This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft File: O6BcspZx0wpXo-hET0H-A0z3UjE.mft (raw, json) Hash identifier: xQUCAFTGQSS0u65nU2CQ8rvx4/nEbe+TKKowYFeua4M= Subject key identifier: 9A:99:F9:AB:19:33:C7:3B:1A:4C:B9:49:8D:10:9F:EE:AC:09:72:AA Authority key identifier: 3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31 Certificate issuer: /CN=3ba05cb29671d30a57a3e8444f41fe034cf75231 Certificate serial: 019B5A887C4B8461FB285B6265EAA4672D97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft Manifest number: 065C Signing time: Fri 26 Dec 2025 12:00:52 +0000 Manifest this update: Fri 26 Dec 2025 12:00:52 +0000 Manifest next update: Sat 27 Dec 2025 12:00:52 +0000 Files and hashes: 1: O6BcspZx0wpXo-hET0H-A0z3UjE.crl (hash: pQuRJAC7EAMHDC4AlGtCErQH7jDCLyqEF3EdMN5NsDA=) 2: Rz-Vh9z4e03dlNgqerpia1XRL-k.roa (hash: 264nJ8QiwzT6QaHmYoFKRNYp0Sy9/H1JZeP4RPKrOd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:7c:4b:84:61:fb:28:5b:62:65:ea:a4:67:2d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ba05cb29671d30a57a3e8444f41fe034cf75231 Validity Not Before: Dec 26 12:00:52 2025 GMT Not After : Dec 27 12:00:52 2025 GMT Subject: CN=9a99f9ab1933c73b1a4cb9498d109feeac0972aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:02:f5:7c:3c:08:61:ec:d7:d9:46:f2:10:34: 32:b5:55:6e:18:3c:fe:a8:cb:2c:a0:fd:5e:80:d3: 5d:85:86:7b:a3:5f:47:d4:b5:00:1d:24:26:dd:2e: 30:ae:bd:e9:10:e4:c6:b5:8d:05:e3:64:9e:10:9a: b1:c8:16:08:ec:7f:58:35:60:82:7d:87:ee:f8:0a: a5:49:ed:ce:49:b1:98:07:24:fa:13:b5:ab:9e:23: 2d:ca:0d:e6:6b:9d:fd:a0:e0:8a:c3:a3:8a:1a:43: ec:69:aa:39:f8:e8:ef:b1:64:44:d7:d5:2e:64:7b: a2:17:bb:2f:88:17:cc:4d:e3:2d:48:65:c4:a8:cf: 81:5c:fe:1f:9a:f6:17:cf:0f:8d:21:21:13:0a:fa: 9e:d9:12:62:2a:20:84:5a:d6:6f:36:67:03:db:7a: cb:1e:6e:13:74:df:f2:c9:31:62:0d:05:ae:79:83: 67:ba:71:cf:b4:e6:74:d8:f0:a6:3a:d9:9b:08:4c: 2e:d7:d1:cb:53:66:c7:ae:37:d6:87:4e:a1:a1:97: d4:9d:76:c1:bd:6d:36:f2:c6:5b:4c:ac:15:34:b0: 70:f6:a2:4d:00:9d:4f:c8:56:aa:47:58:29:08:2a: 4d:f4:b2:fb:09:22:63:08:6f:67:87:a9:d1:01:4e: b2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:99:F9:AB:19:33:C7:3B:1A:4C:B9:49:8D:10:9F:EE:AC:09:72:AA X509v3 Authority Key Identifier: keyid:3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e2:94:9b:29:31:ec:e4:aa:a9:5e:a6:31:ce:87:d7:18:e4: 50:f5:f1:e9:d4:4e:4c:5f:f3:0d:d0:bb:06:5b:08:f9:4c:0b: