This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft File: _6vCNZX9gER9mPXsNRMWG9JHP8Y.mft (raw, json) Hash identifier: K65r3T0tYVK68pjUIQxivO502eU61xnkLDneZGS/IKs= Subject key identifier: 2C:3E:D5:31:B7:4D:D1:4E:61:53:3A:BB:40:74:76:58:4C:54:DE:27 Authority key identifier: FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6 Certificate issuer: /CN=ffabc23595fd80447d98f5ec3513161bd2473fc6 Certificate serial: 019B5DC12ED8403BE6CCFF0F2B21E012F357 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft Manifest number: 1798 Signing time: Sat 27 Dec 2025 03:01:40 +0000 Manifest this update: Sat 27 Dec 2025 03:01:40 +0000 Manifest next update: Sun 28 Dec 2025 03:01:40 +0000 Files and hashes: 1: _6vCNZX9gER9mPXsNRMWG9JHP8Y.crl (hash: ZAvAdT8Lq974QfufuJ9NSMIBj5BohsQvuV7JSZZwcc0=) 2: n0WE9rwocCHCYcBXCKZfpxQ3G2M.roa (hash: BVGoc++GdN0W0NrCtzzymI9R4sw/BZhgTYZXjkBBFbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:c1:2e:d8:40:3b:e6:cc:ff:0f:2b:21:e0:12:f3:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffabc23595fd80447d98f5ec3513161bd2473fc6 Validity Not Before: Dec 27 03:01:40 2025 GMT Not After : Dec 28 03:01:40 2025 GMT Subject: CN=2c3ed531b74dd14e61533abb407476584c54de27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b4:5b:ad:38:32:52:68:c4:b5:e5:5c:b3:13: f9:98:f7:50:27:cb:c5:e8:51:29:6f:7b:23:81:19: f9:f1:f3:62:63:7a:52:9d:65:0f:9d:c1:e9:7f:72: 02:4d:68:93:9a:49:db:e8:06:77:69:cf:e9:b1:09: 42:8c:6f:12:9e:b8:75:a9:41:20:29:26:af:67:cd: 33:da:b8:1d:84:97:6d:82:38:d2:fa:88:76:13:e7: 9b:04:f1:1d:6a:84:a5:f2:e0:6b:62:fc:bd:2e:5e: 3b:12:f7:02:04:00:94:87:c1:13:68:17:bd:2b:7e: f6:19:a1:ec:42:4a:0c:dd:eb:12:27:66:3e:77:c8: 14:7e:4d:69:78:46:11:e2:21:d6:c8:c2:01:e7:0c: 02:44:ca:7c:ba:90:5e:c8:e3:ad:4e:76:12:59:65: 50:6a:a3:df:7b:2b:07:9a:e2:57:ac:9e:72:d1:d5: 6d:1d:58:15:77:b0:a4:6e:b8:b2:3c:f5:b8:a2:c3: 6c:d0:b0:b3:3e:9b:36:a4:57:a2:51:c4:72:ce:4c: 5c:cd:c4:4a:da:1c:66:36:66:bf:a9:5f:a7:58:37: 63:c9:8d:f8:8b:d9:18:41:c7:51:b5:48:e4:09:b5: 44:b8:c8:22:13:04:b3:8a:88:79:db:a1:01:ed:92: ff:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3E:D5:31:B7:4D:D1:4E:61:53:3A:BB:40:74:76:58:4C:54:DE:27 X509v3 Authority Key Identifier: keyid:FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:71:8f:0f:78:c8:66:68:02:5c:21:84:a7:78:8f:af:b4:6a: fb:ee:81:e4:fb:8d:da:0b:77:a7:8b:4a:2b:74:b1:60:67:48: 