This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft File: xn6d6Ogmze4OZfYiWDQ0uBzze60.mft (raw, json) Hash identifier: cvMolYQjleT9EBIaonJoO7jCQ/ASV+oUnM28qp0DcNA= Subject key identifier: 38:C2:C9:1C:83:EA:11:EB:83:05:D4:63:7C:35:98:40:BE:23:48:03 Authority key identifier: C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD Certificate issuer: /CN=c67e9de8e826cdee0e65f622583434b81cf37bad Certificate serial: 019AFBB13E9024D60A3F24BDDF02C34E2A5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft Manifest number: 16F8 Signing time: Mon 08 Dec 2025 02:01:28 +0000 Manifest this update: Mon 08 Dec 2025 02:01:28 +0000 Manifest next update: Tue 09 Dec 2025 02:01:28 +0000 Files and hashes: 1: KBNP_aX1ZMDHHxXviik6zRQbRlU.roa (hash: ernLTnCJ2sF6KL9+yko9XJyEyeHNKyi2S9R/ACM8LHw=) 2: xn6d6Ogmze4OZfYiWDQ0uBzze60.crl (hash: IQgA0vpfJjVG49COv2WbSD7c0hZDFsoK08JdsuAIp3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:b1:3e:90:24:d6:0a:3f:24:bd:df:02:c3:4e:2a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c67e9de8e826cdee0e65f622583434b81cf37bad Validity Not Before: Dec 8 02:01:28 2025 GMT Not After : Dec 9 02:01:28 2025 GMT Subject: CN=38c2c91c83ea11eb8305d4637c359840be234803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:b9:5a:04:c6:68:f5:de:ac:07:a8:97:93: f1:ba:0c:5b:a4:56:d8:26:3d:07:68:f2:cd:4e:21: 00:64:bb:e0:b0:77:22:df:9b:23:7f:11:13:e4:3a: 1f:ec:94:2d:34:c2:96:79:d8:f6:48:a6:22:26:31: 86:c4:79:56:c3:e7:98:4c:b9:ae:b0:eb:a1:c0:bc: ec:75:85:fc:8f:ff:43:98:dd:b8:c1:59:65:d7:0f: e3:f5:2b:2e:a7:03:46:66:e8:e2:ba:85:85:39:07: 40:21:2e:09:fe:7d:bd:25:43:19:f2:aa:8f:55:41: 6d:7e:e9:e6:93:61:39:1e:ab:f2:94:1a:9e:c9:5d: 3d:b0:cf:74:20:9c:3a:eb:b9:f0:27:8f:55:d2:8f: 43:54:58:73:f2:7c:34:ca:1d:53:12:d6:28:da:ea: 79:e8:5e:c2:3c:84:c8:c0:2b:ac:ee:66:55:09:58: 04:50:f8:e7:e9:03:44:d3:dc:6e:00:59:35:60:cb: ea:fb:46:39:ae:9e:09:4a:ee:fa:5b:ac:46:73:d3: db:89:21:81:a3:00:d9:e1:85:a6:61:91:e7:8f:72: 26:10:5a:03:70:9f:05:15:f9:71:ed:0f:49:9d:03: 6d:bc:80:e9:b3:84:48:29:8b:28:7f:8b:3b:a6:2e: e1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C2:C9:1C:83:EA:11:EB:83:05:D4:63:7C:35:98:40:BE:23:48:03 X509v3 Authority Key Identifier: keyid:C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:70:11:93:9a:56:cd:c1:f3:af:74:f1:0d:3a:84:18:de:cc: 92:2a:49:ce:3e:ee:47:04:bc:ed:dc:ec:23:f4:c4:10:b6:72: 