This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft File: a69yXnGSRAQZZKCTcOF_vvu7qvY.mft (raw, json) Hash identifier: xY25BWrddPKgWpTExJcCMDYc3He+yLY8Zs/7hrajbXw= Subject key identifier: 46:8E:C2:58:10:E7:BE:0A:2A:63:D6:23:B1:5C:5E:9C:74:DB:5C:6D Authority key identifier: 6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6 Certificate issuer: /CN=6baf725e719244041964a09370e17fbefbbbaaf6 Certificate serial: 019B4C2803ED925D9A9AAF4D8B900B857646 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft Manifest number: 041B Signing time: Tue 23 Dec 2025 17:00:49 +0000 Manifest this update: Tue 23 Dec 2025 17:00:49 +0000 Manifest next update: Wed 24 Dec 2025 17:00:49 +0000 Files and hashes: 1: KXg-dytuO8ex4tQ85yTQffHt_6c.roa (hash: WwN13tE0jgxoqC/QBhiOlmTcyL6rkhAHTngBOmvCXpE=) 2: a69yXnGSRAQZZKCTcOF_vvu7qvY.crl (hash: mT6uJLpyqTUHlpUZja3GM47B1kDCKBJ2b9yivj8mWuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 17:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:28:03:ed:92:5d:9a:9a:af:4d:8b:90:0b:85:76:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6baf725e719244041964a09370e17fbefbbbaaf6 Validity Not Before: Dec 23 17:00:49 2025 GMT Not After : Dec 24 17:00:49 2025 GMT Subject: CN=468ec25810e7be0a2a63d623b15c5e9c74db5c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:79:bd:e8:ac:21:9b:af:33:2c:f4:bb:f1:3e: 87:22:c5:f5:a6:c4:f6:de:91:a7:35:3d:ac:85:9d: a6:16:96:57:a0:3b:90:43:bb:91:41:cc:f2:f4:3d: 21:62:c7:9a:1a:db:a0:e1:fe:d8:84:4f:a2:d1:78: ba:1a:f4:10:01:2d:a8:e0:f5:ed:ae:24:8b:85:2f: a3:74:eb:c4:c1:a6:87:21:22:6f:84:f7:c1:57:7c: 39:04:f2:25:14:fd:db:8c:9d:6b:46:32:9e:af:6d: 8c:1d:f4:87:1c:5b:3d:99:02:49:ad:30:4d:00:f9: 88:76:0b:34:ef:dc:05:6d:cd:e7:61:e4:55:1d:47: f7:09:71:75:c4:37:84:a1:c6:0d:4e:40:04:ad:67: ff:73:40:e1:d8:f9:30:d1:9c:7f:38:9c:8d:b7:6d: 05:c9:81:65:53:f6:7a:8d:f3:bf:62:d5:3f:da:be: f5:eb:72:8d:ea:95:6d:9f:b5:6f:27:5a:c5:3f:7c: d1:c0:2c:df:0c:8b:b8:21:a8:26:98:e6:41:c1:36: cb:31:e2:ab:36:73:5f:3e:c6:a1:d4:cb:b0:67:1a: 56:d0:39:95:5e:62:57:bb:14:f3:77:f9:d0:cc:1a: 45:c7:d7:ba:73:17:74:a5:34:26:11:74:e3:61:a1: 57:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8E:C2:58:10:E7:BE:0A:2A:63:D6:23:B1:5C:5E:9C:74:DB:5C:6D X509v3 Authority Key Identifier: keyid:6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d3:b6:f4:1e:d6:b5:85:79:15:2e:6a:cd:c4:73:e0:4e:26: 