This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft File: v6bpb8p6J4PLlyHrti3htTbBY6k.mft (raw, json) Hash identifier: 7ssGcR8fMY/3N4d0tq+ld27Jvx+JIoHs92+fC3nnLkE= Subject key identifier: D5:71:D4:9B:8C:EE:AE:6C:9F:BC:94:DD:CC:99:80:5A:AE:9F:65:1C Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9 Certificate issuer: /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9 Certificate serial: 019B2175C9FAB740907A82C86033FDC6453B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft Manifest number: 0F2A Signing time: Mon 15 Dec 2025 10:02:06 +0000 Manifest this update: Mon 15 Dec 2025 10:02:06 +0000 Manifest next update: Tue 16 Dec 2025 10:02:06 +0000 Files and hashes: 1: UIZd9CI7aaVoCr978zA_tJuQwXc.roa (hash: gtKlay3p/m+1ysOhvty8fHbcgsJz5ALUFkSpQwwLWbI=) 2: v6bpb8p6J4PLlyHrti3htTbBY6k.crl (hash: c1aYGQoFHjfN+RG56S0lR4j3NXVcSE+Q0mcRqhh1hHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:c9:fa:b7:40:90:7a:82:c8:60:33:fd:c6:45:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9 Validity Not Before: Dec 15 10:02:06 2025 GMT Not After : Dec 16 10:02:06 2025 GMT Subject: CN=d571d49b8ceeae6c9fbc94ddcc99805aae9f651c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:51:58:2b:f6:a9:19:b2:f6:42:7c:6e:5c:d0: ee:04:72:b0:79:0f:4b:64:09:17:e4:b7:fd:3c:e4: 84:eb:fc:ac:54:58:e0:e5:dd:8e:ba:e9:f0:33:67: 85:e8:2c:38:29:d3:2c:12:82:0a:3b:9c:27:13:ca: 8c:60:3a:c8:b1:7f:5b:57:4a:b9:28:e3:05:5b:93: 2b:58:f5:d0:c8:a9:57:89:e3:a8:28:1e:b4:b1:5f: 93:48:84:92:64:2f:aa:26:92:ea:36:36:20:a8:99: 91:35:2d:c3:62:7c:1f:3f:2a:d8:25:f1:b4:8f:25: e9:60:c1:57:a3:4d:d2:28:d8:57:a9:67:aa:38:3c: 1a:a7:dc:9d:f9:ee:db:da:c7:72:4d:43:0b:44:14: d4:03:61:59:1d:31:a3:4a:bb:a8:20:d6:8c:ec:a2: f1:bc:c0:e6:4d:d8:5e:7f:67:f3:fb:c6:53:07:bc: d0:34:f1:28:eb:ee:dc:d5:eb:d5:19:2d:1e:39:3d: 9d:7d:74:c7:98:9a:16:a3:86:0c:99:9b:31:14:f3: c2:54:44:ad:35:61:fc:df:60:26:0e:74:f0:19:36: ee:b1:be:63:91:97:3c:94:b2:30:83:69:09:42:ed: 07:78:de:fe:83:30:c9:a1:fe:12:57:0d:ed:41:db: ed:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:71:D4:9B:8C:EE:AE:6C:9F:BC:94:DD:CC:99:80:5A:AE:9F:65:1C X509v3 Authority Key Identifier: keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e1:e7:29:9f:e4:eb:4a:06:43:f3:01:ec:1f:47:66:8a:4c: ac:2e:64:d2:7e:bc:bd:2b:13:b7:f8:bb:29:64:12:83:fe:1d: 