This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json) Hash identifier: NlC7qFs+nUnQM9D4W2IGlrZU0iL3oU366m+r19RU/x8= Subject key identifier: E9:EE:B8:1D:85:98:F9:4F:D9:0B:4B:3D:E7:6D:45:15:04:92:0C:E6 Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa Certificate serial: 019AF12EA9274F552AE387F17B7A72A13523 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:02:38 +0000 Manifest this update: Sat 06 Dec 2025 01:02:38 +0000 Manifest next update: Sun 07 Dec 2025 01:02:38 +0000 Files and hashes: 1: 139lyeNlCTZU0BOy4AWB3XIegPQ.roa (hash: VzrpaxikQ2FR1JamVqwQwq75MdkFdQ6cyhvfG8bUdXQ=) 2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: b2Eh1RrWWH+tOaxdWppt9hTmFZabVTtf12EDEOc9bwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a9:27:4f:55:2a:e3:87:f1:7b:7a:72:a1:35:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa Validity Not Before: Dec 6 01:02:38 2025 GMT Not After : Dec 7 01:02:38 2025 GMT Subject: CN=e9eeb81d8598f94fd90b4b3de76d451504920ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b5:1e:27:59:5f:c8:ea:2b:2b:44:fe:80:55: 5a:84:83:6a:88:ab:1c:eb:e0:d9:0b:34:15:8f:54: 09:1e:ff:2e:9c:3c:d1:61:0e:45:90:fc:d3:09:e5: f3:df:31:1f:18:f7:86:01:0a:c2:b0:f2:ee:e6:19: d2:51:5f:2c:ee:6d:2b:d1:8f:25:bb:a8:a6:2f:d1: 96:46:bb:b6:d5:6e:df:b5:74:bd:92:d9:21:2d:44: 5e:59:17:56:7d:72:b0:bb:5f:e0:51:1e:d0:81:18: b3:9e:a6:61:23:78:c4:a7:25:fb:cc:80:29:ee:c1: 18:1f:08:6f:34:8b:f6:3b:e2:77:2e:25:ea:13:32: 9c:dd:8d:50:0d:6f:00:2e:f3:8a:6f:f4:a9:e6:75: d7:d0:cb:28:27:c3:6b:e2:70:21:ee:f9:10:3e:06: 8d:6e:6d:60:26:21:76:bd:c0:5e:09:0a:86:ea:e2: cc:d9:77:6d:46:d4:6e:36:ee:e8:21:51:54:16:e9: db:21:fb:e0:e0:1a:fb:0d:6f:bd:2c:03:16:c8:26: 43:29:26:58:6f:73:35:bd:18:41:fa:5a:5f:33:4e: fc:c8:b7:a8:e5:12:70:52:9f:28:74:2c:00:94:a1: 1c:f3:9b:e0:41:64:95:42:e3:e2:fe:8e:ce:ad:6c: 48:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EE:B8:1D:85:98:F9:4F:D9:0B:4B:3D:E7:6D:45:15:04:92:0C:E6 X509v3 Authority Key Identifier: keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:88:73:89:e9:78:53:a3:7d:45:49:b9:5b:99:33:48:f7:7f: 61:40:45:10:55:93:18:a8:b7:d0:f3:cb:b6:54:79:af:4d:b0: 41:3f:2d:b9:f9:e2:a9:4a:6b:be:0e:90:36:ae:d2:f4:34:48: cc:22:49:10:30:87:98:88:56:b9:ea:9b:88:cb:45:1d:61:30: d9:00:8e:0c:da:f6:aa:78:1b:6c:b8:73:88:07:db:07:87:dd: c8:99:7d:c1:e5:29:40:17:dd:b6:5b:7c:ae:ce:12:30:67:b9: 3c:ba:74:47:65:de:e8:7a:b3:1b:35:22:1e:27:81:e5:92:b7: 66:f7:5e:47:4f:ef:44:5b:9c:ff:ee:c2:78:38:5d:a6:57:d4: 3a:20:04:e7:a3:f3:8c:b5:dd:62:bc:1d:0c:16:6d:fd:c9:fe: 43:d4:40:a7:39:f4:0f:45:dd:23:21:db:f5:19:1a:17:60:39: ae:17:38:d7:1b:57:17:fd:c7:ec:83:06:33:97:33:11:94:5d: e5:e1:8a:e0:8d:0d:af:56:e3:10:b9:48:f4:92:74:60:4b:07: 3f:d9:e9:53:52:2b:3a:5e:d5:f0:b1:84:27:3e:90:ec:fb:d6: d8:f0:1f:ac:cf:2e:c4:ce:04:19:7f:f2:c1:46:39:36:24:32: f4:f1:cb:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqknT1Uq44fxe3pyoTUjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNjZjNTNiMTM1NjZkMDFjNGE4OTNhZGYxMzBiYmI0ZmEx NjUzYWEwHhcNMjUxMjA2MDEwMjM4WhcNMjUxMjA3MDEwMjM4WjAzMTEwLwYDVQQD EyhlOWVlYjgxZDg1OThmOTRmZDkwYjRiM2RlNzZkNDUxNTA0OTIwY2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rUeJ1lfyOorK0T+gFVahINqiKsc 6+DZCzQVj1QJHv8unDzRYQ5FkPzTCeXz3zEfGPeGAQrCsPLu5hnSUV8s7m0r0Y8l u6imL9GWRru21W7ftXS9ktkhLUReWRdWfXKwu1/gUR7QgRiznqZhI3jEpyX7zIAp 7sEYHwhvNIv2O+J3LiXqEzKc3Y1QDW8ALvOKb/Sp5nXX0MsoJ8Nr4nAh7vkQPgaN bm1gJiF2vcBeCQqG6uLM2XdtRtRuNu7oIVFUFunbIfvg4Br7DW+9LAMWyCZDKSZY b3M1vRhB+lpfM078yLeo5RJwUp8odCwAlKEc85vgQWSVQuPi/o7OrWxInQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnuuB2FmPlP2QtLPedtRRUEkgzmMB8GA1UdIwQY MBaAFGtmxTsTVm0BxKiTrfEwu7T6FlOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2Yt N2JjMjY4YTBiNTE3LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2YtN2JjMjY4YTBiNTE3 LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1Yhziel4 U6N9RUm5W5kzSPd/YUBFEFWTGKi30PPLtlR5r02wQT8tufniqUprvg6QNq7S9DRI zCJJEDCHmIhWueqbiMtFHWEw2QCODNr2qngbbLhziAfbB4fdyJl9weUpQBfdtlt8 rs4SMGe5PLp0R2Xe6HqzGzUiHieB5ZK3ZvdeR0/vRFuc/+7CeDhdplfUOiAE56Pz jLXdYrwdDBZt/cn+Q9RApzn0D0XdIyHb9RkaF2A5rhc41xtXF/3H7IMGM5czEZRd 5eGK4I0Nr1bjELlI9JJ0YEsHP9npU1IrOl7V8LGEJz6Q7PvW2PAfrM8uxM4EGX/y wUY5NiQy9PHLSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:09:28 2025 by rpki-client