This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft File: 6oPjDy1vznWmZqLQtja0bsmYocs.mft (raw, json) Hash identifier: uHr+hsoSFbZo8FOpxx+LQRCRr0ZautHPylKwawzxdbE= Subject key identifier: F3:BD:3E:3D:CF:D9:4D:9D:63:80:14:63:F2:84:26:27:84:B8:AF:33 Authority key identifier: EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB Certificate issuer: /CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb Certificate serial: 019B19BACDD4E4B7B0E66EE8D8A0D30FCB3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft Manifest number: 0F97 Signing time: Sat 13 Dec 2025 22:00:31 +0000 Manifest this update: Sat 13 Dec 2025 22:00:31 +0000 Manifest next update: Sun 14 Dec 2025 22:00:31 +0000 Files and hashes: 1: 6oPjDy1vznWmZqLQtja0bsmYocs.crl (hash: Z0yjCGYfR6DZoL6joaB+y3uphsU70R3RilfunDyjEeQ=) 2: okg73byO9ZwK73bf1nHKxWy9BQc.roa (hash: UhLrY21oOL3tD3JEsUSjif+xKx57LK0Vj7G+Yv+lBBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:ba:cd:d4:e4:b7:b0:e6:6e:e8:d8:a0:d3:0f:cb:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb Validity Not Before: Dec 13 22:00:31 2025 GMT Not After : Dec 14 22:00:31 2025 GMT Subject: CN=f3bd3e3dcfd94d9d63801463f284262784b8af33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4e:a1:35:26:5b:5e:8f:85:f0:27:64:2c:97: 51:70:25:49:8d:88:9b:88:f5:e9:47:a4:2e:6f:a4: cc:98:ff:d2:0a:c6:ff:e2:cd:44:e6:43:11:a1:ea: a4:2a:8f:f8:57:14:ba:f3:89:f7:7c:34:b9:c3:53: 09:e3:a1:1e:84:d0:ef:9a:f4:9a:d1:f9:49:31:49: 52:9c:8b:4e:5c:08:2a:bb:bf:da:81:07:df:a6:cb: a1:3c:74:f0:5d:87:74:dd:bd:87:c3:d8:32:31:ed: 27:d1:fb:89:79:c9:ca:cf:43:50:bb:fb:59:08:c1: 8f:c7:44:51:46:b1:c6:a1:40:77:00:b6:14:16:fd: d9:bc:c5:90:66:93:ef:ea:f4:89:ff:13:58:6c:4a: ba:67:7d:54:c6:ba:ab:f1:4e:fe:15:6f:db:48:ce: 50:74:42:19:72:82:86:ec:3a:3d:b7:44:51:08:65: d6:ab:49:54:bb:32:83:77:d6:23:aa:e9:1b:e4:a3: 15:d8:49:d0:bb:88:14:d6:b4:ad:6e:76:4e:6a:c7: 0b:a5:b7:5b:2d:c8:07:54:81:48:6b:f0:5f:ac:f2: 99:5f:56:be:5a:66:fd:29:4e:de:df:39:5f:ae:86: a6:4e:0f:0b:17:19:74:b3:e1:08:e4:c4:55:7e:63: 89:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BD:3E:3D:CF:D9:4D:9D:63:80:14:63:F2:84:26:27:84:B8:AF:33 X509v3 Authority Key Identifier: keyid:EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:8c:a3:71:09:67:b5:3d:d7:ee:df:56:6a:3d:2a:bb:b9:5d: 09:9c:41:12:79:17:89:7d:4a:fe:84:3c:97:ec:d8:ba:f4:5f: 7d:02:2a:d2:1e:4a:f7:39:64:b6:a8:54:f0:d0:65:f9:f7:21: b8:03:40:55:79:c8:6e:01:6c:b1:e0:2b:70:d3:21:c1:b0:e6: e8:4d:da:ba:3b:89:b7:17:94:42:53:0c:0e:d0:7d:5f:21:d6: a2:98:0f:3e:39:1b:3b:a8:c4:4d:5e:df:1c:9c:5a:b9:08:52: 4b:93:8d:4c:fe:05:b9:6d:6e:be:54:b1:e4:a3:78:2b:68:f3: 48:b9:f9:a8:d0:a2:ad:d6:31:ba:12:de:b7:49:5c:48:12:22: 52:f4:96:eb:44:b7:4b:cf:d7:78:dd:6a:fc:bd:35:0b:a4:bb: 06:eb:07:5c:59:dc:2c:0c:14:7a:68:f5:21:ea:a0:82:c4:2c: b9:7c:38:59:01:da:e8:39:45:7a:3b:c8:11:bc:89:30:cf:14: 9f:ff:ef:95:76:78:be:35:29:40:24:95:06:b9:58:68:ca:95: d0:56:27:9f:98:76:1f:3d:82:9e:9a:08:25:e9:68:37:07:1a: 71:2e:74:64:c0:87:71:b0:e2:ea:ed:c7:73:00:29:3c:4f:dc: dc:c6:61:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZus3U5Lew5m7o2KDTD8s9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhODNlMzBmMmQ2ZmNlNzVhNjY2YTJkMGI2MzZiNDZlYzk5 OGExY2IwHhcNMjUxMjEzMjIwMDMxWhcNMjUxMjE0MjIwMDMxWjAzMTEwLwYDVQQD EyhmM2JkM2UzZGNmZDk0ZDlkNjM4MDE0NjNmMjg0MjYyNzg0YjhhZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk6hNSZbXo+F8CdkLJdRcCVJjYib iPXpR6Qub6TMmP/SCsb/4s1E5kMRoeqkKo/4VxS684n3fDS5w1MJ46EehNDvmvSa 0flJMUlSnItOXAgqu7/agQffpsuhPHTwXYd03b2Hw9gyMe0n0fuJecnKz0NQu/tZ CMGPx0RRRrHGoUB3ALYUFv3ZvMWQZpPv6vSJ/xNYbEq6Z31Uxrqr8U7+FW/bSM5Q dEIZcoKG7Do9t0RRCGXWq0lUuzKDd9Yjqukb5KMV2EnQu4gU1rStbnZOascLpbdb LcgHVIFIa/BfrPKZX1a+Wmb9KU7e3zlfroamTg8LFxl0s+EI5MRVfmOJqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPO9Pj3P2U2dY4AUY/KEJieEuK8zMB8GA1UdIwQY MBaAFOqD4w8tb851pmai0LY2tG7JmKHLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNjljNzUtODM5MS00ZDkzLWIzNzgt M2ZhMTVhMzNmNDI5LzEvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jNjljNzUtODM5MS00ZDkzLWIzNzgtM2ZhMTVhMzNmNDI5 LzEvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIyjcQln tT3X7t9Waj0qu7ldCZxBEnkXiX1K/oQ8l+zYuvRffQIq0h5K9zlktqhU8NBl+fch uANAVXnIbgFsseArcNMhwbDm6E3aujuJtxeUQlMMDtB9XyHWopgPPjkbO6jETV7f HJxauQhSS5ONTP4FuW1uvlSx5KN4K2jzSLn5qNCirdYxuhLet0lcSBIiUvSW60S3 S8/XeN1q/L01C6S7BusHXFncLAwUemj1IeqggsQsuXw4WQHa6DlFejvIEbyJMM8U n//vlXZ4vjUpQCSVBrlYaMqV0FYnn5h2Hz2CnpoIJeloNwcacS50ZMCHcbDi6u3H cwApPE/c3MZh+Q== -----END CERTIFICATE-----Generated at Sun Dec 14 00:00:51 2025 by rpki-client