This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft File: 06v49M34ljoYLaDN-QjDhEf6egk.mft (raw, json) Hash identifier: KRSWPA969XbB4xgeo2jlN5iw4K7tMkmHwJvy/HzyyDs= Subject key identifier: 67:FB:2A:21:43:F3:A2:7B:76:6C:E4:D9:8E:3E:46:83:E2:86:7D:76 Authority key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09 Certificate issuer: /CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09 Certificate serial: 019B390FC0E7C6DA4C5B6F62E9DE569A0D59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft Manifest number: 0577 Signing time: Sat 20 Dec 2025 00:01:32 +0000 Manifest this update: Sat 20 Dec 2025 00:01:32 +0000 Manifest next update: Sun 21 Dec 2025 00:01:32 +0000 Files and hashes: 1: 06v49M34ljoYLaDN-QjDhEf6egk.crl (hash: pDJsTKg8zW31E/8rv50xHxiPmmyIkzwadHoMjh8Fwuo=) 2: oT2LDF85PY5HdbBLwhoxl8tjz8s.roa (hash: 1EymL80SjeM7RupyG8pGED+B/g9jGLElUsA1V765L5Y=) 3: rQUKCahIBhl3q6X_ssqHaslUPkw.roa (hash: oqWMNr1y2jXmtuppkY6LyFtpsdVUxnQjZycMv+hYavM=) 4: tFTfuySubfSrRVHUhxYeF1u80Zs.roa (hash: fQsA3U2f82hs7Bti4LUoQIz7rVn7qpzt4RTZ9jhDkSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:c0:e7:c6:da:4c:5b:6f:62:e9:de:56:9a:0d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09 Validity Not Before: Dec 20 00:01:32 2025 GMT Not After : Dec 21 00:01:32 2025 GMT Subject: CN=67fb2a2143f3a27b766ce4d98e3e4683e2867d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:28:b5:16:42:6f:7c:61:77:c6:54:09:df: 6c:03:45:af:23:45:27:9d:20:6c:f5:6c:32:07:2c: ed:b4:dc:46:16:e6:77:57:5e:a9:0b:ae:a4:59:de: 0f:07:15:34:02:b1:f6:f8:ee:6a:38:a0:46:5e:cd: b0:6f:73:f1:40:77:c5:0e:08:cf:60:34:25:6b:16: f1:6f:47:55:4b:0a:39:a5:f5:54:1b:5a:6b:cf:38: 54:7c:70:69:69:81:56:39:b0:7b:c0:2d:2e:0c:64: a8:8e:6f:ad:33:72:7e:03:9c:1c:4d:2c:b7:8f:37: 45:f2:c4:b9:84:fb:c7:a7:6b:f4:4a:55:04:87:03: b1:e6:71:d7:19:1a:c9:76:a4:39:3e:14:79:73:81: 7a:4d:a4:7e:3a:d6:fc:e8:c4:f9:62:49:d2:50:0e: 14:1d:cc:bb:18:6f:d7:1d:00:d9:c7:e3:77:78:cb: 2a:e0:25:61:4f:da:cc:1b:19:04:5c:e8:9b:77:47: 47:40:de:06:50:3a:2a:3e:66:d8:fb:ed:ba:80:ab: 3d:08:55:01:18:67:12:ac:6e:e4:26:82:29:57:49: dc:a2:3e:f4:b9:05:28:6a:a6:d7:9a:2f:15:b8:74: 9a:50:f3:ea:d3:5b:7b:66:ab:87:87:04:33:5c:11: 59:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FB:2A:21:43:F3:A2:7B:76:6C:E4:D9:8E:3E:46:83:E2:86:7D:76 X509v3 Authority Key Identifier: