This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft File: I06fdccyb3ZciWbC7cAKmCpep_A.mft (raw, json) Hash identifier: UHkiZ1tAEQLhnXYdrqsP5gezJCiqRq9cNHgMlD2P94E= Subject key identifier: 5C:C5:98:F5:A2:90:19:60:B9:3C:36:F7:F8:A0:46:53:E9:21:7F:04 Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0 Certificate issuer: /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0 Certificate serial: 019B273FA18EFDD2223A210B041F47AF3A94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft Manifest number: 14EB Signing time: Tue 16 Dec 2025 13:00:40 +0000 Manifest this update: Tue 16 Dec 2025 13:00:40 +0000 Manifest next update: Wed 17 Dec 2025 13:00:40 +0000 Files and hashes: 1: I06fdccyb3ZciWbC7cAKmCpep_A.crl (hash: fS5nm/xQcK136gEACc27TUuEg/qCMbazS8VA8kPoWpA=) 2: _abtUqDmMxDQ2RmQqkGL8N8DjTE.roa (hash: CRHU3YWrzulAziPCk+beyoXQoDHAl8oOT3cyglDGbAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:a1:8e:fd:d2:22:3a:21:0b:04:1f:47:af:3a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0 Validity Not Before: Dec 16 13:00:40 2025 GMT Not After : Dec 17 13:00:40 2025 GMT Subject: CN=5cc598f5a2901960b93c36f7f8a04653e9217f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c0:06:6f:44:4f:98:9d:6a:cf:34:ae:00:01: 4b:67:29:65:b7:43:83:d2:d6:22:45:dc:f9:60:66: d9:ee:e5:64:22:cb:1d:ab:54:29:cf:65:89:9c:01: 47:1a:08:94:f2:b9:69:c5:0c:4d:ea:e5:69:86:99: 64:7e:cc:07:d8:f3:80:01:04:b9:8b:ab:86:e1:0f: a2:be:c5:83:a1:73:d5:c9:e2:c9:20:71:50:5d:03: 5e:95:98:7a:fc:13:a3:0e:05:35:e1:3f:ee:5b:8d: 42:eb:6d:d5:27:7d:9b:6c:6d:21:e1:6d:7a:f7:ec: 2c:1e:61:d0:e5:ff:3a:f4:f4:1a:fb:b2:5e:dc:bf: 4e:4b:8f:e0:b9:e3:2e:12:a0:5d:4e:8c:83:6b:f3: 12:8b:10:fb:c3:30:73:65:92:cc:4a:ba:fd:91:c8: 13:3e:1e:25:92:42:8b:2f:2e:6f:03:13:60:02:45: 71:19:28:e1:4b:19:95:1a:9a:d2:4f:ab:61:81:13: d2:9a:db:4b:d5:ef:55:a7:00:e2:b7:c8:88:72:d4: 4e:71:61:75:88:ff:87:1a:1d:4d:f2:5b:29:a5:fa: 5a:f6:b6:c1:45:86:33:48:a2:94:5a:74:db:43:ec: 2b:fe:64:11:0a:88:d5:00:c2:a4:68:d3:09:bb:ec: 52:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C5:98:F5:A2:90:19:60:B9:3C:36:F7:F8:A0:46:53:E9:21:7F:04 X509v3 Authority Key Identifier: keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:bc:24:71:0b:0a:5a:68:8f:1e:d4:1e:50:e4:9a:25:ac:94: db:b2:5e:d4:16:62:d3:08:79:7f:85:ae:d0:1a:56:d0:e3:e4: 