This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft File: a6acO9yS1oEUijWKE6bm9T37d1g.mft (raw, json) Hash identifier: iDZdGjLttQp1sdMkKQ20jEXZWB1WNQTlJyunUNfK/bc= Subject key identifier: 72:10:3F:B1:BB:83:C2:03:AF:3B:65:0F:EF:18:96:C9:2A:CE:64:31 Authority key identifier: 6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58 Certificate issuer: /CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758 Certificate serial: 019B52985C34C3B879176359A5023334A566 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft Manifest number: 065F Signing time: Wed 24 Dec 2025 23:01:15 +0000 Manifest this update: Wed 24 Dec 2025 23:01:15 +0000 Manifest next update: Thu 25 Dec 2025 23:01:15 +0000 Files and hashes: 1: 0bVZzhMFVS1g8jzWdISxg74CDIY.roa (hash: 0CO5Cokq43YXaFcPiFBIU+s3WfK4TaB7E8kyWwFMXGc=) 2: a6acO9yS1oEUijWKE6bm9T37d1g.crl (hash: Y0+ey32tyB56C48e/Te3t6j02twsFcl0iLnOYSLLZyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:5c:34:c3:b8:79:17:63:59:a5:02:33:34:a5:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758 Validity Not Before: Dec 24 23:01:15 2025 GMT Not After : Dec 25 23:01:15 2025 GMT Subject: CN=72103fb1bb83c203af3b650fef1896c92ace6431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:40:8a:8a:d2:81:8a:df:44:f9:f3:c7:da:48: 2a:d2:94:65:0d:89:a2:2b:e8:e7:fd:76:44:d9:7d: eb:0c:3b:70:fb:0a:93:bc:c9:73:18:44:98:e9:c0: d4:f1:22:16:26:fd:dc:ca:cf:fa:f3:ff:0c:56:1d: fe:ba:c1:52:06:4b:f2:41:41:0c:d3:d9:49:69:2e: 45:32:7b:26:48:ab:12:35:a3:ce:f0:75:7d:41:33: 80:ab:52:69:e6:18:09:fd:84:0e:6f:34:e6:9a:1a: 6d:2e:3e:dd:52:f2:22:ea:21:b8:ee:0d:14:75:b3: bc:84:7f:a3:9c:a7:56:39:ef:ed:dc:b8:70:4b:ac: 03:9b:03:4f:ae:63:e8:b7:3e:80:9e:95:34:98:bb: b0:a1:dc:b8:be:3e:59:8f:d4:ea:c7:08:c3:f6:96: 05:ee:a3:51:94:fa:29:bc:b2:1b:97:ef:6e:3c:fa: fc:93:1a:15:d8:1c:c1:7e:3b:ea:9f:cb:a8:7f:ef: 4d:03:60:5e:3e:56:56:ae:c4:80:3c:c2:08:9f:7b: 54:56:67:08:7d:cc:27:1d:f2:0c:62:c1:68:84:ef: 04:01:72:6d:bb:c8:c4:a6:7e:71:11:7f:2c:e2:cb: 64:1e:58:19:f0:c5:c1:3f:48:4a:d7:2e:24:b1:8e: a5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:10:3F:B1:BB:83:C2:03:AF:3B:65:0F:EF:18:96:C9:2A:CE:64:31 X509v3 Authority Key Identifier: keyid:6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:75:1e:4a:56:20:ae:5f:36:bb:b4:46:49:45:4d:0e:87:98: a7:5c:66:cc:7b:26:9e:3d:f9:9b:0e:2e:9e:8a:04:b1:2b:6a: 