This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft File: v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft (raw, json) Hash identifier: rgMDQ85hxVvGD+NoyWOBtYXRnoKwas9zzMbLpWlyrlQ= Subject key identifier: 11:14:AC:B8:A9:EE:B7:59:AC:AF:96:E2:80:E3:ED:15:AB:B5:DA:A3 Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC Certificate issuer: /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac Certificate serial: 019AFCC5025BEB33ACEA16A19648C12BDF55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft Manifest number: 13FA Signing time: Mon 08 Dec 2025 07:02:40 +0000 Manifest this update: Mon 08 Dec 2025 07:02:40 +0000 Manifest next update: Tue 09 Dec 2025 07:02:40 +0000 Files and hashes: 1: CwTJXDuwwtXY5lds5AcNMw4m4MM.roa (hash: pkjwfyNy3tBr0gdIHHue6NuT85XueEkqyX3eSoK30mk=) 2: v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl (hash: fNje1Muh3s3mXrMCGGaAvQZzVZDgQob3yRzuug3nIRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c5:02:5b:eb:33:ac:ea:16:a1:96:48:c1:2b:df:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac Validity Not Before: Dec 8 07:02:40 2025 GMT Not After : Dec 9 07:02:40 2025 GMT Subject: CN=1114acb8a9eeb759acaf96e280e3ed15abb5daa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9c:4d:2a:58:39:b1:4a:92:1e:b9:69:d3:3a: 91:d5:1b:a1:85:e9:54:54:01:46:1d:e7:40:43:51: 64:fe:26:e6:f2:da:f0:11:78:ca:c8:ff:51:e7:6d: b0:af:25:01:70:82:fc:19:3e:4c:b5:d6:33:e8:8b: 12:6a:99:47:87:49:70:87:8b:09:87:3f:ba:70:1b: ce:58:35:bd:dc:d7:6a:8b:bd:4e:c2:25:de:bf:c0: bf:af:97:cc:2e:dc:bd:5d:c3:34:66:f3:cd:3d:c0: dd:18:2d:3a:d0:b6:f7:b3:05:9e:7e:20:fd:f3:f4: 09:2a:a7:97:99:24:df:dd:cb:99:e6:1d:d2:d0:a8: ab:d3:d2:44:02:14:8a:06:61:1e:4f:ae:5a:5d:7e: fa:00:5e:6d:9e:62:66:8b:0a:8c:a1:c5:6b:11:71: 56:70:2d:b1:c4:ba:50:e2:ab:f1:f4:86:ef:cb:84: c2:1e:4c:d7:01:6e:74:5e:e0:ae:db:be:72:2e:6f: dc:38:a9:e5:3d:43:66:02:0f:48:e6:4a:69:89:57: d2:2a:d6:b8:e2:f8:ef:cf:30:99:2b:80:cd:4c:2b: 37:81:7e:6d:03:fa:e4:7f:0c:9e:0a:23:46:d9:2f: a1:a3:b1:81:1f:0d:1c:2b:6a:4d:e8:0d:9e:4f:ed: 3d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:14:AC:B8:A9:EE:B7:59:AC:AF:96:E2:80:E3:ED:15:AB:B5:DA:A3 X509v3 Authority Key Identifier: keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:ab:26:34:41:52:a7:3d:ea:c3:fb:db:41:3d:40:84:a5:33: e4:46:c4:77:02:de:61:b2:eb:77:0e:11:25:f7:38:1a:26:fc: e6:bd:36:8b:de:69:00:23:4a:9d:4b:a7:4e:38:3d:0e:51:f8: 9e:7c:c6:70:af:f3:38:6e:06:48:b3:24:7e:c2:f8:65:50:80: 8c:59:2b:5c:38:6d:65:a2:1c:c4:54:b7:18:c5:fa:d1:62:b5: 6a:6a:1f:79:e6:65:90:73:4e:2c:b7:a3:21:fe:ae:c2:c2:e1: e5:ce:e6:8a:d9:a8:98:8f:59:5b:b1:0e:88:8a:16:91:9f:f8: c7:3d:eb:d4:15:bc:17:9a:5f:98:4d:2f:f8:81:ae:7e:56:e0: 02:25:c5:84:a2:b2:9f:8f:dc:07:4f:fa:47:13:0d:95:a0:2e: 27:d6:81:0e:15:23:d6:3c:49:28:56:77:e4:fd:5b:08:8a:68: 9b:bd:6c:b6:55:35:a0:74:d9:a3:55:35:ee:04:3d:f1:33:3c: b7:1d:06:31:67:51:4d:38:ce:7a:38:e5:64:c5:ea:ae:c6:9d: 2a:00:8d:39:18:8c:08:f7:c2:c8:47:43:7d:71:af:ab:b3:e5: 12:ae:01:55:17:69:44:80:b2:0c:a0:62:c7:17:f6:a5:b7:c6: c0:ac:ae:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8xQJb6zOs6hahlkjBK99VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYTBhMzhmODVkMmY1MzA1M2I4Yzg5NDNkOTAxN2IwYjhm NzcxYWMwHhcNMjUxMjA4MDcwMjQwWhcNMjUxMjA5MDcwMjQwWjAzMTEwLwYDVQQD EygxMTE0YWNiOGE5ZWViNzU5YWNhZjk2ZTI4MGUzZWQxNWFiYjVkYWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZxNKlg5sUqSHrlp0zqR1RuhhelU VAFGHedAQ1Fk/ibm8trwEXjKyP9R522wryUBcIL8GT5MtdYz6IsSaplHh0lwh4sJ hz+6cBvOWDW93Ndqi71OwiXev8C/r5fMLty9XcM0ZvPNPcDdGC060Lb3swWefiD9 8/QJKqeXmSTf3cuZ5h3S0Kir09JEAhSKBmEeT65aXX76AF5tnmJmiwqMocVrEXFW cC2xxLpQ4qvx9Ibvy4TCHkzXAW50XuCu275yLm/cOKnlPUNmAg9I5kppiVfSKta4 4vjvzzCZK4DNTCs3gX5tA/rkfwyeCiNG2S+ho7GBHw0cK2pN6A2eT+09OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEUrLip7rdZrK+W4oDj7RWrtdqjMB8GA1UdIwQY MBaAFL+go4+F0vUwU7jIlD2QF7C493GsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjZDamo0WFM5VEJUdU1pVVBaQVhzTGozY2F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80MDk5ZDctYzNjZS00NzIxLWIwZTkt N2FiMWZhMGJhMzk5LzEvdjZDamo0WFM5VEJUdU1pVVBaQVhzTGozY2F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi80MDk5ZDctYzNjZS00NzIxLWIwZTktN2FiMWZhMGJhMzk5 LzEvdjZDamo0WFM5VEJUdU1pVVBaQVhzTGozY2F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw6smNEFS pz3qw/vbQT1AhKUz5EbEdwLeYbLrdw4RJfc4Gib85r02i95pACNKnUunTjg9DlH4 nnzGcK/zOG4GSLMkfsL4ZVCAjFkrXDhtZaIcxFS3GMX60WK1amofeeZlkHNOLLej If6uwsLh5c7mitmomI9ZW7EOiIoWkZ/4xz3r1BW8F5pfmE0v+IGuflbgAiXFhKKy n4/cB0/6RxMNlaAuJ9aBDhUj1jxJKFZ35P1bCIpom71stlU1oHTZo1U17gQ98TM8 tx0GMWdRTTjOejjlZMXqrsadKgCNORiMCPfCyEdDfXGvq7PlEq4BVRdpRICyDKBi xxf2pbfGwKyutQ== -----END CERTIFICATE-----Generated at Mon Dec 8 09:10:36 2025 by rpki-client