This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft File: 6oss0R-FmHiYVHRQySF4Efzeoos.mft (raw, json) Hash identifier: AX1BYPquy2UhP7TFhWHz2xXhlh1hUubHh5dx8aYi3DY= Subject key identifier: CE:A4:3A:62:17:46:37:C1:BF:7C:02:8D:A8:0E:F6:21:9E:3C:D6:77 Authority key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B Certificate issuer: /CN=ea8b2cd11f85987898547450c9217811fcdea28b Certificate serial: 019B20623A3374DFC24DFEB486A135A5BF45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft Manifest number: 111E Signing time: Mon 15 Dec 2025 05:01:06 +0000 Manifest this update: Mon 15 Dec 2025 05:01:06 +0000 Manifest next update: Tue 16 Dec 2025 05:01:06 +0000 Files and hashes: 1: 6oss0R-FmHiYVHRQySF4Efzeoos.crl (hash: IxN5suNEZ9zLfTY5h5ozO5NKsSf+V5vObZSxpJS7VLI=) 2: Wwi6glxCUUOadZqgxrOkdmMrALQ.roa (hash: ojxf/c/q5Kwb/LwjbQGsJ4lb3PD40U6FhYMP3ryQG10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:62:3a:33:74:df:c2:4d:fe:b4:86:a1:35:a5:bf:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea8b2cd11f85987898547450c9217811fcdea28b Validity Not Before: Dec 15 05:01:06 2025 GMT Not After : Dec 16 05:01:06 2025 GMT Subject: CN=cea43a62174637c1bf7c028da80ef6219e3cd677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:82:b2:c9:9b:2f:4c:1e:27:e4:82:75:43:35: 20:e7:48:89:d6:32:9f:ed:e8:91:64:37:f1:45:8b: 34:6b:99:95:b9:ee:97:a8:0a:4d:a4:5c:ad:82:36: f6:48:2d:60:1f:ef:4c:0f:e2:81:50:db:84:65:a4: 60:c3:9f:2c:5f:29:27:b7:29:62:ef:2a:78:fe:2e: 6d:7e:a7:7e:dd:40:ff:e9:79:df:9c:be:fc:cc:20: 17:99:ab:b7:2b:91:65:bc:cb:90:a9:f2:8c:ab:0d: 6c:72:53:ee:c4:8f:40:02:96:38:24:e5:f6:6b:81: 46:d1:44:df:dd:4c:0e:22:76:00:10:50:e5:71:25: 0e:0f:fe:e8:b7:76:38:5d:31:0a:9d:8f:c7:25:20: 51:46:a4:d8:7f:a7:3e:78:2e:41:ed:7b:54:67:ee: 3f:82:60:e4:8f:a6:77:00:6d:8e:3d:b9:6d:f1:f9: 93:06:78:5e:1e:9f:3e:8d:14:d2:cd:0d:54:c4:a8: be:17:2e:d0:f6:20:d0:13:18:d7:90:65:a9:b4:21: 5d:38:06:cb:4b:3e:71:3c:17:b6:02:64:bd:87:f2: 93:bb:43:d2:1d:11:ab:8f:87:1e:9d:5a:6b:4e:bc: f9:c2:39:57:57:12:76:da:92:dc:39:fd:2e:0c:97: 4c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A4:3A:62:17:46:37:C1:BF:7C:02:8D:A8:0E:F6:21:9E:3C:D6:77 X509v3 Authority Key Identifier: keyid:EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:cc:09:d7:cc:7f:96:4d:8c:40:30:b0:40:06:d9:8b:8b:bb: 