This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft File: 06xQ4EWCKCMXbkeDLeyPIRt08BM.mft (raw, json) Hash identifier: j9u5YhQdDhYynaEw7o1UxMMkesajGaskrkgGlpn7eyU= Subject key identifier: 4D:C0:40:86:49:2F:2C:8F:C0:AC:16:30:45:FD:91:A7:62:6A:31:C2 Authority key identifier: D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13 Certificate issuer: /CN=d3ac50e045822823176e47832dec8f211b74f013 Certificate serial: 019B2D0C96D7FA05FF48FE1588BD8CA212FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft Manifest number: 043E Signing time: Wed 17 Dec 2025 16:02:38 +0000 Manifest this update: Wed 17 Dec 2025 16:02:38 +0000 Manifest next update: Thu 18 Dec 2025 16:02:38 +0000 Files and hashes: 1: 06xQ4EWCKCMXbkeDLeyPIRt08BM.crl (hash: C3IDj1eHFpHWx9HVhfsE0E2Wv8oe7IyteJikhEWsBeY=) 2: J7at31yuwr6xPDnvAJre3wzoR9o.roa (hash: RbmaLbG1z0L4l1ON8n9W5icIKF2KnmAyzavN38bNAhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:96:d7:fa:05:ff:48:fe:15:88:bd:8c:a2:12:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3ac50e045822823176e47832dec8f211b74f013 Validity Not Before: Dec 17 16:02:38 2025 GMT Not After : Dec 18 16:02:38 2025 GMT Subject: CN=4dc04086492f2c8fc0ac163045fd91a7626a31c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ce:9b:21:03:05:79:ee:38:de:5c:75:b1:f6: 93:85:e3:8c:c0:ed:df:d4:37:e0:b8:08:fb:f0:b1: e1:a6:c5:88:b6:c0:74:a2:2a:64:f3:5e:eb:99:5d: 48:99:27:51:9a:49:a1:8a:29:94:c9:82:7b:92:f8: 3b:60:12:3a:70:b0:90:ef:68:1e:9c:c9:c4:05:bb: 51:55:9a:99:f3:b5:4a:80:70:ae:65:ee:36:a6:6d: 8e:9a:24:65:f7:75:a1:c4:df:86:fd:2b:0f:69:c0: 02:49:11:4f:5a:10:51:61:20:32:06:a4:1e:ec:e6: 8a:cd:18:1c:50:bc:b1:b9:5c:53:fc:db:8d:f9:fd: 88:f0:e3:e3:0d:69:c0:f4:24:ee:0d:43:e1:98:ee: d2:da:bc:fa:6f:16:a6:aa:05:9b:c8:e0:34:a1:75: 89:fb:32:35:93:92:1c:53:b8:61:00:11:9c:3b:15: 16:39:6b:b2:21:91:51:de:a7:69:35:e8:09:1f:48: 73:a9:63:a8:a3:3d:6c:28:9d:50:6a:f1:e8:11:50: da:9b:55:fa:c8:46:0c:44:2b:82:3e:b4:00:31:d3: a9:ef:6b:4a:7c:ca:98:79:a2:69:ca:36:d9:e6:f5: cc:36:36:ce:c5:16:a3:14:4f:a5:ff:b5:31:d4:1c: 99:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C0:40:86:49:2F:2C:8F:C0:AC:16:30:45:FD:91:A7:62:6A:31:C2 X509v3 Authority Key Identifier: keyid:D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:73:d8:59:72:bd:14:47:19:75:04:76:6f:d3:74:77:da:57: e6:9e:1f:b0:b4:e1:90:bd:96:f8:ef:ab:a4:4a:31:ba:81:cd: