This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft File: 06xQ4EWCKCMXbkeDLeyPIRt08BM.mft (raw, json) Hash identifier: OWLolkjdCllvPkKKmfo7uo4VSRcYd2oB3EzLVc1rGdg= Subject key identifier: CE:6F:53:5A:2B:13:36:F9:7D:E2:48:95:F4:A6:C0:0F:07:C6:B7:BF Authority key identifier: D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13 Certificate issuer: /CN=d3ac50e045822823176e47832dec8f211b74f013 Certificate serial: 019B34C6243E69E21B60F3B029741AD78477 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft Manifest number: 0442 Signing time: Fri 19 Dec 2025 04:02:39 +0000 Manifest this update: Fri 19 Dec 2025 04:02:39 +0000 Manifest next update: Sat 20 Dec 2025 04:02:39 +0000 Files and hashes: 1: 06xQ4EWCKCMXbkeDLeyPIRt08BM.crl (hash: JvezWHIEVV0J22rRaSAnOZ41khAqiy8SjjrsNMO0hbg=) 2: J7at31yuwr6xPDnvAJre3wzoR9o.roa (hash: RbmaLbG1z0L4l1ON8n9W5icIKF2KnmAyzavN38bNAhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:24:3e:69:e2:1b:60:f3:b0:29:74:1a:d7:84:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3ac50e045822823176e47832dec8f211b74f013 Validity Not Before: Dec 19 04:02:39 2025 GMT Not After : Dec 20 04:02:39 2025 GMT Subject: CN=ce6f535a2b1336f97de24895f4a6c00f07c6b7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4f:44:0b:7e:3e:8c:6b:a0:63:87:f4:ea:d5: b3:59:67:30:f3:2b:4d:50:ff:8a:dc:5d:dc:ef:ab: fb:15:50:d1:46:b2:29:68:00:b9:47:d2:b7:c1:7d: cc:e1:6d:21:a9:35:bf:c9:d1:7e:2c:05:ba:79:06: 98:d7:fe:5d:cd:08:df:1e:4b:e4:2d:66:20:12:f9: ef:8f:5e:1e:12:0d:07:9e:1d:db:6c:6c:bf:aa:b7: 5f:19:3b:c2:a5:ca:39:d6:d0:34:71:62:b9:08:eb: 9b:6c:e9:21:91:5c:69:21:b6:2d:9c:fd:c0:ca:31: 9f:50:66:2a:a6:a7:e1:a2:07:4f:71:bc:ad:20:96: 80:85:9a:4c:24:fc:20:6f:c2:76:8f:e1:37:c0:f4: 03:08:4e:14:47:d1:4c:87:cb:f6:64:fd:87:85:65: f3:03:dd:24:ee:79:0b:74:75:fa:97:d3:e6:ff:5b: c7:7a:3c:97:82:33:57:5d:e4:40:83:c3:1a:b4:b6: 6d:4b:74:3c:67:2d:d8:ad:5e:02:05:3d:81:06:e2: 48:b7:27:c7:15:b3:6e:ba:e8:1d:b1:b5:69:a8:b1: 49:16:60:ec:26:52:d2:40:1a:3f:9e:44:af:99:02: af:16:3d:20:77:f7:85:47:0f:1a:34:4b:a1:6f:a7: fc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6F:53:5A:2B:13:36:F9:7D:E2:48:95:F4:A6:C0:0F:07:C6:B7:BF X509v3 Authority Key Identifier: keyid:D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:c7:d0:02:83:2a:67:59:b6:68:af:c7:96:1c:29:86:4e:cb: 86:bf:75:f1:8b:ab:90:5d:4c:77:e9:ea:19:0f:cc:b8:b6:1c: ea:74:05:24:93:04:17:b8:62:f8:ee:3d:3f:1e:cb:44:db:7d: 43:ae:2b:f7:12:c4:2e:c7:c1:47:d4:37:11:aa:7a:b2:bc:1a: 3a:b0:f8:e6:d7:cd:bd:12:b0:e3:e4:f2:3d:65:91:04:06:f9: 06:74:0d:23:4a:4d:a1:ad:6e:82:ef:cf:4c:14:d9:91:90:0d: 5e:8e:4d:f7:9b:87:b1:c6:f8:04:94:13:a9:6d:8e:c5:17:bc: 8c:86:b8:ce:91:91:97:7c:1e:4d:ec:45:32:83:85:bd:9f:e2: f3:63:b1:59:a0:35:d4:3e:2c:ff:f9:cf:1c:ea:b6:4f:c7:18: 31:fe:40:ed:1d:d7:24:1d:dc:30:55:cc:91:79:c3:4a:cf:21: e9:b2:d0:2f:d4:ba:4b:86:06:19:f5:65:95:97:16:84:3d:1a: 1e:c5:66:6b:16:b6:93:b1:3b:f6:9b:41:ee:e6:29:c1:d2:f8: bd:fd:65:aa:87:d1:0a:9d:3a:ac:bc:c7:89:83:fc:ab:fe:60: 47:b1:4a:26:76:b5:b7:bf:77:33:56:59:62:d9:80:9e:d0:e6: cf:a3:d4:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xiQ+aeIbYPOwKXQa14R3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYWM1MGUwNDU4MjI4MjMxNzZlNDc4MzJkZWM4ZjIxMWI3 NGYwMTMwHhcNMjUxMjE5MDQwMjM5WhcNMjUxMjIwMDQwMjM5WjAzMTEwLwYDVQQD EyhjZTZmNTM1YTJiMTMzNmY5N2RlMjQ4OTVmNGE2YzAwZjA3YzZiN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr09EC34+jGugY4f06tWzWWcw8ytN UP+K3F3c76v7FVDRRrIpaAC5R9K3wX3M4W0hqTW/ydF+LAW6eQaY1/5dzQjfHkvk LWYgEvnvj14eEg0Hnh3bbGy/qrdfGTvCpco51tA0cWK5COubbOkhkVxpIbYtnP3A yjGfUGYqpqfhogdPcbytIJaAhZpMJPwgb8J2j+E3wPQDCE4UR9FMh8v2ZP2HhWXz A90k7nkLdHX6l9Pm/1vHejyXgjNXXeRAg8MatLZtS3Q8Zy3YrV4CBT2BBuJItyfH FbNuuugdsbVpqLFJFmDsJlLSQBo/nkSvmQKvFj0gd/eFRw8aNEuhb6f87QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5vU1orEzb5feJIlfSmwA8Hxre/MB8GA1UdIwQY MBaAFNOsUOBFgigjF25Hgy3sjyEbdPATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDZ4UTRFV0NLQ01YYmtlRExleVBJUnQwOEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9mOTZjOWMtNzcyZC00YjA1LWE4OWUt NTQ4ZDMwMmNjZWRiLzEvMDZ4UTRFV0NLQ01YYmtlRExleVBJUnQwOEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9mOTZjOWMtNzcyZC00YjA1LWE4OWUtNTQ4ZDMwMmNjZWRi LzEvMDZ4UTRFV0NLQ01YYmtlRExleVBJUnQwOEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMfQAoMq Z1m2aK/Hlhwphk7Lhr918YurkF1Md+nqGQ/MuLYc6nQFJJMEF7hi+O49Px7LRNt9 Q64r9xLELsfBR9Q3Eap6srwaOrD45tfNvRKw4+TyPWWRBAb5BnQNI0pNoa1ugu/P TBTZkZANXo5N95uHscb4BJQTqW2OxRe8jIa4zpGRl3weTexFMoOFvZ/i82OxWaA1 1D4s//nPHOq2T8cYMf5A7R3XJB3cMFXMkXnDSs8h6bLQL9S6S4YGGfVllZcWhD0a HsVmaxa2k7E79ptB7uYpwdL4vf1lqofRCp06rLzHiYP8q/5gR7FKJna1t793M1ZZ YtmAntDmz6PUeA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:30:26 2025 by rpki-client