This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft File: B13D8iVyK4Cavph3jDv9cAnhz08.mft (raw, json) Hash identifier: 1RaL6htOPRvS77xdsYBDqxDeWWCp0NJ6mQOW2Mncaus= Subject key identifier: AC:65:F2:91:89:6F:08:0C:C6:20:18:04:9B:B8:A0:24:C3:36:14:38 Authority key identifier: 07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F Certificate issuer: /CN=075dc3f225722b809abe98778c3bfd7009e1cf4f Certificate serial: 019AF31B95A15B1787C3F94769C5AA6A5B15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft Manifest number: 09C6 Signing time: Sat 06 Dec 2025 10:01:02 +0000 Manifest this update: Sat 06 Dec 2025 10:01:02 +0000 Manifest next update: Sun 07 Dec 2025 10:01:02 +0000 Files and hashes: 1: B13D8iVyK4Cavph3jDv9cAnhz08.crl (hash: KKIwOzW4MWfSVcQOAHA3Jo2kPupbamqBr11ih5cj2Pk=) 2: YF_8BljowlmU3n9MOrd56EKDy3I.roa (hash: 5hFRnx4Cut7X+n+05i8/H1CgpRmoRUaN3KMI2gJMlwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:95:a1:5b:17:87:c3:f9:47:69:c5:aa:6a:5b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=075dc3f225722b809abe98778c3bfd7009e1cf4f Validity Not Before: Dec 6 10:01:02 2025 GMT Not After : Dec 7 10:01:02 2025 GMT Subject: CN=ac65f291896f080cc62018049bb8a024c3361438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8c:a1:55:a5:e3:7f:84:69:29:bf:c1:49:6a: 6b:87:52:cd:d2:b1:8b:1e:c0:e7:6c:9b:ca:da:24: c6:99:12:c8:1b:80:a3:20:3e:38:8b:b0:96:78:d3: c5:05:ed:d5:a7:83:22:be:c8:0d:4f:ba:1a:45:69: ba:32:c7:e7:23:11:d9:6a:d5:84:47:f8:e2:62:d4: 9e:92:3c:32:5a:14:db:34:ba:c1:a9:a6:e6:3c:b3: 54:21:42:a7:a4:77:8b:43:fc:dd:82:9e:aa:5a:6d: 89:30:23:34:11:f2:2b:72:b8:06:1f:20:8a:29:32: c5:bf:ed:92:cd:7f:78:ef:6a:4d:79:75:c8:0e:3a: 75:b8:10:d9:12:88:dc:9f:2b:52:5b:e0:4b:2b:8e: d3:76:a0:ef:16:a5:77:fb:24:57:5f:c6:cc:df:ff: 6a:69:27:eb:b4:fe:6d:f3:9d:19:93:da:95:d6:70: 4b:94:08:c1:53:dd:10:76:be:8e:d8:25:82:dd:19: 44:5c:d5:8d:42:33:c2:fd:df:eb:85:90:2e:cf:0d: 8f:0d:40:14:2e:6b:ed:07:be:41:e5:0f:20:08:69: 44:59:74:73:69:c3:56:36:0d:34:a3:fa:95:db:f4: d8:f6:94:d6:a9:34:0c:4f:0f:99:bd:25:3c:2c:0a: c2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:65:F2:91:89:6F:08:0C:C6:20:18:04:9B:B8:A0:24:C3:36:14:38 X509v3 Authority Key Identifier: keyid:07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d7:44:4d:1c:36:59:99:db:e6:35:60:ad:dc:58:0e:78:5b: ca:a7:70:67:81:a2:89:ac:e2:1e:41:33:f2:39:98:7a:12:58: 