This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft File: n6c21GmBzkhjlN_vnHOLfr62Gm0.mft (raw, json) Hash identifier: BZoHywSzFKQP/vCGTWJS6XYHfL6zOlvC+jrVB1gpESI= Subject key identifier: FA:E7:5D:0C:7D:54:A7:08:A8:55:3A:76:E7:70:E2:43:32:93:0E:9A Authority key identifier: 9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D Certificate issuer: /CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d Certificate serial: 019B3CEB99CD75928880CCBD186ED8C18030 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft Manifest number: 137D Signing time: Sat 20 Dec 2025 18:00:31 +0000 Manifest this update: Sat 20 Dec 2025 18:00:31 +0000 Manifest next update: Sun 21 Dec 2025 18:00:31 +0000 Files and hashes: 1: _h71B272PJZJXIBvxnSAiFkPc3o.roa (hash: 8epdxNIo68sqlqhgpXPr6uBYOM7OF4qT5O2HTRBPkF4=) 2: n6c21GmBzkhjlN_vnHOLfr62Gm0.crl (hash: Hm30iItf+uMbjJj5dIBLk84/itEH8o/Pipu6JHHyqh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:99:cd:75:92:88:80:cc:bd:18:6e:d8:c1:80:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d Validity Not Before: Dec 20 18:00:31 2025 GMT Not After : Dec 21 18:00:31 2025 GMT Subject: CN=fae75d0c7d54a708a8553a76e770e24332930e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:18:1b:6e:f5:12:76:40:f2:f9:ca:3b:48: b2:5c:75:d2:c9:3a:ab:b2:72:5b:4e:d8:c2:3b:bb: bc:74:e4:de:dd:01:d8:56:bf:23:d7:79:be:2e:5c: 30:4b:96:fa:d3:22:a6:05:2f:e4:26:15:16:14:1c: 8a:55:0a:fe:63:14:f3:b4:74:e6:89:35:8d:30:3b: 40:a5:aa:14:d8:22:e9:ba:ec:39:bc:a3:3e:fc:d4: c4:f1:f0:1f:bf:4c:13:56:87:17:37:07:59:7d:c5: 81:57:32:16:ad:d4:30:e3:01:ab:a7:60:7d:b6:75: 93:40:a4:28:6b:cb:44:36:bd:8f:c8:23:4a:5b:b0: 59:9f:25:3d:63:86:c9:ea:80:95:90:72:70:3c:9a: 58:93:99:4e:c0:a5:b2:b6:05:07:07:11:66:3e:4b: 1f:9d:93:0e:53:f9:c1:c0:e9:35:e4:90:da:82:28: d7:45:7c:2e:43:fb:34:0a:ce:0c:99:f9:d4:c8:ff: a9:f9:99:62:4e:38:d3:c4:a7:2a:d3:8e:75:c7:29: 74:25:5a:94:b5:f8:6b:d3:43:44:f2:2f:a9:0a:f4: 52:47:0b:a6:83:c1:7b:c0:28:a0:47:ae:46:be:97: 9f:d1:48:ab:16:b7:63:ea:9d:bc:f1:50:e7:89:78: 47:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E7:5D:0C:7D:54:A7:08:A8:55:3A:76:E7:70:E2:43:32:93:0E:9A X509v3 Authority Key Identifier: keyid:9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:18:18:84:bc:c9:55:b9:53:43:c2:96:49:aa:65:a5:29:23: 26:78:62:36:a5:5d:0d:81:44:d8:74:ab:ad:3f:53:28:70:48: 