This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft File: svg6PraHtBmUyJ94I4qZETPfJfY.mft (raw, json) Hash identifier: brk19bNOvhJqbqgO+r9Q1Oi824Hzw/lqUK8QTedvAE4= Subject key identifier: 25:CF:EB:99:B9:C2:2F:4E:12:5C:D9:8B:A4:BF:52:B9:97:82:54:8C Authority key identifier: B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6 Certificate issuer: /CN=b2f83a3eb687b41994c89f78238a991133df25f6 Certificate serial: 019B3D59887AD61FB3B0799C161C4A821BEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft Manifest number: 102E Signing time: Sat 20 Dec 2025 20:00:36 +0000 Manifest this update: Sat 20 Dec 2025 20:00:36 +0000 Manifest next update: Sun 21 Dec 2025 20:00:36 +0000 Files and hashes: 1: svg6PraHtBmUyJ94I4qZETPfJfY.crl (hash: V429IeQXSQuYSptnr8r6UlcVU0IuHjYcrNHPKm+NC7w=) 2: tZnHKvR--oQspHXiMTb_7j-JYds.roa (hash: /ZQxh+STzzVQTIGd7v/o5S5T+TwpT7pJx116SvjP5MU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:88:7a:d6:1f:b3:b0:79:9c:16:1c:4a:82:1b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f83a3eb687b41994c89f78238a991133df25f6 Validity Not Before: Dec 20 20:00:36 2025 GMT Not After : Dec 21 20:00:36 2025 GMT Subject: CN=25cfeb99b9c22f4e125cd98ba4bf52b99782548c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c1:07:44:30:90:84:ce:aa:fd:26:8a:cf:21: 46:23:4c:40:6a:cf:b8:a6:12:8e:ac:e2:3f:c6:29: 27:b1:bb:ee:81:62:1d:36:c3:3a:f1:a9:25:fd:03: e2:40:48:47:47:d7:cf:b3:41:be:81:2c:89:74:d9: 60:1e:59:db:29:df:98:26:f7:4c:42:dd:4e:35:ff: 44:36:b3:b5:34:ab:0c:78:22:bb:07:30:e1:91:dc: 33:7c:bc:63:87:3e:6e:60:25:74:80:b3:20:e1:43: e2:05:a3:eb:21:f1:30:43:2e:86:4c:5f:d4:99:fc: 6c:bc:2f:85:f3:b3:b1:9b:e4:4f:20:b2:a1:e5:26: 05:c2:47:c5:f3:f9:af:21:36:10:ab:39:f6:3e:db: 48:39:83:52:10:ee:29:f7:df:84:90:7c:2d:1a:3d: b3:f0:e2:58:38:4f:5f:54:e5:f1:7f:43:d6:60:a6: 51:01:07:39:c8:fc:2a:7b:2e:20:26:9f:e7:6b:f7: 65:7b:0e:dd:21:f7:03:0b:67:a3:47:3a:40:eb:d7: 5a:6d:ff:00:97:15:ce:26:af:48:a0:61:a7:1c:bb: da:f5:f5:85:86:db:5d:2a:0f:82:e0:d2:d7:14:47: 72:f1:73:f9:eb:cd:df:ae:ba:60:fc:b0:77:51:6b: e1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CF:EB:99:B9:C2:2F:4E:12:5C:D9:8B:A4:BF:52:B9:97:82:54:8C X509v3 Authority Key Identifier: keyid:B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:3a:e3:16:8f:87:15:dc:c4:c2:38:07:37:7d:2f:22:03:a1: 1f:3c:fb:4c:62:fb:8f:8e:47:0d:c5:02:de:00:d5:c2:ed:e2: 