85:8e:a9:f3:2a:92:c3:86:9b:18:c4:ec:e8:60:b4:50:25:e1: ed:63:6e:b5:4c:c9:da:df:73:84:55:d3:a1:51:04:e2:a0:c8: 79:18:e8:a5:38:86:83:af:e6:5d:31:15:0c:71:4c:0f:f9:49: 87:3f:0b:22:87:61:c6:08:97:5b:40:6c:55:4f:74:0c:97:6c: 9c:f5:da:c7:0b:bb:5c:2a:19:76:63:e9:3b:53:41:6b:59:7c: 4c:f4:f8:b0:fb:fd:45:3a:6b:8d:93:8d:9f:59:ef:7a:b6:fc: f0:1c:ee:53:a1:b5:58:cc:e5:67:91:ce:4f:c1:df:44:df:1f: 7e:48:7b:e5:7d:5f:a6:00:f5:13:ef:52:78:f1:c2:7e:b9:18: f5:81:db:db:34:80:fb:95:81:b1:9f:85:cb:b5:6d:5e:8f:d4: 42:c1:eb:a2:60:09:3b:27:be:a6:19:a3:35:42:ed:7a:26:61: 09:3f:61:ae:0a:93:06:fb:10:91:44:e1:96:ba:5b:74:b3:c6: 89:b9:72:87:fb:86:b9:91:75:9c:48:9a:fc:7a:98:c9:4e:93: 5c:9f:d8:02:2e:77:a4:4a:5e:8c:f0:be:da:d5:73:3f:99:70: 34:15:a5:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYjozdN/CTf60hqE1pb9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhOGIyY2QxMWY4NTk4Nzg5ODU0NzQ1MGM5MjE3ODExZmNk ZWEyOGIwHhcNMjUxMjE1MDUwMTA2WhcNMjUxMjE2MDUwMTA2WjAzMTEwLwYDVQQD EyhjZWE0M2E2MjE3NDYzN2MxYmY3YzAyOGRhODBlZjYyMTllM2NkNjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IKyyZsvTB4n5IJ1QzUg50iJ1jKf 7eiRZDfxRYs0a5mVue6XqApNpFytgjb2SC1gH+9MD+KBUNuEZaRgw58sXykntyli 7yp4/i5tfqd+3UD/6XnfnL78zCAXmau3K5FlvMuQqfKMqw1sclPuxI9AApY4JOX2 a4FG0UTf3UwOInYAEFDlcSUOD/7ot3Y4XTEKnY/HJSBRRqTYf6c+eC5B7XtUZ+4/ gmDkj6Z3AG2OPblt8fmTBnheHp8+jRTSzQ1UxKi+Fy7Q9iDQExjXkGWptCFdOAbL Sz5xPBe2AmS9h/KTu0PSHRGrj4cenVprTrz5wjlXVxJ22pLcOf0uDJdMowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6kOmIXRjfBv3wCjagO9iGePNZ3MB8GA1UdIwQY MBaAFOqLLNEfhZh4mFR0UMkheBH83qKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8xZmY3ZWEtYmMxMy00YjU0LTg5OGQt MWQxY2QyMTUyNzVkLzEvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8xZmY3ZWEtYmMxMy00YjU0LTg5OGQtMWQxY2QyMTUyNzVk LzEvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMwJ18x/ lk2MQDCwQAbZi4u7hY6p8yqSw4abGMTs6GC0UCXh7WNutUzJ2t9zhFXToVEE4qDI eRjopTiGg6/mXTEVDHFMD/lJhz8LIodhxgiXW0BsVU90DJdsnPXaxwu7XCoZdmPp O1NBa1l8TPT4sPv9RTprjZONn1nverb88BzuU6G1WMzlZ5HOT8HfRN8ffkh75X1f pgD1E+9SePHCfrkY9YHb2zSA+5WBsZ+Fy7VtXo/UQsHromAJOye+phmjNULteiZh CT9hrgqTBvsQkUThlrpbdLPGiblyh/uGuZF1nEia/HqYyU6TXJ/YAi53pEpejPC+ 2tVzP5lwNBWliQ== -----END CERTIFICATE-----Generated at Mon Dec 15 14:40:52 2025 by rpki-client