This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft File: C6yCgEcArTZTi_hvNMBz6XFDDaU.mft (raw, json) Hash identifier: fnYYw1Oul5jQbfkPT/Q7s+7cq8IprmD7cg40Ediy8mY= Subject key identifier: C0:A1:F2:D1:A1:05:B8:FF:E9:AA:EC:48:E2:60:39:F3:7C:66:61:4A Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5 Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5 Certificate serial: 019AF50B2E81089E61E58438034C91D19D32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft Manifest number: 1772 Signing time: Sat 06 Dec 2025 19:02:21 +0000 Manifest this update: Sat 06 Dec 2025 19:02:21 +0000 Manifest next update: Sun 07 Dec 2025 19:02:21 +0000 Files and hashes: 1: 1-kvVTAhrEOyteDMbQ1PRTmS7VII.roa (hash: 52wBCJcICQSnfXTj3sxR2Dw1bHQobSFBJQdmwW3ItOc=) 2: 1Rd2o3xUjPYq6-ROGbojsnIAO7o.roa (hash: cJibfgam1opzds5Qh9r7Y5ffttnidwSOVT40ptzFnqs=) 3: 7bJ_SXsvQs5jd90zxR_xlvABeGo.roa (hash: m0ZQ2Y2DbXV8jV6KvTNs6fUZ/bk3yiFcpgd8GYS9O7Q=) 4: C6yCgEcArTZTi_hvNMBz6XFDDaU.crl (hash: Vxjdf3SxlP0qDnY1xItZcBc/UqVEKgnAU4DDHkrIwQA=) 5: EJIUsUOKvSLerwNQFS-Out5zZuM.roa (hash: D433E6UiMyX9KdcjAcomX19JFn+CfTOeAqT8DsBwSkY=) 6: IYymNdWawqstgCP4XTcQ0LRxyO4.roa (hash: zZeH4Zhf/0r9N1702in9DCWq7U55L0ULISwTrHj2H68=) 7: L1Bz6qAa7Tw2r0koEROI1LNkc8U.roa (hash: DocEMWhWVMmnhBegXTSWZpGGhsBAl4jcHIRujEDNT44=) 8: b_Dm6TuKr2O9F9em_a6cktDchPg.roa (hash: ehArjKJWDMxsQnB7k5Ijrml5MK5YWi9DCvAWzUWkArc=) 9: vdMwrE1WRBo6tPAM0c8ANEH4m7w.roa (hash: aAOimEwL2ZyXBynFWKnhjaaS/YCd7rqkh4wnbJ4qboQ=) 10: xkRsFChgw8FgF1z4ealSBYfjSiw.roa (hash: c2XTA6ndUBR9DMhPW66OSPqlDjn7RwF/yQC+0Ynbm/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:2e:81:08:9e:61:e5:84:38:03:4c:91:d1:9d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5 Validity Not Before: Dec 6 19:02:21 2025 GMT Not After : Dec 7 19:02:21 2025 GMT Subject: CN=c0a1f2d1a105b8ffe9aaec48e26039f37c66614a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5e:42:d0:83:66:09:28:4d:44:8c:d3:69:1a: 9c:12:40:79:14:52:d6:78:3f:4b:a6:a0:5b:11:09: 52:66:fa:58:2c:45:e1:4e:e0:64:9d:2a:c7:12:0d: 8f:78:46:fa:5b:2c:1c:1a:43:43:58:66:f2:19:b1: 5d:4a:af:d5:42:71:68:18:9b:d3:d0:e3:c2:57:87: 1c:a6:87:36:bd:6d:a8:a4:ea:66:42:f4:19:18:22: fe:5f:89:d9:56:d3:41:c1:58:f8:fa:01:cd:f1:b2: ff:7c:76:93:89:7b:6d:27:64:e7:90:33:d1:ba:f7: 24:de:48:2f:97:c9:82:32:1c:61:2d:b8:8d:16:7e: 61:36:08:54:d9:1c:b4:4d:07:a3:64:e0:56:69:cb: eb:59:ae:3d:e3:03:6d:0a:6f:f0:d7:a9:41:1b:f9: d6:fc:48:90:fd:50:f3:17:3d:55:87:9b:83:3e:78: 14:87:2b:60:f5:31:06:9d:89:28:e5:e8:76:30:4d: ba:70:c3:83:d0:27:e2:61:a4:3b:f1:1a:4f:1a:9a: e1:5a:02:49:e7:b9:ab:56:79:58:d2:c6:b7:2e:14: