This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft File: A6bcLyZo69z4a2wCWKgYfl984nA.mft (raw, json) Hash identifier: 0Bc3HGXTvhzG6op0y4xYye5o17JbKfqLu/uYxjWQ35c= Subject key identifier: C2:04:66:91:75:5A:DB:59:AD:F6:BA:93:1F:0A:0A:EF:E0:08:DD:40 Authority key identifier: 03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70 Certificate issuer: /CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270 Certificate serial: 019B3F11CACAC69297DCD2EAC264DB8F5590 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft Manifest number: 0876 Signing time: Sun 21 Dec 2025 04:01:29 +0000 Manifest this update: Sun 21 Dec 2025 04:01:29 +0000 Manifest next update: Mon 22 Dec 2025 04:01:29 +0000 Files and hashes: 1: A6bcLyZo69z4a2wCWKgYfl984nA.crl (hash: 2g5QV9x3xjdn6q1zhf4auH1SFQMatllNRxwqZOtIpXw=) 2: dd8av2mxTwjOvzgQCyuc1wPNBmI.roa (hash: jwwVY2pCMQyTKSG87HTCJ5bltMafN2RGopv4GJtWPmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:ca:ca:c6:92:97:dc:d2:ea:c2:64:db:8f:55:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270 Validity Not Before: Dec 21 04:01:29 2025 GMT Not After : Dec 22 04:01:29 2025 GMT Subject: CN=c2046691755adb59adf6ba931f0a0aefe008dd40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:06:13:3d:9c:25:d7:19:56:e9:35:85:e9:44: 45:06:99:85:02:15:1f:5b:45:ef:b0:04:3d:a8:7e: ca:f4:d0:94:37:60:e2:47:08:83:2e:93:70:47:ba: ec:7e:aa:9c:9b:08:ad:87:d8:47:80:15:c3:09:7e: 4f:d9:de:10:f8:60:1e:63:ad:2a:77:d7:86:cb:b1: 48:b3:ad:e1:ae:19:06:78:92:58:70:00:19:17:f3: 79:2f:8f:9b:8f:40:e9:1f:80:90:f6:10:cb:4b:32: 6b:f4:b0:9b:d8:a7:bb:5d:e0:ad:1f:73:6d:e1:a4: 06:8f:60:84:b0:5e:5e:5d:cc:08:ee:05:9d:48:92: 93:ab:4f:3a:d8:60:2d:4d:45:72:5e:8a:4e:1b:3f: b0:d0:e9:75:9d:69:2a:33:b4:b4:fe:c8:df:9c:13: d5:43:5c:cb:d9:54:06:3b:95:c4:5f:eb:b1:6e:81: 9a:27:17:08:de:52:03:7e:4b:e6:c4:83:b2:48:65: f8:bb:d6:0b:8b:67:be:f2:05:b7:09:d2:08:78:55: a8:14:6f:d3:bf:c4:7a:0a:7e:e6:a6:41:ed:cd:f7: 35:3f:b7:fe:f1:77:ec:1d:d1:5b:be:2b:01:66:9c: c6:c3:42:28:d6:7e:b0:e3:b0:dd:52:a4:81:55:f5: c4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:04:66:91:75:5A:DB:59:AD:F6:BA:93:1F:0A:0A:EF:E0:08:DD:40 X509v3 Authority Key Identifier: keyid:03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:47:e3:2c:f8:be:47:0c:1f:7b:83:d5:60:42:dd:22:5b:74: 53:ef:83:9c:d0:ae:13:33:94:4b:36:0c:7c:ba:1b:ab:c7:c5: 