This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft File: W6vKoQozYHLrwIIKbfC_pNxc_ao.mft (raw, json) Hash identifier: CoxtItzQEnb0EbZoBHewMMAEldDIaW7RDeLDBUDpGro= Subject key identifier: C1:E3:39:73:79:FA:2D:EB:6E:3D:76:05:C2:F1:B7:79:13:1E:4A:B5 Authority key identifier: 5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA Certificate issuer: /CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa Certificate serial: 019AF12ED6DB271D7A2753225AED1E57F696 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft Manifest number: 0B39 Signing time: Sat 06 Dec 2025 01:02:49 +0000 Manifest this update: Sat 06 Dec 2025 01:02:49 +0000 Manifest next update: Sun 07 Dec 2025 01:02:49 +0000 Files and hashes: 1: B2n18W6FZZHyRPgmArtbq0-BQHI.roa (hash: sGRiT/dWrEM0f4SVXVnUW/pThWPm0EW+IVYQygpGhOY=) 2: W6vKoQozYHLrwIIKbfC_pNxc_ao.crl (hash: s6I9JFDLLAerXGyKBGNb2FaQ+WdzQcV1CI7baRqyTUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:d6:db:27:1d:7a:27:53:22:5a:ed:1e:57:f6:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa Validity Not Before: Dec 6 01:02:49 2025 GMT Not After : Dec 7 01:02:49 2025 GMT Subject: CN=c1e3397379fa2deb6e3d7605c2f1b779131e4ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:61:c9:11:c0:bf:ee:e5:05:1b:9e:70:7e:b5: ac:a1:22:a9:aa:ad:cb:7a:37:36:df:4f:0b:13:07: 6f:1a:01:5f:30:e0:62:1c:a0:82:8e:84:69:0f:35: 49:b2:5d:cd:2e:ea:80:83:cb:48:98:c7:b9:e6:40: fe:fa:5b:43:62:15:87:c4:2f:4b:88:6a:70:5a:59: be:95:66:b5:c6:a1:70:fb:8d:f7:36:31:3c:a0:3d: 53:71:57:78:47:99:e1:38:97:b7:7a:df:04:a2:6c: 65:3d:a9:1e:a3:7c:10:0d:07:91:04:ab:0b:4a:1d: 45:75:7f:b0:45:07:33:bc:30:fc:ee:2f:8b:1a:f7: a3:98:1c:df:3b:d1:2b:e3:a1:83:8d:e5:41:56:f7: d4:e1:a7:52:41:fa:e8:83:a1:a7:07:48:f6:1c:5b: ad:40:8e:d2:43:d6:8d:35:d0:75:01:de:2b:04:a5: 03:69:2e:1d:c9:24:82:2f:6c:41:7b:a8:97:5c:1a: 65:db:12:c3:9d:f7:04:17:bd:f1:52:e9:a9:d6:ed: d4:14:67:ab:7c:1a:69:f0:fe:2b:17:71:5a:6c:7f: 63:9a:fb:7e:f3:29:21:05:8f:ac:c5:66:26:cd:3d: 72:3f:56:29:43:12:0c:e1:17:23:cd:83:42:9e:29: 7a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E3:39:73:79:FA:2D:EB:6E:3D:76:05:C2:F1:B7:79:13:1E:4A:B5 X509v3 Authority Key Identifier: keyid:5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:cf:59:75:f1:37:ab:c5:7b:1f:c0:ab:17:33:12:29:77:1a: 0d:1e:e4:45:2b:c2:20:59:eb:1c:70:e0:af:1e:47:31:65:80: 