1a:a9:aa:0e:db:05:5f:6a:f5:31:54:b7:64:11:27:b9:85:c1: 97:cd:57:4e:aa:57:c2:99:3f:44:ab:11:08:b0:c2:0e:91:4e: 4f:00:3d:8d:33:cc:2e:ed:77:64:a0:8f:14:82:0d:ed:84:6f: c1:42:a9:4a:4f:78:c7:bb:74:d9:6a:0c:81:56:5b:f5:26:c0: dc:af:c1:9e:be:63:b6:62:fa:dd:9a:4d:1d:69:b9:46:02:e2: 0a:68:96:3d:dd:42:91:f3:44:f8:78:6f:d9:b8:a2:92:f4:fc: c6:9f:e6:a3:48:e7:fb:fa:7b:93:8f:64:d4:ac:65:12:8c:6b: 0f:44:e9:bb:ca:2e:ac:8e:5a:30:69:5d:52:5f:0f:e1:df:8d: 41:1a:9b:99:9f:40:46:ed:ec:0c:2a:c8:4d:31:c9:e7:cf:28: 93:e2:8e:2b:71:09:61:c0:ea:70:c6:c4:6d:29:e1:c8:73:03: ab:e1:97:f6:f6:2b:6f:c3:3e:d1:6e:04:6a:c6:ed:c8:fc:a8: a0:c5:a3:e2:b3:62:41:1b:96:68:e5:39:ac:17:50:e3:38:05: 4d:71:ec:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WYh61h+zsHmcFhxKghvqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZjgzYTNlYjY4N2I0MTk5NGM4OWY3ODIzOGE5OTExMzNk ZjI1ZjYwHhcNMjUxMjIwMjAwMDM2WhcNMjUxMjIxMjAwMDM2WjAzMTEwLwYDVQQD EygyNWNmZWI5OWI5YzIyZjRlMTI1Y2Q5OGJhNGJmNTJiOTk3ODI1NDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsEHRDCQhM6q/SaKzyFGI0xAas+4 phKOrOI/xiknsbvugWIdNsM68akl/QPiQEhHR9fPs0G+gSyJdNlgHlnbKd+YJvdM Qt1ONf9ENrO1NKsMeCK7BzDhkdwzfLxjhz5uYCV0gLMg4UPiBaPrIfEwQy6GTF/U mfxsvC+F87Oxm+RPILKh5SYFwkfF8/mvITYQqzn2PttIOYNSEO4p99+EkHwtGj2z 8OJYOE9fVOXxf0PWYKZRAQc5yPwqey4gJp/na/dlew7dIfcDC2ejRzpA69dabf8A lxXOJq9IoGGnHLva9fWFhttdKg+C4NLXFEdy8XP5683frrpg/LB3UWvhiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXP65m5wi9OElzZi6S/UrmXglSMMB8GA1UdIwQY MBaAFLL4Oj62h7QZlMifeCOKmREz3yX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3ZnNlByYUh0Qm1VeUo5NEk0cVpFVFBmSmZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yMWIzNmUtNzQyYy00YWU1LWI3MzUt ZjYxNDFlMDNmM2E3LzEvc3ZnNlByYUh0Qm1VeUo5NEk0cVpFVFBmSmZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8yMWIzNmUtNzQyYy00YWU1LWI3MzUtZjYxNDFlMDNmM2E3 LzEvc3ZnNlByYUh0Qm1VeUo5NEk0cVpFVFBmSmZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjrjFo+H FdzEwjgHN30vIgOhHzz7TGL7j45HDcUC3gDVwu3iGqmqDtsFX2r1MVS3ZBEnuYXB l81XTqpXwpk/RKsRCLDCDpFOTwA9jTPMLu13ZKCPFIIN7YRvwUKpSk94x7t02WoM gVZb9SbA3K/Bnr5jtmL63ZpNHWm5RgLiCmiWPd1CkfNE+Hhv2biikvT8xp/mo0jn +/p7k49k1KxlEoxrD0Tpu8ourI5aMGldUl8P4d+NQRqbmZ9ARu3sDCrITTHJ588o k+KOK3EJYcDqcMbEbSnhyHMDq+GX9vYrb8M+0W4EasbtyPyooMWj4rNiQRuWaOU5 rBdQ4zgFTXHs6w== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:16 2025 by rpki-client