1e:5a:69:b6:2a:cb:88:e5:3f:8d:4b:c0:18:a6:0d:2b:0a:b4: dd:da:5e:3c:7e:74:ee:d3:ca:58:d2:4c:dc:c0:39:cf:10:1a: 90:29:7e:af:aa:92:00:76:1e:8d:4b:cb:4a:9c:bc:da:63:d4: 81:7c:a2:12:4f:6f:c2:ed:f0:ed:44:c9:a6:63:ce:21:b7:9f: 7f:e2:ee:94:11:fd:47:80:39:93:0c:04:d7:f9:1c:7f:24:0c: a7:f3:14:97:57:12:9c:44:44:3e:27:8c:17:02:34:19:2f:b1: 78:02:f0:6f:dd:c4:67:c7:0f:d8:27:ea:2a:08:31:6e:36:84: 61:eb:c6:74:1c:03:7f:5b:58:a1:e8:21:55:8e:28:9e:a0:8a: 66:53:00:55:a5:e2:cf:e5:fa:f3:6f:bb:09:68:5f:b5:0e:53: 3e:53:f2:32:e3:00:b8:12:b1:57:59:ce:40:9b:8b:29:d2:14: 19:e0:a3:dd:da:20:9a:03:d8:78:7c:23:61:29:b2:65:b1:55: ea:52:f9:f5:a4:6f:69:4d:7a:38:b3:29:66:f8:b1:04:5e:0e: 5c:42:bc:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmFw0w7h5F2NZpQIzNKVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYTY5YzNiZGM5MmQ2ODExNDhhMzU4YTEzYTZlNmY1M2Rm Yjc3NTgwHhcNMjUxMjI0MjMwMTE1WhcNMjUxMjI1MjMwMTE1WjAzMTEwLwYDVQQD Eyg3MjEwM2ZiMWJiODNjMjAzYWYzYjY1MGZlZjE4OTZjOTJhY2U2NDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0CKitKBit9E+fPH2kgq0pRlDYmi K+jn/XZE2X3rDDtw+wqTvMlzGESY6cDU8SIWJv3cys/68/8MVh3+usFSBkvyQUEM 09lJaS5FMnsmSKsSNaPO8HV9QTOAq1Jp5hgJ/YQObzTmmhptLj7dUvIi6iG47g0U dbO8hH+jnKdWOe/t3LhwS6wDmwNPrmPotz6AnpU0mLuwody4vj5Zj9TqxwjD9pYF 7qNRlPopvLIbl+9uPPr8kxoV2BzBfjvqn8uof+9NA2BePlZWrsSAPMIIn3tUVmcI fcwnHfIMYsFohO8EAXJtu8jEpn5xEX8s4stkHlgZ8MXBP0hK1y4ksY6lGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIQP7G7g8IDrztlD+8YlskqzmQxMB8GA1UdIwQY MBaAFGumnDvcktaBFIo1ihOm5vU9+3dYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTZhY085eVMxb0VVaWpXS0U2Ym05VDM3ZDFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85OGJjOTAtMDFkZi00NmFlLWJhNjMt YTljMDRkMDk1NGUyLzEvYTZhY085eVMxb0VVaWpXS0U2Ym05VDM3ZDFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy85OGJjOTAtMDFkZi00NmFlLWJhNjMtYTljMDRkMDk1NGUy LzEvYTZhY085eVMxb0VVaWpXS0U2Ym05VDM3ZDFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXUeSlYg rl82u7RGSUVNDoeYp1xmzHsmnj35mw4unooEsStqHlpptirLiOU/jUvAGKYNKwq0 3dpePH507tPKWNJM3MA5zxAakCl+r6qSAHYejUvLSpy82mPUgXyiEk9vwu3w7UTJ pmPOIbeff+LulBH9R4A5kwwE1/kcfyQMp/MUl1cSnEREPieMFwI0GS+xeALwb93E Z8cP2CfqKggxbjaEYevGdBwDf1tYoeghVY4onqCKZlMAVaXiz+X682+7CWhftQ5T PlPyMuMAuBKxV1nOQJuLKdIUGeCj3dogmgPYeHwjYSmyZbFV6lL59aRvaU16OLMp ZvixBF4OXEK8ZA== -----END CERTIFICATE-----Generated at Thu Dec 25 00:56:52 2025 by rpki-client