This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json) Hash identifier: uNdeBMf74wtF9S0h6mHqj3OtZrh75sx82d8IFAJQ+F0= Subject key identifier: 46:D2:2D:2F:77:C7:31:23:60:90:D3:A3:F3:B6:83:54:38:0F:70:67 Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50 Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150 Certificate serial: 019AF38917C151F5679831A6B27BC1163241 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft Manifest number: 048D Signing time: Sat 06 Dec 2025 12:00:39 +0000 Manifest this update: Sat 06 Dec 2025 12:00:39 +0000 Manifest next update: Sun 07 Dec 2025 12:00:39 +0000 Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: jatixA0JpdwyAIoKFCynDzymMQu6/uix7zvADpdANHo=) 2: BDHKukDv4jqfvg5mUVq9SOfKkHk.roa (hash: r69AyZ5q//j/yv/BwLLu5AvuWEdbokVUHIhkdE53vJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:17:c1:51:f5:67:98:31:a6:b2:7b:c1:16:32:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150 Validity Not Before: Dec 6 12:00:39 2025 GMT Not After : Dec 7 12:00:39 2025 GMT Subject: CN=46d22d2f77c731236090d3a3f3b68354380f7067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6f:4a:17:9d:92:c6:a9:07:4a:9c:74:89:1d: cf:7d:b0:6b:f4:0c:a4:97:30:60:ee:fd:8f:e0:75: 2b:ee:c0:4d:4b:85:e7:27:84:b5:f4:67:70:a9:6e: 1c:5d:89:cb:5e:c9:0e:a6:d6:94:2a:3a:1f:a8:05: 0a:45:62:25:41:01:ed:11:71:fb:39:da:a2:5f:0b: 88:28:ca:0d:2f:ff:90:28:f0:6e:01:55:08:3b:33: b9:8e:6d:c4:e1:be:d5:2c:c9:2c:9b:a5:a1:36:be: 97:4d:3e:52:f0:c0:8c:00:36:88:17:d9:be:65:e9: 05:86:41:49:7d:e1:0b:22:e7:a8:28:df:cb:e2:08: 62:a1:d9:65:0b:5c:46:c1:0b:f1:20:83:7e:c6:27: b4:02:0a:71:42:5e:3e:21:f0:92:40:9d:78:3f:e8: 89:8f:11:4b:2e:e7:d7:e0:8a:c0:0b:b3:98:a5:87: 68:d9:c6:84:f7:62:ec:76:8c:a7:81:4f:b4:24:80: 28:61:3f:6c:62:99:c1:c2:c0:98:8a:6d:57:ef:69: e0:52:9a:8c:f3:c7:d6:95:8d:ab:b8:43:3a:a3:5c: 3a:ae:81:fc:12:60:70:f4:af:dc:d5:f0:49:b8:1d: f5:65:e8:a4:89:a4:11:58:48:b0:13:37:f0:a9:0b: 3a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D2:2D:2F:77:C7:31:23:60:90:D3:A3:F3:B6:83:54:38:0F:70:67 X509v3 Authority Key Identifier: keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:8f:43:0f:2f:bd:b2:98:b8:e1:c2:92:13:28:46:3f:3a:34: 1f:2f:09:18:17:f4:af:1b:71:6b:da:98:45:6c:91:e6:3b:e0: 91:ce:99:7e:a8:9e:e3:a7:ef:e5:90:25:4e:11:ea:30:a6:07: ef:f2:65:a7:47:74:02:2f:e6:eb:39:1e:e2:5c:26:ca:de:9a: 5e:ef:74:7b:62:dc:51:df:50:44:b2:ce:b5:77:30:c1:b8:c0: 4c:79:c0:85:8d:2d:67:08:9f:53:bc:0e:ba:9e:01:af:03:6a: 3d:24:da:ed:78:ed:53:fd:f9:f2:e7:55:c0:f8:15:c5:62:ba: ab:94:45:57:21:e7:6e:a7:bc:06:4c:18:93:88:6c:00:b1:2e: 12:84:2b:6d:1b:01:e3:b8:f9:20:5d:06:66:ac:7b:a3:22:cd: 4a:d7:31:f1:3b:fd:8e:10:a1:6b:e2:ae:e9:57:0d:bf:f9:47: 14:4a:4a:26:6d:ee:ab:55:bb:69:95:9e:73:e7:2c:b8:76:c4: d6:16:7a:ad:5c:5c:6e:0b:78:a9:5c:52:c9:d4:a8:0f:56:2c: 1a:9f:f5:ea:00:6f:1f:a2:2d:4b:33:60:86:65:9c:9c:fd:12: ab:b7:4e:43:43:da:a2:9e:db:f6:78:b5:22:83:a1:20:56:3e: 1c:b6:7d:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziRfBUfVnmDGmsnvBFjJBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYTYyYjMwOWEzNzg1NDI1OTBhMTJiMzljNWY3MGNkYjBl N2IxNTAwHhcNMjUxMjA2MTIwMDM5WhcNMjUxMjA3MTIwMDM5WjAzMTEwLwYDVQQD Eyg0NmQyMmQyZjc3YzczMTIzNjA5MGQzYTNmM2I2ODM1NDM4MGY3MDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3m9KF52SxqkHSpx0iR3PfbBr9Ayk lzBg7v2P4HUr7sBNS4XnJ4S19GdwqW4cXYnLXskOptaUKjofqAUKRWIlQQHtEXH7 OdqiXwuIKMoNL/+QKPBuAVUIOzO5jm3E4b7VLMksm6WhNr6XTT5S8MCMADaIF9m+ ZekFhkFJfeELIueoKN/L4ghiodllC1xGwQvxIIN+xie0AgpxQl4+IfCSQJ14P+iJ jxFLLufX4IrAC7OYpYdo2caE92LsdoyngU+0JIAoYT9sYpnBwsCYim1X72ngUpqM 88fWlY2ruEM6o1w6roH8EmBw9K/c1fBJuB31ZeikiaQRWEiwEzfwqQs6WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbSLS93xzEjYJDTo/O2g1Q4D3BnMB8GA1UdIwQY MBaAFAOmKzCaN4VCWQoSs5xfcM2w57FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDJhMTktNDc0Ni00NzhmLTk5MzYt MjczM2Y2OTljYjYyLzEvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDJhMTktNDc0Ni00NzhmLTk5MzYtMjczM2Y2OTljYjYy LzEvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARY9DDy+9 spi44cKSEyhGPzo0Hy8JGBf0rxtxa9qYRWyR5jvgkc6Zfqie46fv5ZAlThHqMKYH 7/Jlp0d0Ai/m6zke4lwmyt6aXu90e2LcUd9QRLLOtXcwwbjATHnAhY0tZwifU7wO up4BrwNqPSTa7XjtU/358udVwPgVxWK6q5RFVyHnbqe8BkwYk4hsALEuEoQrbRsB 47j5IF0GZqx7oyLNStcx8Tv9jhCha+Ku6VcNv/lHFEpKJm3uq1W7aZWec+csuHbE 1hZ6rVxcbgt4qVxSydSoD1YsGp/16gBvH6ItSzNghmWcnP0Sq7dOQ0Paop7b9ni1 IoOhIFY+HLZ98g== -----END CERTIFICATE-----Generated at Sat Dec 6 22:25:40 2025 by rpki-client