2a:4f:54:f1:20:e6:07:e1:1e:12:26:51:1c:37:f9:ba:b7:4b: 76:fe:91:fd:c7:aa:fa:e9:9f:96:2c:9e:a9:b2:b9:11:e6:03: 9e:ed:d8:bd:a3:07:a7:6c:10:d1:2f:ac:89:6e:aa:86:10:a6: 10:b3:ef:1f:3d:51:1c:3a:69:c5:a4:ec:e4:9c:08:d3:90:23: 00:4b:e1:66:15:70:65:50:6a:e8:dc:6e:5b:6e:b2:0d:62:c6: c2:0c:c4:19:48:ea:1d:ba:f7:f3:a4:12:8c:02:6c:f2:40:f7: f3:43:a1:80:0e:49:25:f5:8a:34:29:b3:72:f6:94:00:9a:95: 98:2c:60:ec:0c:f2:49:66:5a:d1:68:93:08:0e:06:f5:81:86: 5b:85:a7:62:98:70:09:c9:7a:86:31:c9:03:85:11:8d:a5:f4: 96:a7:83:03:60:e7:f6:de:d5:55:d4:c1:a8:f6:60:ec:d9:93: 4d:22:fe:aa:9b:f0:f0:25:3a:27:5e:eb:c3:66:68:fe:92:b5: 91:8f:e6:8b:21:82:09:b3:c3:e6:b9:28:f1:8d:15:ed:02:76: 31:af:84:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdcn6t0CQeoLIYDP9xkU7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYTZlOTZmY2E3YTI3ODNjYjk3MjFlYmI2MmRlMWI1MzZj MTYzYTkwHhcNMjUxMjE1MTAwMjA2WhcNMjUxMjE2MTAwMjA2WjAzMTEwLwYDVQQD EyhkNTcxZDQ5YjhjZWVhZTZjOWZiYzk0ZGRjYzk5ODA1YWFlOWY2NTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVFYK/apGbL2QnxuXNDuBHKweQ9L ZAkX5Lf9POSE6/ysVFjg5d2OuunwM2eF6Cw4KdMsEoIKO5wnE8qMYDrIsX9bV0q5 KOMFW5MrWPXQyKlXieOoKB60sV+TSISSZC+qJpLqNjYgqJmRNS3DYnwfPyrYJfG0 jyXpYMFXo03SKNhXqWeqODwap9yd+e7b2sdyTUMLRBTUA2FZHTGjSruoINaM7KLx vMDmTdhef2fz+8ZTB7zQNPEo6+7c1evVGS0eOT2dfXTHmJoWo4YMmZsxFPPCVESt NWH832AmDnTwGTbusb5jkZc8lLIwg2kJQu0HeN7+gzDJof4SVw3tQdvtuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVx1JuM7q5sn7yU3cyZgFqun2UcMB8GA1UdIwQY MBaAFL+m6W/KeieDy5ch67Yt4bU2wWOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjZicGI4cDZKNFBMbHlIcnRpM2h0VGJCWTZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84NTZlYTQtZGU1YS00ZjExLTgyMjgt ODdiZjZmZGJlMTkzLzEvdjZicGI4cDZKNFBMbHlIcnRpM2h0VGJCWTZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84NTZlYTQtZGU1YS00ZjExLTgyMjgtODdiZjZmZGJlMTkz LzEvdjZicGI4cDZKNFBMbHlIcnRpM2h0VGJCWTZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOHnKZ/k 60oGQ/MB7B9HZopMrC5k0n68vSsTt/i7KWQSg/4dKk9U8SDmB+EeEiZRHDf5urdL dv6R/ceq+umfliyeqbK5EeYDnu3YvaMHp2wQ0S+siW6qhhCmELPvHz1RHDppxaTs 5JwI05AjAEvhZhVwZVBq6NxuW26yDWLGwgzEGUjqHbr386QSjAJs8kD380OhgA5J JfWKNCmzcvaUAJqVmCxg7AzySWZa0WiTCA4G9YGGW4WnYphwCcl6hjHJA4URjaX0 lqeDA2Dn9t7VVdTBqPZg7NmTTSL+qpvw8CU6J17rw2Zo/pK1kY/miyGCCbPD5rko 8Y0V7QJ2Ma+EJw== -----END CERTIFICATE-----Generated at Mon Dec 15 12:01:27 2025 by rpki-client