This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft File: b_rHiuobz0OKYe-RUCRI9glkHS0.mft (raw, json) Hash identifier: Yr+7CyQVIRwy5asy+/bxWMEXZjaa/PL6JbfSz0sWAWk= Subject key identifier: 31:45:18:5A:C2:7B:F9:66:DF:F1:91:8C:DE:D1:F3:DF:45:70:CE:85 Authority key identifier: 6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D Certificate issuer: /CN=6ffac78aea1bcf438a61ef91502448f609641d2d Certificate serial: 019B4F298C42306232694722CC3BE17097E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft Manifest number: 1423 Signing time: Wed 24 Dec 2025 07:01:21 +0000 Manifest this update: Wed 24 Dec 2025 07:01:21 +0000 Manifest next update: Thu 25 Dec 2025 07:01:21 +0000 Files and hashes: 1: b_rHiuobz0OKYe-RUCRI9glkHS0.crl (hash: 3VApugZdFTUWsQrEYtJXD2Z2+xVxP3MwzzlGRlQkXh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:8c:42:30:62:32:69:47:22:cc:3b:e1:70:97:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ffac78aea1bcf438a61ef91502448f609641d2d Validity Not Before: Dec 24 07:01:21 2025 GMT Not After : Dec 25 07:01:21 2025 GMT Subject: CN=3145185ac27bf966dff1918cded1f3df4570ce85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:96:a1:7b:98:e5:0f:17:f4:a6:b5:6b:fa:58: 6b:bd:f0:c6:7d:a2:28:3d:be:c0:f6:43:f2:b4:ca: ea:3b:33:8f:4c:ab:5c:08:ee:72:5b:a2:c2:86:fb: 82:fe:00:0d:1a:79:ba:b6:cb:5e:01:7c:78:89:55: 15:a0:58:0e:81:1e:98:96:5d:1f:20:6d:bf:df:7b: ba:66:b9:a3:29:9d:90:f3:81:90:46:7d:2f:da:cd: 9a:e7:e6:83:f5:a3:ea:73:39:2f:03:a0:42:70:ea: 8c:a7:51:b4:12:4b:a1:e5:f6:ce:88:4c:06:52:0f: 67:2d:7a:57:6b:f4:50:17:ea:95:3f:01:20:de:7c: 14:9e:f1:b4:7b:58:16:4a:62:e9:64:49:0e:07:2e: 57:a5:4c:36:2a:63:67:0a:89:55:87:f4:de:bb:9f: 6a:a3:15:72:50:d7:0f:f5:34:bc:23:09:e7:0d:61: 41:97:44:b8:6e:3e:ad:1d:18:20:1f:6a:d7:69:6c: cb:dc:0c:7f:84:5c:29:b7:d1:b3:c2:87:1b:ad:26: b9:18:7e:77:41:dd:ca:ea:11:a7:e7:d5:2a:b1:cb: cf:ef:39:31:4e:4f:56:b8:54:19:c4:52:6e:67:b1: 8e:4e:d0:4d:d0:6c:ea:94:ff:c3:0b:93:d3:95:6b: 43:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:45:18:5A:C2:7B:F9:66:DF:F1:91:8C:DE:D1:F3:DF:45:70:CE:85 X509v3 Authority Key Identifier: keyid:6F:FA:C7:8A:EA:1B:CF:43:8A:61:EF:91:50:24:48:F6:09:64:1D:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_rHiuobz0OKYe-RUCRI9glkHS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/98e6a9-04d5-45a0-9710-0c343513ade3/1/b_rHiuobz0OKYe-RUCRI9glkHS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:98:89:9e:1c:d0:a6:cf:18:ce:96:5d:be:66:37:2a:63:db: 