This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft File: v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft (raw, json) Hash identifier: FobVpTqxB/wRmU/c11boGn51Uowc0pfQX4u+HZ/uyO8= Subject key identifier: B1:B8:65:70:2D:37:FB:3D:CA:F6:BD:94:3A:2F:A5:91:B8:F7:C9:F9 Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC Certificate issuer: /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac Certificate serial: 019B3C7FAE5FA9CDD43B902F889F41FC0ED9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft Manifest number: 141B Signing time: Sat 20 Dec 2025 16:02:39 +0000 Manifest this update: Sat 20 Dec 2025 16:02:39 +0000 Manifest next update: Sun 21 Dec 2025 16:02:39 +0000 Files and hashes: 1: CwTJXDuwwtXY5lds5AcNMw4m4MM.roa (hash: pkjwfyNy3tBr0gdIHHue6NuT85XueEkqyX3eSoK30mk=) 2: v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl (hash: ONqJPyWK5l5Gfq6txOgqrvs7Q+P2Wa9dmrBO2xTJe30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:ae:5f:a9:cd:d4:3b:90:2f:88:9f:41:fc:0e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac Validity Not Before: Dec 20 16:02:39 2025 GMT Not After : Dec 21 16:02:39 2025 GMT Subject: CN=b1b865702d37fb3dcaf6bd943a2fa591b8f7c9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ff:29:91:97:7d:d6:41:20:1a:5c:cb:bf:df: df:fb:cb:a7:2c:d6:3b:1e:5d:8d:b4:96:f7:55:43: a7:d3:a6:64:a0:f2:d3:86:b2:38:e5:29:c0:be:26: 51:6f:59:48:9b:8c:21:62:b2:98:94:5b:84:26:41: 82:58:78:c3:75:0f:a2:0c:81:38:80:68:8a:bf:ca: 97:23:96:fc:60:dd:3d:b5:c5:50:43:96:7c:32:7e: 7e:03:7f:f6:63:92:03:3d:65:47:de:94:6c:2e:3b: f7:7a:99:00:e1:61:3b:c2:4b:77:8d:bc:49:b3:d5: 74:c7:b7:0e:fa:d3:24:61:5b:e1:56:ad:08:76:65: 9e:f0:24:ad:5a:65:91:b4:0c:e0:4e:01:85:c1:7d: 96:d6:08:fd:b3:55:83:18:b1:e2:78:a7:4f:3b:19: 5e:45:8f:05:86:d6:10:04:3c:c5:2c:9a:10:e1:f0: f6:cb:ab:87:21:b8:74:b5:36:84:3b:88:ba:cf:54: ab:bc:c4:7a:cc:07:d6:ef:62:22:81:49:4e:61:ff: a4:26:8b:0e:d8:ea:42:fd:e8:a3:86:ea:83:9d:3c: 48:58:60:c6:29:a8:3a:c4:37:32:18:62:cc:71:4a: aa:02:c1:f6:be:3d:ef:87:8f:38:d4:ee:5a:94:d3: 6c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B8:65:70:2D:37:FB:3D:CA:F6:BD:94:3A:2F:A5:91:B8:F7:C9:F9 X509v3 Authority Key Identifier: keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:3d:bd:09:55:6a:21:01:23:49:aa:a9:bc:06:07:5b:24:a9: 89:2b:c1:e1:da:a7:93:73:cd:1c:9f:c5:79:6d:a7:10:d4:bd: 07:38:d3:b7:1c:e1:28:c7:b1:8f:7a:67:af:bf:b1:1d:08:2d: e4:01:b2:6b:86:42:9f:98:0d:4f:dc:04:01:df:95:90:3f:1b: 07:78:3d:f5:84:56:ed:d5:1a:f5:2f:19:f6:93:06:07:36:23: cb:0e:e1:80:f6:4b:ba:4c:b5:c4:e3:79:49:08:7f:da:31:e5: b2:96:5b:65:85:fc:1f:b3:ec:d8:d6:f0:79:c7:79:44:b9:91: c3:f0:0d:dc:14:65:d7:8f:1c:01:9c:ae:de:67:45:3a:7c:80: 62:96:aa:5c:7b:84:35:22:d7:d5:8b:80:a6:b6:04:08:a9:4f: 03:2c:7f:4b:ca:94:25:cd:08:c0:27:ef:b5:a0:a5:59:10:27: 4b:30:42:dc:b7:ad:67:20:15:84:85:ae:81:d6:7f:79:39:d6: e7:81:74:b9:54:87:48:00:a2:85:c4:53:54:30:28:aa:84:86: f5:ac:79:35:e0:38:67:8d:27:a5:9b:79:8c:bc:aa:e3:c5:69: ea:5a:5c:5d:66:1d:81:34:49:39:8e:2d:f8:e3:db:55:4e:df: 24:ed:b1:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f65fqc3UO5AviJ9B/A7ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYTBhMzhmODVkMmY1MzA1M2I4Yzg5NDNkOTAxN2IwYjhm NzcxYWMwHhcNMjUxMjIwMTYwMjM5WhcNMjUxMjIxMTYwMjM5WjAzMTEwLwYDVQQD EyhiMWI4NjU3MDJkMzdmYjNkY2FmNmJkOTQzYTJmYTU5MWI4ZjdjOWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP8pkZd91kEgGlzLv9/f+8unLNY7 Hl2NtJb3VUOn06ZkoPLThrI45SnAviZRb1lIm4whYrKYlFuEJkGCWHjDdQ+iDIE4 gGiKv8qXI5b8YN09tcVQQ5Z8Mn5+A3/2Y5IDPWVH3pRsLjv3epkA4WE7wkt3jbxJ s9V0x7cO+tMkYVvhVq0IdmWe8CStWmWRtAzgTgGFwX2W1gj9s1WDGLHieKdPOxle RY8FhtYQBDzFLJoQ4fD2y6uHIbh0tTaEO4i6z1SrvMR6zAfW72IigUlOYf+kJosO 2OpC/eijhuqDnTxIWGDGKag6xDcyGGLMcUqqAsH2vj3vh4841O5alNNspQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLG4ZXAtN/s9yva9lDovpZG498n5MB8GA1UdIwQY MBaAFL+go4+F0vUwU7jIlD2QF7C493GsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjZDamo0WFM5VEJUdU1pVVBaQVhzTGozY2F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80MDk5ZDctYzNjZS00NzIxLWIwZTkt N2FiMWZhMGJhMzk5LzEvdjZDamo0WFM5VEJUdU1pVVBaQVhzTGozY2F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi80MDk5ZDctYzNjZS00NzIxLWIwZTktN2FiMWZhMGJhMzk5 LzEvdjZDamo0WFM5VEJUdU1pVVBaQVhzTGozY2F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoz29CVVq IQEjSaqpvAYHWySpiSvB4dqnk3PNHJ/FeW2nENS9BzjTtxzhKMexj3pnr7+xHQgt 5AGya4ZCn5gNT9wEAd+VkD8bB3g99YRW7dUa9S8Z9pMGBzYjyw7hgPZLuky1xON5 SQh/2jHlspZbZYX8H7Ps2Nbwecd5RLmRw/AN3BRl148cAZyu3mdFOnyAYpaqXHuE NSLX1YuAprYECKlPAyx/S8qUJc0IwCfvtaClWRAnSzBC3LetZyAVhIWugdZ/eTnW 54F0uVSHSACihcRTVDAoqoSG9ax5NeA4Z40npZt5jLyq48Vp6lpcXWYdgTRJOY4t +OPbVU7fJO2xJw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:41:21 2025 by rpki-client