This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft File: a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft (raw, json) Hash identifier: fkhSAtkCmm6/Wd5kOjrS6ZNdMOCWAoUqTTHd/E1obW8= Subject key identifier: E0:8F:99:9B:88:78:B7:0E:AF:AD:49:C1:CE:D2:3C:23:2A:DF:B6:BC Authority key identifier: 6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54 Certificate issuer: /CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654 Certificate serial: 019B19BB9B648CE401ED8CFBC92D7CAA230D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft Manifest number: 0EE3 Signing time: Sat 13 Dec 2025 22:01:23 +0000 Manifest this update: Sat 13 Dec 2025 22:01:23 +0000 Manifest next update: Sun 14 Dec 2025 22:01:23 +0000 Files and hashes: 1: a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl (hash: T8dq5rgZtHlOGeM/rfFyTqKSGapQuKIQkTZ8q4jbWes=) 2: y1CXud9r4_KJCPJy5YSEoyYl1eg.roa (hash: kuTX8hxg4+tvv3VjP1J6iCQyHiFE3dinO8w9j6x97BA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:9b:64:8c:e4:01:ed:8c:fb:c9:2d:7c:aa:23:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654 Validity Not Before: Dec 13 22:01:23 2025 GMT Not After : Dec 14 22:01:23 2025 GMT Subject: CN=e08f999b8878b70eafad49c1ced23c232adfb6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:71:20:58:68:e8:32:8a:40:40:fa:f0:fd:7a: 86:fb:e2:40:76:01:a8:03:86:55:47:d2:a3:86:b9: 8c:ce:f9:b9:7a:72:0f:da:ec:04:5f:77:78:4c:f6: f3:59:93:6f:e6:91:53:90:07:38:e1:b2:c2:b4:e3: 25:45:4a:6d:90:0c:7c:54:d4:2a:18:ab:52:29:52: b2:15:2e:30:69:02:84:ae:80:6a:04:0f:20:75:72: 11:9e:2f:b6:9d:80:4f:3c:fd:00:80:29:58:fc:88: fe:a9:57:79:82:22:6e:48:29:7c:04:31:8f:3d:01: 9b:92:8a:7b:67:98:9f:79:1a:04:41:b1:e3:63:cd: ed:9d:81:d4:15:48:e0:5e:fa:91:d7:df:b3:83:b2: 67:17:51:cd:75:fc:54:c7:8c:79:74:05:de:20:cf: 03:a3:95:75:7b:87:56:f1:b1:a5:8c:b6:45:63:ef: 47:73:fa:d7:a3:c3:c1:5b:18:7c:63:f0:80:82:09: 07:11:57:f5:0a:70:11:04:43:5f:3c:1a:23:21:80: f3:b9:0a:7d:06:f7:e3:84:8b:78:1b:28:97:ea:e3: 88:b7:0d:26:0b:e4:3a:e3:74:4f:e4:ac:58:3d:69: 14:e9:a6:6a:96:a3:51:9d:5a:fd:a9:11:28:0b:f4: 1c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8F:99:9B:88:78:B7:0E:AF:AD:49:C1:CE:D2:3C:23:2A:DF:B6:BC X509v3 Authority Key Identifier: keyid:6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f2:40:72:1f:0e:32:3f:49:88:1b:1d:cc:f6:ad:b1:1d:76: 27:2f:7b:89:7f:ce:6a:dd:70:0d:cf:1e:46:40:ad:28:62:cc: f2:e5:cd:58:6b:a4:c1:c6:3d:32:9c:6a:89:60:a7:46:67:dc: f5:66:67:fc:ed:bd:e5:cd:13:de:7e:fa:68:de:cc:35:ff:40: b8:28:16:f9:06:3b:43:42:19:81:68:6b:d5:1f:14:c9:c8:5a: 3a:48:df:5c:d4:16:f8:a9:26:0b:55:b4:52:f7:03:f5:c1:74: 7a:64:e4:9b:f0:f6:20:83:b3:9b:f2:20:09:f1:74:ae:82:b9: be:72:a4:1f:b1:d8:84:dc:91:10:34:a4:90:c2:3f:e8:b6:c1: 71:11:2f:38:36:b3:3b:86:8f:ec:25:c8:05:c2:49:b0:9e:57: 8c:59:c9:7d:96:49:98:85:93:eb:17:f9:f3:0d:7b:9c:7c:42: 78:5b:e0:9b:68:69:44:a5:b7:ce:ed:0b:34:90:8f:3a:1a:9e: 94:69:d0:68:1f:d6:ef:78:2d:16:6e:67:be:a3:3f:9f:51:b2: aa:75:da:af:32:13:ae:1f:07:0c:b4:6c:80:01:8a:8b:b7:16: 86:62:34:8c:7a:81:e3:8e:5f:3c:94:f7:43:1a:87:d5:de:84: 7c:64:39:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu5tkjOQB7Yz7yS18qiMNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZWM0ZTI5YzY4NDljNWY4MDg0MjhlNjY4NThmNGYwZWNm NGE2NTQwHhcNMjUxMjEzMjIwMTIzWhcNMjUxMjE0MjIwMTIzWjAzMTEwLwYDVQQD EyhlMDhmOTk5Yjg4NzhiNzBlYWZhZDQ5YzFjZWQyM2MyMzJhZGZiNmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHEgWGjoMopAQPrw/XqG++JAdgGo A4ZVR9KjhrmMzvm5enIP2uwEX3d4TPbzWZNv5pFTkAc44bLCtOMlRUptkAx8VNQq GKtSKVKyFS4waQKEroBqBA8gdXIRni+2nYBPPP0AgClY/Ij+qVd5giJuSCl8BDGP PQGbkop7Z5ifeRoEQbHjY83tnYHUFUjgXvqR19+zg7JnF1HNdfxUx4x5dAXeIM8D o5V1e4dW8bGljLZFY+9Hc/rXo8PBWxh8Y/CAggkHEVf1CnARBENfPBojIYDzuQp9 BvfjhIt4GyiX6uOItw0mC+Q643RP5KxYPWkU6aZqlqNRnVr9qREoC/QcVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCPmZuIeLcOr61Jwc7SPCMq37a8MB8GA1UdIwQY MBaAFGvsTinGhJxfgIQo5mhY9PDs9KZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mOGFjOTktMGVhYS00ZjUxLThkNTgt ZGJmYWVjZGM3ZWEzLzEvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mOGFjOTktMGVhYS00ZjUxLThkNTgtZGJmYWVjZGM3ZWEz LzEvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPJAch8O Mj9JiBsdzPatsR12Jy97iX/Oat1wDc8eRkCtKGLM8uXNWGukwcY9MpxqiWCnRmfc 9WZn/O295c0T3n76aN7MNf9AuCgW+QY7Q0IZgWhr1R8UychaOkjfXNQW+KkmC1W0 UvcD9cF0emTkm/D2IIOzm/IgCfF0roK5vnKkH7HYhNyREDSkkMI/6LbBcREvODaz O4aP7CXIBcJJsJ5XjFnJfZZJmIWT6xf58w17nHxCeFvgm2hpRKW3zu0LNJCPOhqe lGnQaB/W73gtFm5nvqM/n1GyqnXarzITrh8HDLRsgAGKi7cWhmI0jHqB445fPJT3 QxqH1d6EfGQ5SQ== -----END CERTIFICATE-----Generated at Sun Dec 14 00:02:32 2025 by rpki-client