This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft File: 6diA6IcHf62Ct0yZgBD6myU-Dqg.mft (raw, json) Hash identifier: Gs0D1uBgc1V2FLchOQL3jGwEFJQ0jCtAmysLGUJTn3M= Subject key identifier: 2D:77:FA:07:EF:43:35:6C:58:67:85:62:4B:43:D9:57:2C:B7:E6:6C Authority key identifier: E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8 Certificate issuer: /CN=e9d880e887077fad82b74c998010fa9b253e0ea8 Certificate serial: 019B3F482260C551AF51F13477E1035F888E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 05:00:50 +0000 Manifest this update: Sun 21 Dec 2025 05:00:50 +0000 Manifest next update: Mon 22 Dec 2025 05:00:50 +0000 Files and hashes: 1: 6diA6IcHf62Ct0yZgBD6myU-Dqg.crl (hash: eoVGJid8lw60sLfYJQTMdg0G1S1VRzXLXBYZKJNFaDQ=) 2: MAF_Elgy9u87cVsZVUNNm5Bb_UE.roa (hash: OX4gvHHnab+S9t+kA6ofZcqN5QU8A+hvwcM1NQu21jI=) 3: hbhPN4GRWF1Kh2C_ZGs02wMD7Rw.roa (hash: zbvVnLL4EUKhuAlyrvHCZpnuafPuDIGGmDdwOuvfDX8=) 4: zuxfhazkw5A2wUx6_S2GEVHOFH0.roa (hash: 2S2LWvnGAr/ZohzIcOjiYOYePYl9ZaqVuuPNKMqicns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:22:60:c5:51:af:51:f1:34:77:e1:03:5f:88:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9d880e887077fad82b74c998010fa9b253e0ea8 Validity Not Before: Dec 21 05:00:50 2025 GMT Not After : Dec 22 05:00:50 2025 GMT Subject: CN=2d77fa07ef43356c586785624b43d9572cb7e66c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:96:59:c4:ec:52:cf:04:76:26:72:b9:07:ff: 59:e6:3a:d3:c4:2a:c9:95:ce:e6:3a:90:07:87:85: 35:f7:a1:88:73:f5:e2:9d:06:77:0e:d6:27:c7:c5: a8:ea:53:36:c3:af:93:2b:c2:66:b6:e0:84:3c:3c: 5c:3a:ec:66:a3:e8:d5:25:ac:83:ea:e7:4e:26:67: 26:0b:17:d3:33:f1:5e:33:77:32:90:77:77:dd:20: f0:b4:eb:91:c2:de:0d:df:53:69:bb:a2:5d:df:3d: 72:7a:aa:c4:e7:2c:2c:61:1e:87:50:00:93:41:19: 93:c0:e9:11:5e:31:c8:9d:10:d2:0f:0d:ae:2a:f4: 5e:ef:9d:a8:28:6a:44:04:9a:3a:66:c1:e4:34:35: 12:76:27:1d:a4:8d:b2:46:32:7c:c7:7a:42:4d:1e: a1:30:6b:ab:12:11:89:14:bf:e9:fb:5b:a2:f3:6e: 06:52:53:a7:5a:e3:dc:4f:d8:fe:00:f8:85:40:af: 51:c2:72:c7:b0:7e:73:a6:3f:39:21:62:20:7d:89: 76:0f:ed:13:12:a5:90:56:dd:a1:0f:8c:91:60:5d: 65:8a:1e:26:b6:ee:3e:ba:fa:af:55:44:bb:e1:2d: f8:55:2c:6d:83:c9:04:ff:c2:52:7d:c0:c0:35:5e: da:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:77:FA:07:EF:43:35:6C:58:67:85:62:4B:43:D9:57:2C:B7:E6:6C X509v3 Authority Key Identifier: keyid:E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c6:9a:21:39:21:56:b9:0c:57:f7:80:48:5f:19:d9:29:cc: 