This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft File: 6oss0R-FmHiYVHRQySF4Efzeoos.mft (raw, json) Hash identifier: O+Hiiv6JgHaRoftoXIZV7aZTeH73X3yz1NB6ocngCMY= Subject key identifier: 24:A5:5A:FC:E9:FB:F8:AB:30:CA:E4:4B:60:BA:EE:C2:E0:CD:C1:9E Authority key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B Certificate issuer: /CN=ea8b2cd11f85987898547450c9217811fcdea28b Certificate serial: 019B12DDC1D2E8EC1D41455FFCFBA4C32888 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft Manifest number: 1117 Signing time: Fri 12 Dec 2025 14:01:21 +0000 Manifest this update: Fri 12 Dec 2025 14:01:21 +0000 Manifest next update: Sat 13 Dec 2025 14:01:21 +0000 Files and hashes: 1: 6oss0R-FmHiYVHRQySF4Efzeoos.crl (hash: ZKDGugeuWsl/qAci/xyUs2Q3jrBfsdy195fcHkkjEMo=) 2: Wwi6glxCUUOadZqgxrOkdmMrALQ.roa (hash: ojxf/c/q5Kwb/LwjbQGsJ4lb3PD40U6FhYMP3ryQG10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:dd:c1:d2:e8:ec:1d:41:45:5f:fc:fb:a4:c3:28:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea8b2cd11f85987898547450c9217811fcdea28b Validity Not Before: Dec 12 14:01:21 2025 GMT Not After : Dec 13 14:01:21 2025 GMT Subject: CN=24a55afce9fbf8ab30cae44b60baeec2e0cdc19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b8:09:96:e6:c9:56:3b:82:a1:ed:e5:37:dc: 62:50:a3:b2:93:83:a3:c5:9b:a2:96:e0:ee:63:65: fc:49:4d:9c:da:36:cd:c6:f1:02:44:6a:d3:66:17: 43:d1:be:a4:f2:ea:4d:34:57:ef:16:85:57:97:3d: 6a:32:1f:88:1c:ff:72:54:75:8b:fb:17:01:9d:ec: 78:d9:91:8c:bd:f9:3d:ff:0e:65:76:9e:0c:9a:bc: b6:5b:0a:f7:cb:ca:66:d7:0d:e5:ee:40:7f:8b:09: 56:e5:b1:a8:ea:95:63:c9:f1:56:dc:3a:45:38:3d: 77:ec:8d:2d:cf:89:9c:66:9d:60:87:2d:46:89:32: 71:24:3f:b1:1d:ca:fb:6e:42:de:0c:2f:02:c3:e5: ec:e3:cf:85:80:f5:2f:04:d0:89:2f:62:0f:69:33: fc:19:f4:43:c7:35:9d:76:d7:93:78:4a:2a:db:7e: 34:7a:7c:18:42:58:f4:27:40:3d:91:56:73:84:04: 18:c5:40:a8:41:6b:3c:a0:f4:39:eb:6e:42:19:32: 5f:77:06:e8:c0:00:70:22:23:e4:d9:39:f4:8b:cb: 32:09:15:35:38:e1:07:d7:d5:54:33:f9:c9:ad:a0: 04:0e:3a:78:61:8c:50:80:46:28:76:b7:0e:77:e0: 85:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A5:5A:FC:E9:FB:F8:AB:30:CA:E4:4B:60:BA:EE:C2:E0:CD:C1:9E X509v3 Authority Key Identifier: keyid:EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f6:14:78:5b:ec:de:f3:8a:31:6d:d6:56:f7:cc:04:bf:02: