This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft File: v6bpb8p6J4PLlyHrti3htTbBY6k.mft (raw, json) Hash identifier: fg4oR4dGZIwMMtsJyQBIXnm41IH9yIsRDarFwuIers0= Subject key identifier: F9:94:1D:84:B0:B4:94:A7:A8:2D:CE:25:CF:C3:AA:9C:0E:67:49:6F Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9 Certificate issuer: /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9 Certificate serial: 019B1014129FE39C9BDD5588C945C48A1D74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft Manifest number: 0F21 Signing time: Fri 12 Dec 2025 01:01:49 +0000 Manifest this update: Fri 12 Dec 2025 01:01:49 +0000 Manifest next update: Sat 13 Dec 2025 01:01:49 +0000 Files and hashes: 1: UIZd9CI7aaVoCr978zA_tJuQwXc.roa (hash: gtKlay3p/m+1ysOhvty8fHbcgsJz5ALUFkSpQwwLWbI=) 2: v6bpb8p6J4PLlyHrti3htTbBY6k.crl (hash: LwCQ8/W5krwl+eG1VQRAc6m5QjS8Yn2aoKhpV9q1fUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:12:9f:e3:9c:9b:dd:55:88:c9:45:c4:8a:1d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9 Validity Not Before: Dec 12 01:01:49 2025 GMT Not After : Dec 13 01:01:49 2025 GMT Subject: CN=f9941d84b0b494a7a82dce25cfc3aa9c0e67496f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b5:2a:80:0e:7d:d8:cc:a9:81:dc:41:df:dd: 87:5a:89:82:fb:8f:72:41:f9:d0:2c:c9:09:02:b7: c9:ed:c3:8b:b8:5b:a5:45:36:08:de:5a:51:47:80: e9:d3:04:56:39:db:56:b5:5e:4b:95:7e:05:ff:86: e2:09:e7:57:a1:df:8e:98:fe:df:e0:19:c1:f2:33: e6:66:61:94:a9:c9:0a:b3:69:41:c1:e4:d7:ea:15: 9f:a2:05:12:49:d9:f4:48:2e:9d:41:80:80:2e:0d: ca:2d:ab:e0:12:49:0b:b3:d9:c6:67:6a:54:f2:b9: 32:db:dd:bb:83:75:a9:20:dd:c8:46:9b:7c:6a:aa: c8:6b:21:aa:0d:a7:73:df:71:8e:8e:2a:5b:4e:f0: fb:14:19:a4:bd:de:86:54:8b:d0:68:b7:ae:db:dd: fc:83:2d:45:e8:53:ff:67:93:6e:40:5a:e1:ba:64: 8f:55:59:1a:00:86:a6:ee:25:4c:98:34:50:27:e7: 41:70:4c:c3:84:1a:2e:ef:cd:9f:99:8f:2f:64:e2: 0a:08:4b:b2:c9:28:21:3d:92:d9:e9:44:fa:e4:97: b9:ae:f8:18:d0:ef:81:1c:04:ed:33:50:3b:e7:1d: 3a:e7:cb:74:eb:a3:cb:23:5d:83:e6:00:da:63:61: 99:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:94:1D:84:B0:B4:94:A7:A8:2D:CE:25:CF:C3:AA:9C:0E:67:49:6F X509v3 Authority Key Identifier: keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ff:0d:bb:57:f9:ec:7c:34:e4:ea:70:d0:58:e5:80:41:95: c8:38:64:d8:d9:59:c5:97:fa:34:61:3b:b2:f2:9f:e3:38:10: