This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft File: xn6d6Ogmze4OZfYiWDQ0uBzze60.mft (raw, json) Hash identifier: 45bp9SAEtTFMkFmivYR4is5Uc1sPi4dLfwCUOkYC2qI= Subject key identifier: A3:09:F9:77:39:A9:D1:43:99:F8:47:C6:0E:FC:CA:4B:21:90:C3:14 Authority key identifier: C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD Certificate issuer: /CN=c67e9de8e826cdee0e65f622583434b81cf37bad Certificate serial: 019B14CC2CD4A0CB384108A767CB69AE7351 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft Manifest number: 1705 Signing time: Fri 12 Dec 2025 23:01:23 +0000 Manifest this update: Fri 12 Dec 2025 23:01:23 +0000 Manifest next update: Sat 13 Dec 2025 23:01:23 +0000 Files and hashes: 1: KBNP_aX1ZMDHHxXviik6zRQbRlU.roa (hash: ernLTnCJ2sF6KL9+yko9XJyEyeHNKyi2S9R/ACM8LHw=) 2: xn6d6Ogmze4OZfYiWDQ0uBzze60.crl (hash: tTLQ4OefCMdXJQWYFFgWLqjYDxbj9JDQOyxCvJ1mkMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 23:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:cc:2c:d4:a0:cb:38:41:08:a7:67:cb:69:ae:73:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c67e9de8e826cdee0e65f622583434b81cf37bad Validity Not Before: Dec 12 23:01:23 2025 GMT Not After : Dec 13 23:01:23 2025 GMT Subject: CN=a309f97739a9d14399f847c60efcca4b2190c314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:38:24:b8:d7:40:11:b0:d3:1b:48:2f:37:73: 25:1b:0d:34:5e:4d:aa:32:7b:5e:55:e7:2a:40:9d: ed:64:9a:06:35:2b:b5:74:d4:3a:75:c3:bf:2e:d4: 4c:18:f7:45:c3:a3:57:8f:15:93:c8:82:a0:da:8a: 42:25:39:30:76:b7:4b:7a:aa:97:20:38:dc:9f:43: 94:34:57:71:ac:1f:45:41:db:1b:4e:04:3e:be:1f: f2:2f:4b:0c:ea:cb:52:c5:0f:5c:4e:eb:d1:03:e8: 1c:40:4f:68:4e:a7:d0:2f:7b:75:ee:4f:c1:cc:e9: 80:bb:86:a9:32:fa:f4:e5:7b:a9:ae:74:06:a4:c1: 2b:6d:6a:4d:58:e4:c1:0e:8b:ca:5c:a1:6f:1e:ec: ed:86:cc:87:2a:20:02:2c:19:0b:9c:93:38:ac:0d: fb:7a:92:d9:4f:7d:19:2b:11:e6:b9:6b:8b:c0:53: dd:8c:0a:03:8b:53:d8:f9:66:0f:7c:b4:16:6e:07: eb:fc:e1:07:92:24:8f:2f:37:b3:12:9d:ad:25:af: da:b1:01:2b:7c:05:0b:97:20:29:4b:14:54:d4:7c: 9f:c0:71:d9:6d:d3:2d:13:b3:fa:0b:40:31:3b:f9: fa:ff:9d:e2:22:fd:30:0f:fc:22:6a:75:a1:08:19: 1d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:09:F9:77:39:A9:D1:43:99:F8:47:C6:0E:FC:CA:4B:21:90:C3:14 X509v3 Authority Key Identifier: keyid:C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1e:0a:53:03:97:4f:54:14:94:4d:77:85:77:16:37:a9:63: