This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft File: A6QSK0og8cymB4qR2ai7HAP7n80.mft (raw, json) Hash identifier: RMd8FuBp20I8eRA6jWVSpGNJDYq+PPNxDiDVIGgIyKw= Subject key identifier: BB:7C:1F:F3:B7:03:E9:47:C9:20:D1:5F:1B:90:9F:A6:29:82:82:92 Authority key identifier: 03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD Certificate issuer: /CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd Certificate serial: 019B3D22BC43412CE87411571F21061D7F19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 19:00:45 +0000 Manifest this update: Sat 20 Dec 2025 19:00:45 +0000 Manifest next update: Sun 21 Dec 2025 19:00:45 +0000 Files and hashes: 1: A6QSK0og8cymB4qR2ai7HAP7n80.crl (hash: Tn0TyIxElNScQOyRWx1hfy/LyXp84703WAfcEZdR0OA=) 2: j-WIU7L2E8S8heDN9-EX8jcj-qg.roa (hash: 5/cHSfnAktTRmViDSglDJdChSdXmQUsSiRJP6avGvpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:bc:43:41:2c:e8:74:11:57:1f:21:06:1d:7f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd Validity Not Before: Dec 20 19:00:45 2025 GMT Not After : Dec 21 19:00:45 2025 GMT Subject: CN=bb7c1ff3b703e947c920d15f1b909fa629828292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2a:a0:af:1f:0b:46:b3:fc:cc:44:df:69:28: ab:8c:93:4b:77:e7:ae:1e:8f:7c:88:16:c5:5b:60: 63:61:64:ca:d0:9b:a0:2a:b9:dc:5f:67:ed:fb:82: fa:78:3a:74:f4:f5:60:89:8e:a2:6b:00:eb:77:57: 0a:b1:6a:04:7b:bd:f3:09:51:73:45:9a:b1:3d:4d: 8a:87:7d:7b:19:c6:2e:83:d2:9f:44:26:7c:1d:54: 90:3a:1c:84:71:80:61:37:2b:3a:04:b5:3a:39:5b: 61:70:22:53:e4:0b:ab:ea:5e:21:5b:dc:a9:8e:6c: b8:b1:73:c4:17:78:61:23:8b:d9:3b:32:d6:fd:dc: 83:e8:24:1a:2c:a0:14:12:ae:f4:e0:55:42:24:e9: fb:e2:37:a8:e0:aa:82:d3:ee:01:08:12:75:c2:5c: a4:9a:84:bb:99:65:f2:84:5b:fa:7c:b0:84:92:96: 7b:d9:64:80:86:33:43:a8:6d:20:a6:bb:d7:93:da: 9c:aa:b6:00:e9:99:63:3d:41:91:e1:8e:e2:eb:42: 42:ae:3c:9f:41:a9:76:93:45:7b:2f:d3:b2:cd:f2: c9:ad:e1:40:f0:73:9c:66:61:0f:c9:ce:3c:1d:67: 99:5e:10:41:a9:8d:75:d6:83:2b:96:12:6d:03:f8: f7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7C:1F:F3:B7:03:E9:47:C9:20:D1:5F:1B:90:9F:A6:29:82:82:92 X509v3 Authority Key Identifier: keyid:03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:68:bb:69:d7:30:22:7b:2c:39:3f:d7:f8:37:3b:f6:83:70: 46:07:ec:c3:ad:97:1b:06:ae:e9:87:1c:7e:6f:60:17:90:ac: c2:cc:7b:ca:98:1f:71:e6:68:ae:0f:7e:0c:65:76:f2:36:8a: 