This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft File: b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft (raw, json) Hash identifier: XgkW1GEYIy53Nx8VilfYr6XI2ENlbdC7UTWqRw+D4do= Subject key identifier: 21:BD:CC:AB:40:EE:4B:5A:82:CF:F0:95:69:17:57:4E:5B:6D:5F:E9 Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB Certificate issuer: /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab Certificate serial: 019AF23F974DAE58DC4810C3DCAF2D5773C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft Manifest number: 03DE Signing time: Sat 06 Dec 2025 06:00:44 +0000 Manifest this update: Sat 06 Dec 2025 06:00:44 +0000 Manifest next update: Sun 07 Dec 2025 06:00:44 +0000 Files and hashes: 1: 2tQqGK4g82dy1c5SML4akqkLzQs.roa (hash: 0ihiDi+ydh24SGVwQxglY4r4t8f0Ij3xsuV5NeDNJgU=) 2: BrIhz2KH_vM4WIq2N53pV91cJ44.roa (hash: Ivk1ZUmiBrRHxNS6VomQNXE8a7n/HscwWAHYMVYyWow=) 3: I1LQw1CBlPzdRK1ZEvgFu8378uI.roa (hash: iIDM1s8e551CHIuxRBUaodgRmli45m1JLpfi8ps3uPQ=) 4: XayvmfzLwFIrnB6YR1N8a3QlP3g.roa (hash: yW+e4Wc1yic51HqaRnNHy8V0Min8R+kpxRu8CLP1al8=) 5: YbYIY0qTeSsp6g9hGcy8a1n63ZI.roa (hash: Gjz0NNqi1uea9ZdNKd1fYQPsBvHDVmsLfdpqjwRA4dc=) 6: b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl (hash: Exhd5KhtVPd28N8w3EP3gar2YLLx0O+BYRKIueJxrRk=) 7: jHePdwysK6kNDI3bSqmeF8Twv-g.roa (hash: 99KfjDJeuSZw+7rcAWv6j4zVImWkkOPG8GX+d82LmKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:97:4d:ae:58:dc:48:10:c3:dc:af:2d:57:73:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab Validity Not Before: Dec 6 06:00:44 2025 GMT Not After : Dec 7 06:00:44 2025 GMT Subject: CN=21bdccab40ee4b5a82cff0956917574e5b6d5fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:a9:0a:7a:36:5b:93:d2:9a:3d:a8:ac:4a: c2:86:88:92:0d:ef:94:c3:f4:cf:f3:23:22:eb:1f: 87:95:7e:ab:f7:b3:ca:b9:2a:63:b4:f6:b1:6b:29: 61:1b:9a:1e:de:91:65:b3:3b:7c:da:d8:71:ce:b0: 16:4a:6b:b3:17:c6:dd:00:d6:a8:f4:82:ed:86:98: 98:9d:b7:c5:7c:41:ec:9f:29:76:96:91:d0:11:45: e6:12:b1:f5:96:83:c2:ed:8c:ec:6e:d0:69:77:78: c6:3e:df:e7:93:90:39:40:60:46:b6:27:45:19:21: a3:f1:17:41:76:3a:ea:74:87:c2:64:23:12:98:90: f0:c2:ff:61:52:ef:f8:2f:b5:98:b9:2e:a6:b3:f3: 3b:11:33:6d:7f:fc:fe:d4:20:24:40:57:0c:9e:de: 06:52:8a:60:c0:e0:f5:d2:af:d1:02:f5:07:59:33: dc:af:79:ac:cb:3c:3e:48:2e:6b:77:63:99:b8:ba: 99:99:8e:08:c2:23:1f:41:a2:ce:d8:84:1d:9f:f7: 53:fa:bb:97:2c:b7:70:c1:8f:22:74:d1:0b:70:72: 80:14:4e:e9:fd:77:4d:53:bf:c5:bc:4a:17:67:78: bf:c5:49:e7:50:6a:32:f2:1b:f7:da:b8:7e:6b:5a: 24:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BD:CC:AB:40:EE:4B:5A:82:CF:F0:95:69:17:57:4E:5B:6D:5F:E9 