This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft File: r6R0pepgHICSke55uuORiWTQhx4.mft (raw, json) Hash identifier: t8wwkt34sBufieGgj9doy8oySJVvOX/Rp23RhVM1WAk= Subject key identifier: 96:BA:79:3B:2D:C8:91:43:B3:D7:A2:B3:2D:BB:CA:8A:86:FD:06:F9 Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E Certificate issuer: /CN=afa474a5ea601c809291ee79bae3918964d0871e Certificate serial: 019B6278C0563CCC6A4CEAD99AE87E2877EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft Manifest number: 0E6F Signing time: Sun 28 Dec 2025 01:00:39 +0000 Manifest this update: Sun 28 Dec 2025 01:00:39 +0000 Manifest next update: Mon 29 Dec 2025 01:00:39 +0000 Files and hashes: 1: r6R0pepgHICSke55uuORiWTQhx4.crl (hash: yPCKYKaAejtnKHEZap7hNUyKeuZPk7aVMqNrCktnKCk=) 2: x6GJc4ojOxgz3esDAZaU67m_2pc.roa (hash: zoKZ4awQgsW57nby6hTMjyGrch8AryfCfI+Yae5icPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:78:c0:56:3c:cc:6a:4c:ea:d9:9a:e8:7e:28:77:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e Validity Not Before: Dec 28 01:00:39 2025 GMT Not After : Dec 29 01:00:39 2025 GMT Subject: CN=96ba793b2dc89143b3d7a2b32dbbca8a86fd06f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:96:6c:a0:b2:cd:b5:ba:62:e3:ec:ae:a0:5e: a3:ab:01:df:35:ee:d0:c2:0b:0b:6b:93:29:43:52: d5:66:a0:6d:3f:06:05:84:ea:b6:b7:f3:16:ee:f0: 6e:26:e4:2a:f0:32:e2:60:21:14:72:d1:be:4c:a6: c7:7b:48:f8:b4:39:bd:be:0a:91:1a:74:bc:4a:c7: 46:d0:23:bf:db:6b:c5:61:00:84:5f:eb:79:10:12: 6a:17:7f:9b:a3:b3:33:7e:96:8b:48:91:80:dc:6b: b8:be:ae:1b:f3:00:bb:21:42:db:ff:aa:c6:3d:93: d5:d4:f6:a1:ee:7b:07:55:bf:ca:2d:19:86:2d:a8: ce:04:cf:b4:ad:9c:53:04:aa:75:e1:a9:c2:43:60: 21:8d:10:ce:04:36:c9:c6:b2:3f:ad:87:c4:aa:f4: 6f:ec:7b:3b:ee:c2:32:a7:11:d7:3d:9c:a3:d9:60: 78:22:5b:9a:da:b6:41:7d:6e:ee:aa:6d:cd:65:80: fc:61:9c:54:8e:42:21:c5:92:7b:14:af:f4:11:ef: fc:ee:db:80:42:81:9d:3a:16:5f:c3:62:d7:33:cc: a9:e4:09:d9:5d:63:ab:ac:21:85:1b:14:46:6c:ee: b5:73:63:5e:37:13:3e:b2:55:9b:8e:93:e1:11:4a: 87:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BA:79:3B:2D:C8:91:43:B3:D7:A2:B3:2D:BB:CA:8A:86:FD:06:F9 X509v3 Authority Key Identifier: keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:9f:bb:3a:a0:02:75:e6:91:c3:53:6a:91:5f:21:16:a3:bf: 41:cd:65:04:74:42:f2:61:a7:42:26:3d:c7:22:89:54:a4:24: 