This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft File: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json) Hash identifier: Tr5KfMITgdfXc4T0/NIlCy391eB6YEdPvTy4p50l+Lc= Subject key identifier: 35:9F:FC:3B:75:1E:3A:F3:02:DB:81:51:5D:D0:88:E4:F9:9E:54:14 Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8 Certificate issuer: /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8 Certificate serial: 019B2250E4138C6C55BA35A80D3298BB4A7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft Manifest number: 05C0 Signing time: Mon 15 Dec 2025 14:01:25 +0000 Manifest this update: Mon 15 Dec 2025 14:01:25 +0000 Manifest next update: Tue 16 Dec 2025 14:01:25 +0000 Files and hashes: 1: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: rIgcSY+iBbweuKy+Pms3mQFthYgA3JzUpyOsNzc6Bfs=) 2: waNULbcRhTUiNsANSLGcB4J4itI.roa (hash: 9dW8NgonrZBc4IChXkCIdxerNGPGCgwx9gaoEJblTYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:e4:13:8c:6c:55:ba:35:a8:0d:32:98:bb:4a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8 Validity Not Before: Dec 15 14:01:25 2025 GMT Not After : Dec 16 14:01:25 2025 GMT Subject: CN=359ffc3b751e3af302db81515dd088e4f99e5414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6d:f8:ca:e5:37:ba:49:43:34:9f:ae:8b:58: d9:7f:31:54:8f:21:86:d2:15:58:bf:b6:e0:df:b8: 73:b9:79:cb:83:99:b8:c4:81:0e:06:43:5e:61:58: ec:0d:0a:28:c0:30:39:03:4c:f1:ef:91:24:a6:39: 10:9e:ca:2a:f0:59:44:b1:99:7d:0f:fc:d1:f4:53: 6d:85:3d:a9:9c:b0:01:fa:86:d6:0c:bb:3a:46:40: 98:2c:b7:21:b3:53:a2:bc:0e:a8:be:a1:44:06:75: e8:3c:e6:ed:9d:93:1c:ec:7f:24:8c:e1:0e:fb:b6: f7:5a:22:1a:ec:a3:f5:c8:5d:f1:35:86:05:e5:57: 3d:79:89:df:ae:a2:67:64:c7:9b:f7:00:3c:83:b7: 22:f3:2d:68:88:69:0f:f3:d7:92:6a:cc:44:95:30: f5:02:c5:f6:9a:5b:6a:1d:80:e2:78:cc:39:6d:cf: 33:4c:83:00:3a:fe:fb:7f:3a:2c:4f:7b:f9:01:a5: c9:af:ed:f2:56:8a:06:01:a3:b2:f9:db:5c:b4:36: 3c:96:9e:a6:c2:3e:3a:58:e5:f9:94:cb:27:83:db: 5c:dd:06:27:45:a9:3c:8b:da:a6:1a:fc:ac:d2:cf: 60:2b:2e:39:13:14:c8:bf:4f:85:96:c9:be:79:97: 11:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9F:FC:3B:75:1E:3A:F3:02:DB:81:51:5D:D0:88:E4:F9:9E:54:14 X509v3 Authority Key Identifier: keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:38:73:de:7f:d3:d1:77:29:f3:42:c1:70:5a:99:dd:91:0b: 32:b7:22:89:eb:1b:65:04:e0:e0:8b:36:bf:10:29:a1:83:71: 00:81:70:0a:15:ab:3d:de:8f:e1:94:16:9d:00:52:b5:a3:7a: bb:5a:37:c0:b4:0c:ca:f8:cd:46:24:ca:84:f2:fd:2e:23:5a: a5:1e:96:32:b5:f7:ec:ff:ef:7c:de:82:a8:e6:df:d1:6b:94: 84:bd:3f:12:e3:7a:a7:88:de:88:6f:38:71:18:e3:2a:7a:60: 42:a7:d9:17:1a:8b:d2:34:d1:83:59:d4:da:11:56:c1:34:9d: 1c:41:91:dc:b1:72:25:9b:c1:3a:a3:c0:7d:75:96:41:3a:d0: ed:10:ff:0d:de:e5:a9:7b:6d:88:76:7d:de:5d:c7:b1:8a:c4: f7:71:73:4c:82:88:a5:49:4b:b6:f3:47:89:21:d8:2f:71:1a: 0e:9c:fe:02:d4:d6:2b:dc:f7:89:eb:80:c3:ff:cc:80:0c:18: 8e:4f:dc:fc:14:9f:f8:29:d1:60:37:17:38:f7:d9:99:31:68: 5c:3f:05:0a:86:fa:94:26:44:3d:6c:67:40:d6:00:b4:07:42: c5:48:0f:79:6d:88:99:29:23:5c:ea:7e:45:16:26:a8:1c:e5: 76:75:5b:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUOQTjGxVujWoDTKYu0p/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZjg4ZTgyYjM1YTBhZDZkMGZmMzE1NmFmMTMxOWRmYzE2 MmY4ZTgwHhcNMjUxMjE1MTQwMTI1WhcNMjUxMjE2MTQwMTI1WjAzMTEwLwYDVQQD EygzNTlmZmMzYjc1MWUzYWYzMDJkYjgxNTE1ZGQwODhlNGY5OWU1NDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk234yuU3uklDNJ+ui1jZfzFUjyGG 0hVYv7bg37hzuXnLg5m4xIEOBkNeYVjsDQoowDA5A0zx75EkpjkQnsoq8FlEsZl9 D/zR9FNthT2pnLAB+obWDLs6RkCYLLchs1OivA6ovqFEBnXoPObtnZMc7H8kjOEO +7b3WiIa7KP1yF3xNYYF5Vc9eYnfrqJnZMeb9wA8g7ci8y1oiGkP89eSasxElTD1 AsX2mltqHYDieMw5bc8zTIMAOv77fzosT3v5AaXJr+3yVooGAaOy+dtctDY8lp6m wj46WOX5lMsng9tc3QYnRak8i9qmGvys0s9gKy45ExTIv0+Flsm+eZcRSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWf/Dt1HjrzAtuBUV3QiOT5nlQUMB8GA1UdIwQY MBaAFGv4joKzWgrW0P8xVq8TGd/BYvjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEt YmZiZDU2OTRhOTRkLzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEtYmZiZDU2OTRhOTRk LzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3jhz3n/T 0Xcp80LBcFqZ3ZELMrciiesbZQTg4Is2vxApoYNxAIFwChWrPd6P4ZQWnQBStaN6 u1o3wLQMyvjNRiTKhPL9LiNapR6WMrX37P/vfN6CqObf0WuUhL0/EuN6p4jeiG84 cRjjKnpgQqfZFxqL0jTRg1nU2hFWwTSdHEGR3LFyJZvBOqPAfXWWQTrQ7RD/Dd7l qXttiHZ93l3HsYrE93FzTIKIpUlLtvNHiSHYL3EaDpz+AtTWK9z3ieuAw//MgAwY jk/c/BSf+CnRYDcXOPfZmTFoXD8FCob6lCZEPWxnQNYAtAdCxUgPeW2ImSkjXOp+ RRYmqBzldnVbTQ== -----END CERTIFICATE-----Generated at Mon Dec 15 20:33:29 2025 by rpki-client