70:68:fe:de:46:01:7e:04:89:c7:b5:0d:1f:a0:08:76:ad:0d: 78:0c:61:a6:75:39:80:22:87:66:98:6f:ab:c2:9e:35:8e:1e: fe:27:36:ec:82:bd:8b:bb:b7:33:11:a7:7d:81:4c:75:ca:4f: 4f:d0:95:57:60:bb:68:91:db:88:d9:dd:eb:48:91:57:bb:7a: 83:3e:60:b1:f0:94:cd:10:f3:3c:b4:73:c8:63:3e:09:5e:d2: a9:76:5e:c9:5e:db:15:d9:be:d4:eb:9d:90:c9:0a:55:d1:f3: b2:4e:aa:12:22:40:9e:9c:55:a2:e4:e7:76:aa:07:f1:3b:9a: 01:79:56:58:ec:6a:ae:20:aa:4c:dc:c0:5b:05:3b:e4:a9:ef: 74:e6:1a:7d:7e:be:8f:b7:8e:e5:2e:ca:c8:b5:69:20:01:c2: 98:0e:63:48:34:40:ff:7b:76:54:85:42:63:3b:ab:69:03:86: b3:e3:55:b3:2f:c3:1f:0b:1a:9e:a2:89:67:a0:a2:4c:bf:f3: da:54:e2:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IrxDQSzodBFXHyEGHX8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYTQxMjJiNGEyMGYxY2NhNjA3OGE5MWQ5YThiYjFjMDNm YjlmY2QwHhcNMjUxMjIwMTkwMDQ1WhcNMjUxMjIxMTkwMDQ1WjAzMTEwLwYDVQQD EyhiYjdjMWZmM2I3MDNlOTQ3YzkyMGQxNWYxYjkwOWZhNjI5ODI4MjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiqgrx8LRrP8zETfaSirjJNLd+eu Ho98iBbFW2BjYWTK0JugKrncX2ft+4L6eDp09PVgiY6iawDrd1cKsWoEe73zCVFz RZqxPU2Kh317GcYug9KfRCZ8HVSQOhyEcYBhNys6BLU6OVthcCJT5Aur6l4hW9yp jmy4sXPEF3hhI4vZOzLW/dyD6CQaLKAUEq704FVCJOn74jeo4KqC0+4BCBJ1wlyk moS7mWXyhFv6fLCEkpZ72WSAhjNDqG0gprvXk9qcqrYA6ZljPUGR4Y7i60JCrjyf Qal2k0V7L9OyzfLJreFA8HOcZmEPyc48HWeZXhBBqY111oMrlhJtA/j3twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLt8H/O3A+lHySDRXxuQn6YpgoKSMB8GA1UdIwQY MBaAFAOkEitKIPHMpgeKkdmouxwD+5/NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTZRU0swb2c4Y3ltQjRxUjJhaTdIQVA3bjgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kYmMwNmMtYTYxMi00ZGIwLWE4NTYt Nzg3MjM4NDE1YjA4LzEvQTZRU0swb2c4Y3ltQjRxUjJhaTdIQVA3bjgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kYmMwNmMtYTYxMi00ZGIwLWE4NTYtNzg3MjM4NDE1YjA4 LzEvQTZRU0swb2c4Y3ltQjRxUjJhaTdIQVA3bjgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWi7adcw InssOT/X+Dc79oNwRgfsw62XGwau6Yccfm9gF5Cswsx7ypgfceZorg9+DGV28jaK cGj+3kYBfgSJx7UNH6AIdq0NeAxhpnU5gCKHZphvq8KeNY4e/ic27IK9i7u3MxGn fYFMdcpPT9CVV2C7aJHbiNnd60iRV7t6gz5gsfCUzRDzPLRzyGM+CV7SqXZeyV7b Fdm+1OudkMkKVdHzsk6qEiJAnpxVouTndqoH8TuaAXlWWOxqriCqTNzAWwU75Knv dOYafX6+j7eO5S7KyLVpIAHCmA5jSDRA/3t2VIVCYzuraQOGs+NVsy/DHwsanqKJ Z6CiTL/z2lTiBw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:45:43 2025 by rpki-client