91:d9:b2:14:64:bf:2d:42:12:82:00: 11:27:b1:93:1e:47:13:6b:b3:8e:06:36:59:fd:57:38:9d:a1: b9:66:b9:42:31:1d:57:f7:b6:ae:b4:9e:f2:dd:f2:0c:d8:6b: 05:2b:d8:61:bc:59:06:9e:4c:9b:56:81:a6:62:af:7d:82:81: 7e:8d:7c:f8:85:9e:a9:df:67:92:3b:ca:f3:12:4f:ed:32:88: 5e:c1:53:ed:95:a3:7e:fe:f4:68:44:7c:15:45:f5:a7:2d:12: 63:1e:b6:70:f9:82:66:18:af:af:11:ad:ed:de:51:c0:f4:bf: 89:45:98:4b:68:85:bc:74:41:72:69:8f:34:74:1b:50:9d:79: 29:58:a2:f2:fb:d0:65:31:70:ef:a3:ec:60:4c:84:c1:a6:b2: 6f:34:17:9d:54:31:18:bc:e0:b9:50:d0:98:d9:f8:85:a1:5b: eb:0c:e0:2f:2d:c9:b5:34:83:d2:29:cb:5a:ba:f9:42:33:cd: 40:c8:03:b2:04:94:38:15:a1:51:b4:b0:1c:f7:8e:e9:48:69: b8:32:b1:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15dL8iTcgccCIJE3ObXDPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWNjZWFhOTc0YjI5MDVhY2IyNjJhZjQ1MmMwMjI4MDMx NmFhYmIwHhcNMjUxMjA2MjMwMTEwWhcNMjUxMjA3MjMwMTEwWjAzMTEwLwYDVQQD Eyg3ODNmMGM1ZDJmMmY3NGFiODRmMDlkMTU3NTdhYzM1NjhkYjU3OTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BMhm46+EN2E95tubsqSrRiNSiIa MgshJW97A58KKXM0UZeUWHMvAjeir0KS6V/0JaoGjKmzMnTNs3iGQBlZD5CYWZR5 AWciycDnWLg5uoyRDITNDm7FTbIVCTMtDjVJ6VKn66OJNAssL/s1HZqxY0f6kROb ai9okomI2eG1jF52ZvTcq9uTnRU6aWlUjJNq5Q6PG19/pk3TU+m5R9f2fv0fPD+h gV/u0YZeCSkU1MOoLugvRNZxpDvhq3wUC7rI6mxo94gciBfqn8Dswmt0fLPb8HdR NTH1bw6WllHBIKAey7ygBc+EDHBfSa+8L+S/i7ltwjCK9MbmOzecazbB+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHg/DF0vL3SrhPCdFXV6w1aNtXlqMB8GA1UdIwQY MBaAFGtczqqXSykFrLJir0UsAigDFqq7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTF6T3FwZExLUVdzc21LdlJTd0NLQU1XcXJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zOWYxZTAtMzYyNy00OTJmLWFlOTMt OGIwN2FjZDA3Yzk0LzEvYTF6T3FwZExLUVdzc21LdlJTd0NLQU1XcXJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zOWYxZTAtMzYyNy00OTJmLWFlOTMtOGIwN2FjZDA3Yzk0 LzEvYTF6T3FwZExLUVdzc21LdlJTd0NLQU1XcXJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnIwgcpq osieE5VL4CN8VvmVYejE3FFRkLYQvP9M2NtYqn1kPYei2TRlz5HZshRkvy1CEoIA ESexkx5HE2uzjgY2Wf1XOJ2huWa5QjEdV/e2rrSe8t3yDNhrBSvYYbxZBp5Mm1aB pmKvfYKBfo18+IWeqd9nkjvK8xJP7TKIXsFT7ZWjfv70aER8FUX1py0SYx62cPmC ZhivrxGt7d5RwPS/iUWYS2iFvHRBcmmPNHQbUJ15KVii8vvQZTFw76PsYEyEwaay bzQXnVQxGLzguVDQmNn4haFb6wzgLy3JtTSD0inLWrr5QjPNQMgDsgSUOBWhUbSw HPeO6UhpuDKxig== -----END CERTIFICATE-----Generated at Sun Dec 7 08:36:18 2025 by rpki-client