This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft File: a0I7KaGCk2si34-YJt1YOgBZE0o.mft (raw, json) Hash identifier: dW33LQtUhG0kUXZlvQhnA6qVQmf1ApenLaXdxFQlxC0= Subject key identifier: 31:4E:E0:4B:49:B8:C0:35:E9:66:05:33:6F:BC:EB:FE:35:F5:E8:9A Authority key identifier: 6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A Certificate issuer: /CN=6b423b29a182936b22df8f9826dd583a0059134a Certificate serial: 019B2EFA6E1B242F507CA9E14D60A6712528 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft Manifest number: 08A6 Signing time: Thu 18 Dec 2025 01:02:02 +0000 Manifest this update: Thu 18 Dec 2025 01:02:02 +0000 Manifest next update: Fri 19 Dec 2025 01:02:02 +0000 Files and hashes: 1: U_Lbl4dQRImqSP6zV_MXvnCzVro.roa (hash: k+fOfvjUjOj8hU8vOKkhlBwBO0V4NXX3JC8vdkG/viY=) 2: a0I7KaGCk2si34-YJt1YOgBZE0o.crl (hash: p9hmKo1Mleh68Yh4gScjDlTlBcJu4POUf0OZYk2pxW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:6e:1b:24:2f:50:7c:a9:e1:4d:60:a6:71:25:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b423b29a182936b22df8f9826dd583a0059134a Validity Not Before: Dec 18 01:02:02 2025 GMT Not After : Dec 19 01:02:02 2025 GMT Subject: CN=314ee04b49b8c035e96605336fbcebfe35f5e89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:45:72:ea:54:11:56:21:61:94:78:36:f5:44: f2:f2:99:a7:19:a2:63:58:8d:c4:ab:17:6b:9f:f2: 96:c2:fd:57:4e:6a:0d:24:39:2e:1c:8d:d4:09:78: b1:8e:34:7b:21:35:78:38:9d:2d:39:f0:d6:bc:17: 27:b2:5a:ec:66:2e:5e:68:16:ef:1a:4f:99:69:9c: 29:fc:02:db:e5:d6:04:e3:eb:86:74:1a:7a:ff:45: 5e:34:21:de:e5:55:a2:a5:7f:00:16:42:cd:08:14: 29:2e:f7:20:15:c1:50:f7:e9:bd:f7:30:0b:b0:43: 4e:7d:09:aa:b9:da:8d:18:b9:c8:87:af:db:31:80: f5:79:50:65:17:b6:b3:a5:0c:ce:2b:85:73:f7:0a: 75:36:6d:96:0d:50:20:e5:58:ef:e2:a7:da:94:72: f0:60:9c:e7:c6:85:22:27:a7:30:30:55:9a:be:4d: ad:4a:21:54:fc:37:0f:af:f2:76:bb:b1:43:74:bd: 5d:aa:66:e5:b4:b4:c4:ce:bc:27:d4:87:93:ef:37: cc:25:dd:fb:b2:56:f7:86:6f:57:1d:a2:d2:4f:85: 11:19:a6:76:ba:09:e4:92:f2:38:88:95:3a:26:59: bb:20:28:30:d1:26:59:1d:5c:f1:f2:f8:55:7a:fc: 18:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4E:E0:4B:49:B8:C0:35:E9:66:05:33:6F:BC:EB:FE:35:F5:E8:9A X509v3 Authority Key Identifier: keyid:6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:7f:26:b8:a8:25:1b:fb:76:81:6b:b2:14:2b:d1:56:9d:49: 76:2e:74:1f:46:4b:62:c6:67:35:a7:8b:47:97:fa:e1:23:26: 