This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft File: v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft (raw, json) Hash identifier: 0FpDA3i6tqjd0MWDAAc9hUKufZGZ8B2pykL/N6KDnEM= Subject key identifier: BA:47:6D:B9:BB:7A:43:51:AE:4D:A6:0F:1F:58:24:34:4B:E3:76:FC Authority key identifier: BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F Certificate issuer: /CN=bfabf5a474afe7212331670e831e119da38f284f Certificate serial: 019B360EC70454009386C82D3E8AE6BE2F34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 10:01:36 +0000 Manifest this update: Fri 19 Dec 2025 10:01:36 +0000 Manifest next update: Sat 20 Dec 2025 10:01:36 +0000 Files and hashes: 1: GhyJElhSMkb21ni84p3HgeSkxTQ.roa (hash: KwUCFvaWxHo9sPEoV9+enTpSMnw5D6fXp7AzPwgg1sY=) 2: v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl (hash: N1n9dMHFjqc9jacOCKUymW3WmZ7y+CpveyPfPEY8wi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:c7:04:54:00:93:86:c8:2d:3e:8a:e6:be:2f:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfabf5a474afe7212331670e831e119da38f284f Validity Not Before: Dec 19 10:01:36 2025 GMT Not After : Dec 20 10:01:36 2025 GMT Subject: CN=ba476db9bb7a4351ae4da60f1f5824344be376fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:96:d3:71:f3:fb:96:e7:24:b3:86:25:38:9c: 44:94:9d:a4:a1:6b:f3:fd:62:db:56:c3:84:4f:f3: 04:c6:74:4b:4b:42:5b:10:bc:ed:43:a6:5c:82:21: 41:29:b7:c3:59:d3:75:57:dc:5f:c0:a4:93:76:dc: 78:a7:51:a5:78:6c:dd:4e:f8:12:74:0b:0c:51:b3: c1:fd:1e:6b:a1:b9:4f:44:94:3e:1c:f4:7e:f9:85: 79:63:28:c5:93:c9:4a:ba:ec:8d:17:3b:e3:1d:2b: b3:e5:76:4a:23:27:d1:98:ae:6d:ce:70:01:3e:5f: 44:51:4c:01:d9:69:b7:2a:5f:62:65:00:9a:8d:7c: d5:b8:a7:4d:cb:ce:87:e1:fb:1f:ee:c8:aa:56:d5: 6d:6e:cf:62:c9:cc:cb:fa:71:26:88:16:f0:43:45: b1:e4:31:ed:e3:ff:8e:24:c9:e2:c8:24:cc:79:22: 98:d9:56:7b:c4:4e:9d:dc:4c:e4:d6:98:72:f1:5c: 11:f2:f2:ab:8f:c2:5e:25:bb:86:07:31:0b:f4:af: ad:88:e3:2f:ea:f4:f2:b5:2e:7b:23:ef:e5:a9:3b: f7:87:80:67:9f:fa:ee:34:b8:87:3b:fe:e2:97:7e: 7e:fa:e5:5f:4d:d8:96:10:fb:0c:ef:ef:a6:c2:80: 46:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:47:6D:B9:BB:7A:43:51:AE:4D:A6:0F:1F:58:24:34:4B:E3:76:FC X509v3 Authority Key Identifier: keyid:BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:09:32:92:a7:2c:82:10:9d:56:1c:c3:e9:9f:36:f3:b3:50: e0:eb:52:77:24:bd:80:81:43:f4:72:71:63:30:4e:7b:b0:98: 