This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft File: bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft (raw, json) Hash identifier: GU90ZmxP0Ze110RPGz6mt9Y+XbK8J+lRqMqTRGNW/+s= Subject key identifier: AF:6A:78:BA:18:6F:2C:4F:CF:93:9C:D5:DB:C0:69:17:C4:9D:9C:E8 Authority key identifier: 6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70 Certificate issuer: /CN=6c09ab0751fea4b292a9afd14dbec3b83a077870 Certificate serial: 019B3155574DE439BBC5252A609D40E6337F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft Manifest number: 07F7 Signing time: Thu 18 Dec 2025 12:00:34 +0000 Manifest this update: Thu 18 Dec 2025 12:00:34 +0000 Manifest next update: Fri 19 Dec 2025 12:00:34 +0000 Files and hashes: 1: bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl (hash: pqDD1NxCTW/Xa9NpoboyzgJNisgo6Yj1DxvfZDeSYx8=) 2: g4EaozYmC9YQ0a7L9CYiQ4ogRAk.roa (hash: xmryesaevMInujVcjkZCiYepzaYX2LiaZCMbhmPgvyw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:57:4d:e4:39:bb:c5:25:2a:60:9d:40:e6:33:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c09ab0751fea4b292a9afd14dbec3b83a077870 Validity Not Before: Dec 18 12:00:34 2025 GMT Not After : Dec 19 12:00:34 2025 GMT Subject: CN=af6a78ba186f2c4fcf939cd5dbc06917c49d9ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8d:7f:b6:81:10:5b:74:06:f6:2c:d3:ea:73: f6:d1:f8:73:58:83:97:e9:4b:47:50:6b:40:96:a4: 77:7f:8d:e8:17:9c:5a:2e:a1:49:27:c8:08:ca:41: a1:d6:eb:a5:27:c8:b8:12:9d:54:3f:b2:30:0e:40: b6:c5:e6:c5:1e:26:7e:98:03:14:1a:88:0f:d0:d0: ed:bd:0f:d4:29:4e:45:04:ed:2d:5d:78:34:41:6e: 5c:37:cb:04:15:95:c5:9c:3e:0a:0e:91:5c:8e:11: 48:ad:c6:fa:8b:9d:72:2d:54:3a:28:ac:7f:c1:24: c8:a9:27:a5:6f:dc:0b:42:d5:2a:dc:31:0e:5a:f0: 82:ab:6b:ef:0e:79:31:35:24:fb:4d:98:cf:c0:41: c8:4c:98:db:84:be:07:7a:13:f6:bc:83:b9:d5:53: ed:1a:ef:33:94:59:34:26:dc:32:17:dd:17:e9:4b: a4:5a:7a:de:57:53:a5:0b:18:d6:b6:1d:b8:9c:18: e3:c8:a3:ec:5d:d8:7d:d8:3e:fe:fa:68:b7:ce:69: 2c:11:59:de:2d:80:c3:ad:01:7e:87:30:df:0e:26: a5:13:98:b4:4c:a0:80:ae:5a:65:6f:80:cd:a2:e8: 98:a0:c3:86:14:84:d1:1a:6a:f0:e7:be:bd:8e:9d: d5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6A:78:BA:18:6F:2C:4F:CF:93:9C:D5:DB:C0:69:17:C4:9D:9C:E8 X509v3 Authority Key Identifier: keyid:6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a8:87:b5:a6:71:9b:2d:ba:76:06:0d:28:fc:50:f0:49:2c: 