This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft File: v6bpb8p6J4PLlyHrti3htTbBY6k.mft (raw, json) Hash identifier: 0w/cW6KRTSUO29iGGoLOY7ruh/b7h1efVHPt4/QHHTs= Subject key identifier: AF:37:10:6F:AC:81:CC:4C:0E:41:33:4B:8A:B2:42:E8:74:17:4D:2C Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9 Certificate issuer: /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9 Certificate serial: 019AF12CDBA849D0865608A70EB8D1728577 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft Manifest number: 0F11 Signing time: Sat 06 Dec 2025 01:00:40 +0000 Manifest this update: Sat 06 Dec 2025 01:00:40 +0000 Manifest next update: Sun 07 Dec 2025 01:00:40 +0000 Files and hashes: 1: UIZd9CI7aaVoCr978zA_tJuQwXc.roa (hash: gtKlay3p/m+1ysOhvty8fHbcgsJz5ALUFkSpQwwLWbI=) 2: v6bpb8p6J4PLlyHrti3htTbBY6k.crl (hash: KFn2oKM7MhZueWp/hqc/8GnFvln+TWExK10buJEl+T0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:db:a8:49:d0:86:56:08:a7:0e:b8:d1:72:85:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9 Validity Not Before: Dec 6 01:00:40 2025 GMT Not After : Dec 7 01:00:40 2025 GMT Subject: CN=af37106fac81cc4c0e41334b8ab242e874174d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a0:2b:a9:e3:e0:bc:f3:ef:e0:2a:9d:de:59: 1e:e1:1d:45:6c:7f:ed:78:f7:ad:e5:ab:05:2b:2b: f9:fb:97:d0:6f:51:73:48:8c:b5:b0:cc:f8:0f:66: 6d:70:21:18:37:f8:4f:07:fc:45:46:ff:80:1d:fe: d0:b8:89:46:4c:2c:0b:cd:cd:5b:f3:26:fd:79:75: 9c:6b:63:e9:80:c1:a8:68:b1:9e:41:4f:7f:92:da: d0:8a:cb:e0:36:a9:c8:33:78:46:bd:cd:ed:8b:87: 5c:73:68:2d:10:17:f3:d4:89:aa:b5:0f:15:d0:e5: e2:13:c3:2d:85:e2:b3:e2:c1:fe:4b:c3:97:e9:40: 40:24:7b:fd:60:f9:28:57:64:fa:92:f8:93:16:d0: ad:ac:21:42:40:05:fe:41:43:30:4a:6f:1d:18:03: 2f:e0:e5:61:d5:83:57:f6:ac:6a:92:6d:73:43:80: 21:1c:a1:78:15:cf:94:d9:d8:e1:19:e7:8e:2e:6a: 09:f1:ee:8b:9d:53:ae:03:49:f0:e3:32:1a:ba:18: 7c:4b:9f:dc:fb:75:1a:67:4e:45:4c:f2:4a:21:6e: 8d:df:41:eb:4c:a9:3c:a8:39:07:8f:8b:d2:4a:01: 4e:3b:76:e3:3e:13:d3:d1:d1:b7:94:f1:5d:18:42: 45:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:37:10:6F:AC:81:CC:4C:0E:41:33:4B:8A:B2:42:E8:74:17:4D:2C X509v3 Authority Key Identifier: keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:b0:34:c1:7d:31:2d:b6:ab:bc:82:bd:5a:37:a8:48:e2:cc: 20:19:90:2e:b2:7e:f5:2c:07:37:5c:88:bf:ca:8d:08:e4:5d: 