ae:62:b3:92:ab:90:f9:3e:10:16:36:dc:75:ff:41:f5:ea:7e: af:74:4b:a3:bb:d8:a5:b9:04:6b:a7:04:d8:f4:1d:1b:21:a9: b3:c2:82:a5:47:72:b9:d3:97:c5:a8:73:9f:68:11:27:60:08: 9c:c3:d2:5e:3e:28:70:d6:a6:4d:a9:6d:6d:8a:31:83:2f:34: f3:18:f3:30:01:e4:0e:c1:61:da:84:11:16:bf:81:fd:23:ff: 6b:8b:58:ab:9f:4c:1a:12:13:38:7b:8b:ef:82:84:5d:6f:37: c5:0d:2f:e1:bf:96:5f:f9:36:c3:c9:6f:d2:dd:dc:b5:58:c7: b2:01:bb:55:36:b6:e9:92:bd:42:6e:de:87:68:51:df:c4:a2: 99:d7:c6:fb:0a:c6:9a:bd:05:90:22:5f:4a:96:75:a8:09:a0: 7b:9b:1b:8e:b6:01:ba:0f:c8:5b:6d:79:ae:70:3f:cf:c0:f9: 9f:2b:f1:ff:17:47:81:35:de:06:8b:12:92:65:ef:5c:d6:e9: ff:97:de:98:e5:71:34:8e:49:62:1c:80:00:c5:49:69:78:9e: 9b:3a:b5:b9:5b:db:c7:f1:b3:66:25:b7:bb:11:57:b7:20:52: 6e:8e:a5:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsS3cHS6OwdQUVf/PukwyiIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhOGIyY2QxMWY4NTk4Nzg5ODU0NzQ1MGM5MjE3ODExZmNk ZWEyOGIwHhcNMjUxMjEyMTQwMTIxWhcNMjUxMjEzMTQwMTIxWjAzMTEwLwYDVQQD EygyNGE1NWFmY2U5ZmJmOGFiMzBjYWU0NGI2MGJhZWVjMmUwY2RjMTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7gJlubJVjuCoe3lN9xiUKOyk4Oj xZuiluDuY2X8SU2c2jbNxvECRGrTZhdD0b6k8upNNFfvFoVXlz1qMh+IHP9yVHWL +xcBnex42ZGMvfk9/w5ldp4Mmry2Wwr3y8pm1w3l7kB/iwlW5bGo6pVjyfFW3DpF OD137I0tz4mcZp1ghy1GiTJxJD+xHcr7bkLeDC8Cw+Xs48+FgPUvBNCJL2IPaTP8 GfRDxzWddteTeEoq2340enwYQlj0J0A9kVZzhAQYxUCoQWs8oPQ5625CGTJfdwbo wABwIiPk2Tn0i8syCRU1OOEH19VUM/nJraAEDjp4YYxQgEYodrcOd+CFBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSlWvzp+/irMMrkS2C67sLgzcGeMB8GA1UdIwQY MBaAFOqLLNEfhZh4mFR0UMkheBH83qKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8xZmY3ZWEtYmMxMy00YjU0LTg5OGQt MWQxY2QyMTUyNzVkLzEvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8xZmY3ZWEtYmMxMy00YjU0LTg5OGQtMWQxY2QyMTUyNzVk LzEvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvYUeFvs 3vOKMW3WVvfMBL8CrmKzkquQ+T4QFjbcdf9B9ep+r3RLo7vYpbkEa6cE2PQdGyGp s8KCpUdyudOXxahzn2gRJ2AInMPSXj4ocNamTaltbYoxgy808xjzMAHkDsFh2oQR Fr+B/SP/a4tYq59MGhITOHuL74KEXW83xQ0v4b+WX/k2w8lv0t3ctVjHsgG7VTa2 6ZK9Qm7eh2hR38SimdfG+wrGmr0FkCJfSpZ1qAmge5sbjrYBug/IW215rnA/z8D5 nyvx/xdHgTXeBosSkmXvXNbp/5femOVxNI5JYhyAAMVJaXiemzq1uVvbx/GzZiW3 uxFXtyBSbo6lcw== -----END CERTIFICATE-----Generated at Fri Dec 12 17:22:42 2025 by rpki-client