This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json) Hash identifier: lXrbKk7OyBjxJGTGvzxWZfdwW5+cyBv6h+8BV0tuVlM= Subject key identifier: AD:BB:35:57:A0:8A:42:88:44:42:81:6C:0E:AF:AE:03:5B:5C:AB:16 Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56 Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756 Certificate serial: 019AF12E734020B2A8675086F85960A6E126 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft Manifest number: 1581 Signing time: Sat 06 Dec 2025 01:02:24 +0000 Manifest this update: Sat 06 Dec 2025 01:02:24 +0000 Manifest next update: Sun 07 Dec 2025 01:02:24 +0000 Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: khCwRqsEebWt/wtXs3dYnyUn2ylhCPt5jiGMQieBUQ8=) 2: tbW3C2BxGOP8RipICwkXorNWMa0.roa (hash: sAyggufTAiW8TAkDGmUgXEYrufIqSzYFIzTOlTIqneg=) 3: u1VhcVTy354RLIy1HL3zp9mHr4s.roa (hash: bTXjEk3aPbxZmee9JV98PLXefqyqj+KHu6+Sm9Lnq+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:73:40:20:b2:a8:67:50:86:f8:59:60:a6:e1:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756 Validity Not Before: Dec 6 01:02:24 2025 GMT Not After : Dec 7 01:02:24 2025 GMT Subject: CN=adbb3557a08a42884442816c0eafae035b5cab16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4f:53:70:58:3e:86:a5:c1:ac:e0:c6:8d:94: 94:c0:01:b2:8f:49:c5:94:1e:33:ec:9f:06:83:66: 23:2c:f4:3f:72:70:ec:b5:7d:b0:91:0a:f1:14:de: f1:6e:84:e7:66:8c:3a:cb:9b:4c:e7:08:fd:a0:16: b3:b2:99:3e:79:d8:44:5e:0e:c2:d8:a1:b1:d8:46: c2:52:8f:97:97:85:dd:6b:fb:24:c1:0c:fd:3e:9a: 54:96:6a:5e:bf:c2:e7:ee:38:95:11:cc:0c:cd:72: 5a:d4:77:fc:86:25:a9:2d:fd:0b:25:3c:77:f2:e0: 8b:b4:09:c3:d0:99:b5:82:a0:46:43:db:ca:f5:dd: d6:8e:5b:2f:f7:ab:dd:41:53:43:13:ce:f7:0f:cd: ae:ce:db:22:04:33:79:98:ce:a0:4e:46:2e:71:a1: b1:2c:ed:21:9f:e8:81:d0:8e:46:b6:97:34:9e:99: e4:6d:b2:14:ca:24:fa:6e:6d:98:37:b3:de:b2:e9: 4a:f4:e1:91:46:1a:d5:20:56:f9:ff:da:a9:80:9a: e1:3c:06:bc:55:b4:cb:52:d1:9e:49:1f:a8:72:af: 20:14:a0:c2:2d:14:bf:d4:68:a5:2f:a9:f6:a0:9e: 40:cc:17:0f:15:db:25:67:a5:2e:e6:07:2d:68:15: 71:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BB:35:57:A0:8A:42:88:44:42:81:6C:0E:AF:AE:03:5B:5C:AB:16 X509v3 Authority Key Identifier: keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:5e:96:be:f2:bb:e8:5a:1b:30:b7:0e:e2:46:73:82:2f:d4: 38:4f:ab:04:39:b0:ce:8e:35:3a:30:f2:2d:58:2e:45:d1:8c: e1:ed:8d:da:5e:20:8a:3b:fc:1c:c5:fb:5a:0c:27:71:ad:9a: 95:60:3d:88:6d:ab:68:21:6d:ea:f8:a3:6d:5d:63:c0:77:55: f1:ef:51:3d:b7:2a:1b:31:65:9d:7f:4d:76:46:02:b2:e6:de: 69:78:bd:18:a2:82:56:4f:17:63:8b:50:9a:68:a1:89:5f:34: 40:82:44:ae:20:f2:22:c4:68:a5:ee:64:c9:d3:78:14:6e:f1: 70:a3:d2:a5:fa:fe:91:02:8b:0a:6d:3e:94:22:24:0e:7c:28: 6b:e1:5f:42:4f:d3:05:09:0f:1e:81:26:f0:27:cf:61:d9:a8: f0:f6:3c:05:6f:a4:22:af:db:b9:28:d4:06:56:69:ed:b0:ed: aa:5d:7e:7b:78:43:72:e5:82:15:a1:ab:87:30:c5:60:e7:aa: 94:cf:af:79:fd:b6:cd:d5:40:76:0a:f3:c4:a0:ea:20:d7:23: 97:4d:9e:2f:b2:b4:55:54:32:3f:4d:d0:e2:34:d7:aa:31:ce: 74:69:53:55:c2:12:a1:46:65:2a:30:2f:ae:77:83:65:ae:73: bf:38:02:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnNAILKoZ1CG+FlgpuEmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYTdjM2JlMDZiYzQ1YzNmMTJiOTBiMTg1Mjc4YWQ0ZWM5 MTk3NTYwHhcNMjUxMjA2MDEwMjI0WhcNMjUxMjA3MDEwMjI0WjAzMTEwLwYDVQQD EyhhZGJiMzU1N2EwOGE0Mjg4NDQ0MjgxNmMwZWFmYWUwMzViNWNhYjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok9TcFg+hqXBrODGjZSUwAGyj0nF lB4z7J8Gg2YjLPQ/cnDstX2wkQrxFN7xboTnZow6y5tM5wj9oBazspk+edhEXg7C 2KGx2EbCUo+Xl4Xda/skwQz9PppUlmpev8Ln7jiVEcwMzXJa1Hf8hiWpLf0LJTx3 8uCLtAnD0Jm1gqBGQ9vK9d3Wjlsv96vdQVNDE873D82uztsiBDN5mM6gTkYucaGx LO0hn+iB0I5Gtpc0npnkbbIUyiT6bm2YN7PesulK9OGRRhrVIFb5/9qpgJrhPAa8 VbTLUtGeSR+ocq8gFKDCLRS/1GilL6n2oJ5AzBcPFdslZ6Uu5gctaBVxKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK27NVegikKIREKBbA6vrgNbXKsWMB8GA1UdIwQY MBaAFNOnw74GvEXD8SuQsYUnitTskZdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jZWNmYjYtMDdmYi00Mjc1LWIwNmEt OGFhNTBkNjcwMzdjLzEvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9jZWNmYjYtMDdmYi00Mjc1LWIwNmEtOGFhNTBkNjcwMzdj LzEvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArV6WvvK7 6FobMLcO4kZzgi/UOE+rBDmwzo41OjDyLVguRdGM4e2N2l4gijv8HMX7Wgwnca2a lWA9iG2raCFt6vijbV1jwHdV8e9RPbcqGzFlnX9NdkYCsubeaXi9GKKCVk8XY4tQ mmihiV80QIJEriDyIsRope5kydN4FG7xcKPSpfr+kQKLCm0+lCIkDnwoa+FfQk/T BQkPHoEm8CfPYdmo8PY8BW+kIq/buSjUBlZp7bDtql1+e3hDcuWCFaGrhzDFYOeq lM+vef22zdVAdgrzxKDqINcjl02eL7K0VVQyP03Q4jTXqjHOdGlTVcISoUZlKjAv rneDZa5zvzgCdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:54 2025 by rpki-client