f4:05:e0:0b:2d:5d:63:8c:ee:6c:c9:73:df:1a:cf:03:45:36: 59:57:84:fa:66:2f:64:4b:23:94:38:a2:cd:dd:f8:6c:e7:93: 6e:bf:21:f1:2a:52:3c:d4:b5:86:55:d8:8a:b2:84:e9:ed:96: 60:bf:ee:03:dd:2f:96:d3:22:72:fd:f1:2f:e1:fc:2f:ec:4b: 18:e6:06:1e:88:e7:ee:a6:3b:c0:c1:a1:82:65:7f:40:d5:c8: 71:88:cd:23:a5:e2:dd:92:db:77:54:c7:9b:93:50:eb:ab:fb: 5e:48:4d:c2:dd:fc:ca:88:ae:6f:0c:63:96:5b:38:78:95:e2: 4f:09:b8:ff:a7:1c:56:51:88:65:a1:74:25:a2:34:52:cc:16: 4c:34:5d:0f:5e:01:4d:a3:28:6e:1d:1f:8f:c6:42:ba:17:a9: c3:15:15:bc:5e:b3:9a:43:cc:c5:60:88:34:07:ee:38:f1:db: 76:4c:76:86:10:dc:44:59:b2:fa:46:7c:60:45:a4:01:3a:a4: 0d:f8:19:40:d1:b8:7c:7b:54:aa:46:01:f6:91:75:f7:31:f4: de:dd:25:e0:7e:ad:8f:32:31:f1:57:3b:4a:2d:a4:06:5c:09: 74:43:ac:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsUzCzUoMs4QQinZ8tprnNRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2N2U5ZGU4ZTgyNmNkZWUwZTY1ZjYyMjU4MzQzNGI4MWNm MzdiYWQwHhcNMjUxMjEyMjMwMTIzWhcNMjUxMjEzMjMwMTIzWjAzMTEwLwYDVQQD EyhhMzA5Zjk3NzM5YTlkMTQzOTlmODQ3YzYwZWZjY2E0YjIxOTBjMzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTgkuNdAEbDTG0gvN3MlGw00Xk2q MnteVecqQJ3tZJoGNSu1dNQ6dcO/LtRMGPdFw6NXjxWTyIKg2opCJTkwdrdLeqqX IDjcn0OUNFdxrB9FQdsbTgQ+vh/yL0sM6stSxQ9cTuvRA+gcQE9oTqfQL3t17k/B zOmAu4apMvr05XuprnQGpMErbWpNWOTBDovKXKFvHuzthsyHKiACLBkLnJM4rA37 epLZT30ZKxHmuWuLwFPdjAoDi1PY+WYPfLQWbgfr/OEHkiSPLzezEp2tJa/asQEr fAULlyApSxRU1HyfwHHZbdMtE7P6C0AxO/n6/53iIv0wD/wianWhCBkd2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMJ+Xc5qdFDmfhHxg78ykshkMMUMB8GA1UdIwQY MBaAFMZ+nejoJs3uDmX2Ilg0NLgc83utMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG42ZDZPZ216ZTRPWmZZaVdEUTB1Qnp6ZTYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wYjBjMWMtZTVlYS00NTU4LWJiZGQt MTk5ZTA1NmE2ODAwLzEveG42ZDZPZ216ZTRPWmZZaVdEUTB1Qnp6ZTYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8wYjBjMWMtZTVlYS00NTU4LWJiZGQtMTk5ZTA1NmE2ODAw LzEveG42ZDZPZ216ZTRPWmZZaVdEUTB1Qnp6ZTYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgB4KUwOX T1QUlE13hXcWN6lj9AXgCy1dY4zubMlz3xrPA0U2WVeE+mYvZEsjlDiizd34bOeT br8h8SpSPNS1hlXYirKE6e2WYL/uA90vltMicv3xL+H8L+xLGOYGHojn7qY7wMGh gmV/QNXIcYjNI6Xi3ZLbd1THm5NQ66v7XkhNwt38yoiubwxjlls4eJXiTwm4/6cc VlGIZaF0JaI0UswWTDRdD14BTaMobh0fj8ZCuhepwxUVvF6zmkPMxWCINAfuOPHb dkx2hhDcRFmy+kZ8YEWkATqkDfgZQNG4fHtUqkYB9pF19zH03t0l4H6tjzIx8Vc7 Si2kBlwJdEOs2w== -----END CERTIFICATE-----Generated at Sat Dec 13 05:22:52 2025 by rpki-client