This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft File: B6WU0muI6GkdHYGGAjtp6_GNH-k.mft (raw, json) Hash identifier: MDanwwezE7OzJ9dfIIMww+coRFPll9DNhiDognqxJbw= Subject key identifier: 0F:6B:25:4D:7A:FB:94:9F:B7:A9:95:E8:22:66:50:8E:4C:A5:E9:C2 Authority key identifier: 07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9 Certificate issuer: /CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9 Certificate serial: 019B3DFEA4B50BBFB6722833EF9A51B37082 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 23:00:56 +0000 Manifest this update: Sat 20 Dec 2025 23:00:56 +0000 Manifest next update: Sun 21 Dec 2025 23:00:56 +0000 Files and hashes: 1: B6WU0muI6GkdHYGGAjtp6_GNH-k.crl (hash: e4h0x0k8hYtG2yT8xqwaoSqpAOLMi/fWfKzwxOBadHs=) 2: tp-dB2xKIA-Dznn_c4mvWy8vGjo.roa (hash: lUu46cTL71HHo1Gr7lMNLrh2M9SW7foXyhj6RDawOf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:a4:b5:0b:bf:b6:72:28:33:ef:9a:51:b3:70:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9 Validity Not Before: Dec 20 23:00:56 2025 GMT Not After : Dec 21 23:00:56 2025 GMT Subject: CN=0f6b254d7afb949fb7a995e82266508e4ca5e9c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:52:ac:8d:9e:a6:19:ff:91:38:0c:45:60:d0: 14:6a:08:29:ed:e8:ac:47:91:08:25:bb:3b:fb:a0: f1:19:6c:af:67:98:90:ed:b4:25:8d:d4:95:87:8d: 99:08:b4:54:62:fc:8d:73:c0:2a:0c:48:20:e2:8b: 12:62:e4:fd:ca:37:84:5d:d5:c1:ed:1e:71:78:02: 01:dc:97:20:95:5b:bf:98:86:30:00:5a:89:c5:a8: 4a:c3:a9:38:65:38:4e:bd:3b:e5:c9:87:71:6a:e1: cd:89:10:28:a3:09:d2:f5:5f:91:cb:3c:4b:66:ec: 35:7c:78:4e:f6:37:44:0b:f6:14:c8:47:39:2b:91: 4f:e7:a8:81:1b:b9:20:c0:89:12:bd:3c:35:c8:2d: d2:4d:58:6e:4f:81:1c:37:93:33:58:57:28:6b:be: 3d:b3:8f:4b:95:4b:56:4b:40:d6:bf:a9:25:61:ae: c2:2d:ce:a8:f4:b1:b2:fb:3a:43:23:71:67:fe:8a: 6e:8e:e2:51:4a:52:dc:4d:8f:9b:26:43:66:fd:f1: ca:d7:4c:7a:55:0b:f3:a4:5c:75:af:85:d9:07:df: c8:fd:e3:ac:1b:f4:23:3f:8b:2c:e4:23:b8:ec:86: c6:d6:58:86:10:a7:d2:77:95:7d:0b:de:a1:f3:e1: b9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6B:25:4D:7A:FB:94:9F:B7:A9:95:E8:22:66:50:8E:4C:A5:E9:C2 X509v3 Authority Key Identifier: keyid:07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:23:45:0c:15:43:37:c1:9f:1f:45:69:0f:3d:63:93:ee:60: 7f:28:e9:7b:dc:e7:74:7e:55:e7:e7:86:2e:60:18:6b:94:23: 90:bf:d9:9c:db:1a:5a:1e:00:ec:cd:f2:68:ab:94:0e:44:a9: 