This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft File: v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft (raw, json) Hash identifier: qos1VkHM78F6CO24D+oEAAqd16IRDfsPxKZM+3IB01A= Subject key identifier: 1F:FE:9E:A5:18:C8:15:23:EB:FF:95:68:96:67:F2:81:AF:8C:ED:29 Authority key identifier: BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11 Certificate issuer: /CN=bfac12dab75d9c09f3120179373e995ae3917911 Certificate serial: 019B6467B5791AC93C03157C5875F5AEB366 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft Manifest number: 0384 Signing time: Sun 28 Dec 2025 10:01:16 +0000 Manifest this update: Sun 28 Dec 2025 10:01:16 +0000 Manifest next update: Mon 29 Dec 2025 10:01:16 +0000 Files and hashes: 1: jzM77P9xsYn5MAVakoO0HLR2EkI.roa (hash: h0SxsVCXMkdE1oBd8hWK7t+rP5KlnAbkMvVnkeRV7Cs=) 2: v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl (hash: pi+7CKAgcaJULpw34QG92x5/Ow8yR2GbgVR4ann8Dm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:67:b5:79:1a:c9:3c:03:15:7c:58:75:f5:ae:b3:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfac12dab75d9c09f3120179373e995ae3917911 Validity Not Before: Dec 28 10:01:16 2025 GMT Not After : Dec 29 10:01:16 2025 GMT Subject: CN=1ffe9ea518c81523ebff95689667f281af8ced29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5e:96:0c:c4:64:87:62:ab:cb:4d:ad:c1:e4: 79:9d:d1:b3:11:c1:da:6b:82:e2:13:77:59:9e:c8: de:40:69:32:7d:85:90:b3:b2:02:1d:c6:35:96:2b: 4d:f4:ae:95:6a:28:b6:0a:a4:b9:cd:c6:2a:05:65: 4f:56:fa:7f:c6:53:b8:34:78:4f:bd:a0:07:97:fc: 79:d9:00:13:b7:ef:3a:85:72:37:86:16:1f:98:71: e6:9f:85:7f:1c:d2:20:9f:ff:c8:54:48:1b:80:3c: a8:c3:92:09:35:5e:23:ef:6c:34:4d:0e:9f:6a:f0: 26:ba:7c:24:2c:98:d6:9f:3f:88:65:7d:3e:6c:b5: a2:9c:0a:5f:1d:8d:7d:72:43:e1:fa:1e:44:80:76: bf:32:77:18:eb:eb:8d:6d:d9:ea:40:b3:10:13:b6: 81:ec:12:47:26:ef:a6:96:04:a1:2a:df:73:3f:be: 91:18:80:bd:36:fd:6e:25:dd:72:dc:86:1e:df:84: 95:b7:ea:3e:9d:e9:f9:3b:fa:c2:69:fc:e9:3c:b1: b3:2b:34:37:86:4c:f5:1c:43:6b:ff:15:3b:f9:dc: 4d:79:ab:95:fd:81:95:ac:67:cb:53:c7:7a:f9:29: 3f:ca:7f:96:9c:ab:0f:50:e9:de:f2:c1:00:98:fa: 65:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FE:9E:A5:18:C8:15:23:EB:FF:95:68:96:67:F2:81:AF:8C:ED:29 X509v3 Authority Key Identifier: keyid:BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:75:7c:8e:56:4a:ad:a3:b3:6c:ce:82:3c:65:a5:b2:7b:c8: d0:48:71:60:b7:3a:cc:4c:62:cd:a3:72:d4:5a:dc:b0:05:78: 52:92:f2:fa:49:83:ee:dd:b1:a0:11:e4:a1:70:05:13:d0:ca: a3:9f:e2:04:5c:b5:0d:b5:46:fa:89:60:25:5b:94:ee:20:48: 8f:17:e9:c7:45:93:0e:12:0e:b6:c3:9b:d6:86:cf:04:54:9e: e9:95:1f:a2:d7:be:6c:9a:5c:8e:18:cf:16:e6:81:00:3d:45: 44:e9:88:2c:37:a5:d1:4b:33:1c:b5:26:42:49:9f:bb:08:33: 25:9c:b4:c4:95:e6:07:e6:22:51:15:79:c3:6f:37:c2:a4:c0: f9:5e:55:1c:25:9f:0b:f4:67:44:fa:3a:1e:11:ee:e6:f9:71: 30:c6:f5:ee:a5:fc:bc:69:18:9e:0b:2b:b8:bc:c7:fd:e0:95: b2:da:1c:c2:0e:0a:a6:e2:10:3d:db:6c:77:e4:b2:8d:2b:80: 5e:b5:31:2f:0d:b4:0c:1f:46:7b:e4:bc:93:ba:d4:b3:1e:0f: bb:22:1b:04:8c:03:2f:52:a8:68:52:9c:12:e3:84:d3:a9:c6: 3f:65:8f:43:70:74:2a:1c:13:eb:5a:a5:a0:6c:58:ca:07:cf: 2e:bd:89:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtkZ7V5Gsk8AxV8WHX1rrNmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYWMxMmRhYjc1ZDljMDlmMzEyMDE3OTM3M2U5OTVhZTM5 MTc5MTEwHhcNMjUxMjI4MTAwMTE2WhcNMjUxMjI5MTAwMTE2WjAzMTEwLwYDVQQD EygxZmZlOWVhNTE4YzgxNTIzZWJmZjk1Njg5NjY3ZjI4MWFmOGNlZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl6WDMRkh2Kry02tweR5ndGzEcHa a4LiE3dZnsjeQGkyfYWQs7ICHcY1litN9K6Vaii2CqS5zcYqBWVPVvp/xlO4NHhP vaAHl/x52QATt+86hXI3hhYfmHHmn4V/HNIgn//IVEgbgDyow5IJNV4j72w0TQ6f avAmunwkLJjWnz+IZX0+bLWinApfHY19ckPh+h5EgHa/MncY6+uNbdnqQLMQE7aB 7BJHJu+mlgShKt9zP76RGIC9Nv1uJd1y3IYe34SVt+o+nen5O/rCafzpPLGzKzQ3 hkz1HENr/xU7+dxNeauV/YGVrGfLU8d6+Sk/yn+WnKsPUOne8sEAmPplKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/+nqUYyBUj6/+VaJZn8oGvjO0pMB8GA1UdIwQY MBaAFL+sEtq3XZwJ8xIBeTc+mVrjkXkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjZ3UzJyZGRuQW56RWdGNU56NlpXdU9SZVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kOTA3NGQtNzdkYy00OWZjLWFjYjMt MDNkOWJhNTAzZGMxLzEvdjZ3UzJyZGRuQW56RWdGNU56NlpXdU9SZVJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9kOTA3NGQtNzdkYy00OWZjLWFjYjMtMDNkOWJhNTAzZGMx LzEvdjZ3UzJyZGRuQW56RWdGNU56NlpXdU9SZVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3V8jlZK raOzbM6CPGWlsnvI0EhxYLc6zExizaNy1FrcsAV4UpLy+kmD7t2xoBHkoXAFE9DK o5/iBFy1DbVG+olgJVuU7iBIjxfpx0WTDhIOtsOb1obPBFSe6ZUfote+bJpcjhjP FuaBAD1FROmILDel0UszHLUmQkmfuwgzJZy0xJXmB+YiURV5w283wqTA+V5VHCWf C/RnRPo6HhHu5vlxMMb17qX8vGkYngsruLzH/eCVstocwg4KpuIQPdtsd+SyjSuA XrUxLw20DB9Ge+S8k7rUsx4PuyIbBIwDL1KoaFKcEuOE06nGP2WPQ3B0KhwT61ql oGxYygfPLr2JRQ== -----END CERTIFICATE-----Generated at Sun Dec 28 20:14:09 2025 by rpki-client