This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json) Hash identifier: jcc/KQPKe3/KMej69gvnUeeirL3SDfSIMh0m+jpIK2M= Subject key identifier: F7:D2:F5:30:69:66:B0:2A:4B:0C:18:2C:F7:F5:CE:08:7B:82:0C:51 Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14 Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314 Certificate serial: 019B292EBD1D712B2F13CB11DAB2A0D178C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft Manifest number: 177B Signing time: Tue 16 Dec 2025 22:01:27 +0000 Manifest this update: Tue 16 Dec 2025 22:01:27 +0000 Manifest next update: Wed 17 Dec 2025 22:01:27 +0000 Files and hashes: 1: EPNaozHQAjVOYQy-Vt2Z_kxiWS0.roa (hash: WsqXo+AMtH2w9AGoDi4Cn3lAEUdfpStLLlDa9sz3f6I=) 2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: e51JVMeKplZEDcsGw9lPKvbY1WG2rVKgOjzPLTDipGI=) 3: oyDkuFI7Lh8_-ReZkAMKowiORyM.roa (hash: 3yAZCKM7m/E+YP0xth4LuRn5Dda6av4q64pWFUUvg/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2e:bd:1d:71:2b:2f:13:cb:11:da:b2:a0:d1:78:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314 Validity Not Before: Dec 16 22:01:27 2025 GMT Not After : Dec 17 22:01:27 2025 GMT Subject: CN=f7d2f5306966b02a4b0c182cf7f5ce087b820c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:d0:c6:bc:4f:dc:18:9e:39:53:37:9f:03: 66:b0:da:b7:19:1d:40:8e:b8:8d:5d:68:0a:3f:ca: 33:99:2d:9b:e6:53:bb:ea:e8:00:e5:14:11:a6:d1: 07:1a:9b:fc:88:cb:7f:ca:18:7a:af:94:30:ad:9b: c4:5c:f8:ad:96:98:01:f3:15:17:dd:14:cf:9c:f1: 05:74:43:07:d9:f5:44:21:1e:3a:74:bd:76:da:72: 11:84:4c:c7:be:64:56:92:5e:85:13:e6:ec:35:49: bf:1d:e4:14:4b:00:02:47:7d:00:ca:c0:3d:d7:8f: 0e:ca:63:1e:fc:fa:55:75:e9:f3:34:a2:4f:ad:66: f1:61:c1:91:b5:ea:e2:26:d4:6c:c7:db:e1:d3:ad: 15:3c:27:12:6d:7f:0f:9d:31:10:57:d7:60:63:0c: 94:dc:f3:41:b6:d1:9b:b0:8d:f9:da:37:d8:a6:f1: fe:8a:b9:39:f6:0f:1e:0a:06:d6:e1:01:36:20:ff: cd:d6:07:b9:8d:94:c4:03:01:b1:17:c9:74:28:a1: d3:0a:5d:7e:b6:7a:92:67:21:a6:28:5d:6c:77:f9: 20:2a:34:90:b3:7a:0d:51:12:46:73:2f:0a:40:f9: 02:db:98:7b:55:5d:49:b6:0f:3c:95:9f:51:6a:96: bc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D2:F5:30:69:66:B0:2A:4B:0C:18:2C:F7:F5:CE:08:7B:82:0C:51 X509v3 Authority Key Identifier: keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:12:6b:98:d2:63:0a:06:97:71:74:c3:fe:a9:7d:f3:55:3d: 92:4f:16:9c:58:aa:94:89:dd:58:80:34:56:f9:5f:99:b4:52: f5:93:bd:73:51:bb:4b:8b:d4:31:f1:8a:8b:25:f1:6a:73:e2: a4:8d:c5:02:80:8b:00:9f:1f:27:31:7e:18:60:25:3b:c4:45: 57:1c:a9:e7:61:0d:0f:26:8e:13:c4:9a:e8:0c:a9:90:e5:ff: 70:ee:8c:0f:f3:1c:a4:2f:94:68:c9:91:bf:f6:c2:0a:3b:70: 5d:63:88:ed:9d:59:82:4f:e9:01:d6:cc:71:54:b2:7f:9f:7e: 06:0a:0a:eb:9b:70:d4:67:fa:e4:36:f7:28:57:02:97:76:53: 84:38:3a:c1:76:8d:72:53:35:36:1e:27:19:22:b6:82:23:f1: be:35:d8:97:53:a0:4e:87:9b:f4:ae:27:e3:90:e8:cf:87:88: e8:97:4a:63:c0:34:b3:6c:d9:1f:d0:e9:46:7a:bc:a7:88:2c: 14:cc:9b:e4:8c:f1:a3:c7:12:50:7a:84:56:d0:86:9e:21:17: 27:8e:ca:ee:e0:70:39:37:ba:7d:c7:79:6a:bc:f4:4d:13:47: 3c:f4:98:67:4b:5a:44:05:d3:7e:14:10:89:df:aa:10:01:13: a7:18:dd:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLr0dcSsvE8sR2rKg0XjHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZTNiYTg3ZTNhOTM0NjhjYzNiM2MzZjYwZmE2M2Q1ZTg1 M2MzMTQwHhcNMjUxMjE2MjIwMTI3WhcNMjUxMjE3MjIwMTI3WjAzMTEwLwYDVQQD EyhmN2QyZjUzMDY5NjZiMDJhNGIwYzE4MmNmN2Y1Y2UwODdiODIwYzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApczQxrxP3BieOVM3nwNmsNq3GR1A jriNXWgKP8ozmS2b5lO76ugA5RQRptEHGpv8iMt/yhh6r5QwrZvEXPitlpgB8xUX 3RTPnPEFdEMH2fVEIR46dL122nIRhEzHvmRWkl6FE+bsNUm/HeQUSwACR30AysA9 148OymMe/PpVdenzNKJPrWbxYcGRteriJtRsx9vh060VPCcSbX8PnTEQV9dgYwyU 3PNBttGbsI352jfYpvH+irk59g8eCgbW4QE2IP/N1ge5jZTEAwGxF8l0KKHTCl1+ tnqSZyGmKF1sd/kgKjSQs3oNURJGcy8KQPkC25h7VV1Jtg88lZ9Rapa8owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfS9TBpZrAqSwwYLPf1zgh7ggxRMB8GA1UdIwQY MBaAFGjjuofjqTRozDs8P2D6Y9XoU8MUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xZWZmMTctNjVlYy00NWVhLWE3NWQt OTZlYjA3Zjc4MjViLzEvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8xZWZmMTctNjVlYy00NWVhLWE3NWQtOTZlYjA3Zjc4MjVi LzEvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRJrmNJj CgaXcXTD/ql981U9kk8WnFiqlIndWIA0VvlfmbRS9ZO9c1G7S4vUMfGKiyXxanPi pI3FAoCLAJ8fJzF+GGAlO8RFVxyp52ENDyaOE8Sa6AypkOX/cO6MD/McpC+UaMmR v/bCCjtwXWOI7Z1Zgk/pAdbMcVSyf59+BgoK65tw1Gf65Db3KFcCl3ZThDg6wXaN clM1Nh4nGSK2giPxvjXYl1OgToeb9K4n45Doz4eI6JdKY8A0s2zZH9DpRnq8p4gs FMyb5Izxo8cSUHqEVtCGniEXJ47K7uBwOTe6fcd5arz0TRNHPPSYZ0taRAXTfhQQ id+qEAETpxjdLg== -----END CERTIFICATE-----Generated at Wed Dec 17 01:23:28 2025 by rpki-client