aa:3d:1e:ae:a7:86:72:59:7c:94:ec:77:53:07:62:f8:85:19: 9e:d1:d0:55:85:71:82:34:3e:52:28:02:12:b4:90:0f:44:58: 6a:43:93:8e:55:ac:ad:61:29:86:b4:82:5c:d1:fb:b9:9f:51: dc:ef:98:63:ef:29:ed:48:72:7b:bc:1d:54:7c:a1:c2:aa:c8: db:9c:8c:02:a3:a8:b5:5a:47:7a:e5:bb:f4:d2:9e:af:4d:32: 2c:2c:7b:ac:7f:52:3e:e9:21:4f:61:09:9b:60:91:4c:da:da: ae:ef:30:11:1d:b0:f6:d9:d6:52:10:96:02:91:18:e6:42:98: ef:68:4b:4e:d4:b6:1e:8f:e3:6f:dd:aa:e7:5c:4e:fd:56:1d: 33:e6:5d:76:4e:bd:4f:cb:25:df:33:2e:84:bf:95:af:18:cb: bf:50:33:bb:2b:ad:6a:fe:a3:06:80:44:87:95:e0:87:58:25: 85:ea:7d:2a:19:b5:f2:ec:d8:94:32:c6:bd:e7:a2:bd:a7:91: c3:0f:a6:fd:88:56:79:4e:1c:b6:d5:1f:de:65:4c:75:1a:b1: 45:d0:7b:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFBKf45yb3VWIyUXEih10MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYTZlOTZmY2E3YTI3ODNjYjk3MjFlYmI2MmRlMWI1MzZj MTYzYTkwHhcNMjUxMjEyMDEwMTQ5WhcNMjUxMjEzMDEwMTQ5WjAzMTEwLwYDVQQD EyhmOTk0MWQ4NGIwYjQ5NGE3YTgyZGNlMjVjZmMzYWE5YzBlNjc0OTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LUqgA592MypgdxB392HWomC+49y QfnQLMkJArfJ7cOLuFulRTYI3lpRR4Dp0wRWOdtWtV5LlX4F/4biCedXod+OmP7f 4BnB8jPmZmGUqckKs2lBweTX6hWfogUSSdn0SC6dQYCALg3KLavgEkkLs9nGZ2pU 8rky2927g3WpIN3IRpt8aqrIayGqDadz33GOjipbTvD7FBmkvd6GVIvQaLeu2938 gy1F6FP/Z5NuQFrhumSPVVkaAIam7iVMmDRQJ+dBcEzDhBou782fmY8vZOIKCEuy ySghPZLZ6UT65Je5rvgY0O+BHATtM1A75x0658t066PLI12D5gDaY2GZXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmUHYSwtJSnqC3OJc/DqpwOZ0lvMB8GA1UdIwQY MBaAFL+m6W/KeieDy5ch67Yt4bU2wWOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjZicGI4cDZKNFBMbHlIcnRpM2h0VGJCWTZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84NTZlYTQtZGU1YS00ZjExLTgyMjgt ODdiZjZmZGJlMTkzLzEvdjZicGI4cDZKNFBMbHlIcnRpM2h0VGJCWTZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84NTZlYTQtZGU1YS00ZjExLTgyMjgtODdiZjZmZGJlMTkz LzEvdjZicGI4cDZKNFBMbHlIcnRpM2h0VGJCWTZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAav8Nu1f5 7Hw05Opw0FjlgEGVyDhk2NlZxZf6NGE7svKf4zgQqj0erqeGcll8lOx3Uwdi+IUZ ntHQVYVxgjQ+UigCErSQD0RYakOTjlWsrWEphrSCXNH7uZ9R3O+YY+8p7Uhye7wd VHyhwqrI25yMAqOotVpHeuW79NKer00yLCx7rH9SPukhT2EJm2CRTNraru8wER2w 9tnWUhCWApEY5kKY72hLTtS2Ho/jb92q51xO/VYdM+Zddk69T8sl3zMuhL+VrxjL v1Azuyutav6jBoBEh5Xgh1glhep9Khm18uzYlDLGveeivaeRww+m/YhWeU4cttUf 3mVMdRqxRdB7PQ== -----END CERTIFICATE-----Generated at Fri Dec 12 07:39:12 2025 by rpki-client