22:dc:ff:d3:c6:a1:67:65:27:55:cb:ac:90:57:02:5a:15:c8: f0:18:56:56:2b:1d:be:bc:27:92:78:3b:d6:54:6e:35:3a:7c: d7:de:ce:1e:16:16:01:a8:e2:e0:0c:de:76:3d:4b:02:3f:dc: 8f:2b:38:fa:bd:ba:56:7c:c8:06:ae:d3:34:bb:28:cf:88:9a: 0f:31:62:9d:bd:0b:95:55:f8:80:9b:d7:7c:0a:3e:80:34:02: 69:72:89:cc:84:6a:67:d8:37:cf:61:a1:97:12:06:49:ab:dc: c0:70:62:31:f9:15:63:80:14:74:e9:c4:84:fb:28:f2:5c:69: b7:94:da:f3:93:51:5a:29:59:82:ba:45:53:88:a1:9e:4c:61: 0b:29:63:d9:58:b9:b8:5d:4e:8d:cd:15:d4:78:1f:0e:11:27: 24:95:e2:6e:e4:63:96:f1:ce:87:2a:9f:0c:89:0d:74:a2:ce: e7:fc:44:0c:bd:38:bb:2b:44:4a:c9:21:52:d2:5d:99:78:76: 63:96:ec:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/qS1C7+2cigz75pRs3CCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YTU5NGQyNmI4OGU4NjkxZDFkODE4NjAyM2I2OWViZjE4 ZDFmZTkwHhcNMjUxMjIwMjMwMDU2WhcNMjUxMjIxMjMwMDU2WjAzMTEwLwYDVQQD EygwZjZiMjU0ZDdhZmI5NDlmYjdhOTk1ZTgyMjY2NTA4ZTRjYTVlOWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lKsjZ6mGf+ROAxFYNAUaggp7eis R5EIJbs7+6DxGWyvZ5iQ7bQljdSVh42ZCLRUYvyNc8AqDEgg4osSYuT9yjeEXdXB 7R5xeAIB3JcglVu/mIYwAFqJxahKw6k4ZThOvTvlyYdxauHNiRAoownS9V+RyzxL Zuw1fHhO9jdEC/YUyEc5K5FP56iBG7kgwIkSvTw1yC3STVhuT4EcN5MzWFcoa749 s49LlUtWS0DWv6klYa7CLc6o9LGy+zpDI3Fn/opujuJRSlLcTY+bJkNm/fHK10x6 VQvzpFx1r4XZB9/I/eOsG/QjP4ss5CO47IbG1liGEKfSd5V9C96h8+G57QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9rJU16+5Sft6mV6CJmUI5MpenCMB8GA1UdIwQY MBaAFAellNJriOhpHR2BhgI7aevxjR/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjZXVTBtdUk2R2tkSFlHR0FqdHA2X0dOSC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kODE5YTctZTJhYi00MDUwLWFmY2Qt NGQ5NTYxZjhiOTY3LzEvQjZXVTBtdUk2R2tkSFlHR0FqdHA2X0dOSC1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kODE5YTctZTJhYi00MDUwLWFmY2QtNGQ5NTYxZjhiOTY3 LzEvQjZXVTBtdUk2R2tkSFlHR0FqdHA2X0dOSC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCNFDBVD N8GfH0VpDz1jk+5gfyjpe9zndH5V5+eGLmAYa5QjkL/ZnNsaWh4A7M3yaKuUDkSp Itz/08ahZ2UnVcuskFcCWhXI8BhWVisdvrwnkng71lRuNTp8197OHhYWAaji4Aze dj1LAj/cjys4+r26VnzIBq7TNLsoz4iaDzFinb0LlVX4gJvXfAo+gDQCaXKJzIRq Z9g3z2GhlxIGSavcwHBiMfkVY4AUdOnEhPso8lxpt5Ta85NRWilZgrpFU4ihnkxh Cylj2Vi5uF1Ojc0V1HgfDhEnJJXibuRjlvHOhyqfDIkNdKLO5/xEDL04uytESskh UtJdmXh2Y5bsHA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:51:55 2025 by rpki-client