9f:bb:6d:23:11:a8:5d:15:d2:4d:49:7b:dc:9a:14:92:df:68: 8e:a2:ae:60:bf:d6:0c:22:0e:98:78:0a:cc:99:fc:de:07:f1: 23:ba:a5:ff:b6:0b:f7:92:e5:dc:45:4d:68:c1:a4:dc:bd:fe: 96:78:1b:8f:31:1a:7c:cf:92:33:13:36:a9:86:b8:59:7e:7c: 62:bf:90:14:ce:81:73:69:28:c1:83:da:4e:18:37:46:1c:f8: d7:8a:e7:10:a3:e2:fb:c3:6d:12:a8:e8:3e:57:e7:02:22:df: ec:81:a8:75:20:1d:de:11:24:db:94:fa:46:bb:45:66:f3:15: 0e:c0:2d:b7:3f:55:97:51:f0:08:56:a5:b4:8f:8a:90:62:11: 68:a9:16:f6:9e:0a:7e:84:7a:7d:54:1d:cd:55:9d:46:69:c3: b6:95:23:41:42:ae:99:1c:20:95:25:ae:ac:9b:7a:14:1a:af: bc:43:f1:1f:cc:cc:bc:33:bc:72:fe:e9:12:eb:0b:20:b1:0f: bc:65:56:1d:d0:0c:24:6a:05:d6:93:de:40:cf:fb:c4:61:d5: 9c:2a:47:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EcrKxpKX3NLqwmTbj1WQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYTZkYzJmMjY2OGViZGNmODZiNmMwMjU4YTgxODdlNWY3 Y2UyNzAwHhcNMjUxMjIxMDQwMTI5WhcNMjUxMjIyMDQwMTI5WjAzMTEwLwYDVQQD EyhjMjA0NjY5MTc1NWFkYjU5YWRmNmJhOTMxZjBhMGFlZmUwMDhkZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQYTPZwl1xlW6TWF6URFBpmFAhUf W0XvsAQ9qH7K9NCUN2DiRwiDLpNwR7rsfqqcmwith9hHgBXDCX5P2d4Q+GAeY60q d9eGy7FIs63hrhkGeJJYcAAZF/N5L4+bj0DpH4CQ9hDLSzJr9LCb2Ke7XeCtH3Nt 4aQGj2CEsF5eXcwI7gWdSJKTq0862GAtTUVyXopOGz+w0Ol1nWkqM7S0/sjfnBPV Q1zL2VQGO5XEX+uxboGaJxcI3lIDfkvmxIOySGX4u9YLi2e+8gW3CdIIeFWoFG/T v8R6Cn7mpkHtzfc1P7f+8XfsHdFbvisBZpzGw0Io1n6w47DdUqSBVfXEMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIEZpF1WttZrfa6kx8KCu/gCN1AMB8GA1UdIwQY MBaAFAOm3C8maOvc+GtsAlioGH5ffOJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTZiY0x5Wm82OXo0YTJ3Q1dLZ1lmbDk4NG5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yOGIzMDMtNDdhNS00YTkyLWIwMmUt ZWJkMGMzZWU0NGFlLzEvQTZiY0x5Wm82OXo0YTJ3Q1dLZ1lmbDk4NG5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yOGIzMDMtNDdhNS00YTkyLWIwMmUtZWJkMGMzZWU0NGFl LzEvQTZiY0x5Wm82OXo0YTJ3Q1dLZ1lmbDk4NG5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUfjLPi+ Rwwfe4PVYELdIlt0U++DnNCuEzOUSzYMfLobq8fFn7ttIxGoXRXSTUl73JoUkt9o jqKuYL/WDCIOmHgKzJn83gfxI7ql/7YL95Ll3EVNaMGk3L3+lngbjzEafM+SMxM2 qYa4WX58Yr+QFM6Bc2kowYPaThg3Rhz414rnEKPi+8NtEqjoPlfnAiLf7IGodSAd 3hEk25T6RrtFZvMVDsAttz9Vl1HwCFaltI+KkGIRaKkW9p4KfoR6fVQdzVWdRmnD tpUjQUKumRwglSWurJt6FBqvvEPxH8zMvDO8cv7pEusLILEPvGVWHdAMJGoF1pPe QM/7xGHVnCpHyA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:36:58 2025 by rpki-client