This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft File: K6cIjjnnrYgXt9EOoqW4oJikegs.mft (raw, json) Hash identifier: e5GKHV7jQ15v5VaGS/WxSqEd+u9tDK4EE9S0deYIvVk= Subject key identifier: E8:42:71:BA:A1:37:5A:E3:49:CD:A0:DB:F8:D6:3A:2C:DB:02:12:82 Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b Certificate serial: 019B624255956FDF04C17C62D887AC8320E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft Manifest number: 179E Signing time: Sun 28 Dec 2025 00:01:12 +0000 Manifest this update: Sun 28 Dec 2025 00:01:12 +0000 Manifest next update: Mon 29 Dec 2025 00:01:12 +0000 Files and hashes: 1: K6cIjjnnrYgXt9EOoqW4oJikegs.crl (hash: jhJ6ZNXHm8tw1KYzrSmVDpfGDhPPjxnWQEMMx2luuhM=) 2: nFthzao_iVS1TdMPq7jAXyRRLuU.roa (hash: NXsb3alCPuDvQ88g31RvJaxIIcKhEe221c9ghi3si40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:42:55:95:6f:df:04:c1:7c:62:d8:87:ac:83:20:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b Validity Not Before: Dec 28 00:01:12 2025 GMT Not After : Dec 29 00:01:12 2025 GMT Subject: CN=e84271baa1375ae349cda0dbf8d63a2cdb021282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:64:20:fa:a8:8b:9e:a7:b3:89:a5:6b:ed:49: 4e:50:3e:63:e5:f9:c2:4f:e6:67:06:3e:b0:ca:8c: 7a:ea:3e:6b:d2:9a:a4:0d:de:90:0b:b9:59:74:c4: 9f:76:96:53:df:32:f2:1b:31:95:bb:37:60:aa:2d: a2:c7:4c:5a:4c:fd:2b:9b:76:1a:fe:04:ce:38:5a: 0c:22:20:55:07:01:3f:ad:36:71:f3:97:e2:aa:e1: 9e:c0:b6:c4:71:a6:83:39:48:47:51:4a:b5:be:e3: 7b:70:39:ce:9e:5d:23:52:9e:1f:b6:11:9c:c6:f7: 43:06:5c:c5:d2:0a:7b:0d:c3:72:eb:a5:ff:9f:8c: e6:09:46:e2:eb:f7:2e:7d:d9:bb:e1:a4:9a:00:f1: 6e:d0:08:86:ca:2f:52:95:fe:62:7d:9e:91:c8:b2: 21:00:53:8a:2a:ab:b6:cf:0c:ba:45:12:25:86:a3: 93:d8:60:90:50:32:7c:89:2f:6e:c0:5a:7c:e7:c8: 0e:3f:ab:e8:72:4c:72:fb:33:0f:32:65:2b:95:98: eb:7f:b0:8c:41:73:e3:15:2d:fb:e3:27:ae:25:49: 03:40:c9:f7:61:8a:e2:6a:f6:f6:b1:aa:af:37:18: 03:8d:78:83:2e:25:5e:12:34:e2:29:50:bc:b6:6a: b7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:42:71:BA:A1:37:5A:E3:49:CD:A0:DB:F8:D6:3A:2C:DB:02:12:82 X509v3 Authority Key Identifier: keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3d:9a:b7:82:c5:53:a4:ad:96:2c:66:a0:69:d4:93:77:10: 2a:ed:87:5e:0e:aa:5f:c4:d8:0b:7f:30:59:64:0c:f6:a1:73: e7:9c:5f:e3:27:df:29:0d:05:92:96:e2:ea:0e:19:aa:a1:71: