This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft File: v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft (raw, json) Hash identifier: R8cCJMWzzVN7A4sKZEQY+iul5tnKBeGGg1C3sS4gzPY= Subject key identifier: F7:BE:04:69:86:7E:12:6A:59:A7:86:94:EE:A8:9D:FD:01:F0:68:2E Authority key identifier: BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11 Certificate issuer: /CN=bfac12dab75d9c09f3120179373e995ae3917911 Certificate serial: 019B3231B16984AC59F46DF01CF7F55D1CE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft Manifest number: 036A Signing time: Thu 18 Dec 2025 16:01:15 +0000 Manifest this update: Thu 18 Dec 2025 16:01:15 +0000 Manifest next update: Fri 19 Dec 2025 16:01:15 +0000 Files and hashes: 1: jzM77P9xsYn5MAVakoO0HLR2EkI.roa (hash: h0SxsVCXMkdE1oBd8hWK7t+rP5KlnAbkMvVnkeRV7Cs=) 2: v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl (hash: LWFUQP4omJf+an/Y3ZfyBkEzTyhqRA1HmuEMJ8f7Lkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:b1:69:84:ac:59:f4:6d:f0:1c:f7:f5:5d:1c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfac12dab75d9c09f3120179373e995ae3917911 Validity Not Before: Dec 18 16:01:15 2025 GMT Not After : Dec 19 16:01:15 2025 GMT Subject: CN=f7be0469867e126a59a78694eea89dfd01f0682e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:93:66:b6:75:cb:2f:d4:19:9b:86:62:b3:67: 10:0f:ba:19:b3:49:c4:2f:8a:78:2f:2a:b1:29:8b: 1c:51:51:0f:85:1e:e1:42:ba:e8:78:44:90:ab:94: 09:ea:a5:f9:be:64:8c:9e:ad:48:e3:a0:8a:e7:eb: 32:d9:19:84:1f:c0:07:6b:e2:5d:1b:40:4a:cc:06: a1:2a:00:e1:99:f4:4d:c7:61:5d:a0:80:27:0b:bd: 92:05:8d:07:8d:c1:55:ce:10:3a:9d:3d:76:f9:51: c0:f1:95:18:70:ae:37:66:d6:10:19:f0:cd:6c:bb: 40:e9:91:22:c2:ba:5c:68:8b:6b:84:e8:6d:71:19: bf:2b:ca:80:03:ce:4d:63:7e:a2:eb:ed:46:96:38: dc:0d:68:2d:dd:f7:6a:60:61:68:93:98:07:f9:31: af:28:54:50:86:23:26:4f:ef:01:af:6e:bd:9d:9f: e0:0b:18:11:5c:65:ea:37:cd:fa:f4:b8:10:22:5d: 92:05:0e:01:76:43:1d:fa:c1:8f:17:43:6c:04:df: 37:20:9d:cf:19:91:f4:69:65:e6:93:70:f6:37:98: e4:d8:29:57:6f:62:cc:56:77:6a:37:35:88:38:ce: f3:7a:6e:1c:6b:81:d5:c6:19:ba:65:ce:ed:f6:f4: 19:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BE:04:69:86:7E:12:6A:59:A7:86:94:EE:A8:9D:FD:01:F0:68:2E X509v3 Authority Key Identifier: keyid:BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:08:e1:96:ad:2b:02:2c:96:88:a6:7c:70:0f:db:c5:1e:1a: fa:76:cf:1b:e0:a1:c7:55:e9:fb:21:e9:2f:00:13:8a:a2:4f: 1b:05:e7:7e:8e:e1:fc:16:8e:2b:22:e2:8b:ce:b8:38:fd:78: 02:ab:60:cf:6f:c9:43:42:09:9e:31:7d:a6:61:6f:18:ec:57: d5:d9:8b:1f:71:3f:04:12:f3:bd:53:c0:ee:6e:2f:36:89:94: 95:39:62:53:a0:30:7d:3c:65:da:6b:58:cd:d1:32:40:38:a9: 96:c8:be:2b:d8:4d:c4:5d:0f:ee:51:ea:aa:ed:1d:0a:95:28: 4d:35:83:45:90:c1:b5:41:e9:d7:74:2f:a5:e4:7d:2e:d2:dd: 46:57:c6:9a:08:c0:f9:1e:78:f6:f0:53:02:e5:d8:8e:c0:a1: 77:81:03:d9:4b:52:69:53:22:66:5f:cc:bf:4e:d4:d2:87:8f: 10:9d:05:56:80:2c:b4:db:5c:05:69:4d:4e:08:64:07:92:76: 67:1b:27:37:35:21:9d:48:0e:b4:64:99:ce:6f:7f:61:fb:96: e3:26:31:cb:04:97:1a:af:b8:a6:ce:d2:4b:ea:b8:98:26:9f: 42:29:fb:17:96:1f:e6:42:29:d8:e7:89:ea:f6:a1:be:f4:c6: e3:c6:c1:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMbFphKxZ9G3wHPf1XRziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYWMxMmRhYjc1ZDljMDlmMzEyMDE3OTM3M2U5OTVhZTM5 MTc5MTEwHhcNMjUxMjE4MTYwMTE1WhcNMjUxMjE5MTYwMTE1WjAzMTEwLwYDVQQD EyhmN2JlMDQ2OTg2N2UxMjZhNTlhNzg2OTRlZWE4OWRmZDAxZjA2ODJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5NmtnXLL9QZm4Zis2cQD7oZs0nE L4p4LyqxKYscUVEPhR7hQrroeESQq5QJ6qX5vmSMnq1I46CK5+sy2RmEH8AHa+Jd G0BKzAahKgDhmfRNx2FdoIAnC72SBY0HjcFVzhA6nT12+VHA8ZUYcK43ZtYQGfDN bLtA6ZEiwrpcaItrhOhtcRm/K8qAA85NY36i6+1GljjcDWgt3fdqYGFok5gH+TGv KFRQhiMmT+8Br269nZ/gCxgRXGXqN8369LgQIl2SBQ4BdkMd+sGPF0NsBN83IJ3P GZH0aWXmk3D2N5jk2ClXb2LMVndqNzWIOM7zem4ca4HVxhm6Zc7t9vQZsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPe+BGmGfhJqWaeGlO6onf0B8GguMB8GA1UdIwQY MBaAFL+sEtq3XZwJ8xIBeTc+mVrjkXkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjZ3UzJyZGRuQW56RWdGNU56NlpXdU9SZVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kOTA3NGQtNzdkYy00OWZjLWFjYjMt MDNkOWJhNTAzZGMxLzEvdjZ3UzJyZGRuQW56RWdGNU56NlpXdU9SZVJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9kOTA3NGQtNzdkYy00OWZjLWFjYjMtMDNkOWJhNTAzZGMx LzEvdjZ3UzJyZGRuQW56RWdGNU56NlpXdU9SZVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwjhlq0r AiyWiKZ8cA/bxR4a+nbPG+Chx1Xp+yHpLwATiqJPGwXnfo7h/BaOKyLii864OP14 Aqtgz2/JQ0IJnjF9pmFvGOxX1dmLH3E/BBLzvVPA7m4vNomUlTliU6AwfTxl2mtY zdEyQDiplsi+K9hNxF0P7lHqqu0dCpUoTTWDRZDBtUHp13QvpeR9LtLdRlfGmgjA +R549vBTAuXYjsChd4ED2UtSaVMiZl/Mv07U0oePEJ0FVoAstNtcBWlNTghkB5J2 ZxsnNzUhnUgOtGSZzm9/YfuW4yYxywSXGq+4ps7SS+q4mCafQin7F5Yf5kIp2OeJ 6vahvvTG48bB1g== -----END CERTIFICATE-----Generated at Thu Dec 18 20:34:24 2025 by rpki-client