This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft File: D6vrbvgg09UvBTciM8VB7ksU82E.mft (raw, json) Hash identifier: Mkys93UR4DbwycIg+PmEIAlWzXOulc78QPrhLtLbjGA= Subject key identifier: FC:FA:8E:B2:77:DA:30:B0:C3:60:78:A8:55:50:2B:F0:BF:A5:21:50 Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61 Certificate issuer: /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361 Certificate serial: 019AF6F92E60AFC7A34A9D086FC2F765FD6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft Manifest number: 1766 Signing time: Sun 07 Dec 2025 04:01:56 +0000 Manifest this update: Sun 07 Dec 2025 04:01:56 +0000 Manifest next update: Mon 08 Dec 2025 04:01:56 +0000 Files and hashes: 1: Bk-PC_3JIm04gifM592QQdoN3Ks.roa (hash: iME6n6jnCDzSVb0/SGfLuBM5Wc4sPCswNojVHBOxZCs=) 2: D6vrbvgg09UvBTciM8VB7ksU82E.crl (hash: NMNKk14qDax13GUjsVJ1JMN6d/WkZXyOK1jTvZ3pw5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:2e:60:af:c7:a3:4a:9d:08:6f:c2:f7:65:fd:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361 Validity Not Before: Dec 7 04:01:56 2025 GMT Not After : Dec 8 04:01:56 2025 GMT Subject: CN=fcfa8eb277da30b0c36078a855502bf0bfa52150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d4:1b:86:48:a1:30:e7:c6:57:ce:f5:51:b0: b8:ae:33:64:f5:c1:9b:a1:7f:fd:a0:7b:bc:d2:77: 89:c8:16:1e:69:47:68:3b:3a:b0:a5:41:16:7b:7b: 15:21:21:ed:bc:3f:1f:ab:01:9d:35:ac:2f:01:15: 0c:48:69:c9:8b:78:e5:10:03:c2:40:0e:00:32:8a: 10:15:b2:97:77:52:d6:0e:a7:18:12:7c:01:69:45: 67:5c:5e:b1:e9:a6:03:cf:bf:3a:80:72:dc:b9:59: 88:df:fa:4e:94:23:2b:94:60:5b:b0:d3:0e:71:d4: 37:38:3b:72:ef:f6:cc:44:4b:6b:78:79:0d:31:16: b8:77:4e:0c:d4:ec:bd:17:a7:38:6f:f8:10:8f:65: 7e:c4:d1:f8:f3:b2:48:46:b1:49:bf:d3:68:61:c7: 21:d9:77:76:bd:f6:8c:7d:79:90:87:5e:ff:bd:5a: ec:c8:9e:bb:1f:51:a7:f5:67:ae:ff:46:ae:7c:c0: dd:c1:06:d9:1d:a5:f2:68:31:b0:14:2f:05:30:1f: 12:e0:29:d8:f4:17:c2:e9:21:0f:47:ec:7b:45:b6: f0:8a:62:55:1a:e7:f6:cd:98:0c:03:49:4e:81:c1: c6:83:02:22:43:cf:65:69:67:fe:2b:59:e4:c8:23: 78:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FA:8E:B2:77:DA:30:B0:C3:60:78:A8:55:50:2B:F0:BF:A5:21:50 X509v3 Authority Key Identifier: keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f9:0d:44:3e:96:bb:01:b4:de:90:34:2b:6d:45:bc:0b:a3: 55:49:35:87:a7:b7:fb:c2:71:a1:7a:b7:0a:19:fc:23:a9:28: 9c:da:f0:a5:79:9f:9f:67:45:d5:2e:b4:7e:53:ff:43:ee:bf: 4f:b3:ae:6c:80:49:05:40:13:fd:2a:ce:cb:34:d2:b9:bb:0b: 39:de:56:73:9d:ec:71:20:6f:a1:8e:50:ed:f7:72:35:3d:79: 37:69:14:ea:0c:12:8b:0f:cf:7a:e0:3b:cf:0a:25:47:d6:ed: 4e:d1:ab:5b:2d:28:80:83:58:26:63:75:82:50:46:36:2a:43: c8:72:0e:9f:09:68:5a:94:8e:da:7c:b8:ac:07:94:f4:13:09: 1a:95:65:20:35:1c:9e:3c:29:f9:39:f5:56:bb:48:7b:62:8b: 27:ba:89:83:a4:02:a6:18:ac:d3:c2:19:df:7e:f8:de:ad:b2: 38:f2:6d:7a:eb:cc:c0:7b:3c:0a:af:c2:57:b8:a3:22:fc:01: f4:a7:c9:9b:f5:dd:e0:ec:50:57:eb:03:66:7c:0b:08:07:c9: a4:df:f6:50:3c:a8:bd:dd:96:27:98:76:ba:87:a8:8a:94:ad: 60:e3:c4:d0:8a:97:2a:b8:8b:54:2c:3f:14:dd:83:6b:07:c6: 39:c5:dd:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+S5gr8ejSp0Ib8L3Zf1tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmYWJlYjZlZjgyMGQzZDUyZjA1MzcyMjMzYzU0MWVlNGIx NGYzNjEwHhcNMjUxMjA3MDQwMTU2WhcNMjUxMjA4MDQwMTU2WjAzMTEwLwYDVQQD EyhmY2ZhOGViMjc3ZGEzMGIwYzM2MDc4YTg1NTUwMmJmMGJmYTUyMTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39QbhkihMOfGV871UbC4rjNk9cGb oX/9oHu80neJyBYeaUdoOzqwpUEWe3sVISHtvD8fqwGdNawvARUMSGnJi3jlEAPC QA4AMooQFbKXd1LWDqcYEnwBaUVnXF6x6aYDz786gHLcuVmI3/pOlCMrlGBbsNMO cdQ3ODty7/bMREtreHkNMRa4d04M1Oy9F6c4b/gQj2V+xNH487JIRrFJv9NoYcch 2Xd2vfaMfXmQh17/vVrsyJ67H1Gn9Weu/0aufMDdwQbZHaXyaDGwFC8FMB8S4CnY 9BfC6SEPR+x7RbbwimJVGuf2zZgMA0lOgcHGgwIiQ89laWf+K1nkyCN4vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPz6jrJ32jCww2B4qFVQK/C/pSFQMB8GA1UdIwQY MBaAFA+r6274INPVLwU3IjPFQe5LFPNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mM2Q4MzQtY2VlZC00YmJkLWFiZTEt NWEzNzEyNjcwNWFkLzEvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mM2Q4MzQtY2VlZC00YmJkLWFiZTEtNWEzNzEyNjcwNWFk LzEvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfkNRD6W uwG03pA0K21FvAujVUk1h6e3+8JxoXq3Chn8I6konNrwpXmfn2dF1S60flP/Q+6/ T7OubIBJBUAT/SrOyzTSubsLOd5Wc53scSBvoY5Q7fdyNT15N2kU6gwSiw/PeuA7 zwolR9btTtGrWy0ogINYJmN1glBGNipDyHIOnwloWpSO2ny4rAeU9BMJGpVlIDUc njwp+Tn1VrtIe2KLJ7qJg6QCphis08IZ33743q2yOPJteuvMwHs8Cq/CV7ijIvwB 9KfJm/Xd4OxQV+sDZnwLCAfJpN/2UDyovd2WJ5h2uoeoipStYOPE0IqXKriLVCw/ FN2DawfGOcXdKw== -----END CERTIFICATE-----Generated at Sun Dec 7 07:10:50 2025 by rpki-client