This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft File: g06Y-uclpT43QqjU7ehT9P9juRM.mft (raw, json) Hash identifier: tW6ZdQUISw6PRn0kknFHAfrS5dWRaCHXo21eN9ZRAb0= Subject key identifier: D6:B9:A0:2D:5D:81:5F:B0:76:2D:35:71:4F:D9:92:CA:B7:DF:19:10 Authority key identifier: 83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13 Certificate issuer: /CN=834e98fae725a53e3742a8d4ede853f4ff63b913 Certificate serial: 019AF31D200D69F044CA7CFDD9004BA3BCEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft Manifest number: 0514 Signing time: Sat 06 Dec 2025 10:02:43 +0000 Manifest this update: Sat 06 Dec 2025 10:02:43 +0000 Manifest next update: Sun 07 Dec 2025 10:02:43 +0000 Files and hashes: 1: g06Y-uclpT43QqjU7ehT9P9juRM.crl (hash: 2OSpY5oh8rTuJwNW+B3BhAMtL4NstpUc/L8XHIaMauM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:20:0d:69:f0:44:ca:7c:fd:d9:00:4b:a3:bc:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=834e98fae725a53e3742a8d4ede853f4ff63b913 Validity Not Before: Dec 6 10:02:43 2025 GMT Not After : Dec 7 10:02:43 2025 GMT Subject: CN=d6b9a02d5d815fb0762d35714fd992cab7df1910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c1:0f:96:94:dc:18:b5:2c:d1:dc:40:0a:7c: 5f:fe:58:3d:ba:9a:58:91:1e:2d:49:8b:ad:6f:10: 5d:c2:f3:60:37:5b:cc:1a:f7:2a:01:b7:a7:d9:df: 25:f8:c9:de:1c:15:70:c3:78:1f:2c:1c:44:74:8a: 06:79:d9:18:be:b6:6f:f9:06:27:21:9a:47:95:20: d4:5c:28:00:7e:32:65:52:ce:fc:5d:3b:ab:5f:c7: de:3e:99:c7:24:45:b4:9f:c2:6d:c2:c5:69:64:72: e4:6b:dc:fb:aa:f8:70:0d:74:62:73:88:23:b3:13: 67:c7:dc:9b:ab:c3:b1:8b:a3:53:47:77:3a:5c:7c: f1:d7:51:d8:6f:04:f3:b1:d6:2f:03:a0:12:3f:38: 1f:22:11:a5:57:52:66:76:8a:8a:e7:68:cf:06:47: 63:c0:66:92:40:1a:a7:85:5c:b0:ae:f9:98:67:86: d0:df:f3:21:96:f5:56:30:d8:93:43:68:38:77:d6: 06:6e:49:be:1a:31:f2:af:3a:75:f8:85:b1:d8:b4: 80:0b:88:0e:86:a0:e7:5f:92:70:20:86:bd:25:84: ca:3b:1c:54:13:64:49:5d:e6:04:16:1f:f6:9f:e6: e2:c2:ac:2e:3e:54:cb:12:8a:5c:64:5a:fd:1f:ce: 6c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B9:A0:2D:5D:81:5F:B0:76:2D:35:71:4F:D9:92:CA:B7:DF:19:10 X509v3 Authority Key Identifier: keyid:83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:bc:48:58:95:4b:77:f7:21:4b:b1:5a:34:a3:a3:f8:78:99: 05:93:a1:67:98:83:34:f4:5a:ef:cf:ae:d3:0d:4e:05:f3:4e: 03:de:e6:2b:71:1e:78:b5:1c:d2:81:68:83:28:c8:e2:f0:a0: c2:5f:e3:cd:44:2d:11:71:db:6d:fc:75:dd:08:87:c6:3d:94: 43:f2:5b:65:16:8a:1f:18:ce:d3:d7:7b:0e:d1:49:42:06:8f: d0:18:13:ab:3b:b7:5f:61:0a:0f:1e:41:de:fb:ba:e1:d2:7b: 28:8f:60:ac:08:f3:fc:07:ae:61:d2:b8:b5:12:58:0b:0a:6d: dd:70:a5:1f:fa:48:16:f3:0d:27:91:6e:51:33:a1:43:5e:46: 01:9e:15:f7:76:a5:08:ff:33:0e:0f:05:59:5c:aa:bc:9a:ba: e6:dc:ba:9b:62:9d:49:7d:27:8d:b9:dc:f8:a5:11:89:71:84: e6:9c:2c:08:d3:d2:53:c9:44:4c:70:ac:fd:af:7f:86:e6:a3: 1b:94:54:34:14:9f:5f:05:e0:77:59:bc:e7:6c:6f:4d:85:9e: 4d:d8:3e:db:2f:6b:3d:e3:cb:72:f9:ce:c5:9a:46:73:2b:0b: fa:df:18:72:13:74:be:6a:24:0e:16:78:ab:0c:83:50:74:cd: 3b:5a:63:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHSANafBEynz92QBLo7zsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNGU5OGZhZTcyNWE1M2UzNzQyYThkNGVkZTg1M2Y0ZmY2 M2I5MTMwHhcNMjUxMjA2MTAwMjQzWhcNMjUxMjA3MTAwMjQzWjAzMTEwLwYDVQQD EyhkNmI5YTAyZDVkODE1ZmIwNzYyZDM1NzE0ZmQ5OTJjYWI3ZGYxOTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocEPlpTcGLUs0dxACnxf/lg9uppY kR4tSYutbxBdwvNgN1vMGvcqAben2d8l+MneHBVww3gfLBxEdIoGedkYvrZv+QYn IZpHlSDUXCgAfjJlUs78XTurX8fePpnHJEW0n8JtwsVpZHLka9z7qvhwDXRic4gj sxNnx9ybq8Oxi6NTR3c6XHzx11HYbwTzsdYvA6ASPzgfIhGlV1JmdoqK52jPBkdj wGaSQBqnhVywrvmYZ4bQ3/MhlvVWMNiTQ2g4d9YGbkm+GjHyrzp1+IWx2LSAC4gO hqDnX5JwIIa9JYTKOxxUE2RJXeYEFh/2n+biwqwuPlTLEopcZFr9H85sxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNa5oC1dgV+wdi01cU/Zksq33xkQMB8GA1UdIwQY MBaAFINOmPrnJaU+N0Ko1O3oU/T/Y7kTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzA2WS11Y2xwVDQzUXFqVTdlaFQ5UDlqdVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81NzY5MzMtOGE1Yi00ZGNiLWFjMWYt MWE1MjliMmY1ZDk3LzEvZzA2WS11Y2xwVDQzUXFqVTdlaFQ5UDlqdVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny81NzY5MzMtOGE1Yi00ZGNiLWFjMWYtMWE1MjliMmY1ZDk3 LzEvZzA2WS11Y2xwVDQzUXFqVTdlaFQ5UDlqdVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLxIWJVL d/chS7FaNKOj+HiZBZOhZ5iDNPRa78+u0w1OBfNOA97mK3EeeLUc0oFogyjI4vCg wl/jzUQtEXHbbfx13QiHxj2UQ/JbZRaKHxjO09d7DtFJQgaP0BgTqzu3X2EKDx5B 3vu64dJ7KI9grAjz/AeuYdK4tRJYCwpt3XClH/pIFvMNJ5FuUTOhQ15GAZ4V93al CP8zDg8FWVyqvJq65ty6m2KdSX0njbnc+KURiXGE5pwsCNPSU8lETHCs/a9/huaj G5RUNBSfXwXgd1m852xvTYWeTdg+2y9rPePLcvnOxZpGcysL+t8YchN0vmokDhZ4 qwyDUHTNO1pjow== -----END CERTIFICATE-----Generated at Sat Dec 6 17:45:59 2025 by rpki-client