d8:2c:f3:cb:d7:e3:1b:0d:ac:0c:8c:12:8f:68:35:80:b3:05: f4:19:c7:f8:33:98:1b:f2:02:c6:3c:15:f8:e6:a5:b7:42:f9: 54:ac:a7:56:6b:d8:94:ca:6f:75:e6:b8:47:a8:9e:35:98:6d: 9f:f5:33:3f:06:71:36:d3:0f:0b:b5:45:65:2b:3a:5b:65:4d: f7:1c:51:6a:e4:51:3a:3b:77:56:7c:27:c9:ac:0d:df:d7:f2: 6a:03:79:df:48:dd:4d:66:19:1f:54:d1:ee:c2:e5:5e:cc:76: 3e:15:be:a1:4c:56:06:65:cc:5b:ed:67:f8:2b:30:b1:44:ed: 0a:72:98:8e:61:63:fd:db:a0:7f:48:68:e5:24:01:6a:cb:46: c2:59:56:cb:ca:b3:04:dc:26:2c:2b:9f:2f:9a:70:18:b2:88: cb:4b:eb:ee:4e:74:57:dd:5b:ca:9b:82:a0:c0:34:a5:9c:11: 32:92:3a:9c:00:f8:09:9b:ec:01:b4:c2:9a:0e:fc:32:a9:65: cb:50:30:0f:90:9b:68:6a:27:35:29:67:3c:ac:b8:f9:4c:95: a2:cb:41:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDJbX+gX/SP4ViL2MohL6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYWM1MGUwNDU4MjI4MjMxNzZlNDc4MzJkZWM4ZjIxMWI3 NGYwMTMwHhcNMjUxMjE3MTYwMjM4WhcNMjUxMjE4MTYwMjM4WjAzMTEwLwYDVQQD Eyg0ZGMwNDA4NjQ5MmYyYzhmYzBhYzE2MzA0NWZkOTFhNzYyNmEzMWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM6bIQMFee443lx1sfaTheOMwO3f 1DfguAj78LHhpsWItsB0oipk817rmV1ImSdRmkmhiimUyYJ7kvg7YBI6cLCQ72ge nMnEBbtRVZqZ87VKgHCuZe42pm2OmiRl93WhxN+G/SsPacACSRFPWhBRYSAyBqQe 7OaKzRgcULyxuVxT/NuN+f2I8OPjDWnA9CTuDUPhmO7S2rz6bxamqgWbyOA0oXWJ +zI1k5IcU7hhABGcOxUWOWuyIZFR3qdpNegJH0hzqWOooz1sKJ1QavHoEVDam1X6 yEYMRCuCPrQAMdOp72tKfMqYeaJpyjbZ5vXMNjbOxRajFE+l/7Ux1ByZCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3AQIZJLyyPwKwWMEX9kadiajHCMB8GA1UdIwQY MBaAFNOsUOBFgigjF25Hgy3sjyEbdPATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDZ4UTRFV0NLQ01YYmtlRExleVBJUnQwOEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9mOTZjOWMtNzcyZC00YjA1LWE4OWUt NTQ4ZDMwMmNjZWRiLzEvMDZ4UTRFV0NLQ01YYmtlRExleVBJUnQwOEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9mOTZjOWMtNzcyZC00YjA1LWE4OWUtNTQ4ZDMwMmNjZWRi LzEvMDZ4UTRFV0NLQ01YYmtlRExleVBJUnQwOEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHPYWXK9 FEcZdQR2b9N0d9pX5p4fsLThkL2W+O+rpEoxuoHN2Czzy9fjGw2sDIwSj2g1gLMF 9BnH+DOYG/ICxjwV+Oalt0L5VKynVmvYlMpvdea4R6ieNZhtn/UzPwZxNtMPC7VF ZSs6W2VN9xxRauRROjt3VnwnyawN39fyagN530jdTWYZH1TR7sLlXsx2PhW+oUxW BmXMW+1n+CswsUTtCnKYjmFj/dugf0ho5SQBastGwllWy8qzBNwmLCufL5pwGLKI y0vr7k50V91bypuCoMA0pZwRMpI6nAD4CZvsAbTCmg78Mqlly1AwD5CbaGonNSln PKy4+UyVostBNA== -----END CERTIFICATE-----Generated at Wed Dec 17 17:46:44 2025 by rpki-client