98:5b:2d:e1:1c:48:cf:d4:23:39:0e:1d:ee:7c:4c:d6:bc:58: d7:41:9e:bb:b1:f9:22:a2:18:20:04:61:93:c4:75:c0:0c:4f: 60:a2:1c:ea:b7:50:00:d5:23:57:6b:92:ea:c2:ae:12:0d:b7: 50:03:72:96:14:93:0f:9a:9e:cb:92:7b:29:a7:a5:7e:be:ac: 2d:c3:5c:e3:19:8c:72:f3:a0:0d:d1:4e:4c:eb:c2:89:0d:09: a6:93:43:82:fe:b9:16:77:53:fc:b7:7d:ea:97:d0:c7:26:95: a9:aa:d5:26:8c:0c:ca:2a:5c:d2:b9:3d:a8:66:67:6d:1b:52: eb:8d:b6:ec:eb:b9:d1:76:9d:bb:f9:4f:db:5d:d0:79:06:1f: b5:b0:6c:0e:84:61:43:b3:af:54:fa:e9:11:d7:ff:57:3e:e3: 35:74:b5:0d:73:30:a6:29:10:f9:12:07:b3:4a:11:a9:e9:72: 4f:87:7f:e4:4a:8c:90:34:2d:d6:c5:ca:5e:16:70:9f:7a:42: 9f:de:83:fa:1f:f6:11:2a:24:15:88:88:89:a6:20:26:6d:69: d6:ef:cc:65:ff:3b:2c:9e:6f:ae:eb:30:3e:74:36:3a:24:0f: 84:a9:67:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SCJgxVGvUfE0d+EDX4iOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZDg4MGU4ODcwNzdmYWQ4MmI3NGM5OTgwMTBmYTliMjUz ZTBlYTgwHhcNMjUxMjIxMDUwMDUwWhcNMjUxMjIyMDUwMDUwWjAzMTEwLwYDVQQD EygyZDc3ZmEwN2VmNDMzNTZjNTg2Nzg1NjI0YjQzZDk1NzJjYjdlNjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpZZxOxSzwR2JnK5B/9Z5jrTxCrJ lc7mOpAHh4U196GIc/XinQZ3DtYnx8Wo6lM2w6+TK8JmtuCEPDxcOuxmo+jVJayD 6udOJmcmCxfTM/FeM3cykHd33SDwtOuRwt4N31Npu6Jd3z1yeqrE5ywsYR6HUACT QRmTwOkRXjHInRDSDw2uKvRe752oKGpEBJo6ZsHkNDUSdicdpI2yRjJ8x3pCTR6h MGurEhGJFL/p+1ui824GUlOnWuPcT9j+APiFQK9RwnLHsH5zpj85IWIgfYl2D+0T EqWQVt2hD4yRYF1lih4mtu4+uvqvVUS74S34VSxtg8kE/8JSfcDANV7ajwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC13+gfvQzVsWGeFYktD2Vcst+ZsMB8GA1UdIwQY MBaAFOnYgOiHB3+tgrdMmYAQ+pslPg6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmRpQTZJY0hmNjJDdDB5WmdCRDZteVUtRHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kYmRhZDItN2M0My00Y2FjLWI0YTYt ZmFjZjQ4NTg2MjQ5LzEvNmRpQTZJY0hmNjJDdDB5WmdCRDZteVUtRHFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kYmRhZDItN2M0My00Y2FjLWI0YTYtZmFjZjQ4NTg2MjQ5 LzEvNmRpQTZJY0hmNjJDdDB5WmdCRDZteVUtRHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8aaITkh VrkMV/eASF8Z2SnMmFst4RxIz9QjOQ4d7nxM1rxY10Geu7H5IqIYIARhk8R1wAxP YKIc6rdQANUjV2uS6sKuEg23UANylhSTD5qey5J7Kaelfr6sLcNc4xmMcvOgDdFO TOvCiQ0JppNDgv65FndT/Ld96pfQxyaVqarVJowMyipc0rk9qGZnbRtS64227Ou5 0Xadu/lP213QeQYftbBsDoRhQ7OvVPrpEdf/Vz7jNXS1DXMwpikQ+RIHs0oRqely T4d/5EqMkDQt1sXKXhZwn3pCn96D+h/2ESokFYiIiaYgJm1p1u/MZf87LJ5vrusw PnQ2OiQPhKlnkw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:46:13 2025 by rpki-client