This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json) Hash identifier: GsPutK93KDHpppFh64Wvvdj1yVgXtoPS+NM813DPVXs= Subject key identifier: D0:3C:39:35:F0:F7:2B:42:86:BA:7C:D3:FE:E2:1E:CD:4C:61:B8:19 Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18 Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818 Certificate serial: 019B0F3751F5DDF9376113F1022E113EB9C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft Manifest number: 10EF Signing time: Thu 11 Dec 2025 21:00:42 +0000 Manifest this update: Thu 11 Dec 2025 21:00:42 +0000 Manifest next update: Fri 12 Dec 2025 21:00:42 +0000 Files and hashes: 1: 1gXM5D3Y0GBi3FbOxC76Tbkj0Qc.roa (hash: GOT5movWxVskxoFlITVT8JKb8WEyioA1Mn3nxWwt5ow=) 2: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: EUaHr9uCkqVBEsGERPf93FxSqpJwwppjzfZ5vQpRcRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:51:f5:dd:f9:37:61:13:f1:02:2e:11:3e:b9:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818 Validity Not Before: Dec 11 21:00:42 2025 GMT Not After : Dec 12 21:00:42 2025 GMT Subject: CN=d03c3935f0f72b4286ba7cd3fee21ecd4c61b819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:df:5f:c9:2e:5a:38:84:b3:d0:5c:9d:6e: 25:c8:f5:43:66:56:38:d8:5e:60:c6:64:91:a8:aa: b3:7e:d9:0f:37:41:85:73:c4:c6:9f:11:31:3f:9e: 32:d3:d3:14:e5:cd:38:d4:dc:d8:01:61:95:89:c7: aa:18:d8:e3:8c:df:0f:c3:a0:8b:73:d4:7e:33:02: b0:46:f5:bc:21:b0:ed:1f:ba:9d:22:11:18:e0:49: d7:0d:cf:8e:bb:bb:7d:1d:84:35:8c:d1:85:8c:86: 7e:10:00:db:d6:cd:cb:9a:8d:9f:ab:17:3c:e7:a9: c4:8b:73:30:fa:fe:4c:d0:b7:83:5b:b5:30:43:b9: 4b:3b:93:b5:96:6b:f7:1c:74:39:05:ee:6e:c4:ee: 17:eb:23:26:0e:96:d1:bf:ad:95:10:38:8e:2d:0e: c8:e0:77:13:ab:b8:74:0e:25:7f:be:d2:28:8a:7c: dc:d3:d3:5c:1e:47:58:7c:36:30:29:fc:8b:dd:97: 7b:24:c0:9e:ae:1a:2f:8d:ad:5a:12:e2:b8:0c:79: a7:8d:bf:cd:2e:28:08:63:4d:5e:0b:55:9a:d1:1a: 60:62:68:de:46:1a:49:10:e5:fd:42:02:a1:3e:64: 03:9b:23:7d:cf:7c:bc:23:76:21:e8:4d:ac:46:7e: 4f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3C:39:35:F0:F7:2B:42:86:BA:7C:D3:FE:E2:1E:CD:4C:61:B8:19 X509v3 Authority Key Identifier: keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:22:7f:30:43:c7:be:dc:22:a3:21:fa:ac:6c:e2:36:99:f4: d3:d0:b9:f3:e9:24:95:db:9b:4f:9d:49:06:63:80:03:aa:cc: 0b:d6:74:22:49:a8:a8:34:2b:c7:85:0d:83:44:74:b3:e8:88: 21:12:3b:a9:14:77:9b:d3:28:e0:dd:b0:01:c7:2e:0a:d2:06: e7:88:16:3d:0d:1c:33:5e:2e:7b:a8:26:9e:bd:59:ed:e1:a5: 6a:74:a4:b1:9a:da:ff:78:9f:7d:a0:9b:d3:f5:da:08:ed:bd: 50:69:1c:88:a6:3a:66:ce:37:94:99:1d:ed:5f:53:59:74:cc: 7b:a6:ca:c6:83:59:64:6a:fe:f8:15:35:7e:f5:f1:79:24:33: ca:07:c7:2b:3c:47:a8:0a:fe:e5:ad:f0:74:54:8f:dc:ab:24: 28:06:8e:7f:cc:a6:0a:f0:54:68:ad:81:e6:5e:96:f1:7b:1d: 49:58:2a:67:12:02:e3:8c:a4:88:2d:41:b1:74:db:6b:6f:15: 2e:1b:91:db:52:9d:1f:47:8b:78:0e:11:6f:fa:c0:0a:b9:93: 4a:20:e3:01:f9:4c:8a:e6:2d:d3:05:9e:f6:7a:f5:bb:44:ae: fb:f0:df:39:10:b6:62:de:21:75:51:90:9f:6d:f6:5c:79:3f: d5:b4:4c:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN1H13fk3YRPxAi4RPrnEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYTM5ZjFkYjg1OGIxNTVmMjViYzM0Mzc1OWY1YmUyYjcz NmM4MTgwHhcNMjUxMjExMjEwMDQyWhcNMjUxMjEyMjEwMDQyWjAzMTEwLwYDVQQD EyhkMDNjMzkzNWYwZjcyYjQyODZiYTdjZDNmZWUyMWVjZDRjNjFiODE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3bfX8kuWjiEs9BcnW4lyPVDZlY4 2F5gxmSRqKqzftkPN0GFc8TGnxExP54y09MU5c041NzYAWGViceqGNjjjN8Pw6CL c9R+MwKwRvW8IbDtH7qdIhEY4EnXDc+Ou7t9HYQ1jNGFjIZ+EADb1s3Lmo2fqxc8 56nEi3Mw+v5M0LeDW7UwQ7lLO5O1lmv3HHQ5Be5uxO4X6yMmDpbRv62VEDiOLQ7I 4HcTq7h0DiV/vtIoinzc09NcHkdYfDYwKfyL3Zd7JMCerhovja1aEuK4DHmnjb/N LigIY01eC1Wa0RpgYmjeRhpJEOX9QgKhPmQDmyN9z3y8I3Yh6E2sRn5PgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNA8OTXw9ytChrp80/7iHs1MYbgZMB8GA1UdIwQY MBaAFKOjnx24WLFV8lvDQ3WfW+K3NsgYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84YzgzY2EtMjI3OC00ZDU2LWJjZTgt NDUwZDIyOTViYTQ5LzEvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi84YzgzY2EtMjI3OC00ZDU2LWJjZTgtNDUwZDIyOTViYTQ5 LzEvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyJ/MEPH vtwioyH6rGziNpn009C58+kkldubT51JBmOAA6rMC9Z0IkmoqDQrx4UNg0R0s+iI IRI7qRR3m9Mo4N2wAccuCtIG54gWPQ0cM14ue6gmnr1Z7eGlanSksZra/3iffaCb 0/XaCO29UGkciKY6Zs43lJkd7V9TWXTMe6bKxoNZZGr++BU1fvXxeSQzygfHKzxH qAr+5a3wdFSP3KskKAaOf8ymCvBUaK2B5l6W8XsdSVgqZxIC44ykiC1BsXTba28V LhuR21KdH0eLeA4Rb/rACrmTSiDjAflMiuYt0wWe9nr1u0Su+/DfORC2Yt4hdVGQ n232XHk/1bRMXA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:02:05 2025 by rpki-client