This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft File: D6vrbvgg09UvBTciM8VB7ksU82E.mft (raw, json) Hash identifier: oN8C3oUED9yywLbeI8L+hFOzuoKVzxgXGh3qMYBltBQ= Subject key identifier: 44:87:C2:37:BC:03:E2:11:AA:C3:50:BC:C5:12:09:FD:82:E6:C2:14 Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61 Certificate issuer: /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361 Certificate serial: 019B3E6DCB7BFCE8F17DB4401D9778F874B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 01:02:21 +0000 Manifest this update: Sun 21 Dec 2025 01:02:21 +0000 Manifest next update: Mon 22 Dec 2025 01:02:21 +0000 Files and hashes: 1: Bk-PC_3JIm04gifM592QQdoN3Ks.roa (hash: iME6n6jnCDzSVb0/SGfLuBM5Wc4sPCswNojVHBOxZCs=) 2: D6vrbvgg09UvBTciM8VB7ksU82E.crl (hash: sYucgfkAPIWHA5Cuy1PsIjZAZksomt4efceGQo+V5uw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:cb:7b:fc:e8:f1:7d:b4:40:1d:97:78:f8:74:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361 Validity Not Before: Dec 21 01:02:21 2025 GMT Not After : Dec 22 01:02:21 2025 GMT Subject: CN=4487c237bc03e211aac350bcc51209fd82e6c214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0a:b9:6f:6a:bb:76:82:85:da:15:24:7d:c3: 33:d4:fe:9c:db:31:88:0e:8d:d5:5e:5d:70:2d:36: e3:e8:7d:94:d8:90:e7:0d:30:e5:08:4b:65:e9:6f: 06:da:a3:f4:f4:be:e6:6f:bd:fc:3c:94:a7:2b:61: d2:0b:6f:36:49:54:69:04:dc:2e:c9:ee:21:da:dd: 44:8b:0a:1c:7c:9c:7c:22:2c:69:0b:e6:60:77:78: f0:4d:f5:68:27:3e:ef:3c:b7:5a:05:12:e8:67:a4: 92:53:53:23:df:e1:9c:55:b5:da:61:0b:f3:be:25: 08:01:f4:ba:d3:d9:d4:b7:1e:59:fe:ff:5e:7f:f4: 04:37:fe:62:fc:9a:b4:c0:f8:af:03:29:5c:16:e9: 77:d3:1e:4f:e4:92:ab:4b:26:96:62:65:8c:d3:7a: 58:ae:8e:7b:1b:22:ce:b0:d4:47:52:21:80:e1:b1: f6:ca:70:20:ac:24:5b:fc:33:0f:08:b3:0c:60:60: 89:3f:1c:73:59:b8:e5:63:04:49:2e:de:7d:ce:d1: 31:b0:f8:0f:0d:a7:d5:86:72:72:32:ba:98:5c:90: 46:0f:65:6f:6d:92:3b:9a:0a:91:e7:7f:37:8e:3a: e4:db:f7:44:9b:0f:17:d6:6a:b2:0f:fa:74:64:9b: c8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:87:C2:37:BC:03:E2:11:AA:C3:50:BC:C5:12:09:FD:82:E6:C2:14 X509v3 Authority Key Identifier: keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:6a:08:8a:bc:2d:ba:3b:eb:a9:35:e4:71:b2:3d:a7:84:94: 2b:1e:11:df:28:a0:29:4d:f3:65:1a:65:b2:ae:fc:2c:3e:17: 9c:09:9c:99:53:af:8f:ed:e9:8e:a3:00:2b:e3:ea:58:5a:4b: 6c:3f:ba:bd:e3:49:64:5d:04:cf:db:ea:23:68:c1:05:29:7c: 3d:f9:68:c9:a0:c9:5a:7a:3e:37:a4:25:d5:d6:c2:5a:00:06: 8a:1d:c5:e1:b1:d8:89:b6:e6:1b:46:3e:85:e3:46:40:26:b8: 3f:ec:92:c2:36:ba:7b:26:a5:4f:88:2d:c3:0a:b8:f9:fd:c5: 54:f4:34:97:a1:0e:57:8f:48:84:61:67:69:63:6e:c3:4a:09: 4a:86:2e:10:1a:f5:f0:5a:fb:82:b3:db:55:99:71:77:62:64: 55:00:72:12:06:6b:99:a6:91:61:40:1b:5d:fa:9c:16:36:91: e1:af:6a:21:b9:3c:bf:7f:8c:2e:e9:a8:d0:53:15:b8:36:f0: 19:c1:7e:4d:c2:5e:ea:23:cc:a0:d2:32:53:ce:06:1e:04:80: 73:e5:dd:6b:81:27:3b:89:27:9e:d2:5d:21:0f:a8:d7:66:b2: 21:b5:c6:9b:da:11:b7:b1:d1:8b:59:16:0b:a5:ff:d1:a1:3d: 93:84:c6:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bct7/OjxfbRAHZd4+HS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmYWJlYjZlZjgyMGQzZDUyZjA1MzcyMjMzYzU0MWVlNGIx NGYzNjEwHhcNMjUxMjIxMDEwMjIxWhcNMjUxMjIyMDEwMjIxWjAzMTEwLwYDVQQD Eyg0NDg3YzIzN2JjMDNlMjExYWFjMzUwYmNjNTEyMDlmZDgyZTZjMjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgq5b2q7doKF2hUkfcMz1P6c2zGI Do3VXl1wLTbj6H2U2JDnDTDlCEtl6W8G2qP09L7mb738PJSnK2HSC282SVRpBNwu ye4h2t1EiwocfJx8IixpC+Zgd3jwTfVoJz7vPLdaBRLoZ6SSU1Mj3+GcVbXaYQvz viUIAfS609nUtx5Z/v9ef/QEN/5i/Jq0wPivAylcFul30x5P5JKrSyaWYmWM03pY ro57GyLOsNRHUiGA4bH2ynAgrCRb/DMPCLMMYGCJPxxzWbjlYwRJLt59ztExsPgP DafVhnJyMrqYXJBGD2VvbZI7mgqR5383jjrk2/dEmw8X1mqyD/p0ZJvI7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESHwje8A+IRqsNQvMUSCf2C5sIUMB8GA1UdIwQY MBaAFA+r6274INPVLwU3IjPFQe5LFPNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mM2Q4MzQtY2VlZC00YmJkLWFiZTEt NWEzNzEyNjcwNWFkLzEvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mM2Q4MzQtY2VlZC00YmJkLWFiZTEtNWEzNzEyNjcwNWFk LzEvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2oIirwt ujvrqTXkcbI9p4SUKx4R3yigKU3zZRplsq78LD4XnAmcmVOvj+3pjqMAK+PqWFpL bD+6veNJZF0Ez9vqI2jBBSl8PfloyaDJWno+N6Ql1dbCWgAGih3F4bHYibbmG0Y+ heNGQCa4P+ySwja6eyalT4gtwwq4+f3FVPQ0l6EOV49IhGFnaWNuw0oJSoYuEBr1 8Fr7grPbVZlxd2JkVQByEgZrmaaRYUAbXfqcFjaR4a9qIbk8v3+MLumo0FMVuDbw GcF+TcJe6iPMoNIyU84GHgSAc+Xda4EnO4knntJdIQ+o12ayIbXGm9oRt7HRi1kW C6X/0aE9k4TGdQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:26:21 2025 by rpki-client