X509v3 Authority Key Identifier: keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f1:ec:42:41:84:72:5b:0b:b7:35:40:50:f4:ff:91:19:81: 40:de:6b:a6:02:9a:fd:82:0e:e9:38:c4:6d:91:e8:d0:5a:27: bd:39:0c:21:de:8c:3e:0f:f9:0c:43:22:d7:53:ca:9a:5d:99: 90:bc:6a:cd:0c:d2:0c:84:5f:b8:8f:98:8c:82:67:75:52:52: a7:4d:04:f4:fb:48:c2:49:ac:0c:32:69:f3:28:41:48:28:6a: 02:3c:17:40:63:6c:79:02:27:4f:4d:1a:ed:04:4b:2a:c1:ab: 79:2f:0e:38:6c:3a:59:28:ac:1f:20:89:f1:ee:60:8f:a7:f6: 64:79:d0:d9:06:a0:bc:9a:96:2d:5b:ca:b8:70:ce:8e:9c:cd: 55:ee:49:dc:e9:d4:69:08:c2:89:22:77:01:df:15:17:ba:6f: a1:da:df:d1:7e:94:c0:df:48:81:48:7e:c4:69:4b:d7:ce:41: 60:e7:83:74:60:67:f5:64:0a:5a:2c:b0:a2:c9:37:19:df:b4: 42:50:18:d8:8a:72:36:12:82:e0:0d:c1:3a:75:03:d8:68:9f: 3a:1d:57:36:47:78:f4:2e:d3:2f:bc:33:1a:07:ef:5d:f6:7d: 8d:60:bf:82:56:8d:86:bb:8b:f4:16:9e:0d:8c:80:6a:ab:dc: 27:b4:66:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5dNrljcSBDD3K8tV3PJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYTY0YTY0N2JkMmE1NTU3ZjcwZjY3NmFkY2M3NjkwNGZi ODcyYWIwHhcNMjUxMjA2MDYwMDQ0WhcNMjUxMjA3MDYwMDQ0WjAzMTEwLwYDVQQD EygyMWJkY2NhYjQwZWU0YjVhODJjZmYwOTU2OTE3NTc0ZTViNmQ1ZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVSpCno2W5PSmj2orErChoiSDe+U w/TP8yMi6x+HlX6r97PKuSpjtPaxaylhG5oe3pFlszt82thxzrAWSmuzF8bdANao 9ILthpiYnbfFfEHsnyl2lpHQEUXmErH1loPC7YzsbtBpd3jGPt/nk5A5QGBGtidF GSGj8RdBdjrqdIfCZCMSmJDwwv9hUu/4L7WYuS6ms/M7ETNtf/z+1CAkQFcMnt4G UopgwOD10q/RAvUHWTPcr3msyzw+SC5rd2OZuLqZmY4IwiMfQaLO2IQdn/dT+ruX LLdwwY8idNELcHKAFE7p/XdNU7/FvEoXZ3i/xUnnUGoy8hv32rh+a1okhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCG9zKtA7ktags/wlWkXV05bbV/pMB8GA1UdIwQY MBaAFG+mSmR70qVVf3D2dq3MdpBPuHKrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZaS1pIdlNwVlZfY1BaMnJjeDJrRS00Y3FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yNThkYWUtNTRmYS00YTMzLWExOWQt ZTkxYjNhYmQxZmU4LzEvYjZaS1pIdlNwVlZfY1BaMnJjeDJrRS00Y3FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yNThkYWUtNTRmYS00YTMzLWExOWQtZTkxYjNhYmQxZmU4 LzEvYjZaS1pIdlNwVlZfY1BaMnJjeDJrRS00Y3FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfHsQkGE clsLtzVAUPT/kRmBQN5rpgKa/YIO6TjEbZHo0FonvTkMId6MPg/5DEMi11PKml2Z kLxqzQzSDIRfuI+YjIJndVJSp00E9PtIwkmsDDJp8yhBSChqAjwXQGNseQInT00a 7QRLKsGreS8OOGw6WSisHyCJ8e5gj6f2ZHnQ2QagvJqWLVvKuHDOjpzNVe5J3OnU aQjCiSJ3Ad8VF7pvodrf0X6UwN9IgUh+xGlL185BYOeDdGBn9WQKWiywosk3Gd+0 QlAY2IpyNhKC4A3BOnUD2GifOh1XNkd49C7TL7wzGgfvXfZ9jWC/glaNhruL9Bae DYyAaqvcJ7RmRw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:51 2025 by rpki-client