73:3c:8d:ec:d1:83:ec:4c:30:53:a9:02:aa:f1:56:da:cf:b0: 5c:cd:16:b9:1a:ad:a7:87:2d:6d:2f:00:10:8f:ab:dd:04:dd: 7c:39:d3:db:af:ff:81:a0:e6:27:f6:8d:e3:7d:d4:09:e8:fd: f4:d0:f0:3b:d0:f0:8d:7c:f6:ad:5e:c8:9d:a3:d7:03:fa:6f: e5:2a:43:87:0f:06:30:e0:9d:60:db:92:99:0c:7b:71:6a:20: 63:b9:6d:5a:dc:a0:7e:55:9b:0f:ef:a1:52:26:79:25:cf:5d: 89:56:a1:9f:38:07:1a:f7:d4:1b:2c:35:6d:0d:19:45:e4:25: 91:bb:d6:8e:83:e6:d6:01:64:f9:a3:11:32:68:6d:2f:a6:ae: 4f:4f:b3:1e:a7:a6:da:5e:6a:dd:9b:14:04:7f:8c:46:45:2e: cd:35:f3:db:38:49:c6:aa:46:53:92:8e:98:87:d0:a1:3c:02: f9:7d:90:3c:ef:dc:de:77:c1:0b:80:e5:82:93:1c:b3:f1:ba: ff:e4:a8:c7:27:1e:b8:b3:32:71:2b:95:80:6d:24:57:88:ca: 41:b9:96:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNuoSdCGVginDrjRcoV3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYTZlOTZmY2E3YTI3ODNjYjk3MjFlYmI2MmRlMWI1MzZj MTYzYTkwHhcNMjUxMjA2MDEwMDQwWhcNMjUxMjA3MDEwMDQwWjAzMTEwLwYDVQQD EyhhZjM3MTA2ZmFjODFjYzRjMGU0MTMzNGI4YWIyNDJlODc0MTc0ZDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKArqePgvPPv4Cqd3lke4R1FbH/t ePet5asFKyv5+5fQb1FzSIy1sMz4D2ZtcCEYN/hPB/xFRv+AHf7QuIlGTCwLzc1b 8yb9eXWca2PpgMGoaLGeQU9/ktrQisvgNqnIM3hGvc3ti4dcc2gtEBfz1ImqtQ8V 0OXiE8MtheKz4sH+S8OX6UBAJHv9YPkoV2T6kviTFtCtrCFCQAX+QUMwSm8dGAMv 4OVh1YNX9qxqkm1zQ4AhHKF4Fc+U2djhGeeOLmoJ8e6LnVOuA0nw4zIauhh8S5/c +3UaZ05FTPJKIW6N30HrTKk8qDkHj4vSSgFOO3bjPhPT0dG3lPFdGEJFswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK83EG+sgcxMDkEzS4qyQuh0F00sMB8GA1UdIwQY MBaAFL+m6W/KeieDy5ch67Yt4bU2wWOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjZicGI4cDZKNFBMbHlIcnRpM2h0VGJCWTZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84NTZlYTQtZGU1YS00ZjExLTgyMjgt ODdiZjZmZGJlMTkzLzEvdjZicGI4cDZKNFBMbHlIcnRpM2h0VGJCWTZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84NTZlYTQtZGU1YS00ZjExLTgyMjgtODdiZjZmZGJlMTkz LzEvdjZicGI4cDZKNFBMbHlIcnRpM2h0VGJCWTZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLA0wX0x LbarvIK9WjeoSOLMIBmQLrJ+9SwHN1yIv8qNCORdczyN7NGD7EwwU6kCqvFW2s+w XM0WuRqtp4ctbS8AEI+r3QTdfDnT26//gaDmJ/aN433UCej99NDwO9DwjXz2rV7I naPXA/pv5SpDhw8GMOCdYNuSmQx7cWogY7ltWtygflWbD++hUiZ5Jc9diVahnzgH GvfUGyw1bQ0ZReQlkbvWjoPm1gFk+aMRMmhtL6auT0+zHqem2l5q3ZsUBH+MRkUu zTXz2zhJxqpGU5KOmIfQoTwC+X2QPO/c3nfBC4DlgpMcs/G6/+SoxyceuLMycSuV gG0kV4jKQbmWlA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:52 2025 by rpki-client