d6:99:71:30:85:c8:34:27:f0:ad:41:25:fe:52:3f: 06:c1:79:c6:f2:64:b1:76:ab:cf:b9:f2:a4:d3:0d: c7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A1:F2:D1:A1:05:B8:FF:E9:AA:EC:48:E2:60:39:F3:7C:66:61:4A X509v3 Authority Key Identifier: keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a4:99:2b:da:3b:af:5d:db:d3:f6:66:c5:3d:51:41:11:50: ed:75:09:b0:60:22:cb:ea:47:b1:bc:20:b1:25:44:4b:a5:e2: 6d:a7:b1:36:b3:68:40:d3:cf:e6:2d:6f:5d:5e:ab:2f:46:d0: 40:c5:ec:06:6c:61:a3:dd:a9:93:e3:8c:3e:40:6d:07:fb:2c: 03:49:73:08:d7:24:20:e9:33:b9:12:6e:a9:3e:b3:e9:9b:10: d5:88:aa:1a:75:94:48:32:aa:bc:41:00:f4:17:89:57:91:c5: 23:01:c6:4b:91:81:0c:91:d2:85:5d:77:5d:3f:b3:44:29:56: ea:ad:60:e2:84:a1:93:54:18:b2:49:1c:fa:5d:ec:5d:d5:32: 98:cb:f6:2b:2c:51:f1:e9:36:92:d0:f8:39:e6:51:a3:86:be: 0f:b3:f2:e6:a0:86:ca:1d:d9:a6:14:74:17:23:33:db:69:4d: 09:b8:66:ae:7a:74:c2:43:66:54:78:07:9f:0a:38:f4:f7:3d: b2:e3:a2:8d:7a:27:41:ed:cc:fc:3e:8b:fe:18:6d:ce:61:62: 0c:b3:ff:54:70:c6:ee:7b:ba:e6:c7:48:15:e7:68:ce:97:4f: 4b:d2:8a:84:4a:f6:90:5f:9f:80:01:0d:3d:36:e0:c1:d3:4e: f9:da:62:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cy6BCJ5h5YQ4A0yR0Z0yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYWM4MjgwNDcwMGFkMzY1MzhiZjg2ZjM0YzA3M2U5NzE0 MzBkYTUwHhcNMjUxMjA2MTkwMjIxWhcNMjUxMjA3MTkwMjIxWjAzMTEwLwYDVQQD EyhjMGExZjJkMWExMDViOGZmZTlhYWVjNDhlMjYwMzlmMzdjNjY2MTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV5C0INmCShNRIzTaRqcEkB5FFLW eD9LpqBbEQlSZvpYLEXhTuBknSrHEg2PeEb6WywcGkNDWGbyGbFdSq/VQnFoGJvT 0OPCV4ccpoc2vW2opOpmQvQZGCL+X4nZVtNBwVj4+gHN8bL/fHaTiXttJ2TnkDPR uvck3kgvl8mCMhxhLbiNFn5hNghU2Ry0TQejZOBWacvrWa494wNtCm/w16lBG/nW /EiQ/VDzFz1Vh5uDPngUhytg9TEGnYko5eh2ME26cMOD0CfiYaQ78RpPGprhWgJJ 57mrVnlY0sa3LhTWmXEwhcg0J/CtQSX+Uj8GwXnG8mSxdqvPufKk0w3H/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCh8tGhBbj/6arsSOJgOfN8ZmFKMB8GA1UdIwQY MBaAFAusgoBHAK02U4v4bzTAc+lxQw2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hNzI4OTEtZGUyZi00MTU2LWEwMTEt NDNmNjRiY2VhOTlkLzEvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9hNzI4OTEtZGUyZi00MTU2LWEwMTEtNDNmNjRiY2VhOTlk LzEvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6SZK9o7 r13b0/ZmxT1RQRFQ7XUJsGAiy+pHsbwgsSVES6XibaexNrNoQNPP5i1vXV6rL0bQ QMXsBmxho92pk+OMPkBtB/ssA0lzCNckIOkzuRJuqT6z6ZsQ1YiqGnWUSDKqvEEA 9BeJV5HFIwHGS5GBDJHShV13XT+zRClW6q1g4oShk1QYskkc+l3sXdUymMv2KyxR 8ek2ktD4OeZRo4a+D7Py5qCGyh3ZphR0FyMz22lNCbhmrnp0wkNmVHgHnwo49Pc9 suOijXonQe3M/D6L/hhtzmFiDLP/VHDG7nu65sdIFedozpdPS9KKhEr2kF+fgAEN PTbgwdNO+dpiXg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:56:50 2025 by rpki-client