This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft File: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft (raw, json) Hash identifier: fIdL837+zM4yZx7vKEaOqONfTVJJ3pCGCANeB5PfSoo= Subject key identifier: 93:6C:73:2E:71:93:2A:E2:1F:EA:86:6F:54:38:49:7F:18:FF:1A:26 Authority key identifier: D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD Certificate issuer: /CN=d3acd2b7b7473af4350ea1aba83d177585ceedad Certificate serial: 019B4DDF5798D399676954B849808B33344C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft Manifest number: 178F Signing time: Wed 24 Dec 2025 01:00:41 +0000 Manifest this update: Wed 24 Dec 2025 01:00:41 +0000 Manifest next update: Thu 25 Dec 2025 01:00:41 +0000 Files and hashes: 1: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl (hash: hEm5qyzhq57pTcl27leHxQIMc2GxoimVrqfXDvE/lSQ=) 2: ruzowO5hkwvsrCMVqncyR6RC2cM.roa (hash: 3UI+kEeYIksu5ENYxWY/kKHH2Zgvkj1CId+2uWMcQI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:57:98:d3:99:67:69:54:b8:49:80:8b:33:34:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3acd2b7b7473af4350ea1aba83d177585ceedad Validity Not Before: Dec 24 01:00:41 2025 GMT Not After : Dec 25 01:00:41 2025 GMT Subject: CN=936c732e71932ae21fea866f5438497f18ff1a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a4:69:38:fe:28:72:11:aa:12:f0:e0:ba:21: d0:67:b7:76:74:64:c1:82:95:fe:bc:cd:c7:98:eb: ab:e4:37:bf:de:f1:66:e3:e9:c8:a7:56:86:7a:9f: 4e:cb:4f:bf:12:2a:00:65:89:62:64:6c:bb:a7:f1: 35:2d:cd:a2:83:a5:b6:45:5c:bb:f9:98:e3:57:e4: c9:4e:d4:e3:78:97:5c:24:c2:9e:a8:da:20:a7:4b: e5:58:74:7c:ae:59:fe:53:8c:ac:11:16:f2:6d:22: af:27:ca:7e:03:c0:d8:76:40:ea:12:e8:8d:bd:71: 18:e3:cc:90:c5:8d:6c:e2:a4:a7:0f:5b:ad:3a:ff: 7f:c1:b2:05:d7:3c:38:1e:d1:92:6d:67:f1:69:f9: 3a:39:a2:05:66:18:13:07:ce:78:96:c8:6d:5e:28: f4:13:24:69:92:ec:3e:29:31:af:5e:13:1a:7f:5d: 6f:28:e5:e7:62:7c:c7:13:c4:54:03:ac:9e:07:11: 22:40:86:28:e0:82:a3:cd:19:15:46:53:70:a4:a2: 45:dd:f7:f4:30:9e:86:b8:ec:7e:ff:f7:4d:92:c6: 2b:bb:41:be:d7:10:5f:ec:dd:42:f5:de:49:02:a1: bc:6c:bd:73:b6:17:87:9f:fe:85:91:88:bd:f5:5c: 13:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6C:73:2E:71:93:2A:E2:1F:EA:86:6F:54:38:49:7F:18:FF:1A:26 X509v3 Authority Key Identifier: keyid:D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e6:b6:3c:17:f4:e9:1f:5b:ca:fd:bf:fb:a8:64:2c:be:1d: 