39:7f:c9:46:6a:cb:6f:07:0f:75:0e:b0:1f:29:e1:15:8e:8e: 16:b0:6b:fb:7d:a6:fe:03:95:1b:84:68:35:cc:f4:ed:60:fd: d4:aa:c0:ee:7f:31:80:a4:a4:96:87:2f:3e:c8:7b:7f:c0:19: 67:3b:09:95:6b:f2:0b:db:2f:e8:7c:5b:53:24:62:67:56:92: 66:42:85:f9:8c:0c:a9:c0:c8:68:af:85:e3:ac:86:09:27:7a: 6e:e3:d6:da:58:78:24:96:6f:5e:71:58:21:35:99:c7:f3:b7: b9:eb:99:13:81:dd:60:55:0d:bb:78:fb:ad:1b:42:53:63:c7: 38:7e:96:13:7b:9a:a9:1b:ce:15:bd:a2:1c:dd:1d:b9:1f:24: 92:a8:e2:41:b1:06:0e:1d:c7:db:11:44:71:df:3b:3f:95:7e: 2c:66:3b:d5:ff:bb:a6:64:4a:03:ff:ea:3d:5a:be:f6:69:ba: 3d:69:01:8b:b8:f0:47:a4:3c:7a:34:c5:d8:2b:06:c6:24:76: 03:ab:d2:cf:cc:b6:11:ea:e1:97:49:ec:f0:a7:5b:a7:05:5f: 47:3a:1f:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs865nNdZKIgMy9GG7YwYAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYTczNmQ0Njk4MWNlNDg2Mzk0ZGZlZjljNzM4YjdlYmVi NjFhNmQwHhcNMjUxMjIwMTgwMDMxWhcNMjUxMjIxMTgwMDMxWjAzMTEwLwYDVQQD EyhmYWU3NWQwYzdkNTRhNzA4YTg1NTNhNzZlNzcwZTI0MzMyOTMwZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTwYG271EnZA8vnKO0iyXHXSyTqr snJbTtjCO7u8dOTe3QHYVr8j13m+LlwwS5b60yKmBS/kJhUWFByKVQr+YxTztHTm iTWNMDtApaoU2CLpuuw5vKM+/NTE8fAfv0wTVocXNwdZfcWBVzIWrdQw4wGrp2B9 tnWTQKQoa8tENr2PyCNKW7BZnyU9Y4bJ6oCVkHJwPJpYk5lOwKWytgUHBxFmPksf nZMOU/nBwOk15JDagijXRXwuQ/s0Cs4MmfnUyP+p+ZliTjjTxKcq0451xyl0JVqU tfhr00NE8i+pCvRSRwumg8F7wCigR65Gvpef0UirFrdj6p288VDniXhHIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrnXQx9VKcIqFU6dudw4kMykw6aMB8GA1UdIwQY MBaAFJ+nNtRpgc5IY5Tf75xzi36+thptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjZjMjFHbUJ6a2hqbE5fdm5IT0xmcjYyR20wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80ZDc0ZDktNmM0Yy00YjE0LTgxNWYt ZDI2MjgwM2NmNjQ0LzEvbjZjMjFHbUJ6a2hqbE5fdm5IT0xmcjYyR20wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80ZDc0ZDktNmM0Yy00YjE0LTgxNWYtZDI2MjgwM2NmNjQ0 LzEvbjZjMjFHbUJ6a2hqbE5fdm5IT0xmcjYyR20wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBgYhLzJ VblTQ8KWSaplpSkjJnhiNqVdDYFE2HSrrT9TKHBIOX/JRmrLbwcPdQ6wHynhFY6O FrBr+32m/gOVG4RoNcz07WD91KrA7n8xgKSklocvPsh7f8AZZzsJlWvyC9sv6Hxb UyRiZ1aSZkKF+YwMqcDIaK+F46yGCSd6buPW2lh4JJZvXnFYITWZx/O3ueuZE4Hd YFUNu3j7rRtCU2PHOH6WE3uaqRvOFb2iHN0duR8kkqjiQbEGDh3H2xFEcd87P5V+ LGY71f+7pmRKA//qPVq+9mm6PWkBi7jwR6Q8ejTF2CsGxiR2A6vSz8y2Eerhl0ns 8KdbpwVfRzof2A== -----END CERTIFICATE-----Generated at Sat Dec 20 21:49:00 2025 by rpki-client