This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft File: a2HpAAl3utWMh3BeOxZbCEg_Czo.mft (raw, json) Hash identifier: FMJCn6jhJf2xoQADjBM2Hac4obuH98+lnB8Y0rmxlE0= Subject key identifier: 62:1B:8A:5D:0D:7E:1C:25:69:39:0D:8C:71:2D:CE:14:16:B8:7D:E4 Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A Certificate issuer: /CN=6b61e9000977bad58c87705e3b165b08483f0b3a Certificate serial: 019B2E5451B08E1018A8822491AA7A000E09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft Manifest number: 1784 Signing time: Wed 17 Dec 2025 22:00:36 +0000 Manifest this update: Wed 17 Dec 2025 22:00:36 +0000 Manifest next update: Thu 18 Dec 2025 22:00:36 +0000 Files and hashes: 1: a2HpAAl3utWMh3BeOxZbCEg_Czo.crl (hash: /1FKceVkl0/KPC5LUQOdBJD3XHR3MJwKMrPh6LgIal8=) 2: movPWb1NWT7RBf22mFzV6ki-niw.roa (hash: pmnGsVyTJDaHQspLVBouBG8RasgSm/+abtktLNR23OI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:51:b0:8e:10:18:a8:82:24:91:aa:7a:00:0e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a Validity Not Before: Dec 17 22:00:36 2025 GMT Not After : Dec 18 22:00:36 2025 GMT Subject: CN=621b8a5d0d7e1c2569390d8c712dce1416b87de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:00:ed:d6:2e:0e:1e:c7:70:34:04:70:96:24: 6c:d3:76:f9:1e:3c:6d:05:0e:40:7e:ef:a5:a7:8e: 9a:6b:2c:bd:cd:39:94:16:1b:c2:8d:0b:bd:81:fb: bb:13:7c:7d:90:fc:c4:96:3a:3c:99:57:25:80:14: 2b:5c:b5:24:13:f7:e8:9f:b5:e8:54:8f:f7:ac:82: f0:58:58:ed:84:ca:20:e4:60:f3:18:48:eb:4f:21: df:ee:cd:16:21:04:df:74:57:e3:4e:dd:c5:b0:a7: c0:11:db:01:0c:da:b3:d2:a4:58:db:8f:c2:64:10: a0:ca:f1:0e:bd:f3:17:48:ad:39:b9:64:50:48:96: 5a:94:6d:54:13:e2:1a:fa:f8:96:60:03:d0:3e:ce: 46:a7:8d:50:95:dc:91:f2:0d:0d:b8:b3:20:24:39: b3:ba:62:27:a3:d9:4d:53:ed:f4:3f:78:4d:43:56: 4e:2f:af:a7:e9:ed:ab:d3:eb:52:6d:96:6e:80:d9: e8:a8:cc:8e:46:83:06:cf:f9:ee:f0:8b:ab:ec:e8: 8a:bd:b1:37:37:30:77:17:87:54:b8:7e:cb:2c:e8: 9f:18:22:74:8d:d3:a5:60:57:01:88:e5:33:aa:29: 37:3f:8b:8a:eb:cb:73:56:66:ee:85:b9:9a:c0:2e: 8e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1B:8A:5D:0D:7E:1C:25:69:39:0D:8C:71:2D:CE:14:16:B8:7D:E4 X509v3 Authority Key Identifier: keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a0:c7:7b:23:d9:aa:ef:18:79:10:57:6b:10:a6:dc:a1:98: a2:4f:8e:66:29:56:de:fe:3e:44:3a:ec:dc:e5:56:de:3c:8c: 20:5c:9b:8e:d2:8b:a5:ab:50:3c:35:73:c0:5d:13:ca:cc:78: 