This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft File: A6QSK0og8cymB4qR2ai7HAP7n80.mft (raw, json) Hash identifier: ncsvSwQn60rYrV5r9iWLPzUS7Kyx3ksBmDQH4L/dDRw= Subject key identifier: 63:8F:A6:E4:29:0B:8F:C4:13:33:23:5F:C1:6D:7A:FA:FD:22:BA:02 Authority key identifier: 03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD Certificate issuer: /CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd Certificate serial: 019AF5AED5ED1A5BCEBFF32B477F821777DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 22:01:07 +0000 Manifest this update: Sat 06 Dec 2025 22:01:07 +0000 Manifest next update: Sun 07 Dec 2025 22:01:07 +0000 Files and hashes: 1: A6QSK0og8cymB4qR2ai7HAP7n80.crl (hash: n42tJGsxS00Kd3w4X4y8RtFUiXZHSM/CtPDPZAIuFyI=) 2: j-WIU7L2E8S8heDN9-EX8jcj-qg.roa (hash: 5/cHSfnAktTRmViDSglDJdChSdXmQUsSiRJP6avGvpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:d5:ed:1a:5b:ce:bf:f3:2b:47:7f:82:17:77:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd Validity Not Before: Dec 6 22:01:07 2025 GMT Not After : Dec 7 22:01:07 2025 GMT Subject: CN=638fa6e4290b8fc41333235fc16d7afafd22ba02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:31:51:68:5d:c2:5f:55:ae:e4:07:24:16:c2: 9d:0a:77:9f:70:93:9d:7c:00:86:c3:5a:55:bf:e4: 01:b7:91:6f:c4:8d:db:7f:71:b8:04:70:83:10:88: 40:2f:94:cf:74:7b:80:55:a6:e6:2f:23:07:34:92: 67:0f:ca:d0:a2:39:6f:dc:a3:9d:2b:71:e3:e8:97: 1b:f5:c8:07:cb:09:a1:82:22:ca:54:85:cd:e1:22: 3a:af:02:9a:9c:b6:53:5a:0d:d6:f3:eb:f3:66:b6: d0:c9:5b:1e:4c:55:c8:d8:a6:a0:08:ce:ff:e1:f4: da:6f:55:51:80:07:7f:70:6f:8c:a8:8f:c0:ff:a4: 37:48:0c:f8:d3:a8:27:dc:8f:15:2e:61:53:dd:39: d3:e8:f8:8a:9e:67:56:18:ec:d4:54:87:07:a9:60: 16:9a:d2:4f:3c:d9:c5:6a:dc:32:27:50:b2:cd:e4: 9a:4c:84:0a:9e:78:2f:cc:20:b6:24:f3:0f:a6:e1: 6b:0d:87:00:e7:1d:7b:de:a0:28:3c:6d:65:24:27: f2:ba:e3:16:19:97:d4:4a:ab:7f:c9:a5:df:da:84: e4:f2:ec:51:c5:ae:6e:b8:73:23:b7:14:97:75:57: bf:bd:5d:b9:0e:db:76:c3:76:04:24:20:7b:0e:54: 2a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8F:A6:E4:29:0B:8F:C4:13:33:23:5F:C1:6D:7A:FA:FD:22:BA:02 X509v3 Authority Key Identifier: keyid:03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e7:1f:27:6d:cd:ca:6f:aa:1d:67:4b:49:a9:91:b0:74:40: c5:a4:24:d9:30:cd:24:1a:57:a3:99:ba:58:7f:db:cd:21:a2: 36:38:28:7a:ff:73:58:6a:90:a3:c3:d6:37:96:10:cf:3e:2d: f1:0e:72:85:17:db:54:1a:eb:3d:67:4f:21:6b:2d:6b:b6:50: e8:90:18:e1:72:d9:7c:45:e5:2f:4e:f2:ae:08:e8:00:bb:7e: 0f:b8:76:a1:9c:6e:b4:61:07:99:09:03:53:b5:0f:21:c0:69: b1:d4:b6:a0:d0:7d:37:f2:21:6b:03:77:37:57:50:9c:db:13: 25:1e:eb:3a:b6:a7:4e:00:7f:a8:b2:72:0f:a6:a0:09:d3:6a: 9d:7c:3e:ee:9a:7c:22:4d:2d:03:1c:bb:99:f1:a9:1a:31:09: 95:d4:a9:e6:ad:b9:4e:73:c8:dd:42:b4:51:03:c6:c1:17:bf: 0c:c5:a2:25:62:c6:18:4c:2d:bb:2f:9b:de:53:c8:0b:78:c9: 98:1b:23:3f:10:19:65:1a:7f:4a:63:e2:ad:33:c2:81:a6:1c: df:fa:e9:f7:78:ed:42:80:4a:a2:7e:2d:64:1e:7e:07:5d:2e: e9:42:ab:05:76:19:4d:d4:cb:87:75:1a:12:73:11:c3:ad:0d: 04:e8:b3:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rtXtGlvOv/MrR3+CF3ffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYTQxMjJiNGEyMGYxY2NhNjA3OGE5MWQ5YThiYjFjMDNm YjlmY2QwHhcNMjUxMjA2MjIwMTA3WhcNMjUxMjA3MjIwMTA3WjAzMTEwLwYDVQQD Eyg2MzhmYTZlNDI5MGI4ZmM0MTMzMzIzNWZjMTZkN2FmYWZkMjJiYTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DFRaF3CX1Wu5AckFsKdCnefcJOd fACGw1pVv+QBt5FvxI3bf3G4BHCDEIhAL5TPdHuAVabmLyMHNJJnD8rQojlv3KOd K3Hj6Jcb9cgHywmhgiLKVIXN4SI6rwKanLZTWg3W8+vzZrbQyVseTFXI2KagCM7/ 4fTab1VRgAd/cG+MqI/A/6Q3SAz406gn3I8VLmFT3TnT6PiKnmdWGOzUVIcHqWAW mtJPPNnFatwyJ1CyzeSaTIQKnngvzCC2JPMPpuFrDYcA5x173qAoPG1lJCfyuuMW GZfUSqt/yaXf2oTk8uxRxa5uuHMjtxSXdVe/vV25Dtt2w3YEJCB7DlQqbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOPpuQpC4/EEzMjX8Ftevr9IroCMB8GA1UdIwQY MBaAFAOkEitKIPHMpgeKkdmouxwD+5/NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTZRU0swb2c4Y3ltQjRxUjJhaTdIQVA3bjgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kYmMwNmMtYTYxMi00ZGIwLWE4NTYt Nzg3MjM4NDE1YjA4LzEvQTZRU0swb2c4Y3ltQjRxUjJhaTdIQVA3bjgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kYmMwNmMtYTYxMi00ZGIwLWE4NTYtNzg3MjM4NDE1YjA4 LzEvQTZRU0swb2c4Y3ltQjRxUjJhaTdIQVA3bjgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAecfJ23N ym+qHWdLSamRsHRAxaQk2TDNJBpXo5m6WH/bzSGiNjgoev9zWGqQo8PWN5YQzz4t 8Q5yhRfbVBrrPWdPIWsta7ZQ6JAY4XLZfEXlL07yrgjoALt+D7h2oZxutGEHmQkD U7UPIcBpsdS2oNB9N/IhawN3N1dQnNsTJR7rOranTgB/qLJyD6agCdNqnXw+7pp8 Ik0tAxy7mfGpGjEJldSp5q25TnPI3UK0UQPGwRe/DMWiJWLGGEwtuy+b3lPIC3jJ mBsjPxAZZRp/SmPirTPCgaYc3/rp93jtQoBKon4tZB5+B10u6UKrBXYZTdTLh3Ua EnMRw60NBOiz5w== -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:36 2025 by rpki-client