6e:84:f8:a7:9c:25:7f:58:39:23:b0:8a:62:23:ac:16:c5:f0: 62:fd:81:1e:ec:0c:dd:3e:d6:bf:17:d3:05:c0:bc:c1:eb:22: a8:c6:5f:b0:23:1f:60:57:9f:67:d3:d7:8e:87:74:a3:0c:70: 82:98:17:bc:ae:d6:1e:ab:c6:ef:2a:66:a1:41:06:bb:74:b2: d9:d9:9e:2e:1d:13:b3:36:99:be:fc:a2:b0:c5:15:11:6c:d5: 63:c9:2a:16:d0:e8:57:4d:ac:16:80:51:91:d0:85:c4:0e:b5: a4:8a:4f:00:99:7b:8e:20:4c:9c:6b:42:af:48:fa:e2:6a:19: 08:0c:37:bc:84:fc:f0:2a:06:9b:f8:0e:70:02:05:1e:ce:05: c5:23:58:0b:a4:53:06:fb:d4:40:cd:76:65:02:b9:1a:26:05: 8d:e4:63:54:a1:b0:9f:64:e0:32:0f:f3:3b:16:ac:97:28:e3: 6c:0d:91:0b:90:76:fd:54:55:db:7f:69:74:f7:dd:2c:90:84: 07:38:ae:61:1f:9b:78:76:2d:0d:7c:64:36:bb:73:0a:91:b0: 1e:e1:c1:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DscEVACThsgtPormvi80MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYWJmNWE0NzRhZmU3MjEyMzMxNjcwZTgzMWUxMTlkYTM4 ZjI4NGYwHhcNMjUxMjE5MTAwMTM2WhcNMjUxMjIwMTAwMTM2WjAzMTEwLwYDVQQD EyhiYTQ3NmRiOWJiN2E0MzUxYWU0ZGE2MGYxZjU4MjQzNDRiZTM3NmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pbTcfP7lucks4YlOJxElJ2koWvz /WLbVsOET/MExnRLS0JbELztQ6ZcgiFBKbfDWdN1V9xfwKSTdtx4p1GleGzdTvgS dAsMUbPB/R5roblPRJQ+HPR++YV5YyjFk8lKuuyNFzvjHSuz5XZKIyfRmK5tznAB Pl9EUUwB2Wm3Kl9iZQCajXzVuKdNy86H4fsf7siqVtVtbs9iyczL+nEmiBbwQ0Wx 5DHt4/+OJMniyCTMeSKY2VZ7xE6d3Ezk1phy8VwR8vKrj8JeJbuGBzEL9K+tiOMv 6vTytS57I+/lqTv3h4Bnn/ruNLiHO/7il35++uVfTdiWEPsM7++mwoBGfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpHbbm7ekNRrk2mDx9YJDRL43b8MB8GA1UdIwQY MBaAFL+r9aR0r+chIzFnDoMeEZ2jjyhPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjZ2MXBIU3Y1eUVqTVdjT2d4NFJuYU9QS0U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wMTg4ZGEtMzY1NS00ODJkLTg4MWIt ZmViYmM0YTNiNDViLzEvdjZ2MXBIU3Y1eUVqTVdjT2d4NFJuYU9QS0U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8wMTg4ZGEtMzY1NS00ODJkLTg4MWItZmViYmM0YTNiNDVi LzEvdjZ2MXBIU3Y1eUVqTVdjT2d4NFJuYU9QS0U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQkykqcs ghCdVhzD6Z8287NQ4OtSdyS9gIFD9HJxYzBOe7CYboT4p5wlf1g5I7CKYiOsFsXw Yv2BHuwM3T7WvxfTBcC8wesiqMZfsCMfYFefZ9PXjod0owxwgpgXvK7WHqvG7ypm oUEGu3Sy2dmeLh0TszaZvvyisMUVEWzVY8kqFtDoV02sFoBRkdCFxA61pIpPAJl7 jiBMnGtCr0j64moZCAw3vIT88CoGm/gOcAIFHs4FxSNYC6RTBvvUQM12ZQK5GiYF jeRjVKGwn2TgMg/zOxaslyjjbA2RC5B2/VRV239pdPfdLJCEBziuYR+beHYtDXxk NrtzCpGwHuHB/Q== -----END CERTIFICATE-----Generated at Fri Dec 19 14:33:14 2025 by rpki-client