This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft File: r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft (raw, json) Hash identifier: oh0GtEI9q0ug5eSTZE0SizPmZChrSg0KVrowdhTNKJo= Subject key identifier: B4:BF:80:AC:EF:59:C5:94:8E:E2:57:AA:C7:A8:1F:B2:0A:85:23:4C Authority key identifier: AF:AC:83:E5:67:7B:11:05:0D:CE:CB:C2:77:30:83:1C:5E:6F:9C:6A Certificate issuer: /CN=afac83e5677b11050dcecbc27730831c5e6f9c6a Certificate serial: 019B3A21E626C233561604C6BA21F66A3C38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft Manifest number: 74 Signing time: Sat 20 Dec 2025 05:00:58 +0000 Manifest this update: Sat 20 Dec 2025 05:00:58 +0000 Manifest next update: Sun 21 Dec 2025 05:00:58 +0000 Files and hashes: 1: 7Xs2O9Awldvq_tdrSlwSHIZGxrA.roa (hash: k+cTXScEND34YVsYY+IQYbjLgi/okHp1fhBK53hmBF8=) 2: r6yD5Wd7EQUNzsvCdzCDHF5vnGo.crl (hash: 0Q2howOc7sSEp6c51mC3xXL1MLSk2YQiH/sHSLWtszo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.crl rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft rsync://rpki.ripe.net/repository/DEFAULT/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:e6:26:c2:33:56:16:04:c6:ba:21:f6:6a:3c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac83e5677b11050dcecbc27730831c5e6f9c6a Validity Not Before: Dec 20 05:00:58 2025 GMT Not After : Dec 21 05:00:58 2025 GMT Subject: CN=b4bf80acef59c5948ee257aac7a81fb20a85234c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c7:52:9a:55:95:47:b9:33:5f:e7:a9:84:69: 02:71:88:08:6d:35:df:35:3c:2f:24:84:de:42:a1: 86:65:02:06:ad:81:7d:77:68:c3:62:44:32:b7:b1: 19:ca:36:07:82:b4:f4:be:8d:2b:d9:a3:0f:dc:f4: e6:d4:f3:40:b1:a4:49:10:f1:1a:77:c3:63:c7:51: 83:69:91:f0:68:17:00:5a:20:87:e2:35:fd:b7:9b: 67:ac:4f:97:db:23:a6:e0:ae:97:dc:9e:12:1e:33: 46:91:8a:bc:a7:9a:8f:c2:4f:2b:52:3f:6c:3c:e5: ef:df:56:c2:9b:fa:22:d0:8c:fd:0a:08:77:cf:ef: 5d:db:ae:b1:d7:a1:5b:7e:6b:86:d2:0f:df:98:5c: 50:a1:0d:f9:d3:f8:0d:0f:62:a7:dc:e7:b5:c8:cf: 8e:3b:99:7b:0c:31:0b:f3:ab:a7:e2:5a:01:28:92: e3:e4:d7:f5:7e:d4:5c:65:7b:6e:ca:85:56:bb:cc: 16:35:49:1a:3a:54:02:59:a4:ec:94:e1:d8:07:cf: 4a:bd:d4:af:e2:a5:f1:32:92:01:e7:6e:c7:a6:c6: b2:d7:f6:f5:97:c0:6f:e8:a6:e4:42:ba:35:29:e0: a6:d8:6e:70:74:71:c4:87:46:a9:e9:a0:f2:a1:4b: 17:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BF:80:AC:EF:59:C5:94:8E:E2:57:AA:C7:A8:1F:B2:0A:85:23:4C X509v3 Authority Key Identifier: keyid:AF:AC:83:E5:67:7B:11:05:0D:CE:CB:C2:77:30:83:1C:5E:6F:9C:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c4:d9:f4:d6:c4:75:e1:25:50:64:67:50:1a:7b:54:3b:97: b7:e0:9f:f0:94:20:59:10:02:07:e2:23:b9:96:56:65:d2:17: cb:3d:ad:87:18:76:b1:ce:f3:12:72:ae:73:67:83:1b:c5:32: 3d:59:e0:ac:bd:c3:53:ae:fa:41:88:88:32:2c:67:5d:d2:81: 23:f7:3d:43:e2:74:b3:c3:8c:f5:9a:58:9e:92:eb:36:4e:1e: 64:a5:ed:45:83:e5:ff:ff:1c:43:71:47:4a:67:44:cd:c6:69: 13:69:df:4e:f9:aa:a8:67:15:3e:57:39:23:07:12:28:da:d0: f3:c4:cf:66:75:54:f5:d4:91:83:46:d5:8d:fd:ba:14:9a:b5: ed:97:ce:f0:10:1f:e7:ca:be:a3:68:98:4b:8f:9c:e2:43:d1: 4f:0b:37:5a:30:34:37:d4:f8:21:48:74:c0:6b:ee:45:8e:3c: 03:b8:89:c2:a7:34:98:84:e5:95:3b:74:37:6e:25:cf:4a:34: ba:b9:f8:87:83:08:f6:09:90:33:c9:0e:9d:59:85:93:a1:7f: da:52:38:ed:4f:1e:85:64:6f:89:14:bb:98:a1:d6:c3:b9:7d: fb:14:d6:db:ce:dd:bb:48:8e:99:bb:d8:db:a8:d8:b3:61:be: ef:88:72:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IeYmwjNWFgTGuiH2ajw4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYWM4M2U1Njc3YjExMDUwZGNlY2JjMjc3MzA4MzFjNWU2 ZjljNmEwHhcNMjUxMjIwMDUwMDU4WhcNMjUxMjIxMDUwMDU4WjAzMTEwLwYDVQQD EyhiNGJmODBhY2VmNTljNTk0OGVlMjU3YWFjN2E4MWZiMjBhODUyMzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sdSmlWVR7kzX+ephGkCcYgIbTXf NTwvJITeQqGGZQIGrYF9d2jDYkQyt7EZyjYHgrT0vo0r2aMP3PTm1PNAsaRJEPEa d8Njx1GDaZHwaBcAWiCH4jX9t5tnrE+X2yOm4K6X3J4SHjNGkYq8p5qPwk8rUj9s POXv31bCm/oi0Iz9Cgh3z+9d266x16FbfmuG0g/fmFxQoQ350/gND2Kn3Oe1yM+O O5l7DDEL86un4loBKJLj5Nf1ftRcZXtuyoVWu8wWNUkaOlQCWaTslOHYB89KvdSv 4qXxMpIB527Hpsay1/b1l8Bv6KbkQro1KeCm2G5wdHHEh0ap6aDyoUsXEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLS/gKzvWcWUjuJXqseoH7IKhSNMMB8GA1UdIwQY MBaAFK+sg+VnexEFDc7Lwncwgxxeb5xqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjZ5RDVXZDdFUVVOenN2Q2R6Q0RIRjV2bkdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9jMjM1N2EtYzNlNS00MTczLWJjNDEt YTA2NDY3NjJkNTY3LzEvcjZ5RDVXZDdFUVVOenN2Q2R6Q0RIRjV2bkdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9jMjM1N2EtYzNlNS00MTczLWJjNDEtYTA2NDY3NjJkNTY3 LzEvcjZ5RDVXZDdFUVVOenN2Q2R6Q0RIRjV2bkdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcTZ9NbE deElUGRnUBp7VDuXt+Cf8JQgWRACB+IjuZZWZdIXyz2thxh2sc7zEnKuc2eDG8Uy PVngrL3DU676QYiIMixnXdKBI/c9Q+J0s8OM9ZpYnpLrNk4eZKXtRYPl//8cQ3FH SmdEzcZpE2nfTvmqqGcVPlc5IwcSKNrQ88TPZnVU9dSRg0bVjf26FJq17ZfO8BAf 58q+o2iYS4+c4kPRTws3WjA0N9T4IUh0wGvuRY48A7iJwqc0mITllTt0N24lz0o0 urn4h4MI9gmQM8kOnVmFk6F/2lI47U8ehWRviRS7mKHWw7l9+xTW287du0iOmbvY 26jYs2G+74hytA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:30:01 2025 by rpki-client