This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft File: g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft (raw, json) Hash identifier: 8McBaeAXHzrYyrO531LvDPzuM5nphjiTKENJsyC/Sao= Subject key identifier: 71:AC:20:5C:50:F3:EE:A9:9D:C6:37:DA:93:15:60:31:1F:C2:09:0D Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A Certificate issuer: /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a Certificate serial: 019AF1640E82E7E7DA3BAB1A7F2DBD1610C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 02:00:57 +0000 Manifest this update: Sat 06 Dec 2025 02:00:57 +0000 Manifest next update: Sun 07 Dec 2025 02:00:57 +0000 Files and hashes: 1: 7Atpb8ICQNgBoE2VxygDoXR916c.roa (hash: 9LfiFF+kHY8QeDVlYR0804RgSHl5CYTGB3eoMEBzGw0=) 2: g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl (hash: wdigdBhYeyr/xvC/kUoLBC/vK+jyCrv7xH+M5VxuHG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:0e:82:e7:e7:da:3b:ab:1a:7f:2d:bd:16:10:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a Validity Not Before: Dec 6 02:00:57 2025 GMT Not After : Dec 7 02:00:57 2025 GMT Subject: CN=71ac205c50f3eea99dc637da931560311fc2090d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:31:5b:bf:d1:62:ea:40:c8:83:87:e2:83:74: 47:29:2c:8f:e6:ae:1d:65:52:14:68:ea:97:f1:dd: 7e:9d:c3:74:49:98:bf:e8:7f:a4:60:7a:6d:be:8e: 4c:57:4f:4e:c2:81:6f:fd:99:6d:65:f6:7b:b7:e7: d1:e1:a7:7d:66:c4:88:1e:c3:0b:33:5a:d0:cb:59: 18:77:26:74:b6:32:ce:1f:36:d2:98:fa:27:f6:88: ba:e6:3c:02:84:b0:9a:8a:64:83:59:5c:03:af:c9: 53:64:02:f2:65:5f:f5:41:42:16:1b:2f:d6:01:98: 65:93:23:27:06:2d:68:f6:1c:c6:da:1b:c1:35:ed: bd:72:a5:60:60:b1:cf:7e:00:03:49:e7:e3:b2:22: c8:e0:8a:66:99:7e:e1:6d:58:64:61:a1:6b:c1:80: 22:a5:ce:4f:7b:27:7e:6b:f9:51:2b:7a:e4:86:41: 00:48:7d:e8:70:74:64:43:a2:32:e3:aa:53:b3:9f: 02:e1:f8:bf:d8:18:5b:3f:7a:4e:d5:6b:e1:bd:3d: 64:86:77:29:fd:40:20:8e:26:c2:b2:94:a7:45:aa: c8:b1:3c:fe:f4:7c:7a:99:31:95:37:8b:1b:d0:1c: 7b:46:95:81:af:b7:c6:05:2b:35:40:4c:99:23:e6: 3a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AC:20:5C:50:F3:EE:A9:9D:C6:37:DA:93:15:60:31:1F:C2:09:0D X509v3 Authority Key Identifier: keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:26:c7:04:df:44:b2:3e:62:72:1b:62:3a:c2:18:47:3a:4c: f9:5c:ff:31:a9:35:0a:b7:4a:cb:9a:97:97:bf:08:ff:2f:14: cf:e5:80:f1:ea:3f:61:85:3a:89:98:9c:eb:9a:88:c8:4b:2b: bc:27:02:65:ac:62:40:4f:9a:1a:b6:e5:96:0b:ba:92:ab:d4: ca:82:b1:1e:21:c9:ff:60:3b:b3:0f:a4:b0:5b:02:bd:35:6d: ce:e8:4e:31:5a:ea:90:23:d0:a5:0f:73:86:9b:98:bf:8a:aa: cc:f2:56:0b:d6:3c:0c:46:70:62:77:e6:c9:23:17:f8:0a:20: 72:03:21:bb:77:77:ed:92:f3:06:59:79:0a:08:9f:21:9c:58: 18:e3:04:52:12:af:f9:78:82:4f:53:66:fb:c7:68:18:93:c5: 97:83:df:da:9e:d1:04:7f:db:49:76:a7:5c:28:47:2c:cd:e7: 81:5f:6e:23:4d:d4:2e:c9:13:1f:87:45:1c:35:a0:bd:5e:ea: 0f:67:16:bf:96:66:0c:2a:ba:40:2e:b0:6a:7f:1e:a5:64:06: 84:7e:16:a0:4b:6c:41:ff:aa:d9:c9:25:5c:8b:32:79:28:e7: 07:95:da:05:1a:08:5a:dc:ab:d6:6a:2d:79:18:da:e9:af:32: 54:ee:38:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZA6C5+faO6safy29FhDDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYWM4OGYwMTcwY2JmZTQ0NmNmZDMxYTU4MjNjZGUwZTA5 MzE5OWEwHhcNMjUxMjA2MDIwMDU3WhcNMjUxMjA3MDIwMDU3WjAzMTEwLwYDVQQD Eyg3MWFjMjA1YzUwZjNlZWE5OWRjNjM3ZGE5MzE1NjAzMTFmYzIwOTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjFbv9Fi6kDIg4fig3RHKSyP5q4d ZVIUaOqX8d1+ncN0SZi/6H+kYHptvo5MV09OwoFv/ZltZfZ7t+fR4ad9ZsSIHsML M1rQy1kYdyZ0tjLOHzbSmPon9oi65jwChLCaimSDWVwDr8lTZALyZV/1QUIWGy/W AZhlkyMnBi1o9hzG2hvBNe29cqVgYLHPfgADSefjsiLI4IpmmX7hbVhkYaFrwYAi pc5Peyd+a/lRK3rkhkEASH3ocHRkQ6Iy46pTs58C4fi/2BhbP3pO1WvhvT1khncp /UAgjibCspSnRarIsTz+9Hx6mTGVN4sb0Bx7RpWBr7fGBSs1QEyZI+Y61QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGsIFxQ8+6pncY32pMVYDEfwgkNMB8GA1UdIwQY MBaAFIOsiPAXDL/kRs/TGlgjzeDgkxmaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzZ5SThCY012LVJHejlNYVdDUE40T0NUR1pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lZDY5ZGMtODBkNy00MzM2LWEyMmQt ODQ4YWY2OThkMGQ4LzEvZzZ5SThCY012LVJHejlNYVdDUE40T0NUR1pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lZDY5ZGMtODBkNy00MzM2LWEyMmQtODQ4YWY2OThkMGQ4 LzEvZzZ5SThCY012LVJHejlNYVdDUE40T0NUR1pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0ibHBN9E sj5ichtiOsIYRzpM+Vz/Mak1CrdKy5qXl78I/y8Uz+WA8eo/YYU6iZic65qIyEsr vCcCZaxiQE+aGrbllgu6kqvUyoKxHiHJ/2A7sw+ksFsCvTVtzuhOMVrqkCPQpQ9z hpuYv4qqzPJWC9Y8DEZwYnfmySMX+AogcgMhu3d37ZLzBll5CgifIZxYGOMEUhKv +XiCT1Nm+8doGJPFl4Pf2p7RBH/bSXanXChHLM3ngV9uI03ULskTH4dFHDWgvV7q D2cWv5ZmDCq6QC6wan8epWQGhH4WoEtsQf+q2cklXIsyeSjnB5XaBRoIWtyr1mot eRja6a8yVO44yQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:29:13 2025 by rpki-client