5b:20:3b:41:4b:d0:8c:3f:21:c0:fa:67:24:d3:ba:76:16:9e: e0:c1:32:34:b3:10:01:31:d5:f1:db:88:db:a7:75:5f:85:e4: d9:62:44:42:84:19:4c:ba:5e:78:05:b7:d9:75:b1:f6:99:30: f2:2b:f1:bd:c2:92:dd:88:db:b2:df:1d:8f:0d:ff:82:8d:4d: de:8c:9f:4e:4c:55:b9:5b:98:8f:a1:54:bd:cd:71:88:f9:c7: 89:23:e1:33:a8:74:db:96:6f:ff:3c:25:24:3e:f2:47:ff:c6: b8:62:ff:7d:ac:57:d5:c7:8c:ea:02:e1:1f:48:84:a9:05:60: cb:74:f8:9f:ac:c5:5d:cb:e1:16:8f:0f:59:00:68:82:95:ac: 49:65:73:47:98:d7:c4:f6:ad:02:5e:cc:dd:34:b3:6d:a0:f7: 6a:64:53:e6:ab:3a:dc:79:b2:fb:32:76:80:49:a7:50:c4:b8: f8:b9:3f:04:90:cb:29:96:2a:7e:d2:c2:94:a0:bf:b5:c7:71: e5:72:41:44:ca:74:b7:2c:c3:3a:c3:dd:18:b2:02:e8:23:34: 3e:14:e7:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+m4bJC9QfKnhTWCmcSUoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNDIzYjI5YTE4MjkzNmIyMmRmOGY5ODI2ZGQ1ODNhMDA1 OTEzNGEwHhcNMjUxMjE4MDEwMjAyWhcNMjUxMjE5MDEwMjAyWjAzMTEwLwYDVQQD EygzMTRlZTA0YjQ5YjhjMDM1ZTk2NjA1MzM2ZmJjZWJmZTM1ZjVlODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0Vy6lQRViFhlHg29UTy8pmnGaJj WI3Eqxdrn/KWwv1XTmoNJDkuHI3UCXixjjR7ITV4OJ0tOfDWvBcnslrsZi5eaBbv Gk+ZaZwp/ALb5dYE4+uGdBp6/0VeNCHe5VWipX8AFkLNCBQpLvcgFcFQ9+m99zAL sENOfQmqudqNGLnIh6/bMYD1eVBlF7azpQzOK4Vz9wp1Nm2WDVAg5Vjv4qfalHLw YJznxoUiJ6cwMFWavk2tSiFU/DcPr/J2u7FDdL1dqmbltLTEzrwn1IeT7zfMJd37 slb3hm9XHaLST4URGaZ2ugnkkvI4iJU6Jlm7ICgw0SZZHVzx8vhVevwYcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFO4EtJuMA16WYFM2+86/419eiaMB8GA1UdIwQY MBaAFGtCOymhgpNrIt+PmCbdWDoAWRNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTBJN0thR0NrMnNpMzQtWUp0MVlPZ0JaRTBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iYTBmZjAtMmJlMi00Mjg2LWEyZDct NThhOGEzM2Q1NGE2LzEvYTBJN0thR0NrMnNpMzQtWUp0MVlPZ0JaRTBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iYTBmZjAtMmJlMi00Mjg2LWEyZDctNThhOGEzM2Q1NGE2 LzEvYTBJN0thR0NrMnNpMzQtWUp0MVlPZ0JaRTBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACX8muKgl G/t2gWuyFCvRVp1Jdi50H0ZLYsZnNaeLR5f64SMmWyA7QUvQjD8hwPpnJNO6dhae 4MEyNLMQATHV8duI26d1X4Xk2WJEQoQZTLpeeAW32XWx9pkw8ivxvcKS3Yjbst8d jw3/go1N3oyfTkxVuVuYj6FUvc1xiPnHiSPhM6h025Zv/zwlJD7yR//GuGL/faxX 1ceM6gLhH0iEqQVgy3T4n6zFXcvhFo8PWQBogpWsSWVzR5jXxPatAl7M3TSzbaD3 amRT5qs63Hmy+zJ2gEmnUMS4+Lk/BJDLKZYqftLClKC/tcdx5XJBRMp0tyzDOsPd GLIC6CM0PhTnzA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:59:47 2025 by rpki-client