This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft File: g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft (raw, json) Hash identifier: xjltMxoklYZKuailboWB/86oLThaY0jpVCxWSpepCi4= Subject key identifier: BA:9B:87:1E:BE:71:D5:EB:C3:6B:74:A7:83:51:61:69:2F:91:51:2B Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A Certificate issuer: /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a Certificate serial: 019B5D89744A4A07F25548B27ABF38754A6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft Manifest number: 172D Signing time: Sat 27 Dec 2025 02:00:47 +0000 Manifest this update: Sat 27 Dec 2025 02:00:47 +0000 Manifest next update: Sun 28 Dec 2025 02:00:47 +0000 Files and hashes: 1: 7Atpb8ICQNgBoE2VxygDoXR916c.roa (hash: 9LfiFF+kHY8QeDVlYR0804RgSHl5CYTGB3eoMEBzGw0=) 2: g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl (hash: QA3Q4Kyor0VXWnlkK9akLnwCdAceJy0UPsIyIPN8rzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:74:4a:4a:07:f2:55:48:b2:7a:bf:38:75:4a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a Validity Not Before: Dec 27 02:00:47 2025 GMT Not After : Dec 28 02:00:47 2025 GMT Subject: CN=ba9b871ebe71d5ebc36b74a7835161692f91512b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:67:d2:12:ec:b7:f5:eb:31:02:4a:46:3c:3d: 0c:a2:24:bd:87:7a:89:b8:51:41:16:f7:5a:d9:d0: f8:a5:9b:9e:45:c0:14:79:da:05:2e:b9:40:84:77: d4:d9:cf:49:d9:36:e3:21:d4:95:03:bd:80:7c:a2: 4f:f8:12:f7:2a:08:06:6a:36:d8:e2:94:6b:c9:7c: 99:ee:ff:53:c3:9b:5d:69:a3:b3:e1:3d:c3:8a:60: 7d:73:3a:35:ac:96:0e:17:79:85:be:8a:0f:f8:c3: 63:06:11:91:ed:ff:82:b7:ef:62:c7:d7:64:75:67: 07:df:3d:18:05:a0:22:a2:3c:f3:82:10:a3:75:9f: 28:65:92:0f:93:c8:60:86:36:2a:aa:70:78:b3:3d: ba:a7:11:13:0f:d9:3f:de:d4:37:34:39:57:30:cc: 45:44:04:72:95:10:a7:a5:b9:11:b5:f5:c2:fb:74: e1:4f:69:06:00:9a:a6:9e:1a:cb:9d:f5:0d:f2:e2: 05:38:f8:1f:8b:e2:1e:20:8d:de:69:6f:60:9d:18: c6:f4:b7:21:0c:a4:5d:e6:c5:5c:98:12:82:64:f4: 64:24:76:64:21:09:7b:c3:ee:a3:13:46:35:c8:51: 55:69:99:02:c3:72:1f:1a:31:b9:e1:ae:d9:87:85: ff:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9B:87:1E:BE:71:D5:EB:C3:6B:74:A7:83:51:61:69:2F:91:51:2B X509v3 Authority Key Identifier: keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:2d:56:1e:63:b5:a8:43:34:8e:b1:0f:6a:46:ab:31:ab:c3: 83:1d:a6:e0:c2:9d:7d:0f:80:27:ec:38:0e:e7:ef:ea:bc:dc: b3:ef:45:28:c5:6f:f0:7e:10:b7:b9:c7:0e:59:d1:41:37:a8: c2:d2:bc:03:d7:66:41:ae:da:79:42:e4:83:71:7b:bd:24:d2: cd:be:c4:c3:d6:e9:f7:a7:aa:f1:bc:08:50:28:64:8a:67:50: e1:59:8e:7f:4f:13:20:55:ae:05:06:98:93:99:f2:4b:89:1c: 6e:07:5b:67:b5:38:e3:c9:1b:18:c1:3e:90:6a:4d:21:2b:9f: ed:f9:bd:29:65:f7:a3:b2:ba:9f:18:e1:cf:b7:4b:cf:36:b3: 27:b0:2d:a8:5b:58:6e:2e:e3:ba:a0:d3:e2:a4:42:21:59:f6: 18:4d:f0:c4:44:5a:67:08:c6:46:ba:68:5c:55:89:62:d8:4e: cd:87:7c:38:ed:64:6e:18:ae:04:bd:eb:de:09:bc:64:2f:05: 4f:7a:d2:61:6f:4e:65:39:72:ce:ea:c8:c9:49:bb:e4:17:ed: 4b:09:d9:2a:77:22:6d:3a:44:f4:95:a0:33:bf:e6:56:87:19: a5:05:6d:39:31:b9:d8:93:f7:3d:8c:d8:ed:a8:06:23:db:c6: 5e:e3:a7:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdiXRKSgfyVUiyer84dUpsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYWM4OGYwMTcwY2JmZTQ0NmNmZDMxYTU4MjNjZGUwZTA5 MzE5OWEwHhcNMjUxMjI3MDIwMDQ3WhcNMjUxMjI4MDIwMDQ3WjAzMTEwLwYDVQQD EyhiYTliODcxZWJlNzFkNWViYzM2Yjc0YTc4MzUxNjE2OTJmOTE1MTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWfSEuy39esxAkpGPD0MoiS9h3qJ uFFBFvda2dD4pZueRcAUedoFLrlAhHfU2c9J2TbjIdSVA72AfKJP+BL3KggGajbY 4pRryXyZ7v9Tw5tdaaOz4T3DimB9czo1rJYOF3mFvooP+MNjBhGR7f+Ct+9ix9dk dWcH3z0YBaAiojzzghCjdZ8oZZIPk8hghjYqqnB4sz26pxETD9k/3tQ3NDlXMMxF RARylRCnpbkRtfXC+3ThT2kGAJqmnhrLnfUN8uIFOPgfi+IeII3eaW9gnRjG9Lch DKRd5sVcmBKCZPRkJHZkIQl7w+6jE0Y1yFFVaZkCw3IfGjG54a7Zh4X/AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqbhx6+cdXrw2t0p4NRYWkvkVErMB8GA1UdIwQY MBaAFIOsiPAXDL/kRs/TGlgjzeDgkxmaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzZ5SThCY012LVJHejlNYVdDUE40T0NUR1pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lZDY5ZGMtODBkNy00MzM2LWEyMmQt ODQ4YWY2OThkMGQ4LzEvZzZ5SThCY012LVJHejlNYVdDUE40T0NUR1pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lZDY5ZGMtODBkNy00MzM2LWEyMmQtODQ4YWY2OThkMGQ4 LzEvZzZ5SThCY012LVJHejlNYVdDUE40T0NUR1pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlC1WHmO1 qEM0jrEPakarMavDgx2m4MKdfQ+AJ+w4Dufv6rzcs+9FKMVv8H4Qt7nHDlnRQTeo wtK8A9dmQa7aeULkg3F7vSTSzb7Ew9bp96eq8bwIUChkimdQ4VmOf08TIFWuBQaY k5nyS4kcbgdbZ7U448kbGME+kGpNISuf7fm9KWX3o7K6nxjhz7dLzzazJ7AtqFtY bi7juqDT4qRCIVn2GE3wxERaZwjGRrpoXFWJYthOzYd8OO1kbhiuBL3r3gm8ZC8F T3rSYW9OZTlyzurIyUm75BftSwnZKncibTpE9JWgM7/mVocZpQVtOTG52JP3PYzY 7agGI9vGXuOn/g== -----END CERTIFICATE-----Generated at Sat Dec 27 04:51:55 2025 by rpki-client