This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft File: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft (raw, json) Hash identifier: 2sv+Rgx7jsqnUOAJCVKj039XXRWHgIh0G24i4pIVrew= Subject key identifier: BA:B9:65:22:60:1F:C2:66:0F:FF:DC:05:52:80:3A:45:83:1B:A0:E0 Authority key identifier: D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD Certificate issuer: /CN=d3acd2b7b7473af4350ea1aba83d177585ceedad Certificate serial: 019AF12EC9C2D2912A67D7F1CCD275143A92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:02:46 +0000 Manifest this update: Sat 06 Dec 2025 01:02:46 +0000 Manifest next update: Sun 07 Dec 2025 01:02:46 +0000 Files and hashes: 1: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl (hash: t7UReSABcPBMPdHhN7DAWgivOcrmWi8yzXFRLF/cxH0=) 2: ruzowO5hkwvsrCMVqncyR6RC2cM.roa (hash: 3UI+kEeYIksu5ENYxWY/kKHH2Zgvkj1CId+2uWMcQI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:c9:c2:d2:91:2a:67:d7:f1:cc:d2:75:14:3a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3acd2b7b7473af4350ea1aba83d177585ceedad Validity Not Before: Dec 6 01:02:46 2025 GMT Not After : Dec 7 01:02:46 2025 GMT Subject: CN=bab96522601fc2660fffdc0552803a45831ba0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d9:7b:0a:c1:38:71:5c:4e:5f:41:44:b1:f6: d7:44:0b:06:4d:ea:bf:1e:c8:4b:71:fb:aa:95:3d: 50:b6:2f:c7:0d:15:75:67:2a:75:97:b5:dc:12:dc: 8e:c5:c3:fc:c0:15:1f:65:81:a7:58:53:68:63:9e: e6:8f:86:d2:49:a5:12:53:ac:5b:47:89:94:9e:6c: 1e:1d:d7:17:e8:c2:98:37:7e:59:d4:a5:56:e4:99: 1f:cf:d9:64:f3:40:a9:67:b5:11:99:a9:c6:6a:22: 36:5c:e6:ab:f3:88:f5:e7:df:e5:11:2c:4d:d5:4b: 3a:8c:b9:86:d3:c2:60:96:1e:00:0f:2d:3a:ee:1d: 86:c8:ac:8d:af:dc:3a:d0:2a:ac:6c:08:90:98:54: ff:c5:13:b7:d1:17:32:3a:68:35:ac:05:4e:f0:81: 2f:23:42:7e:79:b3:e6:fb:57:42:58:59:9f:f0:4b: c5:1e:e7:e6:85:b8:87:e6:cd:94:2e:ea:8e:51:7f: c6:5a:9e:f2:e9:ff:41:bb:f1:b7:70:1b:7b:86:f7: cf:ab:0b:19:6c:09:0a:f7:3f:9f:2e:48:c1:9f:9c: f5:aa:9a:18:ab:c3:22:b8:e7:56:9c:6b:87:97:e7: 0c:e3:d8:47:f7:cd:ec:12:70:57:82:df:ba:1f:63: 4b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B9:65:22:60:1F:C2:66:0F:FF:DC:05:52:80:3A:45:83:1B:A0:E0 X509v3 Authority Key Identifier: keyid:D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d7:f2:b6:18:ad:2b:23:c9:ad:2b:75:6c:15:75:28:61:be: a7:1f:c4:b6:d8:54:d1:77:1e:35:09:54:04:92:41:53:dc:4c: d9:7d:73:a9:00:26:bc:74:61:61:a7:2d:eb:16:c8:78:55:17: 52:ad:78:d8:2a:b5:6c:85:48:97:42:bc:82:42:71:33:f0:41: 0b:20:00:3b:d0:df:d2:d0:37:59:4e:be:ce:a5:3b:e4:b0:39: d4:ef:be:d2:72:a4:fb:16:33:29:d3:d3:67:06:31:65:08:c5: 36:7d:3d:7b:f2:7b:03:90:69:5e:6b:f5:16:ca:2b:ae:1e:c8: de:bf:9a:bb:53:2e:2f:52:13:4d:c5:2c:35:45:60:64:e5:91: b8:3f:34:a5:e6:24:53:77:5f:ca:3f:29:9b:c2:19:17:3e:c7: ce:1b:5e:89:65:8c:56:56:54:de:49:af:dd:2a:b2:73:fe:87: 47:3e:a4:b1:97:1e:d0:00:9c:d4:d7:9c:91:21:1a:43:f4:fb: 8a:3a:10:5c:a4:c2:80:1c:58:34:16:2d:5a:62:46:90:92:ac: d9:5b:89:15:02:3b:45:43:a7:b5:0c:d1:6a:3d:f7:3b:57:44: 82:41:62:98:21:b3:d8:75:17:2b:95:89:31:4e:95:37:bb:a7: 2f:f2:36:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLsnC0pEqZ9fxzNJ1FDqSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYWNkMmI3Yjc0NzNhZjQzNTBlYTFhYmE4M2QxNzc1ODVj ZWVkYWQwHhcNMjUxMjA2MDEwMjQ2WhcNMjUxMjA3MDEwMjQ2WjAzMTEwLwYDVQQD EyhiYWI5NjUyMjYwMWZjMjY2MGZmZmRjMDU1MjgwM2E0NTgzMWJhMGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9l7CsE4cVxOX0FEsfbXRAsGTeq/ HshLcfuqlT1Qti/HDRV1Zyp1l7XcEtyOxcP8wBUfZYGnWFNoY57mj4bSSaUSU6xb R4mUnmweHdcX6MKYN35Z1KVW5Jkfz9lk80CpZ7URmanGaiI2XOar84j159/lESxN 1Us6jLmG08Jglh4ADy067h2GyKyNr9w60CqsbAiQmFT/xRO30RcyOmg1rAVO8IEv I0J+ebPm+1dCWFmf8EvFHufmhbiH5s2ULuqOUX/GWp7y6f9Bu/G3cBt7hvfPqwsZ bAkK9z+fLkjBn5z1qpoYq8MiuOdWnGuHl+cM49hH983sEnBXgt+6H2NLvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLq5ZSJgH8JmD//cBVKAOkWDG6DgMB8GA1UdIwQY MBaAFNOs0re3Rzr0NQ6hq6g9F3WFzu2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDZ6U3Q3ZEhPdlExRHFHcnFEMFhkWVhPN2EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80NmMyMGMtZjE2Ni00MDQxLWEwMWIt MGVmZWM2ZWE3N2M2LzEvMDZ6U3Q3ZEhPdlExRHFHcnFEMFhkWVhPN2EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80NmMyMGMtZjE2Ni00MDQxLWEwMWItMGVmZWM2ZWE3N2M2 LzEvMDZ6U3Q3ZEhPdlExRHFHcnFEMFhkWVhPN2EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdfythit KyPJrSt1bBV1KGG+px/EtthU0XceNQlUBJJBU9xM2X1zqQAmvHRhYact6xbIeFUX Uq142Cq1bIVIl0K8gkJxM/BBCyAAO9Df0tA3WU6+zqU75LA51O++0nKk+xYzKdPT ZwYxZQjFNn09e/J7A5BpXmv1Fsorrh7I3r+au1MuL1ITTcUsNUVgZOWRuD80peYk U3dfyj8pm8IZFz7HzhteiWWMVlZU3kmv3Sqyc/6HRz6ksZce0ACc1NeckSEaQ/T7 ijoQXKTCgBxYNBYtWmJGkJKs2VuJFQI7RUOntQzRaj33O1dEgkFimCGz2HUXK5WJ MU6VN7unL/I2xQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:28 2025 by rpki-client