This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft File: g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft (raw, json) Hash identifier: eHxqHMmBoovjhrgGE3R/PuTjhVjihEvIr5KSgdJUKq4= Subject key identifier: 5C:71:AF:18:F8:CC:6B:40:75:F1:BF:3D:A8:52:25:51:E1:FC:AF:17 Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A Certificate issuer: /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a Certificate serial: 019B3AC67723C1C1E5F34BE1AF469DBEC19F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 08:00:43 +0000 Manifest this update: Sat 20 Dec 2025 08:00:43 +0000 Manifest next update: Sun 21 Dec 2025 08:00:43 +0000 Files and hashes: 1: 7Atpb8ICQNgBoE2VxygDoXR916c.roa (hash: 9LfiFF+kHY8QeDVlYR0804RgSHl5CYTGB3eoMEBzGw0=) 2: g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl (hash: 97/mB+DzpjZ1rldVUB9U7+PSaUh9terH1smT2dAITt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:77:23:c1:c1:e5:f3:4b:e1:af:46:9d:be:c1:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a Validity Not Before: Dec 20 08:00:43 2025 GMT Not After : Dec 21 08:00:43 2025 GMT Subject: CN=5c71af18f8cc6b4075f1bf3da8522551e1fcaf17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:22:d9:1e:cc:b7:31:15:bc:61:87:07:6f:a5: 28:cc:f0:22:1d:13:30:77:8f:fb:52:8f:a6:a9:d9: 30:07:5f:4e:73:63:6b:49:b7:71:5f:aa:a4:9b:59: 7f:c2:65:3e:3a:cc:a0:81:bb:a2:0e:1f:2c:15:77: 63:e4:d2:ba:58:d7:95:c3:f7:80:31:fa:ba:71:ea: b2:a6:71:da:c0:36:e2:2a:82:7c:0b:5b:be:bb:ce: ab:51:cf:c5:27:f8:1a:f8:77:c5:29:c5:08:aa:64: 64:85:b6:ce:d2:b1:08:9d:e3:1d:98:73:ad:64:2e: f7:e4:51:83:16:f9:9a:a3:3c:2e:9d:74:4d:fb:00: 96:af:b3:f2:d1:b9:9f:76:85:3c:2f:22:fa:48:3f: 5f:71:25:03:ed:3f:47:cb:de:bf:8f:e6:2b:c4:48: ea:94:13:55:24:bc:0a:b1:bf:de:44:7d:7f:3a:72: d8:1d:0e:23:b2:d7:1d:cb:9d:88:5d:40:d0:03:f6: f5:03:ea:57:29:c0:09:ed:56:5f:5c:d6:2d:3f:60: 9d:3b:2c:f0:3f:31:30:ae:fa:9e:61:7f:03:5e:1c: 86:c5:af:19:41:11:68:8c:de:ec:ab:c4:a2:ad:88: c9:59:f7:bc:64:6d:f9:ce:76:0a:1e:de:70:2f:9a: 1e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:71:AF:18:F8:CC:6B:40:75:F1:BF:3D:A8:52:25:51:E1:FC:AF:17 X509v3 Authority Key Identifier: keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:a2:29:bb:23:4a:22:12:46:5a:ba:de:d9:01:2b:5e:a2:40: 2e:fd:2a:d9:ef:34:85:c7:f6:1f:33:f7:64:a1:a8:c6:9c:bd: 09:8b:eb:da:b7:6a:8a:59:0b:a9:2c:81:f9:b3:83:d5:b7:92: ac:48:a0:84:0e:a2:06:44:c8:85:1f:e3:f1:4a:af:3a:3c:0a: d0:2d:1c:a7:ae:5f:a8:6e:03:8b:6e:38:f6:28:3c:fe:e4:d7: 42:27:e1:90:85:ed:08:0c:41:41:df:a1:32:d2:be:be:63:6a: b2:3d:6c:50:9e:13:21:61:03:c8:05:f7:08:8e:1b:7e:ad:f9: 82:3b:d3:bb:77:8e:50:88:8b:eb:47:92:27:10:0b:8c:c4:08: 49:37:ef:2b:cd:c2:84:25:af:f6:f8:4a:89:f0:a9:c2:3c:93: 19:42:00:45:92:d9:d7:65:89:ac:61:bc:3d:65:ab:11:90:ee: a0:ca:2e:aa:65:b0:16:6e:22:f7:3f:34:ab:95:66:8b:1b:cd: 11:59:21:6d:af:8c:33:e6:5a:ca:b6:92:04:f5:38:4b:86:24: ce:af:83:78:e7:5f:fa:c9:12:e6:33:40:23:7d:43:10:2d:a2: 22:ab:c2:7e:26:53:6b:35:46:4a:d5:aa:ad:75:76:5d:84:f4: 1b:58:d2:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xncjwcHl80vhr0advsGfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYWM4OGYwMTcwY2JmZTQ0NmNmZDMxYTU4MjNjZGUwZTA5 MzE5OWEwHhcNMjUxMjIwMDgwMDQzWhcNMjUxMjIxMDgwMDQzWjAzMTEwLwYDVQQD Eyg1YzcxYWYxOGY4Y2M2YjQwNzVmMWJmM2RhODUyMjU1MWUxZmNhZjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CLZHsy3MRW8YYcHb6UozPAiHRMw d4/7Uo+mqdkwB19Oc2NrSbdxX6qkm1l/wmU+OsyggbuiDh8sFXdj5NK6WNeVw/eA Mfq6ceqypnHawDbiKoJ8C1u+u86rUc/FJ/ga+HfFKcUIqmRkhbbO0rEIneMdmHOt ZC735FGDFvmaozwunXRN+wCWr7Py0bmfdoU8LyL6SD9fcSUD7T9Hy96/j+YrxEjq lBNVJLwKsb/eRH1/OnLYHQ4jstcdy52IXUDQA/b1A+pXKcAJ7VZfXNYtP2CdOyzw PzEwrvqeYX8DXhyGxa8ZQRFojN7sq8SirYjJWfe8ZG35znYKHt5wL5oeUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxxrxj4zGtAdfG/PahSJVHh/K8XMB8GA1UdIwQY MBaAFIOsiPAXDL/kRs/TGlgjzeDgkxmaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzZ5SThCY012LVJHejlNYVdDUE40T0NUR1pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lZDY5ZGMtODBkNy00MzM2LWEyMmQt ODQ4YWY2OThkMGQ4LzEvZzZ5SThCY012LVJHejlNYVdDUE40T0NUR1pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lZDY5ZGMtODBkNy00MzM2LWEyMmQtODQ4YWY2OThkMGQ4 LzEvZzZ5SThCY012LVJHejlNYVdDUE40T0NUR1pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwKIpuyNK IhJGWrre2QErXqJALv0q2e80hcf2HzP3ZKGoxpy9CYvr2rdqilkLqSyB+bOD1beS rEighA6iBkTIhR/j8UqvOjwK0C0cp65fqG4Di2449ig8/uTXQifhkIXtCAxBQd+h MtK+vmNqsj1sUJ4TIWEDyAX3CI4bfq35gjvTu3eOUIiL60eSJxALjMQISTfvK83C hCWv9vhKifCpwjyTGUIARZLZ12WJrGG8PWWrEZDuoMouqmWwFm4i9z80q5VmixvN EVkhba+MM+ZayraSBPU4S4Ykzq+DeOdf+skS5jNAI31DEC2iIqvCfiZTazVGStWq rXV2XYT0G1jSXQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:35 2025 by rpki-client