8d:97:00:c4:a4:1f:a9:af:15:db:50:50:e7:cb:df:15:47:4f: e1:df:c7:49:80:3e:61:77:e0:82:63:7c:86:8b:fc:9f:bc:b9: 8c:96:59:b1:60:a3:5f:2b:b6:09:e0:8e:31:62:91:1e:d6:2f: ea:65:8e:07:b5:58:b3:c0:ea:2d:32:e8:06:91:38:8b:7b:91: d7:fc:34:e8:18:ac:a5:47:77:3c:63:5e:81:01:84:fc:2c:50: d0:e2:35:27:4e:24:7e:1b:9c:cb:fa:2e:fe:d2:9d:5a:1f:62: e4:95:1d:ed:a6:e7:66:93:65:45:d1:9f:b7:48:e5:aa:47:16: 7d:22:68:6e:d6:e4:7f:b6:e0:3e:04:21:33:12:ad:7e:1f:41: 83:f0:f0:79:d9:b2:95:ef:63:4e:91:e2:be:99:d8:1b:2d:cc: 8d:2b:20:1d:49:9d:92:fd:1c:fe:62:f9:2c:71:f0:2f:b4:b7: d8:7e:d8:79:1d:6e:5b:29:c7:9a:5a:68:1e:9c:11:31:f4:2c: 29:bf:dc:f1:71:65:85:6a:48:4d:bb:c0:93:ad:ae:82:48:06: 82:1c:69:ad:09:52:be:17:e7:20:2e:55:6a:7d:77:5a:7d:45: a8:8e:79:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMKAPtkl2amq9Ni5ALhXZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYWY3MjVlNzE5MjQ0MDQxOTY0YTA5MzcwZTE3ZmJlZmJi YmFhZjYwHhcNMjUxMjIzMTcwMDQ5WhcNMjUxMjI0MTcwMDQ5WjAzMTEwLwYDVQQD Eyg0NjhlYzI1ODEwZTdiZTBhMmE2M2Q2MjNiMTVjNWU5Yzc0ZGI1YzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHm96Kwhm68zLPS78T6HIsX1psT2 3pGnNT2shZ2mFpZXoDuQQ7uRQczy9D0hYseaGtug4f7YhE+i0Xi6GvQQAS2o4PXt riSLhS+jdOvEwaaHISJvhPfBV3w5BPIlFP3bjJ1rRjKer22MHfSHHFs9mQJJrTBN APmIdgs079wFbc3nYeRVHUf3CXF1xDeEocYNTkAErWf/c0Dh2Pkw0Zx/OJyNt20F yYFlU/Z6jfO/YtU/2r7163KN6pVtn7VvJ1rFP3zRwCzfDIu4IagmmOZBwTbLMeKr NnNfPsah1MuwZxpW0DmVXmJXuxTzd/nQzBpFx9e6cxd0pTQmEXTjYaFXOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaOwlgQ574KKmPWI7FcXpx021xtMB8GA1UdIwQY MBaAFGuvcl5xkkQEGWSgk3Dhf777u6r2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTY5eVhuR1NSQVFaWktDVGNPRl92dnU3cXZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85MWNiY2UtYWM5Yy00ZWVjLWI4NjEt MjZjM2ZkYzVlNzE3LzEvYTY5eVhuR1NSQVFaWktDVGNPRl92dnU3cXZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC85MWNiY2UtYWM5Yy00ZWVjLWI4NjEtMjZjM2ZkYzVlNzE3 LzEvYTY5eVhuR1NSQVFaWktDVGNPRl92dnU3cXZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNO29B7W tYV5FS5qzcRz4E4mjZcAxKQfqa8V21BQ58vfFUdP4d/HSYA+YXfggmN8hov8n7y5 jJZZsWCjXyu2CeCOMWKRHtYv6mWOB7VYs8DqLTLoBpE4i3uR1/w06BispUd3PGNe gQGE/CxQ0OI1J04kfhucy/ou/tKdWh9i5JUd7abnZpNlRdGft0jlqkcWfSJobtbk f7bgPgQhMxKtfh9Bg/Dwedmyle9jTpHivpnYGy3MjSsgHUmdkv0c/mL5LHHwL7S3 2H7YeR1uWynHmlpoHpwRMfQsKb/c8XFlhWpITbvAk62ugkgGghxprQlSvhfnIC5V an13Wn1FqI55Rg== -----END CERTIFICATE-----Generated at Wed Dec 24 03:01:11 2025 by rpki-client