31:5a:fb:24:3a:a9:d7:3a:ff:79:95:4c:95:40:96:46:fb:9d: b5:e1:53:ba:43:5f:51:b6:ce:e5:49:91:c3:d8:74:d0:67:d6: fa:c1:41:ab:a7:15:b8:45:87:9c:54:cb:c2:b1:ce:b7:5f:c4: 95:7f:03:44:ce:fc:2b:f8:e3:56:3d:c0:27:56:4a:7b:a4:04: 4b:34:55:14:5f:e0:ce:0c:2b:a6:1f:ed:01:c6:57:b3:47:f4: 2e:8a:a3:16:38:b7:82:02:1e:69:94:c4:0d:20:e8:65:6c:a6: 85:af:94:51:31:e3:32:90:74:09:c6:c0:b9:b7:cf:07:5f:e0: 8d:cb:cf:87:7c:41:e8:79:69:83:dc:20:ee:d3:3b:30:cc:d8: fd:e4:36:b2:3c:ad:2c:a3:c3:d2:19:a8:60:a4:e2:f3:e5:c5: d4:96:84:ed:31:da:04:45:a6:11:b1:6a:51:1a:44:12:7c:d2: a3:d4:0e:92:48:51:52:ed:6c:91:7d:5b:f8:60:fc:0e:db:89: 2d:7d:39:b6:95:93:20:1b:08:68:a6:45:58:ea:f4:89:87:ff: 7d:54:7b:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5WhWxeHw/lHacWqalsVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NWRjM2YyMjU3MjJiODA5YWJlOTg3NzhjM2JmZDcwMDll MWNmNGYwHhcNMjUxMjA2MTAwMTAyWhcNMjUxMjA3MTAwMTAyWjAzMTEwLwYDVQQD EyhhYzY1ZjI5MTg5NmYwODBjYzYyMDE4MDQ5YmI4YTAyNGMzMzYxNDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoyhVaXjf4RpKb/BSWprh1LN0rGL HsDnbJvK2iTGmRLIG4CjID44i7CWeNPFBe3Vp4MivsgNT7oaRWm6MsfnIxHZatWE R/jiYtSekjwyWhTbNLrBqabmPLNUIUKnpHeLQ/zdgp6qWm2JMCM0EfIrcrgGHyCK KTLFv+2SzX9472pNeXXIDjp1uBDZEojcnytSW+BLK47TdqDvFqV3+yRXX8bM3/9q aSfrtP5t850Zk9qV1nBLlAjBU90Qdr6O2CWC3RlEXNWNQjPC/d/rhZAuzw2PDUAU LmvtB75B5Q8gCGlEWXRzacNWNg00o/qV2/TY9pTWqTQMTw+ZvSU8LArCqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxl8pGJbwgMxiAYBJu4oCTDNhQ4MB8GA1UdIwQY MBaAFAddw/IlciuAmr6Yd4w7/XAJ4c9PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjEzRDhpVnlLNENhdnBoM2pEdjljQW5oejA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82YzhjMzEtZjk5OS00MDU2LWFhMWIt MjM0ZDA3NTQyMzlkLzEvQjEzRDhpVnlLNENhdnBoM2pEdjljQW5oejA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82YzhjMzEtZjk5OS00MDU2LWFhMWItMjM0ZDA3NTQyMzlk LzEvQjEzRDhpVnlLNENhdnBoM2pEdjljQW5oejA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetdETRw2 WZnb5jVgrdxYDnhbyqdwZ4GiiaziHkEz8jmYehJYMVr7JDqp1zr/eZVMlUCWRvud teFTukNfUbbO5UmRw9h00GfW+sFBq6cVuEWHnFTLwrHOt1/ElX8DRM78K/jjVj3A J1ZKe6QESzRVFF/gzgwrph/tAcZXs0f0LoqjFji3ggIeaZTEDSDoZWymha+UUTHj MpB0CcbAubfPB1/gjcvPh3xB6Hlpg9wg7tM7MMzY/eQ2sjytLKPD0hmoYKTi8+XF 1JaE7THaBEWmEbFqURpEEnzSo9QOkkhRUu1skX1b+GD8DtuJLX05tpWTIBsIaKZF WOr0iYf/fVR7Zg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:47:22 2025 by rpki-client