8a:ae:94:f5:d5:5a:d4:35:db:b7:e4:62:4c:45:2f:84:fe:57: cd:98:a0:d5:17:37:dc:ec:2a:98:9d:62:bd:ef:12:4f:37:33: 1f:ea:e0:8e:ee:38:35:d8:f7:47:37:97:d4:10:2f:9e:b4:7f: a8:7e:df:ac:3d:48:74:86:30:e1:d8:58:49:d0:78:d6:c9:08: 47:d3:42:1d:b5:c1:18:95:fc:4b:8d:86:73:84:d2:18:bd:7f: c7:b4:32:65:45:d6:eb:b0:93:60:3d:65:01:15:c8:a0:53:c5: 95:67:2a:05:4a:ea:75:bc:03:ec:ef:96:56:a3:c9:a1:7e:b4: 01:c0:5e:c4:0e:64:7f:7b:bd:1a:9d:0f:d2:4b:24:7e:fe:42: 7a:d7:6c:4a:d5:c5:c0:24:f2:fb:1c:59:45:4d:eb:f9:85:c7: 96:45:31:1b:52:47:4c:82:20:1e:c1:6e:bf:9a:87:7b:81:26: 68:af:5d:d4:63:d6:dc:e1:dd:39:2d:23:d3:38:c5:39:98:27: 49:26:30:ff:40:90:13:a7:97:bd:24:9c:3e:94:95:36:ba:0e: b6:77:f2:67:99:b4:e7:c5:4e:4c:ea:95:f1:dd:0c:ab:2f:31: e0:12:c6:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVVdN5Dm7xSUqYJ1A5jN/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMDlhYjA3NTFmZWE0YjI5MmE5YWZkMTRkYmVjM2I4M2Ew Nzc4NzAwHhcNMjUxMjE4MTIwMDM0WhcNMjUxMjE5MTIwMDM0WjAzMTEwLwYDVQQD EyhhZjZhNzhiYTE4NmYyYzRmY2Y5MzljZDVkYmMwNjkxN2M0OWQ5Y2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi41/toEQW3QG9izT6nP20fhzWIOX 6UtHUGtAlqR3f43oF5xaLqFJJ8gIykGh1uulJ8i4Ep1UP7IwDkC2xebFHiZ+mAMU GogP0NDtvQ/UKU5FBO0tXXg0QW5cN8sEFZXFnD4KDpFcjhFIrcb6i51yLVQ6KKx/ wSTIqSelb9wLQtUq3DEOWvCCq2vvDnkxNST7TZjPwEHITJjbhL4HehP2vIO51VPt Gu8zlFk0JtwyF90X6UukWnreV1OlCxjWth24nBjjyKPsXdh92D7++mi3zmksEVne LYDDrQF+hzDfDialE5i0TKCArlplb4DNouiYoMOGFITRGmrw5769jp3V6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9qeLoYbyxPz5Oc1dvAaRfEnZzoMB8GA1UdIwQY MBaAFGwJqwdR/qSykqmv0U2+w7g6B3hwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFtckIxSC1wTEtTcWFfUlRiN0R1RG9IZUhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wNzYyNzItMjk2ZC00NmFmLTg1ZDEt NDQ5NzNhNjAyZDlmLzEvYkFtckIxSC1wTEtTcWFfUlRiN0R1RG9IZUhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wNzYyNzItMjk2ZC00NmFmLTg1ZDEtNDQ5NzNhNjAyZDlm LzEvYkFtckIxSC1wTEtTcWFfUlRiN0R1RG9IZUhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmqiHtaZx my26dgYNKPxQ8Eksiq6U9dVa1DXbt+RiTEUvhP5XzZig1Rc33OwqmJ1ive8STzcz H+rgju44Ndj3RzeX1BAvnrR/qH7frD1IdIYw4dhYSdB41skIR9NCHbXBGJX8S42G c4TSGL1/x7QyZUXW67CTYD1lARXIoFPFlWcqBUrqdbwD7O+WVqPJoX60AcBexA5k f3u9Gp0P0kskfv5CetdsStXFwCTy+xxZRU3r+YXHlkUxG1JHTIIgHsFuv5qHe4Em aK9d1GPW3OHdOS0j0zjFOZgnSSYw/0CQE6eXvSScPpSVNroOtnfyZ5m058VOTOqV 8d0Mqy8x4BLGig== -----END CERTIFICATE-----Generated at Thu Dec 18 18:36:47 2025 by rpki-client