83:4c:02:c4:3f:13:34:3f:af:1a:44:e8:f2:11:ad:20:5b:53: 86:a1:5e:9f:3e:da:78:59:92:50:b5:1d:da:e2:75:6a:13:fa: fd:fd:fd:40:b4:74:08:0e:fc:fc:c4:b2:c0:a9:f9:bd:77:ed: fc:19:a8:a7:4c:ae:11:c7:dc:0a:b6:2f:1a:b7:6f:a6:ed:8c: 97:ae:59:23:50:e8:23:8b:7b:f4:69:9b:ac:d9:dd:a1:a5:81: 14:bf:3d:49:a6:1f:16:7d:d4:fe:cb:d8:84:f4:cb:88:48:70: f2:c4:67:35:85:bf:a7:d9:4f:33:3a:ad:6b:51:40:de:66:27: f3:ea:9c:6d:d8:39:11:fc:82:d2:69:28:71:e2:66:a4:47:c6: 3f:1e:a1:a5:6a:08:37:a9:9f:52:e6:a7:a3:a4:42:cb:72:f9: 89:d8:92:91:22:8f:66:b4:e6:f9:6d:6d:9a:93:33:2d:85:a5: 7a:0f:70:fb:64:03:c0:85:12:2a:c8:3c:eb:68:0c:10:08:0f: ba:d7:a6:8d:b0:62:c0:59:44:b2:b4:43:b8:a1:4d:1c:a3:e6: 59:c8:9e:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtieMBWPMxqTOrZmuh+KHfuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYTQ3NGE1ZWE2MDFjODA5MjkxZWU3OWJhZTM5MTg5NjRk MDg3MWUwHhcNMjUxMjI4MDEwMDM5WhcNMjUxMjI5MDEwMDM5WjAzMTEwLwYDVQQD Eyg5NmJhNzkzYjJkYzg5MTQzYjNkN2EyYjMyZGJiY2E4YTg2ZmQwNmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5ZsoLLNtbpi4+yuoF6jqwHfNe7Q wgsLa5MpQ1LVZqBtPwYFhOq2t/MW7vBuJuQq8DLiYCEUctG+TKbHe0j4tDm9vgqR GnS8SsdG0CO/22vFYQCEX+t5EBJqF3+bo7MzfpaLSJGA3Gu4vq4b8wC7IULb/6rG PZPV1Pah7nsHVb/KLRmGLajOBM+0rZxTBKp14anCQ2AhjRDOBDbJxrI/rYfEqvRv 7Hs77sIypxHXPZyj2WB4Ilua2rZBfW7uqm3NZYD8YZxUjkIhxZJ7FK/0Ee/87tuA QoGdOhZfw2LXM8yp5AnZXWOrrCGFGxRGbO61c2NeNxM+slWbjpPhEUqHqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJa6eTstyJFDs9eisy27yoqG/Qb5MB8GA1UdIwQY MBaAFK+kdKXqYByAkpHuebrjkYlk0IceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjZSMHBlcGdISUNTa2U1NXV1T1JpV1RRaHg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jYzRkNzYtM2FlOS00OTFlLTliZDIt MTkzY2M2MWJjZTYxLzEvcjZSMHBlcGdISUNTa2U1NXV1T1JpV1RRaHg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9jYzRkNzYtM2FlOS00OTFlLTliZDItMTkzY2M2MWJjZTYx LzEvcjZSMHBlcGdISUNTa2U1NXV1T1JpV1RRaHg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMp+7OqAC deaRw1NqkV8hFqO/Qc1lBHRC8mGnQiY9xyKJVKQkg0wCxD8TND+vGkTo8hGtIFtT hqFenz7aeFmSULUd2uJ1ahP6/f39QLR0CA78/MSywKn5vXft/Bmop0yuEcfcCrYv Grdvpu2Ml65ZI1DoI4t79GmbrNndoaWBFL89SaYfFn3U/svYhPTLiEhw8sRnNYW/ p9lPMzqta1FA3mYn8+qcbdg5EfyC0mkoceJmpEfGPx6hpWoIN6mfUuano6RCy3L5 idiSkSKPZrTm+W1tmpMzLYWleg9w+2QDwIUSKsg862gMEAgPutemjbBiwFlEsrRD uKFNHKPmWcievQ== -----END CERTIFICATE-----Generated at Sun Dec 28 09:52:36 2025 by rpki-client