This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft File: c6G3ZmRxfipNLlzyveO5cxkH-MI.mft (raw, json) Hash identifier: EWto0SC9f5+GedImUHdCrUty9lYDfpWEr0rdgSgR6iU= Subject key identifier: A2:AA:60:47:12:0E:70:62:12:36:CC:8D:85:46:0A:25:3E:9D:3E:D5 Authority key identifier: 73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2 Certificate issuer: /CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2 Certificate serial: 019B1DCECB865E6C38E614DBA9CE31E6B685 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 17:00:50 +0000 Manifest this update: Sun 14 Dec 2025 17:00:50 +0000 Manifest next update: Mon 15 Dec 2025 17:00:50 +0000 Files and hashes: 1: F9Es2mSBeEPcByc2eF_egK6MKLM.roa (hash: Eg2cQe6ayySWIx0OqzxZdVZLUVHyOu5zCl7u6iMfiyU=) 2: c6G3ZmRxfipNLlzyveO5cxkH-MI.crl (hash: Do81fYUhujKQlpBmMGfqFdNrR7vicvFWo+TKAEQjVWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:ce:cb:86:5e:6c:38:e6:14:db:a9:ce:31:e6:b6:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2 Validity Not Before: Dec 14 17:00:50 2025 GMT Not After : Dec 15 17:00:50 2025 GMT Subject: CN=a2aa6047120e70621236cc8d85460a253e9d3ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0a:13:b0:54:58:74:8a:3e:bf:15:09:f9:92: 65:31:c9:19:b3:32:8d:da:f3:1a:41:3b:1e:33:cd: 6f:b4:e8:cf:d7:35:02:00:1a:af:25:11:83:26:04: 3d:5c:bd:86:44:0f:e0:82:f2:be:0e:b8:6e:8d:0d: 0c:e4:fe:8b:74:bf:36:ef:52:76:c4:18:1d:c6:68: b6:f5:31:68:94:1c:47:e6:99:6b:04:0e:48:ab:3f: 9b:d0:4d:85:40:68:10:96:5a:e2:ea:6b:11:d4:bf: 2f:fd:86:23:a3:b7:0e:47:97:33:f3:d3:2d:1d:5c: c5:96:9d:88:c1:6f:68:ed:45:57:8b:0a:82:a2:ed: 08:38:ff:f1:36:2d:13:b0:d3:92:d6:d8:73:c4:99: 9c:b8:a0:b3:78:cc:e0:b6:43:68:76:aa:6b:ef:9a: be:06:9d:cd:ef:ce:69:0b:0c:4f:7f:cf:d3:de:c2: 2f:78:05:aa:64:a4:bd:a9:85:c1:25:dc:a8:4c:6b: 0c:fb:6b:b4:cc:fa:5a:78:c3:38:89:33:5c:ce:90: b3:e2:f0:eb:1a:66:00:aa:f3:8b:09:18:81:ee:34: ce:5c:b1:12:c1:b3:88:be:84:74:83:75:5e:4b:09: 79:99:ff:3a:f5:74:31:b2:ac:4b:8d:b6:e7:43:72: a2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AA:60:47:12:0E:70:62:12:36:CC:8D:85:46:0A:25:3E:9D:3E:D5 X509v3 Authority Key Identifier: keyid:73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a8:a7:cc:e1:6b:9e:53:fa:45:c8:43:aa:4f:dd:11:46:c9: 94:00:d1:1d:de:ff:65:11:25:d1:d7:a3:76:7f:06:4c:ee:4d: 5b:f9:19:db:9f:4f:a3:13:d9:c1:ae:8e:49:dd:ab:1c:8a:80: 31:cc:4a:10:64:d7:a3:e9:b4:cd:ee:a3:ef:3d:25:4a:70:72: 16:55:e9:f3:7a:62:50:d5:01:43:fe:cf:52:13:25:80:c1:41: e9:cb:5c:9b:25:cc:d9:3c:e9:74:05:59:13:ff:7b:02:92:00: ed:ab:03:a4:eb:5f:c2:ce:ad:18:f3:c3:66:0f:a1:1c:a2:83: c1:05:60:ae:0a:84:93:34:16:7b:dc:88:36:8c:b3:78:04:de: 4c:f3:53:4d:be:f5:ed:93:11:6d:07:fe:12:31:e4:63:f5:a9: 9e:19:d6:f6:f2:9a:28:a0:23:e7:7b:39:9b:88:91:6a:ba:86: 41:55:15:d3:41:6c:1f:43:c0:d9:b5:dd:f5:5e:07:03:8e:ef: ff:6c:bc:3d:db:87:ae:e3:2c:77:11:2c:58:b4:8f:8c:02:57: 23:e1:f2:f9:df:5f:45:4c:e3:35:26:f1:50:c3:52:b0:93:cc: f4:61:8b:bd:b5:e8:58:31:b7:aa:cc:4c:30:e8:e9:8e:68:f0: c3:15:c9:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdzsuGXmw45hTbqc4x5raFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYTFiNzY2NjQ3MTdlMmE0ZDJlNWNmMmJkZTNiOTczMTkw N2Y4YzIwHhcNMjUxMjE0MTcwMDUwWhcNMjUxMjE1MTcwMDUwWjAzMTEwLwYDVQQD EyhhMmFhNjA0NzEyMGU3MDYyMTIzNmNjOGQ4NTQ2MGEyNTNlOWQzZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAoTsFRYdIo+vxUJ+ZJlMckZszKN 2vMaQTseM81vtOjP1zUCABqvJRGDJgQ9XL2GRA/ggvK+DrhujQ0M5P6LdL8271J2 xBgdxmi29TFolBxH5plrBA5Iqz+b0E2FQGgQllri6msR1L8v/YYjo7cOR5cz89Mt HVzFlp2IwW9o7UVXiwqCou0IOP/xNi0TsNOS1thzxJmcuKCzeMzgtkNodqpr75q+ Bp3N785pCwxPf8/T3sIveAWqZKS9qYXBJdyoTGsM+2u0zPpaeMM4iTNczpCz4vDr GmYAqvOLCRiB7jTOXLESwbOIvoR0g3VeSwl5mf869XQxsqxLjbbnQ3KirwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKqYEcSDnBiEjbMjYVGCiU+nT7VMB8GA1UdIwQY MBaAFHOht2ZkcX4qTS5c8r3juXMZB/jCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zZDI0MTUtODEzMy00MGEwLTlkOGMt YTYzMTlhYjE3OWJmLzEvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8zZDI0MTUtODEzMy00MGEwLTlkOGMtYTYzMTlhYjE3OWJm LzEvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqinzOFr nlP6RchDqk/dEUbJlADRHd7/ZREl0dejdn8GTO5NW/kZ259PoxPZwa6OSd2rHIqA McxKEGTXo+m0ze6j7z0lSnByFlXp83piUNUBQ/7PUhMlgMFB6ctcmyXM2TzpdAVZ E/97ApIA7asDpOtfws6tGPPDZg+hHKKDwQVgrgqEkzQWe9yINoyzeATeTPNTTb71 7ZMRbQf+EjHkY/WpnhnW9vKaKKAj53s5m4iRarqGQVUV00FsH0PA2bXd9V4HA47v /2y8PduHruMsdxEsWLSPjAJXI+Hy+d9fRUzjNSbxUMNSsJPM9GGLvbXoWDG3qsxM MOjpjmjwwxXJ2A== -----END CERTIFICATE-----Generated at Sun Dec 14 22:55:45 2025 by rpki-client