This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft File: 06xQ4EWCKCMXbkeDLeyPIRt08BM.mft (raw, json) Hash identifier: VQ2i5iF5PiOg7yCkBNBqCssm9lO8GlDGwEVV6yT6fpw= Subject key identifier: 7F:7A:45:B4:92:1D:E4:DC:3B:82:48:66:67:93:7B:C5:30:46:C8:90 Authority key identifier: D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13 Certificate issuer: /CN=d3ac50e045822823176e47832dec8f211b74f013 Certificate serial: 019AF31CFEEAAE39D97073D170BD0099EEE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft Manifest number: 0420 Signing time: Sat 06 Dec 2025 10:02:34 +0000 Manifest this update: Sat 06 Dec 2025 10:02:34 +0000 Manifest next update: Sun 07 Dec 2025 10:02:34 +0000 Files and hashes: 1: 06xQ4EWCKCMXbkeDLeyPIRt08BM.crl (hash: l8Myfku/TnUQ7KDXIM5aLhcA8UiVBkgwv7HinTdoos0=) 2: J7at31yuwr6xPDnvAJre3wzoR9o.roa (hash: RbmaLbG1z0L4l1ON8n9W5icIKF2KnmAyzavN38bNAhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:fe:ea:ae:39:d9:70:73:d1:70:bd:00:99:ee:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3ac50e045822823176e47832dec8f211b74f013 Validity Not Before: Dec 6 10:02:34 2025 GMT Not After : Dec 7 10:02:34 2025 GMT Subject: CN=7f7a45b4921de4dc3b82486667937bc53046c890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:de:fc:4c:9d:6b:8c:ac:d5:02:cc:29:e6:ec: 29:98:f8:65:d4:fb:4b:89:43:1b:36:de:ad:c8:51: 61:3b:ac:45:09:34:6f:b5:1d:d3:a7:dd:b5:04:4a: 7c:1a:77:53:59:c6:1e:03:b0:21:49:40:80:f8:4f: d2:4e:51:ad:27:a8:a6:4f:04:4f:77:77:67:19:70: d1:49:aa:f7:5b:a0:56:91:cf:02:5a:5f:c4:bd:42: 6b:5c:8c:c7:38:e0:2a:47:91:6c:64:48:c9:dc:bf: f8:8e:04:a2:4c:a0:9d:58:47:99:34:7b:c2:ed:64: 9f:2d:5c:70:9f:b0:6b:7f:73:3b:ed:b9:a9:93:c1: c5:57:47:9d:2d:04:5b:fd:65:bc:78:a4:88:db:5b: ea:43:f4:7c:27:08:08:ba:02:08:c3:ba:fc:b5:2e: 9d:97:af:b7:9a:3e:46:62:ae:39:11:5c:ba:30:ba: e6:d2:dd:33:8d:8f:74:b5:01:a0:82:4e:4e:88:f3: 82:01:c0:c1:dc:8e:88:2e:90:98:c6:95:74:82:3c: 18:53:03:ee:d9:0b:c5:64:f7:53:ec:10:7c:e0:81: 18:4e:df:04:b7:7e:27:49:54:9e:a4:eb:e3:70:70: 24:61:72:d1:38:62:8e:8a:a2:9f:22:aa:4d:62:00: 63:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7A:45:B4:92:1D:E4:DC:3B:82:48:66:67:93:7B:C5:30:46:C8:90 X509v3 Authority Key Identifier: keyid:D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:9b:c7:bd:d1:16:0a:e4:85:5c:65:9b:b6:1f:76:ee:26:1c: 12:0b:3b:cc:df:d0:dc:0a:4e:2a:69:c8:30:b4:00:d9:8e:6d: f4:b1:30:60:fa:75:7a:b6:5d:e0:de:fb:fe:da:02:24:37:15: e2:49:12:d2:86:55:d8:3c:36:00:22:59:ff:eb:12:83:0d:3c: 4f:f1:08:d9:38:e4:33:1f:c9:d8:db:ab:78:cc:20:30:77:21: ab:c1:10:6e:42:6b:7b:31:e9:b0:e7:aa:75:7d:6b:92:12:6f: 3b:32:d9:2b:b3:c6:fd:80:fc:34:dc:b1:e5:53:5c:af:18:0b: eb:ed:79:0c:1a:c0:5e:f9:94:e0:d5:1c:f5:54:2c:4e:bf:b4: 18:98:e8:9e:eb:49:15:a9:77:6e:61:b6:f1:22:8d:f3:09:74: 0e:d7:20:c3:f9:b3:d3:f0:9d:c7:f6:a7:a0:33:a8:68:b3:cb: 96:63:33:21:33:86:9a:7b:0d:90:37:e4:75:b9:07:12:ed:98: 69:56:67:5b:d6:7c:dd:53:b3:df:4b:cb:52:58:e9:42:0e:46: e0:84:ce:5c:8d:3b:ae:f0:23:0f:c3:bc:59:85:70:f2:ab:3e: 46:2e:55:f1:5b:f1:31:f8:9e:4b:1a:10:38:d4:b4:44:d0:04: 5d:9c:e8:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHP7qrjnZcHPRcL0Ame7mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYWM1MGUwNDU4MjI4MjMxNzZlNDc4MzJkZWM4ZjIxMWI3 NGYwMTMwHhcNMjUxMjA2MTAwMjM0WhcNMjUxMjA3MTAwMjM0WjAzMTEwLwYDVQQD Eyg3ZjdhNDViNDkyMWRlNGRjM2I4MjQ4NjY2NzkzN2JjNTMwNDZjODkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0978TJ1rjKzVAswp5uwpmPhl1PtL iUMbNt6tyFFhO6xFCTRvtR3Tp921BEp8GndTWcYeA7AhSUCA+E/STlGtJ6imTwRP d3dnGXDRSar3W6BWkc8CWl/EvUJrXIzHOOAqR5FsZEjJ3L/4jgSiTKCdWEeZNHvC 7WSfLVxwn7Brf3M77bmpk8HFV0edLQRb/WW8eKSI21vqQ/R8JwgIugIIw7r8tS6d l6+3mj5GYq45EVy6MLrm0t0zjY90tQGggk5OiPOCAcDB3I6ILpCYxpV0gjwYUwPu 2QvFZPdT7BB84IEYTt8Et34nSVSepOvjcHAkYXLROGKOiqKfIqpNYgBjmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH96RbSSHeTcO4JIZmeTe8UwRsiQMB8GA1UdIwQY MBaAFNOsUOBFgigjF25Hgy3sjyEbdPATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDZ4UTRFV0NLQ01YYmtlRExleVBJUnQwOEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9mOTZjOWMtNzcyZC00YjA1LWE4OWUt NTQ4ZDMwMmNjZWRiLzEvMDZ4UTRFV0NLQ01YYmtlRExleVBJUnQwOEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9mOTZjOWMtNzcyZC00YjA1LWE4OWUtNTQ4ZDMwMmNjZWRi LzEvMDZ4UTRFV0NLQ01YYmtlRExleVBJUnQwOEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5vHvdEW CuSFXGWbth927iYcEgs7zN/Q3ApOKmnIMLQA2Y5t9LEwYPp1erZd4N77/toCJDcV 4kkS0oZV2Dw2ACJZ/+sSgw08T/EI2TjkMx/J2NureMwgMHchq8EQbkJrezHpsOeq dX1rkhJvOzLZK7PG/YD8NNyx5VNcrxgL6+15DBrAXvmU4NUc9VQsTr+0GJjonutJ Fal3bmG28SKN8wl0Dtcgw/mz0/Cdx/anoDOoaLPLlmMzITOGmnsNkDfkdbkHEu2Y aVZnW9Z83VOz30vLUljpQg5G4ITOXI07rvAjD8O8WYVw8qs+Ri5V8VvxMfieSxoQ ONS0RNAEXZzodg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:17:13 2025 by rpki-client