af:79:72:3a:b4:76:65:37:40:f5:e9:69:00:ae:65:e8:3d:e4: 79:4d:f1:14:12:d6:e8:af:ba:d8:90:ea:da:23:34:36:45:40: 3a:4a:fd:cc:12:90:db:dc:26:2f:ab:ce:1f:67:5e:23:cb:d3: 4d:3e:e7:2a:6b:1b:d2:5d:13:36:66:89:a6:2c:34:70:9d:b7: 27:52:c0:67:e5:7b:dd:fc:5d:ca:0c:46:14:f2:b5:d9:5e:df: b1:bf:10:a1:bb:9f:89:71:84:cb:6a:b7:b6:5a:94:41:46:1f: 01:5f:34:50:61:55:a7:9c:97:2d:13:17:2d:fe:82:66:4a:95: 47:a0:1d:64:ed:11:01:af:9b:aa:08:95:4e:1f:ef:fc:94:34: 30:63:0c:a9:f8:39:5a:75:84:aa:aa:ca:f8:e9:3c:27:be:98: dc:12:43:c9:ef:6c:b9:46:62:df:c5:b4:96:36:a9:57:fc:6d: a3:6f:27:9f:ba:6a:b9:27:2b:95:82:8f:d0:2e:55:b8:92:1e: d0:7a:14:05:8e:79:c3:38:f0:1f:54:37:8a:f3:1f:09:73:40: cd:c6:70:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiHxLhGH7KFtiZeqkZy2XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYTA1Y2IyOTY3MWQzMGE1N2EzZTg0NDRmNDFmZTAzNGNm NzUyMzEwHhcNMjUxMjI2MTIwMDUyWhcNMjUxMjI3MTIwMDUyWjAzMTEwLwYDVQQD Eyg5YTk5ZjlhYjE5MzNjNzNiMWE0Y2I5NDk4ZDEwOWZlZWFjMDk3MmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAL1fDwIYezX2UbyEDQytVVuGDz+ qMssoP1egNNdhYZ7o19H1LUAHSQm3S4wrr3pEOTGtY0F42SeEJqxyBYI7H9YNWCC fYfu+AqlSe3OSbGYByT6E7WrniMtyg3ma539oOCKw6OKGkPsaao5+OjvsWRE19Uu ZHuiF7sviBfMTeMtSGXEqM+BXP4fmvYXzw+NISETCvqe2RJiKiCEWtZvNmcD23rL Hm4TdN/yyTFiDQWueYNnunHPtOZ02PCmOtmbCEwu19HLU2bHrjfWh06hoZfUnXbB vW028sZbTKwVNLBw9qJNAJ1PyFaqR1gpCCpN9LL7CSJjCG9nh6nRAU6yAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqZ+asZM8c7Gky5SY0Qn+6sCXKqMB8GA1UdIwQY MBaAFDugXLKWcdMKV6PoRE9B/gNM91IxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzZCY3NwWngwd3BYby1oRVQwSC1BMHozVWpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wOWVjODMtODVlMi00ZTljLWE3OWMt NGM5NTlmNjA3N2EwLzEvTzZCY3NwWngwd3BYby1oRVQwSC1BMHozVWpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wOWVjODMtODVlMi00ZTljLWE3OWMtNGM5NTlmNjA3N2Ew LzEvTzZCY3NwWngwd3BYby1oRVQwSC1BMHozVWpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOKUmykx 7OSqqV6mMc6H1xjkUPXx6dROTF/zDdC7BlsI+UwLr3lyOrR2ZTdA9elpAK5l6D3k eU3xFBLW6K+62JDq2iM0NkVAOkr9zBKQ29wmL6vOH2deI8vTTT7nKmsb0l0TNmaJ piw0cJ23J1LAZ+V73fxdygxGFPK12V7fsb8QobufiXGEy2q3tlqUQUYfAV80UGFV p5yXLRMXLf6CZkqVR6AdZO0RAa+bqgiVTh/v/JQ0MGMMqfg5WnWEqqrK+Ok8J76Y 3BJDye9suUZi38W0ljapV/xto28nn7pquScrlYKP0C5VuJIe0HoUBY55wzjwH1Q3 ivMfCXNAzcZw0w== -----END CERTIFICATE-----Generated at Fri Dec 26 17:42:29 2025 by rpki-client