22:2d:84:99:f2:09:f8:c6:5e:8d:fd:6d:bf:4c:ac:4b:73:51: 7d:b3:c9:ac:e1:ec:f9:aa:9a:72:4f:00:a9:f2:8c:01:23:5f: 1a:a6:82:50:d3:d3:a7:d0:68:87:bb:70:67:15:58:a9:db:58: ca:f1:85:99:59:fb:56:d4:7e:87:32:dc:fd:85:81:c6:bd:19: 19:2b:8d:64:01:3f:1f:52:18:bc:0b:e1:ee:6a:0c:db:b3:2e: 3d:2a:c7:4f:0a:55:ec:a8:d7:1a:0b:c6:84:11:2d:12:96:b3: bf:66:11:5f:4b:2c:56:0d:b6:dc:2d:dd:2f:bd:64:6d:54:0a: b3:99:15:45:39:01:aa:3a:88:e8:1a:90:73:da:2e:f3:e9:fd: 07:e9:25:c6:d4:40:4e:9f:6e:07:0c:92:63:c4:8d:b2:36:95: 89:25:74:ee:9a:6e:d8:63:5f:2a:d8:78:77:22:e6:57:a0:01: ff:25:a2:f3:5d:05:1e:f4:c3:71:5c:fc:90:40:c3:3a:9b:42: f6:5c:f2:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVFGwjhAYqIIkkap6AA4JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNjFlOTAwMDk3N2JhZDU4Yzg3NzA1ZTNiMTY1YjA4NDgz ZjBiM2EwHhcNMjUxMjE3MjIwMDM2WhcNMjUxMjE4MjIwMDM2WjAzMTEwLwYDVQQD Eyg2MjFiOGE1ZDBkN2UxYzI1NjkzOTBkOGM3MTJkY2UxNDE2Yjg3ZGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygDt1i4OHsdwNARwliRs03b5Hjxt BQ5Afu+lp46aayy9zTmUFhvCjQu9gfu7E3x9kPzEljo8mVclgBQrXLUkE/fon7Xo VI/3rILwWFjthMog5GDzGEjrTyHf7s0WIQTfdFfjTt3FsKfAEdsBDNqz0qRY24/C ZBCgyvEOvfMXSK05uWRQSJZalG1UE+Ia+viWYAPQPs5Gp41QldyR8g0NuLMgJDmz umIno9lNU+30P3hNQ1ZOL6+n6e2r0+tSbZZugNnoqMyORoMGz/nu8Iur7OiKvbE3 NzB3F4dUuH7LLOifGCJ0jdOlYFcBiOUzqik3P4uK68tzVmbuhbmawC6OPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIbil0NfhwlaTkNjHEtzhQWuH3kMB8GA1UdIwQY MBaAFGth6QAJd7rVjIdwXjsWWwhIPws6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTJIcEFBbDN1dFdNaDNCZU94WmJDRWdfQ3pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xZTJkOTktN2M4My00ZWIyLWExNjMt MjIyOGY5YWQ3NTBmLzEvYTJIcEFBbDN1dFdNaDNCZU94WmJDRWdfQ3pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8xZTJkOTktN2M4My00ZWIyLWExNjMtMjIyOGY5YWQ3NTBm LzEvYTJIcEFBbDN1dFdNaDNCZU94WmJDRWdfQ3pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6DHeyPZ qu8YeRBXaxCm3KGYok+OZilW3v4+RDrs3OVW3jyMIFybjtKLpatQPDVzwF0Tysx4 Ii2EmfIJ+MZejf1tv0ysS3NRfbPJrOHs+aqack8AqfKMASNfGqaCUNPTp9Boh7tw ZxVYqdtYyvGFmVn7VtR+hzLc/YWBxr0ZGSuNZAE/H1IYvAvh7moM27MuPSrHTwpV 7KjXGgvGhBEtEpazv2YRX0ssVg223C3dL71kbVQKs5kVRTkBqjqI6BqQc9ou8+n9 B+klxtRATp9uBwySY8SNsjaViSV07ppu2GNfKth4dyLmV6AB/yWi810FHvTDcVz8 kEDDOptC9lzyVg== -----END CERTIFICATE-----Generated at Thu Dec 18 08:38:08 2025 by rpki-client