63:72:70:61:4a:99:cb:71:80:9f:60:1d:77:2b:e3:19:19:90: cd:dd:22:e8:ba:6e:fc:6c:22:2c:8c:14:34:67:f8:1d:c3:22: 16:2a:e0:34:e8:cc:77:3e:49:69:3e:f0:58:05:dd:27:e7:a8: 8a:e7:d5:98:74:a0:8e:d6:fe:e2:46:6c:cf:7d:be:87:4b:f3: 24:a9:c6:19:66:52:57:59:ad:62:4b:72:e0:5b:cd:f5:ca:9b: 47:21:86:0d:ab:7f:3e:a1:18:fa:a3:05:25:e8:58:48:8e:1f: 2c:06:a7:59:95:df:7f:60:e9:e9:0a:45:b3:d4:bb:26:d8:08: 13:81:68:0d:d5:16:4b:b5:0b:9e:a6:fd:66:5c:93:3d:1b:4b: d1:1e:8a:6f:ea:15:88:75:4b:b2:02:14:dd:61:dd:80:9b:b1: f7:25:32:2d:bb:32:2a:7f:fe:a8:1b:87:90:c6:19:95:7f:a2: 1b:00:ea:df:8e:92:6c:e5:85:9e:29:d1:fe:7f:2b:3c:6d:e6: f4:42:f8:55:c6:fa:5f:4b:e7:0a:58:8d:19:ac:32:dd:f7:1e: 79:6d:ba:26:e7:6f:b3:58:cc:88:38:0d:d8:95:32:74:a1:0f: 66:3b:91:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKYxCMGIyaUcizDvhcJfgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZmFjNzhhZWExYmNmNDM4YTYxZWY5MTUwMjQ0OGY2MDk2 NDFkMmQwHhcNMjUxMjI0MDcwMTIxWhcNMjUxMjI1MDcwMTIxWjAzMTEwLwYDVQQD EygzMTQ1MTg1YWMyN2JmOTY2ZGZmMTkxOGNkZWQxZjNkZjQ1NzBjZTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJahe5jlDxf0prVr+lhrvfDGfaIo Pb7A9kPytMrqOzOPTKtcCO5yW6LChvuC/gANGnm6tsteAXx4iVUVoFgOgR6Yll0f IG2/33u6ZrmjKZ2Q84GQRn0v2s2a5+aD9aPqczkvA6BCcOqMp1G0Ekuh5fbOiEwG Ug9nLXpXa/RQF+qVPwEg3nwUnvG0e1gWSmLpZEkOBy5XpUw2KmNnColVh/Teu59q oxVyUNcP9TS8IwnnDWFBl0S4bj6tHRggH2rXaWzL3Ax/hFwpt9GzwocbrSa5GH53 Qd3K6hGn59UqscvP7zkxTk9WuFQZxFJuZ7GOTtBN0GzqlP/DC5PTlWtDxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFFGFrCe/lm3/GRjN7R899FcM6FMB8GA1UdIwQY MBaAFG/6x4rqG89DimHvkVAkSPYJZB0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYl9ySGl1b2J6ME9LWWUtUlVDUkk5Z2xrSFMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85OGU2YTktMDRkNS00NWEwLTk3MTAt MGMzNDM1MTNhZGUzLzEvYl9ySGl1b2J6ME9LWWUtUlVDUkk5Z2xrSFMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi85OGU2YTktMDRkNS00NWEwLTk3MTAtMGMzNDM1MTNhZGUz LzEvYl9ySGl1b2J6ME9LWWUtUlVDUkk5Z2xrSFMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5iJnhzQ ps8YzpZdvmY3KmPbY3JwYUqZy3GAn2AddyvjGRmQzd0i6Lpu/GwiLIwUNGf4HcMi FirgNOjMdz5JaT7wWAXdJ+eoiufVmHSgjtb+4kZsz32+h0vzJKnGGWZSV1mtYkty 4FvN9cqbRyGGDat/PqEY+qMFJehYSI4fLAanWZXff2Dp6QpFs9S7JtgIE4FoDdUW S7ULnqb9ZlyTPRtL0R6Kb+oViHVLsgIU3WHdgJux9yUyLbsyKn/+qBuHkMYZlX+i GwDq346SbOWFninR/n8rPG3m9EL4Vcb6X0vnCliNGawy3fceeW26Judvs1jMiDgN 2JUydKEPZjuRUQ== -----END CERTIFICATE-----Generated at Wed Dec 24 08:45:20 2025 by rpki-client