10:2c:d1:af:04:00:c5:a9:65:29:d7:ac:10:33:17:b9:bf:7e: e2:20:51:09:17:79:b6:0f:bb:fd:60:b3:66:d6:6f:95:91:c7: 6f:40:c5:02:a7:2a:05:6c:12:c7:df:a4:98:72:d8:71:06:f8: 5c:38:6c:5c:0c:1a:a4:87:2e:2a:df:72:ab:4a:17:1e:90:66: 4d:41:71:8d:41:c9:33:f1:cb:44:36:a0:40:68:07:bf:b8:39: 61:76:8b:b2:4c:ff:4d:1c:58:07:27:00:74:0e:81:f0:00:51: 40:63:67:5d:a3:6c:b9:f0:0e:ef:93:25:08:5b:0b:43:df:eb: 2a:62:04:66:10:18:2e:b9:cb:f6:aa:b3:a5:c2:20:a2:6d:a2: 18:f2:12:69:c5:de:48:73:2e:b1:79:41:e2:b2:72:df:08:53: 0b:7a:37:dd:63:2d:87:06:ad:ee:60:a3:bd:ca:50:80:87:c8: d7:f0:03:d9:7f:eb:b6:c4:5a:b3:6d:95:9d:69:82:65:a0:32: 29:db:13:30:20:d3:55:24:58:a3:b0:aa:84:cf:11:e0:0b:97: f2:2e:e6:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7sT6QJNYKPyS93wLDTipcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2N2U5ZGU4ZTgyNmNkZWUwZTY1ZjYyMjU4MzQzNGI4MWNm MzdiYWQwHhcNMjUxMjA4MDIwMTI4WhcNMjUxMjA5MDIwMTI4WjAzMTEwLwYDVQQD EygzOGMyYzkxYzgzZWExMWViODMwNWQ0NjM3YzM1OTg0MGJlMjM0ODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKW5WgTGaPXerAeol5PxugxbpFbY Jj0HaPLNTiEAZLvgsHci35sjfxET5Dof7JQtNMKWedj2SKYiJjGGxHlWw+eYTLmu sOuhwLzsdYX8j/9DmN24wVll1w/j9SsupwNGZujiuoWFOQdAIS4J/n29JUMZ8qqP VUFtfunmk2E5HqvylBqeyV09sM90IJw667nwJ49V0o9DVFhz8nw0yh1TEtYo2up5 6F7CPITIwCus7mZVCVgEUPjn6QNE09xuAFk1YMvq+0Y5rp4JSu76W6xGc9PbiSGB owDZ4YWmYZHnj3ImEFoDcJ8FFflx7Q9JnQNtvIDps4RIKYsof4s7pi7hBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjCyRyD6hHrgwXUY3w1mEC+I0gDMB8GA1UdIwQY MBaAFMZ+nejoJs3uDmX2Ilg0NLgc83utMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG42ZDZPZ216ZTRPWmZZaVdEUTB1Qnp6ZTYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wYjBjMWMtZTVlYS00NTU4LWJiZGQt MTk5ZTA1NmE2ODAwLzEveG42ZDZPZ216ZTRPWmZZaVdEUTB1Qnp6ZTYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8wYjBjMWMtZTVlYS00NTU4LWJiZGQtMTk5ZTA1NmE2ODAw LzEveG42ZDZPZ216ZTRPWmZZaVdEUTB1Qnp6ZTYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtHARk5pW zcHzr3TxDTqEGN7MkipJzj7uRwS87dzsI/TEELZyECzRrwQAxallKdesEDMXub9+ 4iBRCRd5tg+7/WCzZtZvlZHHb0DFAqcqBWwSx9+kmHLYcQb4XDhsXAwapIcuKt9y q0oXHpBmTUFxjUHJM/HLRDagQGgHv7g5YXaLskz/TRxYBycAdA6B8ABRQGNnXaNs ufAO75MlCFsLQ9/rKmIEZhAYLrnL9qqzpcIgom2iGPISacXeSHMusXlB4rJy3whT C3o33WMthwat7mCjvcpQgIfI1/AD2X/rtsRas22VnWmCZaAyKdsTMCDTVSRYo7Cq hM8R4AuX8i7mMA== -----END CERTIFICATE-----Generated at Mon Dec 8 09:37:17 2025 by rpki-client