This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft File: A6bcLyZo69z4a2wCWKgYfl984nA.mft (raw, json) Hash identifier: 34R8LTx9OSok0jnE/DI2hK85q054Q2ZG8BpqtFOjha4= Subject key identifier: 99:44:C9:30:D8:45:84:30:CD:02:2A:11:59:CA:26:AC:76:38:25:BE Authority key identifier: 03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70 Certificate issuer: /CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270 Certificate serial: 019AF1D2476043A35C8EA17D8E1C46D39AFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft Manifest number: 084E Signing time: Sat 06 Dec 2025 04:01:21 +0000 Manifest this update: Sat 06 Dec 2025 04:01:21 +0000 Manifest next update: Sun 07 Dec 2025 04:01:21 +0000 Files and hashes: 1: A6bcLyZo69z4a2wCWKgYfl984nA.crl (hash: KPftUZZZSivMwp/hsaOxEJvb05YKoXPnr06gPEpNr4c=) 2: dd8av2mxTwjOvzgQCyuc1wPNBmI.roa (hash: jwwVY2pCMQyTKSG87HTCJ5bltMafN2RGopv4GJtWPmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:47:60:43:a3:5c:8e:a1:7d:8e:1c:46:d3:9a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270 Validity Not Before: Dec 6 04:01:21 2025 GMT Not After : Dec 7 04:01:21 2025 GMT Subject: CN=9944c930d8458430cd022a1159ca26ac763825be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:27:21:72:03:07:aa:d8:19:24:48:20:26:96: 99:bd:e6:e1:11:1e:28:f1:d7:39:07:f6:67:15:a2: 09:5f:04:24:f9:ee:ac:bf:04:92:48:fd:a9:71:da: ea:9a:ef:d2:ba:cb:74:59:3d:b4:21:b5:4f:f5:bf: 47:23:b6:a7:ee:72:69:95:a7:67:ff:51:8d:17:25: 56:7a:4a:e8:19:ec:1f:d1:ef:2a:b0:bb:ba:27:65: 90:f6:0a:9a:32:e4:5a:0f:5a:e8:32:5d:18:2b:08: f6:dc:b9:95:85:76:d7:ee:dd:f4:62:27:33:a9:3c: 7f:10:31:92:2f:3c:33:8b:26:3f:4c:38:d3:0c:18: 44:d0:87:70:26:58:ad:9f:11:88:e6:e8:6b:34:cd: 9c:4c:3a:e8:cb:26:8e:1c:b3:b1:fc:12:0c:61:c4: 4d:12:4e:1e:7b:ef:b6:e9:23:60:72:9b:82:bc:c1: df:ce:f5:f4:68:3e:ce:82:d5:2c:0a:ca:48:1f:8d: b9:87:09:0e:22:b7:f4:7a:74:0b:88:96:05:ef:3f: d5:9f:c6:24:cf:9c:97:a6:83:87:74:a3:71:35:d5: 01:7d:7c:9d:c1:bc:1d:84:05:19:d1:b3:f1:0c:56: c1:1f:4c:38:4a:1f:31:f2:d4:9a:2f:e1:a7:cd:b2: eb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:44:C9:30:D8:45:84:30:CD:02:2A:11:59:CA:26:AC:76:38:25:BE X509v3 Authority Key Identifier: keyid:03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:81:47:a1:b5:11:31:f1:a2:4e:07:29:ed:aa:1d:8a:63:1e: fb:19:0b:c1:c9:80:66:2c:75:53:87:c4:ee:5b:65:e2:7b:ea: fb:0b:83:ff:7f:0e:a8:54:3c:ed:ec:49:30:b9:5f:67:2f:f1: ee:2a:87:14:76:06:ff:40:d3:6f:ad:a3:ee:fc:78:44:8f:fc: 3d:ed:d9:08:d4:cf:ab:dd:2d:a1:cd:fa:5f:f5:9e:b2:3d:7d: 1d:c0:e9:0e:0c:5a:ec:82:d9:28:01:4d:c9:55:d9:09:25:ea: db:bd:09:16:59:01:0a:f2:66:04:13:b4:3c:bc:dc:09:17:e8: 76:42:06:66:3d:04:d3:9d:8a:43:92:86:79:00:28:df:22:1d: 4c:12:86:d6:ad:67:d0:0f:b0:e0:6b:55:e5:93:26:f6:77:42: 2e:32:9c:ed:14:fd:6f:c1:45:bc:06:f2:a5:b0:ac:cb:d8:4d: 0c:cd:12:7f:5e:38:20:3b:b0:2a:f1:b5:95:89:71:e6:b6:e4: fe:27:80:2c:09:ae:0d:a6:6b:99:7a:17:71:91:06:e8:b3:5f: 2b:a6:17:4f:24:e6:45:5e:7a:97:75:30:b3:cc:71:af:51:87: f9:d5:76:98:fd:7f:a1:ce:76:fb:fa:0f:74:91:0c:a1:d4:85: 17:ed:b0:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kdgQ6NcjqF9jhxG05r/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYTZkYzJmMjY2OGViZGNmODZiNmMwMjU4YTgxODdlNWY3 Y2UyNzAwHhcNMjUxMjA2MDQwMTIxWhcNMjUxMjA3MDQwMTIxWjAzMTEwLwYDVQQD Eyg5OTQ0YzkzMGQ4NDU4NDMwY2QwMjJhMTE1OWNhMjZhYzc2MzgyNWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnychcgMHqtgZJEggJpaZvebhER4o 8dc5B/ZnFaIJXwQk+e6svwSSSP2pcdrqmu/Sust0WT20IbVP9b9HI7an7nJpladn /1GNFyVWekroGewf0e8qsLu6J2WQ9gqaMuRaD1roMl0YKwj23LmVhXbX7t30Yicz qTx/EDGSLzwziyY/TDjTDBhE0IdwJlitnxGI5uhrNM2cTDroyyaOHLOx/BIMYcRN Ek4ee++26SNgcpuCvMHfzvX0aD7OgtUsCspIH425hwkOIrf0enQLiJYF7z/Vn8Yk z5yXpoOHdKNxNdUBfXydwbwdhAUZ0bPxDFbBH0w4Sh8x8tSaL+GnzbLrtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlEyTDYRYQwzQIqEVnKJqx2OCW+MB8GA1UdIwQY MBaAFAOm3C8maOvc+GtsAlioGH5ffOJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTZiY0x5Wm82OXo0YTJ3Q1dLZ1lmbDk4NG5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yOGIzMDMtNDdhNS00YTkyLWIwMmUt ZWJkMGMzZWU0NGFlLzEvQTZiY0x5Wm82OXo0YTJ3Q1dLZ1lmbDk4NG5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yOGIzMDMtNDdhNS00YTkyLWIwMmUtZWJkMGMzZWU0NGFl LzEvQTZiY0x5Wm82OXo0YTJ3Q1dLZ1lmbDk4NG5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYFHobUR MfGiTgcp7aodimMe+xkLwcmAZix1U4fE7ltl4nvq+wuD/38OqFQ87exJMLlfZy/x 7iqHFHYG/0DTb62j7vx4RI/8Pe3ZCNTPq90toc36X/Wesj19HcDpDgxa7ILZKAFN yVXZCSXq270JFlkBCvJmBBO0PLzcCRfodkIGZj0E052KQ5KGeQAo3yIdTBKG1q1n 0A+w4GtV5ZMm9ndCLjKc7RT9b8FFvAbypbCsy9hNDM0Sf144IDuwKvG1lYlx5rbk /ieALAmuDaZrmXoXcZEG6LNfK6YXTyTmRV56l3Uws8xxr1GH+dV2mP1/oc52+/oP dJEModSFF+2w8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:19 2025 by rpki-client