This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft File: 6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft (raw, json) Hash identifier: KkqKDGsE/P8Y9eAADS7X3ZOSBZo4zrjzuEaYl8rRw2g= Subject key identifier: 18:D9:CC:AC:D5:D8:A9:BA:CC:DD:44:A8:D4:FD:36:EA:32:8F:9F:51 Authority key identifier: E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04 Certificate issuer: /CN=e920237e725cf0a53ef43a74b5569551aff74e04 Certificate serial: 019B405BCB8FC1796BB5B8FD26339EF7A8E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft Manifest number: 09C2 Signing time: Sun 21 Dec 2025 10:01:56 +0000 Manifest this update: Sun 21 Dec 2025 10:01:56 +0000 Manifest next update: Mon 22 Dec 2025 10:01:56 +0000 Files and hashes: 1: 6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl (hash: k+9AwK5wO8/aCf0W00+LpvpK3j0/7icvIYWYWjKV09o=) 2: bYwJVKNEie6jgjCIP7suKHbkq0A.roa (hash: gBYweOoSxODSbbYi3S03mFZJ+Vs6bHOyqwK1v3lQMdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:cb:8f:c1:79:6b:b5:b8:fd:26:33:9e:f7:a8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e920237e725cf0a53ef43a74b5569551aff74e04 Validity Not Before: Dec 21 10:01:56 2025 GMT Not After : Dec 22 10:01:56 2025 GMT Subject: CN=18d9ccacd5d8a9baccdd44a8d4fd36ea328f9f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:4d:1d:b4:75:fb:2b:f7:d9:26:95:62:fb: 9a:c2:fa:d3:e6:48:29:ea:f3:3f:29:2a:92:84:c0: 6d:fb:a8:67:37:67:b5:32:6f:cb:b0:d2:da:12:9f: 12:fb:7e:6e:c9:23:56:db:dc:1a:b0:7f:cf:f4:56: 2c:d4:ed:eb:fa:6d:12:1e:18:cc:c8:1a:2c:09:6f: cd:c7:44:9d:a6:ed:d6:54:9f:cc:07:93:5a:95:95: 05:0b:d5:26:fa:27:00:e9:ae:a7:58:04:b5:0b:a9: 87:d5:ac:66:00:d1:87:60:b2:71:fc:9c:93:80:c3: df:99:ce:1c:d6:ba:de:7c:a7:63:25:04:83:4d:f8: 0d:06:2a:61:ed:d0:a0:ee:ca:12:e5:02:98:07:79: 0d:01:5a:fd:04:dd:25:25:cb:2e:8a:01:8b:19:c1: fd:b5:fb:d7:eb:93:33:f1:f6:7b:27:4f:57:42:11: b7:c9:10:c8:2f:74:f5:fe:b3:5f:dc:bd:89:cd:41: 53:ad:ef:48:33:c7:74:50:61:5d:72:44:33:c4:84: f4:d6:12:df:19:cc:f7:4c:81:ba:3c:da:62:5c:fb: 20:a0:a6:22:81:c5:37:18:59:15:42:bb:64:dd:bc: de:06:32:46:83:40:b5:c7:a4:a8:cc:6f:3a:61:79: 77:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D9:CC:AC:D5:D8:A9:BA:CC:DD:44:A8:D4:FD:36:EA:32:8F:9F:51 X509v3 Authority Key Identifier: keyid:E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:a9:89:ea:d7:38:93:45:b1:90:03:cd:d8:5b:e8:dc:50:7e: f2:28:97:34:e4:bb:84:6a:d4:ce:f9:a8:42:0f:05:6c:4d:a8: 7c:9a:a3:d2:d7:b3:aa:2a:85:ea:83:34:ef:7f:b5:33:20:df: a9:49:19:d2:35:90:99:1c:bc:b0:d0:94:87:ee:b0:f6:44:02: 4e:c5:24:70:47:01:a9:b3:15:9b:ce:4d:9c:47:69:ec:5b:08: 22:7e:1e:da:fd:12:3b:fe:47:6a:57:4f:35:96:0f:4e:db:19: a0:47:ec:28:77:ab:63:cb:65:c0:7a:70:91:a0:1e:7d:1a:0e: ea:06:fa:ec:ea:68:df:91:9e:4f:87:71:42:d9:f8:5a:58:76: f2:6b:d3:56:f0:7a:c4:b8:78:49:25:04:ca:ff:9e:09:5e:d7: cc:dd:57:82:c8:75:6d:95:02:cf:cb:11:fd:6d:09:d8:ab:98: 2e:64:98:bc:e9:c1:f6:c7:4e:23:aa:96:7a:f9:e3:ab:69:c9: 9c:fb:38:a3:99:37:c4:ac:78:7c:2b:af:57:3c:2e:f5:dd:38: c2:3b:ed:da:1c:cb:50:88:7d:96:80:ea:69:00:86:a6:5e:3e: fd:46:0c:51:e5:53:0d:73:9e:7d:df:cd:24:f5:70:87:0b:94: fe:49:0f:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW8uPwXlrtbj9JjOe96jnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MjAyMzdlNzI1Y2YwYTUzZWY0M2E3NGI1NTY5NTUxYWZm NzRlMDQwHhcNMjUxMjIxMTAwMTU2WhcNMjUxMjIyMTAwMTU2WjAzMTEwLwYDVQQD EygxOGQ5Y2NhY2Q1ZDhhOWJhY2NkZDQ0YThkNGZkMzZlYTMyOGY5ZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO9NHbR1+yv32SaVYvuawvrT5kgp 6vM/KSqShMBt+6hnN2e1Mm/LsNLaEp8S+35uySNW29wasH/P9FYs1O3r+m0SHhjM yBosCW/Nx0Sdpu3WVJ/MB5NalZUFC9Um+icA6a6nWAS1C6mH1axmANGHYLJx/JyT gMPfmc4c1rrefKdjJQSDTfgNBiph7dCg7soS5QKYB3kNAVr9BN0lJcsuigGLGcH9 tfvX65Mz8fZ7J09XQhG3yRDIL3T1/rNf3L2JzUFTre9IM8d0UGFdckQzxIT01hLf Gcz3TIG6PNpiXPsgoKYigcU3GFkVQrtk3bzeBjJGg0C1x6SozG86YXl3NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjZzKzV2Km6zN1EqNT9Nuoyj59RMB8GA1UdIwQY MBaAFOkgI35yXPClPvQ6dLVWlVGv904EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlNBamZuSmM4S1UtOURwMHRWYVZVYV8zVGdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hNTYwZDAtMDM2OC00OWMzLTliODgt ZWIxMTM5YTMzZDBhLzEvNlNBamZuSmM4S1UtOURwMHRWYVZVYV8zVGdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9hNTYwZDAtMDM2OC00OWMzLTliODgtZWIxMTM5YTMzZDBh LzEvNlNBamZuSmM4S1UtOURwMHRWYVZVYV8zVGdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6mJ6tc4 k0WxkAPN2Fvo3FB+8iiXNOS7hGrUzvmoQg8FbE2ofJqj0tezqiqF6oM073+1MyDf qUkZ0jWQmRy8sNCUh+6w9kQCTsUkcEcBqbMVm85NnEdp7FsIIn4e2v0SO/5HaldP NZYPTtsZoEfsKHerY8tlwHpwkaAefRoO6gb67Opo35GeT4dxQtn4Wlh28mvTVvB6 xLh4SSUEyv+eCV7XzN1Xgsh1bZUCz8sR/W0J2KuYLmSYvOnB9sdOI6qWevnjq2nJ nPs4o5k3xKx4fCuvVzwu9d04wjvt2hzLUIh9loDqaQCGpl4+/UYMUeVTDXOefd/N JPVwhwuU/kkPTg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:43:00 2025 by rpki-client