4e:98:4a:b5:d9:55:bd:a2:54:d3:ea:7f:52:99:f3:ea:ff:99: df:9f:02:82:6e:38:ab:54:62:83:39:c6:48:b6:63:22:cf:92: 6d:ad:88:43:43:3b:07:d0:57:8b:d9:26:49:ae:42:ee:ec:ab: 0e:1f:e6:04:b6:91:f5:f3:2b:2d:9b:6b:11:88:27:39:65:20: bc:70:c2:c6:99:3c:f7:9c:9c:31:0a:ce:c9:39:09:63:28:b6: 3e:74:b5:18:3f:02:6a:4b:09:a3:3e:f8:f2:2a:ab:7b:7a:4c: d6:01:21:e3:3f:ab:4f:52:2c:d5:5a:56:ef:2c:d7:50:f9:6f: 96:e2:ad:71:a9:80:5c:f6:72:1d:94:9a:3f:25:f6:34:7c:49: de:1c:35:e4:d2:1a:03:95:53:be:48:ee:8e:80:52:d7:4c:e2: 73:10:2a:bc:30:62:62:3b:2c:5c:31:ef:2a:5c:38:70:28:39: 06:f7:26:07:c8:67:ec:ef:ae:10:39:0a:ff:b0:f2:6f:3b:3d: 25:7e:98:d1:9c:f1:42:84:7b:27:e2:79:ad:f6:c1:59:4a:1e: 27:dc:55:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdwS7YQDvmzP8PKyHgEvNXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYWJjMjM1OTVmZDgwNDQ3ZDk4ZjVlYzM1MTMxNjFiZDI0 NzNmYzYwHhcNMjUxMjI3MDMwMTQwWhcNMjUxMjI4MDMwMTQwWjAzMTEwLwYDVQQD EygyYzNlZDUzMWI3NGRkMTRlNjE1MzNhYmI0MDc0NzY1ODRjNTRkZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LRbrTgyUmjEteVcsxP5mPdQJ8vF 6FEpb3sjgRn58fNiY3pSnWUPncHpf3ICTWiTmknb6AZ3ac/psQlCjG8Snrh1qUEg KSavZ80z2rgdhJdtgjjS+oh2E+ebBPEdaoSl8uBrYvy9Ll47EvcCBACUh8ETaBe9 K372GaHsQkoM3esSJ2Y+d8gUfk1peEYR4iHWyMIB5wwCRMp8upBeyOOtTnYSWWVQ aqPfeysHmuJXrJ5y0dVtHVgVd7CkbriyPPW4osNs0LCzPps2pFeiUcRyzkxczcRK 2hxmNma/qV+nWDdjyY34i9kYQcdRtUjkCbVEuMgiEwSzioh526EB7ZL/QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCw+1TG3TdFOYVM6u0B0dlhMVN4nMB8GA1UdIwQY MBaAFP+rwjWV/YBEfZj17DUTFhvSRz/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZ2Q05aWDlnRVI5bVBYc05STVdHOUpIUDhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xOTEyMTktNDdjOS00YjFiLThlNDYt ZGQ4YTY4ZGJkM2I2LzEvXzZ2Q05aWDlnRVI5bVBYc05STVdHOUpIUDhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8xOTEyMTktNDdjOS00YjFiLThlNDYtZGQ4YTY4ZGJkM2I2 LzEvXzZ2Q05aWDlnRVI5bVBYc05STVdHOUpIUDhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3GPD3jI ZmgCXCGEp3iPr7Rq++6B5PuN2gt3p4tKK3SxYGdITphKtdlVvaJU0+p/Upnz6v+Z 358Cgm44q1RigznGSLZjIs+Sba2IQ0M7B9BXi9kmSa5C7uyrDh/mBLaR9fMrLZtr EYgnOWUgvHDCxpk895ycMQrOyTkJYyi2PnS1GD8CaksJoz748iqre3pM1gEh4z+r T1Is1VpW7yzXUPlvluKtcamAXPZyHZSaPyX2NHxJ3hw15NIaA5VTvkjujoBS10zi cxAqvDBiYjssXDHvKlw4cCg5BvcmB8hn7O+uEDkK/7Dybzs9JX6Y0ZzxQoR7J+J5 rfbBWUoeJ9xVHw== -----END CERTIFICATE-----Generated at Sat Dec 27 05:38:25 2025 by rpki-client