This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft File: B6BIbcC0unMJA3iP8_P3yCSbkh8.mft (raw, json) Hash identifier: AkyGu24GF2OB+BxfhNUByFpcvB3OYh+38B/DQWaKvB0= Subject key identifier: 4A:D4:12:77:AD:FF:7C:69:EA:0C:FE:E1:8D:11:31:83:80:3D:22:73 Authority key identifier: 07:A0:48:6D:C0:B4:BA:73:09:03:78:8F:F3:F3:F7:C8:24:9B:92:1F Certificate issuer: /CN=07a0486dc0b4ba730903788ff3f3f7c8249b921f Certificate serial: 019B503BA9BBC5FAADFE754342B69F83016E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 12:00:45 +0000 Manifest this update: Wed 24 Dec 2025 12:00:45 +0000 Manifest next update: Thu 25 Dec 2025 12:00:45 +0000 Files and hashes: 1: B6BIbcC0unMJA3iP8_P3yCSbkh8.crl (hash: LIUTtfsP+IkpCDHt/1GqD9OqJULtMuXZ4McOXvNR0hk=) 2: xJFVozfHmoVSSAuYbjszEZbCInk.roa (hash: Gjo9VUU6W0ie3Sm+l3hGhli3h91M0ZQXuSrdhZEO8P0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3b:a9:bb:c5:fa:ad:fe:75:43:42:b6:9f:83:01:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07a0486dc0b4ba730903788ff3f3f7c8249b921f Validity Not Before: Dec 24 12:00:45 2025 GMT Not After : Dec 25 12:00:45 2025 GMT Subject: CN=4ad41277adff7c69ea0cfee18d113183803d2273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b3:f5:88:50:79:63:d7:0e:e8:af:1b:bd:f1: a1:02:7d:ad:cb:e4:27:67:69:20:ee:34:d0:61:dc: e1:59:dc:6e:12:74:d5:a5:2f:ac:de:c2:ed:2c:2d: e6:6a:be:db:2a:d1:51:47:42:1c:47:a9:e2:b9:ec: a4:93:b9:ea:cb:eb:6e:3c:1b:e8:5e:00:e2:ec:81: f0:ba:13:48:45:ff:34:78:7e:9f:e7:0f:63:a9:e5: d2:2e:ca:02:51:58:94:df:33:98:fc:bc:64:bb:b4: bc:70:d7:00:b1:46:44:7c:6d:7c:67:38:64:10:1c: ed:72:44:37:fe:35:75:25:c0:04:3c:46:74:40:9d: d9:a5:43:57:d7:88:c2:ca:fc:b9:0f:fe:fe:ee:9d: 13:bd:91:63:74:e2:3f:4f:d4:fa:ee:d1:df:d9:3c: 31:8e:1d:c6:94:70:53:88:1c:93:d3:39:54:e6:30: a3:ac:10:4b:51:57:4d:30:21:99:eb:b7:03:7c:a3: 9d:2a:b5:54:b1:4b:75:80:54:46:10:79:30:b3:5d: d3:59:57:77:47:22:a5:84:1d:63:37:45:2f:1f:6a: ba:ce:63:53:3b:da:5d:ae:cf:9f:31:2a:cb:dc:29: 03:89:ec:ed:8a:4f:e4:f4:14:57:7e:70:67:0b:a0: 29:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D4:12:77:AD:FF:7C:69:EA:0C:FE:E1:8D:11:31:83:80:3D:22:73 X509v3 Authority Key Identifier: keyid:07:A0:48:6D:C0:B4:BA:73:09:03:78:8F:F3:F3:F7:C8:24:9B:92:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:6c:29:72:a4:f8:e6:72:92:35:62:4c:e0:0a:69:3e:c4:6f: ab:52:c2:ce:91:ec:80:5c:00:5d:f8:08:48:31:a7:75:2e:c2: d2:4e:a5:47:80:cd:db:09:35:bc:08:1e:ef:aa:43:bd:5c:ed: 4a:23:ee:c1:e2:21:e0:b6:15:19:8a:92:a4:40:45:6b:ac:13: 3a:d8:bc:6f:07:43:a1:23:91:4f:ab:9e:e8:db:ce:14:f3:19: 84:ed:d7:c4:78:78:04:eb:24:b1:09:4c:66:c7:d0:f0:3e:5f: 40:9f:83:7d:c5:bb:4e:76:46:4c:5b:d7:1c:4d:67:c3:67:34: 23:1c:b6:8c:fb:ed:46:c3:5d:6f:ab:ff:54:c8:4d:b2:2a:bc: ff:73:21:a5:da:49:8e:f7:11:4e:20:9f:9b:9a:dd:5e:de:0a: a6:ed:24:9f:5b:7b:c4:ee:2d:69:a8:5e:91:19:fe:c8:fa:68: 71:f6:29:3b:e7:8e:95:55:00:bb:91:47:88:f1:ba:74:e9:73: 53:0e:b7:48:33:57:af:11:6f:56:ec:17:92:8a:c9:5a:70:7b: 0d:a5:8a:b7:f7:5a:d9:4c:07:b5:fe:44:28:3d:53:c1:e5:69: 61:4f:4d:db:54:ea:79:8d:71:81:30:df:f9:0f:ec:e9:e2:d0: 0f:25:6a:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQO6m7xfqt/nVDQrafgwFuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YTA0ODZkYzBiNGJhNzMwOTAzNzg4ZmYzZjNmN2M4MjQ5 YjkyMWYwHhcNMjUxMjI0MTIwMDQ1WhcNMjUxMjI1MTIwMDQ1WjAzMTEwLwYDVQQD Eyg0YWQ0MTI3N2FkZmY3YzY5ZWEwY2ZlZTE4ZDExMzE4MzgwM2QyMjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rP1iFB5Y9cO6K8bvfGhAn2ty+Qn Z2kg7jTQYdzhWdxuEnTVpS+s3sLtLC3mar7bKtFRR0IcR6niueykk7nqy+tuPBvo XgDi7IHwuhNIRf80eH6f5w9jqeXSLsoCUViU3zOY/Lxku7S8cNcAsUZEfG18Zzhk EBztckQ3/jV1JcAEPEZ0QJ3ZpUNX14jCyvy5D/7+7p0TvZFjdOI/T9T67tHf2Twx jh3GlHBTiByT0zlU5jCjrBBLUVdNMCGZ67cDfKOdKrVUsUt1gFRGEHkws13TWVd3 RyKlhB1jN0UvH2q6zmNTO9pdrs+fMSrL3CkDieztik/k9BRXfnBnC6ApTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErUEnet/3xp6gz+4Y0RMYOAPSJzMB8GA1UdIwQY MBaAFAegSG3AtLpzCQN4j/Pz98gkm5IfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjZCSWJjQzB1bk1KQTNpUDhfUDN5Q1Nia2g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NmNjOTEtYmE2Mi00MDM3LWI1N2Yt NmJkZGIzMTdlNzhiLzEvQjZCSWJjQzB1bk1KQTNpUDhfUDN5Q1Nia2g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC81NmNjOTEtYmE2Mi00MDM3LWI1N2YtNmJkZGIzMTdlNzhi LzEvQjZCSWJjQzB1bk1KQTNpUDhfUDN5Q1Nia2g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2wpcqT4 5nKSNWJM4AppPsRvq1LCzpHsgFwAXfgISDGndS7C0k6lR4DN2wk1vAge76pDvVzt SiPuweIh4LYVGYqSpEBFa6wTOti8bwdDoSORT6ue6NvOFPMZhO3XxHh4BOsksQlM ZsfQ8D5fQJ+DfcW7TnZGTFvXHE1nw2c0Ixy2jPvtRsNdb6v/VMhNsiq8/3MhpdpJ jvcRTiCfm5rdXt4Kpu0kn1t7xO4taahekRn+yPpocfYpO+eOlVUAu5FHiPG6dOlz Uw63SDNXrxFvVuwXkorJWnB7DaWKt/da2UwHtf5EKD1TweVpYU9N21TqeY1xgTDf +Q/s6eLQDyVqBQ== -----END CERTIFICATE-----Generated at Wed Dec 24 16:39:37 2025 by rpki-client