04:5e:c0:d6:bc:22:8b:96:c7:d4:5a:8c:66:27:f5:c1:15:3f: 34:52:0e:33:ee:3f:96:80:8f:57:22:e5:5e:ca:de:36:0f:5b: f6:57:e2:5b:fb:31:50:07:21:6b:68:2f:82:34:db:f7:85:9d: 5d:53:03:9b:69:13:cf:c4:cf:ac:ee:65:dd:de:47:a6:42:2b: b9:6e:19:aa:ac:7e:36:a0:fa:e1:4a:ba:04:d3:aa:65:07:2f: ed:01:12:4f:34:1f:1c:04:2f:08:fb:65:03:80:98:2a:e7:f0: 89:c5:68:54:ad:1b:d8:3d:74:3c:a7:f3:a8:65:83:f4:b6:13: 36:d9:b7:71:c1:07:d9:75:19:4d:d3:e1:92:a2:b0:d3:a1:1c: d7:10:41:0d:82:9b:32:ff:1c:9e:91:b6:aa:9a:af:41:0f:44: 69:f3:6c:cd:6a:5f:95:fd:8b:60:ae:9d:50:ec:d4:93:23:59: 39:65:7b:a3:8c:e4:15:c8:f5:48:83:4d:b9:c8:14:9f:1e:7d: ca:bf:a5:92:3a:59:c7:8e:96:6d:25:bd:84:c0:6c:dd:ef:6d: bd:cc:48:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP6GO/dIiOiELBB9HrzqUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGU5Zjc1YzczMjZmNzY1Yzg5NjZjMmVkYzAwYTk4MmE1 ZWE3ZjAwHhcNMjUxMjE2MTMwMDQwWhcNMjUxMjE3MTMwMDQwWjAzMTEwLwYDVQQD Eyg1Y2M1OThmNWEyOTAxOTYwYjkzYzM2ZjdmOGEwNDY1M2U5MjE3ZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcAGb0RPmJ1qzzSuAAFLZyllt0OD 0tYiRdz5YGbZ7uVkIssdq1Qpz2WJnAFHGgiU8rlpxQxN6uVphplkfswH2POAAQS5 i6uG4Q+ivsWDoXPVyeLJIHFQXQNelZh6/BOjDgU14T/uW41C623VJ32bbG0h4W16 9+wsHmHQ5f869PQa+7Je3L9OS4/gueMuEqBdToyDa/MSixD7wzBzZZLMSrr9kcgT Ph4lkkKLLy5vAxNgAkVxGSjhSxmVGprST6thgRPSmttL1e9VpwDit8iIctROcWF1 iP+HGh1N8lsppfpa9rbBRYYzSKKUWnTbQ+wr/mQRCojVAMKkaNMJu+xSlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzFmPWikBlguTw29/igRlPpIX8EMB8GA1UdIwQY MBaAFCNOn3XHMm92XIlmwu3ACpgqXqfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTA2ZmRjY3liM1pjaVdiQzdjQUttQ3BlcF9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82MzVhMGQtOTIxZi00NzExLWI3ZDQt NzdkZWUyZDc5YWU0LzEvSTA2ZmRjY3liM1pjaVdiQzdjQUttQ3BlcF9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82MzVhMGQtOTIxZi00NzExLWI3ZDQtNzdkZWUyZDc5YWU0 LzEvSTA2ZmRjY3liM1pjaVdiQzdjQUttQ3BlcF9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbwkcQsK WmiPHtQeUOSaJayU27Je1BZi0wh5f4Wu0BpW0OPkBF7A1rwii5bH1FqMZif1wRU/ NFIOM+4/loCPVyLlXsreNg9b9lfiW/sxUAcha2gvgjTb94WdXVMDm2kTz8TPrO5l 3d5HpkIruW4Zqqx+NqD64Uq6BNOqZQcv7QESTzQfHAQvCPtlA4CYKufwicVoVK0b 2D10PKfzqGWD9LYTNtm3ccEH2XUZTdPhkqKw06Ec1xBBDYKbMv8cnpG2qpqvQQ9E afNszWpflf2LYK6dUOzUkyNZOWV7o4zkFcj1SINNucgUnx59yr+lkjpZx46WbSW9 hMBs3e9tvcxIOQ== -----END CERTIFICATE-----Generated at Tue Dec 16 21:30:55 2025 by rpki-client