This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft File: my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft (raw, json) Hash identifier: 6agII/ZTFTZyl6xSfZb0UCQzYvZYRNt4KrEELlevVeY= Subject key identifier: FE:64:D6:AC:AA:2F:86:ED:06:B4:55:9B:CF:AF:54:B2:BC:5C:9F:FF Authority key identifier: 9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70 Certificate issuer: /CN=9b2e80a141c974f6da8f40274338fdacee42a770 Certificate serial: 019AF31B9995A760BE2C47B8AB616E0FE54B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft Manifest number: 0F13 Signing time: Sat 06 Dec 2025 10:01:03 +0000 Manifest this update: Sat 06 Dec 2025 10:01:03 +0000 Manifest next update: Sun 07 Dec 2025 10:01:03 +0000 Files and hashes: 1: my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl (hash: cy/mErU0ZJYjd1O6dkrd3q9gpvJfv+wTzSiN7HS0Xfc=) 2: qDQj2i79pZYtwis1stkVmdhu_cA.roa (hash: OPq9BdTsvn5TcHmuSl2ovdvwcrawOIn1d+BihcQt66M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:99:95:a7:60:be:2c:47:b8:ab:61:6e:0f:e5:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b2e80a141c974f6da8f40274338fdacee42a770 Validity Not Before: Dec 6 10:01:03 2025 GMT Not After : Dec 7 10:01:03 2025 GMT Subject: CN=fe64d6acaa2f86ed06b4559bcfaf54b2bc5c9fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:64:09:7c:e4:34:8b:5a:76:4f:c0:33:c2:4c: df:c4:d9:a1:53:84:75:3a:b1:dd:c5:a3:af:b9:df: 1b:c3:fc:26:a1:c9:ea:ae:d3:a1:e1:6d:1f:b5:b5: a5:65:76:96:f6:68:28:7c:56:e9:7f:f3:b1:02:a2: ef:89:d7:4c:8f:4d:db:e5:7f:97:19:54:1f:25:f9: f4:57:8a:b7:33:39:68:31:5a:bd:ff:a1:1a:52:9d: 06:24:3d:d3:e9:d2:57:e5:1b:7a:eb:fe:18:65:73: f1:35:d1:af:5b:03:26:b4:6b:0c:63:2c:6a:1a:f0: 9e:64:83:ac:5c:bd:54:b5:a9:bd:77:97:cd:e4:d7: 6a:4c:d1:b9:1b:ff:10:48:2c:25:a3:04:c3:e3:b3: b7:90:19:82:98:cd:86:e7:df:9a:79:d8:35:a9:c4: 9c:03:00:2f:35:3d:63:40:c2:5b:61:b3:d5:aa:1c: 4e:d0:34:84:7f:67:35:7e:de:18:f1:eb:35:64:d1: f0:cf:01:60:0a:5a:dc:21:9a:5d:8a:25:58:16:31: 8b:35:a5:69:52:05:61:53:3c:14:92:a9:f1:af:8f: 6b:70:ff:e5:00:00:e7:3e:13:be:ff:17:f9:d2:6e: 6c:d5:ad:11:86:9c:d3:e3:5d:34:96:3a:43:96:d5: 93:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:64:D6:AC:AA:2F:86:ED:06:B4:55:9B:CF:AF:54:B2:BC:5C:9F:FF X509v3 Authority Key Identifier: keyid:9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:a8:13:47:fd:e2:b3:bd:8b:fe:a5:0c:8c:cb:c6:64:91:b8: bd:b6:dc:8f:a6:2a:25:38:48:f3:ef:fd:a9:d4:b6:ce:98:b0: 85:1e:8b:15:5f:d2:b3:88:e2:ca:09:ef:aa:78:a3:15:70:cd: b1:49:9f:23:d8:c4:5e:4d:e1:a1:53:46:63:47:1b:ff:98:91: 13:ab:e7:0d:79:64:ed:fc:7e:76:ab:ca:e2:ca:19:e4:8b:aa: f3:53:38:ac:98:7f:9d:af:a9:3a:59:bb:1b:e7:0a:e4:20:ef: 95:4a:19:c8:a5:a7:d3:b6:0e:90:ad:6c:27:f7:16:98:5e:cf: 75:aa:59:77:6b:f8:b8:45:81:45:92:dc:ce:bf:10:ac:1c:8a: c5:ec:fd:7a:29:3a:ed:d2:16:02:30:7d:d3:c4:59:13:84:48: 44:f3:ef:c9:dc:d0:3e:f7:0b:d8:99:fe:04:1d:ac:ba:c8:94: 63:e7:fc:48:b9:f0:ea:05:76:59:af:72:7d:2d:48:f2:82:d8: ea:36:17:c2:77:95:4c:31:7e:75:58:5a:66:87:b4:52:cb:32: 91:9c:42:e8:f5:dc:ca:93:dc:64:b0:ec:95:55:a0:2c:3d:0a: e6:31:0b:f3:db:9e:5f:78:b8:b5:58:1d:37:d8:fb:2f:d5:3e: 21:7d:46:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5mVp2C+LEe4q2FuD+VLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMmU4MGExNDFjOTc0ZjZkYThmNDAyNzQzMzhmZGFjZWU0 MmE3NzAwHhcNMjUxMjA2MTAwMTAzWhcNMjUxMjA3MTAwMTAzWjAzMTEwLwYDVQQD EyhmZTY0ZDZhY2FhMmY4NmVkMDZiNDU1OWJjZmFmNTRiMmJjNWM5ZmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGQJfOQ0i1p2T8AzwkzfxNmhU4R1 OrHdxaOvud8bw/wmocnqrtOh4W0ftbWlZXaW9mgofFbpf/OxAqLviddMj03b5X+X GVQfJfn0V4q3MzloMVq9/6EaUp0GJD3T6dJX5Rt66/4YZXPxNdGvWwMmtGsMYyxq GvCeZIOsXL1Utam9d5fN5NdqTNG5G/8QSCwlowTD47O3kBmCmM2G59+aedg1qcSc AwAvNT1jQMJbYbPVqhxO0DSEf2c1ft4Y8es1ZNHwzwFgClrcIZpdiiVYFjGLNaVp UgVhUzwUkqnxr49rcP/lAADnPhO+/xf50m5s1a0RhpzT4100ljpDltWTVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5k1qyqL4btBrRVm8+vVLK8XJ//MB8GA1UdIwQY MBaAFJsugKFByXT22o9AJ0M4/azuQqdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXk2QW9VSEpkUGJhajBBblF6ajlyTzVDcDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9mYWFiYmMtODFiYS00OTc3LTg5MjMt Y2M5M2IxMDUwZGU3LzEvbXk2QW9VSEpkUGJhajBBblF6ajlyTzVDcDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9mYWFiYmMtODFiYS00OTc3LTg5MjMtY2M5M2IxMDUwZGU3 LzEvbXk2QW9VSEpkUGJhajBBblF6ajlyTzVDcDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKgTR/3i s72L/qUMjMvGZJG4vbbcj6YqJThI8+/9qdS2zpiwhR6LFV/Ss4jiygnvqnijFXDN sUmfI9jEXk3hoVNGY0cb/5iRE6vnDXlk7fx+dqvK4soZ5Iuq81M4rJh/na+pOlm7 G+cK5CDvlUoZyKWn07YOkK1sJ/cWmF7PdapZd2v4uEWBRZLczr8QrByKxez9eik6 7dIWAjB908RZE4RIRPPvydzQPvcL2Jn+BB2susiUY+f8SLnw6gV2Wa9yfS1I8oLY 6jYXwneVTDF+dVhaZoe0UssykZxC6PXcypPcZLDslVWgLD0K5jEL89ueX3i4tVgd N9j7L9U+IX1GzA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:43 2025 by rpki-client