af:b6:9f:06:83:09:ed:a0:72:b8:d7:4f:d5:56:97:8e:08:0a: 27:ed:0b:ad:ae:da:14:ef:24:47:ea:9d:ea:9b:02:4e:1e:f3: de:ed:9d:30:38:57:8d:f1:1b:1b:4e:87:af:1a:4f:d2:c0:75: e9:15:a1:d9:4f:f8:15:ee:17:b6:5b:4f:9c:ab:32:41:d8:ac: f8:f2:9d:99:35:0f:42:dd:57:65:a6:bf:6f:35:f2:ef:63:f5: 68:d9:40:f7:87:07:4c:f9:ba:9f:df:b4:cf:34:b9:1b:b5:90: 5f:c3:d3:a8:d9:3f:af:f1:3f:6e:36:22:09:fd:2d:56:b0:11: de:e5:d3:ef:7a:2d:5e:55:44:76:92:0a:98:cf:60:fa:b9:91: ba:55:c8:6e:5f:f3:cc:d6:49:7e:a3:d1:bf:71:41:98:c3:cb: 51:96:20:fd:4c:8e:47:fb:35:ee:cb:26:06:2c:9c:c8:b4:36: 81:94:fa:3e:48:02:ca:4f:64:14:81:f8:50:b5:68:cd:76:01: b3:60:9c:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiQlWVb98EwXxi2IesgyDjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYTcwODhlMzllN2FkODgxN2I3ZDEwZWEyYTViOGEwOThh NDdhMGIwHhcNMjUxMjI4MDAwMTEyWhcNMjUxMjI5MDAwMTEyWjAzMTEwLwYDVQQD EyhlODQyNzFiYWExMzc1YWUzNDljZGEwZGJmOGQ2M2EyY2RiMDIxMjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmQg+qiLnqeziaVr7UlOUD5j5fnC T+ZnBj6wyox66j5r0pqkDd6QC7lZdMSfdpZT3zLyGzGVuzdgqi2ix0xaTP0rm3Ya /gTOOFoMIiBVBwE/rTZx85fiquGewLbEcaaDOUhHUUq1vuN7cDnOnl0jUp4fthGc xvdDBlzF0gp7DcNy66X/n4zmCUbi6/cufdm74aSaAPFu0AiGyi9Slf5ifZ6RyLIh AFOKKqu2zwy6RRIlhqOT2GCQUDJ8iS9uwFp858gOP6vockxy+zMPMmUrlZjrf7CM QXPjFS374yeuJUkDQMn3YYriavb2saqvNxgDjXiDLiVeEjTiKVC8tmq37wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhCcbqhN1rjSc2g2/jWOizbAhKCMB8GA1UdIwQY MBaAFCunCI45562IF7fRDqKluKCYpHoLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzZjSWpqbm5yWWdYdDlFT29xVzRvSmlrZWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iZjU4YzUtZjNlMi00MWFjLWEyMTYt NGE2N2U0ZDA1NmFiLzEvSzZjSWpqbm5yWWdYdDlFT29xVzRvSmlrZWdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9iZjU4YzUtZjNlMi00MWFjLWEyMTYtNGE2N2U0ZDA1NmFi LzEvSzZjSWpqbm5yWWdYdDlFT29xVzRvSmlrZWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXT2at4LF U6StlixmoGnUk3cQKu2HXg6qX8TYC38wWWQM9qFz55xf4yffKQ0Fkpbi6g4ZqqFx r7afBoMJ7aByuNdP1VaXjggKJ+0Lra7aFO8kR+qd6psCTh7z3u2dMDhXjfEbG06H rxpP0sB16RWh2U/4Fe4XtltPnKsyQdis+PKdmTUPQt1XZaa/bzXy72P1aNlA94cH TPm6n9+0zzS5G7WQX8PTqNk/r/E/bjYiCf0tVrAR3uXT73otXlVEdpIKmM9g+rmR ulXIbl/zzNZJfqPRv3FBmMPLUZYg/UyOR/s17ssmBiycyLQ2gZT6PkgCyk9kFIH4 ULVozXYBs2CccQ== -----END CERTIFICATE-----Generated at Sun Dec 28 06:40:52 2025 by rpki-client