This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json) Hash identifier: GSNQWwD8NggwyW0vgT6qpgiuLo61TTUjBk7DmnRauo4= Subject key identifier: E3:6D:AB:E7:9C:01:9C:18:27:C3:A8:57:49:90:89:D1:9A:EB:A6:4B Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50 Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150 Certificate serial: 019B3AFD5E9F6EE2C36EB02B2268E5DFB395 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft Manifest number: 04B2 Signing time: Sat 20 Dec 2025 09:00:41 +0000 Manifest this update: Sat 20 Dec 2025 09:00:41 +0000 Manifest next update: Sun 21 Dec 2025 09:00:41 +0000 Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: w33vFN72LLraocsoOKkR4eYLjE9yQd2lzmdPYngP4W4=) 2: BDHKukDv4jqfvg5mUVq9SOfKkHk.roa (hash: r69AyZ5q//j/yv/BwLLu5AvuWEdbokVUHIhkdE53vJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:5e:9f:6e:e2:c3:6e:b0:2b:22:68:e5:df:b3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150 Validity Not Before: Dec 20 09:00:41 2025 GMT Not After : Dec 21 09:00:41 2025 GMT Subject: CN=e36dabe79c019c1827c3a857499089d19aeba64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:f4:d5:bd:72:22:9f:69:85:ec:47:bd:7d: f6:95:83:ff:9c:da:72:83:af:97:08:f7:52:d5:b8: 7d:07:a4:ba:73:aa:35:00:c5:d4:ea:f9:de:be:10: cd:fa:da:02:02:1b:0d:ba:71:e6:83:10:b7:29:9c: ac:63:99:33:e8:fa:5f:a7:e7:03:bf:1e:90:6f:c0: 5d:ab:93:ae:8c:98:b9:62:93:50:d7:89:5c:70:6d: 2b:a9:9f:2c:de:cf:74:f2:02:fc:a5:33:aa:c3:0e: d6:bd:5b:9e:c0:54:86:2c:df:4e:fe:bc:1b:ef:a6: 18:92:ae:b9:49:70:19:32:02:e3:c4:9c:6e:57:57: e9:b1:4c:9a:3a:6d:a0:5c:38:83:70:28:d7:6b:00: de:4e:57:2e:62:95:18:5f:e6:5d:4b:fe:2d:21:dd: 59:3e:77:1c:7e:e2:30:2d:27:b9:71:eb:85:d0:a9: 10:47:2c:06:4b:64:a8:8b:ae:18:fa:9a:f5:46:61: ed:cc:e6:40:bf:33:63:48:54:f0:39:0c:ea:31:51: 8b:7a:cd:30:a7:12:58:b9:79:2a:54:ce:ae:31:6b: f6:37:f4:e6:30:45:d3:95:f1:23:42:c5:0d:8c:09: 82:fc:b3:68:c8:f9:9c:b7:22:61:47:cb:8c:88:3e: 6c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6D:AB:E7:9C:01:9C:18:27:C3:A8:57:49:90:89:D1:9A:EB:A6:4B X509v3 Authority Key Identifier: keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:9f:c4:4f:d8:a1:9c:db:61:c1:d6:3e:89:46:67:b3:88:a6: f2:48:15:85:90:c1:ca:93:fd:b8:37:46:3d:c3:5d:19:c9:10: 1c:10:0f:d4:aa:0d:1f:6b:5d:d1:27:60:9d:67:6a:1b:8f:e1: c1:dd:c4:0b:cc:fc:a8:47:7c:50:c7:9d:9a:8f:68:f7:9c:86: 5a:33:f1:7b:2e:b4:a8:91:c4:66:89:f6:a5:e4:a1:95:d5:7c: c3:a1:4a:73:a8:69:9f:0b:09:49:34:fe:d6:0e:86:df:93:2b: 84:35:9b:83:65:ac:38:de:17:31:b0:de:8c:eb:5d:ae:3a:23: 54:85:2f:28:c3:3a:69:ad:7e:da:d3:67:db:ca:fa:5f:55:9e: 3d:65:20:7c:28:2d:47:e9:e5:9c:d0:9c:a9:15:26:ce:60:03: 7e:7c:0e:d0:ab:21:3b:94:3b:b5:9b:49:64:df:89:04:7c:91: a0:36:1c:53:4b:a7:57:41:90:70:79:13:87:02:67:2b:78:6b: 2c:fd:fd:d9:49:ac:40:da:18:5b:88:0a:a3:66:64:ff:ef:be: 64:b7:df:e3:32:a5:b1:7a:c8:84:1d:cd:88:b2:07:c6:41:3f: 05:ad:88:8d:16:6b:9a:bc:20:22:c2:f7:9a:60:65:10:8d:38: d5:2a:a0:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/V6fbuLDbrArImjl37OVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYTYyYjMwOWEzNzg1NDI1OTBhMTJiMzljNWY3MGNkYjBl N2IxNTAwHhcNMjUxMjIwMDkwMDQxWhcNMjUxMjIxMDkwMDQxWjAzMTEwLwYDVQQD EyhlMzZkYWJlNzljMDE5YzE4MjdjM2E4NTc0OTkwODlkMTlhZWJhNjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHP01b1yIp9phexHvX32lYP/nNpy g6+XCPdS1bh9B6S6c6o1AMXU6vnevhDN+toCAhsNunHmgxC3KZysY5kz6Ppfp+cD vx6Qb8Bdq5OujJi5YpNQ14lccG0rqZ8s3s908gL8pTOqww7WvVuewFSGLN9O/rwb 76YYkq65SXAZMgLjxJxuV1fpsUyaOm2gXDiDcCjXawDeTlcuYpUYX+ZdS/4tId1Z PnccfuIwLSe5ceuF0KkQRywGS2Soi64Y+pr1RmHtzOZAvzNjSFTwOQzqMVGLes0w pxJYuXkqVM6uMWv2N/TmMEXTlfEjQsUNjAmC/LNoyPmctyJhR8uMiD5sQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONtq+ecAZwYJ8OoV0mQidGa66ZLMB8GA1UdIwQY MBaAFAOmKzCaN4VCWQoSs5xfcM2w57FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDJhMTktNDc0Ni00NzhmLTk5MzYt MjczM2Y2OTljYjYyLzEvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDJhMTktNDc0Ni00NzhmLTk5MzYtMjczM2Y2OTljYjYy LzEvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJ/ET9ih nNthwdY+iUZns4im8kgVhZDBypP9uDdGPcNdGckQHBAP1KoNH2td0SdgnWdqG4/h wd3EC8z8qEd8UMedmo9o95yGWjPxey60qJHEZon2peShldV8w6FKc6hpnwsJSTT+ 1g6G35MrhDWbg2WsON4XMbDejOtdrjojVIUvKMM6aa1+2tNn28r6X1WePWUgfCgt R+nlnNCcqRUmzmADfnwO0KshO5Q7tZtJZN+JBHyRoDYcU0unV0GQcHkThwJnK3hr LP392UmsQNoYW4gKo2Zk/+++ZLff4zKlsXrIhB3NiLIHxkE/Ba2IjRZrmrwgIsL3 mmBlEI041SqgoQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:06:12 2025 by rpki-client