keyid:D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:0f:53:03:6f:f1:f9:39:4f:4d:9f:0a:3d:dc:f7:cd:c6:a7: af:ed:47:ce:36:76:e4:70:91:2b:fb:53:06:dd:ab:55:a8:5d: bd:e0:5a:d2:f5:1b:f4:80:1d:db:de:4f:fc:0f:15:24:85:47: 78:9d:14:b1:0f:bf:09:3b:00:65:15:74:fc:b5:f4:a8:be:e8: e5:8a:fb:54:90:05:21:24:2b:ae:a5:06:3d:91:07:68:52:05: bf:53:c7:1f:b3:85:95:cd:ed:de:93:7d:3f:2a:e4:4b:79:a9: 2b:81:f7:20:8d:24:50:16:68:5f:61:dd:a7:79:80:f1:98:a6: 89:a7:53:74:8e:45:98:a1:e3:11:3b:2b:ee:fc:65:8d:ff:32: dc:75:a4:98:2c:02:92:ee:b4:3c:10:af:7e:61:26:b6:0b:fb: 99:d9:45:cb:bd:42:e1:13:fb:57:04:dd:cf:68:e4:d4:0c:79: 92:f4:2d:be:3a:4f:01:af:fa:bb:4c:23:76:e5:71:8f:b4:05: ad:43:0e:c2:cd:2d:b2:1d:35:01:cf:16:ac:81:b3:27:b2:97: dd:53:e0:8e:e0:3f:88:cb:09:3b:0a:6e:86:65:be:b6:7e:c5: e2:22:5e:a1:5e:96:7b:93:5d:91:74:52:e5:17:6a:3a:53:4e: 2a:37:5a:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D8DnxtpMW29i6d5Wmg1ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYWJmOGY0Y2RmODk2M2ExODJkYTBjZGY5MDhjMzg0NDdm YTdhMDkwHhcNMjUxMjIwMDAwMTMyWhcNMjUxMjIxMDAwMTMyWjAzMTEwLwYDVQQD Eyg2N2ZiMmEyMTQzZjNhMjdiNzY2Y2U0ZDk4ZTNlNDY4M2UyODY3ZDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLAotRZCb3xhd8ZUCd9sA0WvI0Un nSBs9WwyByzttNxGFuZ3V16pC66kWd4PBxU0ArH2+O5qOKBGXs2wb3PxQHfFDgjP YDQlaxbxb0dVSwo5pfVUG1przzhUfHBpaYFWObB7wC0uDGSojm+tM3J+A5wcTSy3 jzdF8sS5hPvHp2v0SlUEhwOx5nHXGRrJdqQ5PhR5c4F6TaR+Otb86MT5YknSUA4U Hcy7GG/XHQDZx+N3eMsq4CVhT9rMGxkEXOibd0dHQN4GUDoqPmbY++26gKs9CFUB GGcSrG7kJoIpV0ncoj70uQUoaqbXmi8VuHSaUPPq01t7ZquHhwQzXBFZ7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGf7KiFD86J7dmzk2Y4+RoPihn12MB8GA1UdIwQY MBaAFNOr+PTN+JY6GC2gzfkIw4RH+noJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yNmQxOTMtNDBjMi00MTdiLWJkNTIt NWMxMGJkYjg2NmUwLzEvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yNmQxOTMtNDBjMi00MTdiLWJkNTItNWMxMGJkYjg2NmUw LzEvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdA9TA2/x +TlPTZ8KPdz3zcanr+1HzjZ25HCRK/tTBt2rVahdveBa0vUb9IAd295P/A8VJIVH eJ0UsQ+/CTsAZRV0/LX0qL7o5Yr7VJAFISQrrqUGPZEHaFIFv1PHH7OFlc3t3pN9 PyrkS3mpK4H3II0kUBZoX2Hdp3mA8ZimiadTdI5FmKHjETsr7vxljf8y3HWkmCwC ku60PBCvfmEmtgv7mdlFy71C4RP7VwTdz2jk1Ax5kvQtvjpPAa/6u0wjduVxj7QF rUMOws0tsh01Ac8WrIGzJ7KX3VPgjuA/iMsJOwpuhmW+tn7F4iJeoV6We5NdkXRS 5RdqOlNOKjdarQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:19:47 2025 by rpki-client