30:3f:2d:2e:4e:42:d6:20:39:ad:8b:15:a2:66:08:aa:c1:75: 7f:3b:d6:ba:85:f7:25:99:99:fd:52:9f:36:e3:15:d6:84:f2: ab:64:41:db:27:5f:7f:40:d6:14:dc:a7:5b:11:f9:75:f3:0b: af:0f:c6:a0:0e:5f:ea:67:59:85:3e:cc:08:99:2a:4c:c1:7d: c3:30:72:9e:db:77:5d:2c:f3:78:b7:69:03:a0:4d:da:cd:53: 19:79:25:a9:f4:60:47:88:cd:3b:95:75:e7:85:7f:c9:5b:d0: d9:ee:98:68:ff:69:8a:7b:31:96:2a:73:6c:60:53:91:07:7d: b5:03:b7:87:f1:7b:35:c2:6e:d2:82:eb:90:84:01:55:a4:53: 31:9c:db:55:78:b0:06:f6:4d:8f:b5:dd:93:f1:d7:3b:21:dc: c2:2d:e4:c6:d6:a3:89:be:31:e9:38:b1:1c:fb:d9:10:94:5b: 45:0b:43:59:83:a9:5d:e2:c0:04:53:fb:76:06:eb:c8:5d:d7: 41:2e:9c:11:e5:52:ab:2d:dd:9e:87:52:b5:fd:63:96:cd:59: ec:e0:6e:22:49:bd:5f:31:91:60:c6:24:ec:21:f1:89:2f:2a: e6:cd:f2:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN31eY05lnaVS4SYCLMzRMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYWNkMmI3Yjc0NzNhZjQzNTBlYTFhYmE4M2QxNzc1ODVj ZWVkYWQwHhcNMjUxMjI0MDEwMDQxWhcNMjUxMjI1MDEwMDQxWjAzMTEwLwYDVQQD Eyg5MzZjNzMyZTcxOTMyYWUyMWZlYTg2NmY1NDM4NDk3ZjE4ZmYxYTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqRpOP4ochGqEvDguiHQZ7d2dGTB gpX+vM3HmOur5De/3vFm4+nIp1aGep9Oy0+/EioAZYliZGy7p/E1Lc2ig6W2RVy7 +ZjjV+TJTtTjeJdcJMKeqNogp0vlWHR8rln+U4ysERbybSKvJ8p+A8DYdkDqEuiN vXEY48yQxY1s4qSnD1utOv9/wbIF1zw4HtGSbWfxafk6OaIFZhgTB854lshtXij0 EyRpkuw+KTGvXhMaf11vKOXnYnzHE8RUA6yeBxEiQIYo4IKjzRkVRlNwpKJF3ff0 MJ6GuOx+//dNksYru0G+1xBf7N1C9d5JAqG8bL1ztheHn/6FkYi99VwTdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNscy5xkyriH+qGb1Q4SX8Y/xomMB8GA1UdIwQY MBaAFNOs0re3Rzr0NQ6hq6g9F3WFzu2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDZ6U3Q3ZEhPdlExRHFHcnFEMFhkWVhPN2EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80NmMyMGMtZjE2Ni00MDQxLWEwMWIt MGVmZWM2ZWE3N2M2LzEvMDZ6U3Q3ZEhPdlExRHFHcnFEMFhkWVhPN2EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80NmMyMGMtZjE2Ni00MDQxLWEwMWItMGVmZWM2ZWE3N2M2 LzEvMDZ6U3Q3ZEhPdlExRHFHcnFEMFhkWVhPN2EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOa2PBf0 6R9byv2/+6hkLL4dMD8tLk5C1iA5rYsVomYIqsF1fzvWuoX3JZmZ/VKfNuMV1oTy q2RB2ydff0DWFNynWxH5dfMLrw/GoA5f6mdZhT7MCJkqTMF9wzByntt3XSzzeLdp A6BN2s1TGXklqfRgR4jNO5V154V/yVvQ2e6YaP9pinsxlipzbGBTkQd9tQO3h/F7 NcJu0oLrkIQBVaRTMZzbVXiwBvZNj7Xdk/HXOyHcwi3kxtajib4x6TixHPvZEJRb RQtDWYOpXeLABFP7dgbryF3XQS6cEeVSqy3dnodStf1jls1Z7OBuIkm9XzGRYMYk 7CHxiS8q5s3yWg== -----END CERTIFICATE-----Generated at Wed Dec 24 09:17:28 2025 by rpki-client