This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft File: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft (raw, json) Hash identifier: n810nG3VVdGq0sKF5u7tmdktONYo9gV9kf66U/2sJmo= Subject key identifier: C1:94:A1:FC:68:2A:BA:5C:A3:47:A0:32:3C:BF:C5:6F:0C:84:A6:D9 Authority key identifier: 6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65 Certificate issuer: /CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565 Certificate serial: 019B2C9D00B435FD15C7056280E862E89F88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft Manifest number: 0A47 Signing time: Wed 17 Dec 2025 14:00:45 +0000 Manifest this update: Wed 17 Dec 2025 14:00:45 +0000 Manifest next update: Thu 18 Dec 2025 14:00:45 +0000 Files and hashes: 1: KbkgC7W04AC2dfiCKLffjYIdfm0.roa (hash: b+1XnR1qClXgo0+h2XFqiEy+RpYXEzB0EWpEqBHm3rM=) 2: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl (hash: vwqqen4YioMJiM12AOZRVMSUpGJ4opecGR//X+YUAMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:00:b4:35:fd:15:c7:05:62:80:e8:62:e8:9f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565 Validity Not Before: Dec 17 14:00:45 2025 GMT Not After : Dec 18 14:00:45 2025 GMT Subject: CN=c194a1fc682aba5ca347a0323cbfc56f0c84a6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:f3:64:1b:ba:89:98:9b:ea:db:fb:86:bd: 6b:6f:08:cd:02:06:9b:74:a6:5a:c1:15:09:29:7e: 12:c6:91:da:01:6f:7f:11:fd:7e:b0:dd:d3:62:96: 04:5f:97:08:e3:e0:b0:ae:ba:42:c7:f5:6b:eb:7e: db:86:4e:03:ee:9a:3d:f2:d4:1c:5d:b7:43:8b:05: b4:16:bf:1d:98:29:ee:9c:7a:31:bc:b1:5b:a1:e7: 09:14:01:28:a9:f2:08:5e:79:90:2f:3c:d0:69:51: f4:b8:ed:08:bb:cd:d6:2f:50:be:e6:a3:dc:80:dc: d3:2e:9d:bb:b7:60:ed:f7:65:e6:c6:eb:04:a0:8b: 1e:4b:05:70:13:6e:91:44:05:a3:40:3d:4c:31:57: f3:c0:49:56:ef:05:49:3a:22:e8:d3:c8:9b:e4:7f: aa:95:23:e3:9e:9b:49:0e:c7:1c:7a:89:51:45:49: f5:ad:9d:39:63:b6:04:54:b5:bf:30:4f:62:83:e2: 4e:e4:f1:ea:94:2c:e2:26:fb:b3:94:e3:f3:5f:3f: bc:92:54:28:89:3e:d7:57:41:b4:bf:ba:6b:99:14: f7:94:ef:89:ed:32:0e:3c:e3:86:a0:e2:87:90:7d: 86:fa:e9:ed:99:45:8a:b4:3f:b9:b6:77:de:36:9e: 69:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:94:A1:FC:68:2A:BA:5C:A3:47:A0:32:3C:BF:C5:6F:0C:84:A6:D9 X509v3 Authority Key Identifier: keyid:6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a3:a8:98:2b:96:19:6e:71:20:52:c4:c6:b7:ff:45:83:14: 11:75:6d:64:0a:1e:80:69:7f:9b:d6:5e:f5:5c:10:e1:49:e4: c1:84:14:8f:ca:da:6c:ff:9c:99:d3:86:64:52:c5:07:3c:b5: f1:b4:ee:de:d8:ed:65:91:64:3a:f4:34:99:b3:47:95:76:45: 9e:69:7f:b8:c3:df:71:6e:6f:22:e7:87:85:32:e2:0b:68:56: 6f:2b:b9:3d:a6:0f:34:c3:16:47:3b:1f:e2:04:f6:c7:6e:6e: f4:bb:f3:38:c2:b2:a6:bb:24:50:c4:e9:45:1c:aa:b6:d2:1a: 25:37:97:8d:c4:2b:5c:e5:e2:9f:79:7b:5a:99:8e:ce:bf:93: 8c:97:03:1d:23:0b:a7:23:e6:a4:7d:55:fd:5d:7b:f5:2f:e3: 65:6c:37:f5:29:28:c2:bb:d7:0f:d1:5f:cf:1b:ae:04:2e:de: 3f:b1:7c:ee:72:33:9e:37:f7:23:66:dc:54:0d:1b:72:7f:c0: d9:c4:56:b6:35:dd:f6:25:0d:d2:b0:36:fe:11:9b:3f:81:56: 5e:37:27:c8:43:49:4c:0d:9f:eb:11:90:f8:c1:0b:bb:d7:e6: 1e:25:b8:85:39:19:c3:39:bd:94:11:ac:1e:ce:67:1f:62:35: c1:d0:2f:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnQC0Nf0VxwVigOhi6J+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNjE5OWU1NWMzNTNlZjdmM2QyYmY0YTRmZTM4ZGQxYTBh ZDg1NjUwHhcNMjUxMjE3MTQwMDQ1WhcNMjUxMjE4MTQwMDQ1WjAzMTEwLwYDVQQD EyhjMTk0YTFmYzY4MmFiYTVjYTM0N2EwMzIzY2JmYzU2ZjBjODRhNmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPzzZBu6iZib6tv7hr1rbwjNAgab dKZawRUJKX4SxpHaAW9/Ef1+sN3TYpYEX5cI4+CwrrpCx/Vr637bhk4D7po98tQc XbdDiwW0Fr8dmCnunHoxvLFboecJFAEoqfIIXnmQLzzQaVH0uO0Iu83WL1C+5qPc gNzTLp27t2Dt92XmxusEoIseSwVwE26RRAWjQD1MMVfzwElW7wVJOiLo08ib5H+q lSPjnptJDscceolRRUn1rZ05Y7YEVLW/ME9ig+JO5PHqlCziJvuzlOPzXz+8klQo iT7XV0G0v7prmRT3lO+J7TIOPOOGoOKHkH2G+untmUWKtD+5tnfeNp5piQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGUofxoKrpco0egMjy/xW8MhKbZMB8GA1UdIwQY MBaAFGthmeVcNT7389K/Sk/jjdGgrYVlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTJHWjVWdzFQdmZ6MHI5S1QtT04wYUN0aFdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mZjJjZWItZTlhOC00NzhjLTg4YzEt M2RlNGVjZTNhYjJhLzEvYTJHWjVWdzFQdmZ6MHI5S1QtT04wYUN0aFdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9mZjJjZWItZTlhOC00NzhjLTg4YzEtM2RlNGVjZTNhYjJh LzEvYTJHWjVWdzFQdmZ6MHI5S1QtT04wYUN0aFdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqOomCuW GW5xIFLExrf/RYMUEXVtZAoegGl/m9Ze9VwQ4UnkwYQUj8rabP+cmdOGZFLFBzy1 8bTu3tjtZZFkOvQ0mbNHlXZFnml/uMPfcW5vIueHhTLiC2hWbyu5PaYPNMMWRzsf 4gT2x25u9LvzOMKyprskUMTpRRyqttIaJTeXjcQrXOXin3l7WpmOzr+TjJcDHSML pyPmpH1V/V179S/jZWw39SkowrvXD9FfzxuuBC7eP7F87nIznjf3I2bcVA0bcn/A 2cRWtjXd9iUN0rA2/hGbP4FWXjcnyENJTA2f6xGQ+MELu9fmHiW4hTkZwzm9lBGs Hs5nH2I1wdAvmg== -----END CERTIFICATE-----Generated at Wed Dec 17 18:12:14 2025 by rpki-client