15:64:34:2e:3e:d1:0f:de:68:6f:6e:16:0a:1f:33:4a:33:0c: 34:4d:cf:67:31:0f:ad:12:2c:21:d5:c4:f3:19:59:a2:28:28: 7f:af:86:0a:90:f8:35:c6:6d:b9:26:94:8d:d5:59:79:f6:82: ff:d2:b5:3c:40:c6:72:f7:99:3b:2b:85:ce:8a:e5:32:d6:85: da:7e:e1:d1:9d:13:e4:a9:df:26:9f:24:9f:be:00:fd:b6:23: a8:a5:fe:81:52:4d:e7:81:d2:61:c9:b0:d9:8d:bf:cc:d8:5a: 5d:61:f5:4d:c0:36:0b:09:8d:c1:c9:56:63:b4:35:b8:c5:af: 79:d4:a4:1f:1f:54:70:06:44:ca:f1:34:ec:57:f2:7a:e2:3a: 67:4a:62:f3:2a:8c:22:22:72:a8:d7:f6:46:df:52:63:4f:97: 80:4e:cf:df:b5:48:e6:9d:9c:af:65:a9:61:2a:8e:90:a1:96: 3f:77:11:36:c3:fa:e7:af:09:86:ac:cc:ae:3d:04:3f:f0:d9: 40:1c:09:07:86:b5:f7:9e:58:49:52:1a:e1:ae:5d:03:67:4f: 59:34:be:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtbbJx16J1MiWu0eV/aWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViYWJjYWExMGEzMzYwNzJlYmMwODIwYTZkZjBiZmE0ZGM1 Y2ZkYWEwHhcNMjUxMjA2MDEwMjQ5WhcNMjUxMjA3MDEwMjQ5WjAzMTEwLwYDVQQD EyhjMWUzMzk3Mzc5ZmEyZGViNmUzZDc2MDVjMmYxYjc3OTEzMWU0YWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42HJEcC/7uUFG55wfrWsoSKpqq3L ejc2308LEwdvGgFfMOBiHKCCjoRpDzVJsl3NLuqAg8tImMe55kD++ltDYhWHxC9L iGpwWlm+lWa1xqFw+433NjE8oD1TcVd4R5nhOJe3et8EomxlPakeo3wQDQeRBKsL Sh1FdX+wRQczvDD87i+LGvejmBzfO9Er46GDjeVBVvfU4adSQfrog6GnB0j2HFut QI7SQ9aNNdB1Ad4rBKUDaS4dySSCL2xBe6iXXBpl2xLDnfcEF73xUump1u3UFGer fBpp8P4rF3FabH9jmvt+8ykhBY+sxWYmzT1yP1YpQxIM4RcjzYNCnil6mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHjOXN5+i3rbj12BcLxt3kTHkq1MB8GA1UdIwQY MBaAFFuryqEKM2By68CCCm3wv6TcXP2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzZ2S29Rb3pZSExyd0lJS2JmQ19wTnhjX2FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC84YzcyNDctODU5Mi00NGFlLTgyYjEt MTAwZTViNjVlNjcyLzEvVzZ2S29Rb3pZSExyd0lJS2JmQ19wTnhjX2FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC84YzcyNDctODU5Mi00NGFlLTgyYjEtMTAwZTViNjVlNjcy LzEvVzZ2S29Rb3pZSExyd0lJS2JmQ19wTnhjX2FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArM9ZdfE3 q8V7H8CrFzMSKXcaDR7kRSvCIFnrHHDgrx5HMWWAFWQ0Lj7RD95ob24WCh8zSjMM NE3PZzEPrRIsIdXE8xlZoigof6+GCpD4NcZtuSaUjdVZefaC/9K1PEDGcveZOyuF zorlMtaF2n7h0Z0T5KnfJp8kn74A/bYjqKX+gVJN54HSYcmw2Y2/zNhaXWH1TcA2 CwmNwclWY7Q1uMWvedSkHx9UcAZEyvE07FfyeuI6Z0pi8yqMIiJyqNf2Rt9SY0+X gE7P37VI5p2cr2WpYSqOkKGWP3cRNsP6568JhqzMrj0EP/DZQBwJB4a1955YSVIa 4a5dA2dPWTS+qw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:40:42 2025 by rpki-client