This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft File: xn6d6Ogmze4OZfYiWDQ0uBzze60.mft (raw, json) Hash identifier: 1l0PuAI2t/2+vUq3/TZeFPxV8Xb83iXv6SDxXG8LrvM= Subject key identifier: E7:F2:68:21:60:C0:F2:23:3A:6F:81:1A:E6:F3:A2:0F:6F:C1:7A:05 Authority key identifier: C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD Certificate issuer: /CN=c67e9de8e826cdee0e65f622583434b81cf37bad Certificate serial: 019B33B267020F412E083B28204A7FCDD8D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft Manifest number: 1715 Signing time: Thu 18 Dec 2025 23:01:28 +0000 Manifest this update: Thu 18 Dec 2025 23:01:28 +0000 Manifest next update: Fri 19 Dec 2025 23:01:28 +0000 Files and hashes: 1: KBNP_aX1ZMDHHxXviik6zRQbRlU.roa (hash: ernLTnCJ2sF6KL9+yko9XJyEyeHNKyi2S9R/ACM8LHw=) 2: xn6d6Ogmze4OZfYiWDQ0uBzze60.crl (hash: PzHZ/MEeBGVTFEs6xjW/Vw3Ixvbw5TNLqgq/O7IS8LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:67:02:0f:41:2e:08:3b:28:20:4a:7f:cd:d8:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c67e9de8e826cdee0e65f622583434b81cf37bad Validity Not Before: Dec 18 23:01:28 2025 GMT Not After : Dec 19 23:01:28 2025 GMT Subject: CN=e7f2682160c0f2233a6f811ae6f3a20f6fc17a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:98:26:2c:5d:75:ed:74:be:9f:30:48:86:60: 27:db:a9:57:68:3c:c4:32:93:58:cb:00:7c:6f:1c: 51:51:b5:3e:e9:74:c8:43:26:1e:ca:1b:01:ef:b7: 20:81:ef:34:da:1d:7f:db:bd:03:31:e3:5c:22:fc: 07:33:1e:50:9d:d3:70:8b:6d:01:14:15:e9:af:a3: 0a:d9:c9:22:10:e0:83:e8:59:d8:65:a7:e3:3b:b5: 1e:c9:d9:26:8d:ac:f9:3c:66:06:6a:31:82:9a:1f: 1e:cf:cf:9b:27:a1:22:22:31:58:94:e7:cf:d9:99: 2c:4f:7e:72:ac:04:85:18:56:8b:89:c2:00:27:d7: c1:bf:ca:fd:01:bd:52:4a:f9:18:cc:0d:0f:6e:e2: 62:d5:b4:60:a0:5b:31:93:c2:4f:d3:fc:60:50:ee: b3:70:25:67:40:1f:dc:d3:1c:04:72:9a:62:f3:77: 78:64:c6:eb:17:26:fa:e1:99:f7:ff:95:7a:b4:16: 64:0d:22:ef:9f:de:bf:0d:04:28:1c:1c:17:98:f1: 6f:43:3a:a8:4d:f6:4e:15:08:26:a8:e6:4b:1d:0c: 2f:fa:e8:28:54:9a:f9:28:da:fb:c9:72:8d:9b:02: 29:cb:5e:01:00:4e:f0:c0:48:a1:06:e9:2b:aa:77: e1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F2:68:21:60:C0:F2:23:3A:6F:81:1A:E6:F3:A2:0F:6F:C1:7A:05 X509v3 Authority Key Identifier: keyid:C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:97:d7:6b:a6:c6:1f:4a:4a:7f:cb:b5:4b:5a:a0:10:10:b9: 0a:7c:9a:27:de:ac:19:c8:a7:41:80:5a:11:ee:88:69:97:c3: 42:ce:1f:79:02:88:24:ae:fa:63:fa:fe:94:4f:80:27:ae:68: ad:16:9a:51:0c:22:91:b6:40:9d:ce:32:0c:9c:df:42:b0:0b: 16:ff:fb:15:20:1c:46:0d:0a:93:7a:40:3d:94:f0:fb:c7:ad: 02:c5:95:02:34:3a:e1:2f:b6:34:45:d2:08:d2:85:fb:8f:7a: 90:10:03:2f:9e:5d:82:02:2d:13:70:5b:9a:9a:28:8b:ac:1c: 3f:52:0c:85:21:a9:89:66:b8:87:f9:90:5b:8a:09:50:87:02: d9:bc:d7:a7:b0:aa:b7:4a:52:73:a8:41:31:f4:01:3a:eb:37: 88:32:41:f2:b1:eb:06:86:11:29:00:08:36:f6:8a:33:72:af: 88:c6:3d:a4:da:51:7b:5d:0f:4e:70:48:1c:6a:88:cc:b0:f5: 51:b3:53:bb:35:c1:f4:d5:f1:c5:6a:97:84:ab:23:a8:59:c5: 1f:a9:8e:3d:d2:d8:47:11:77:7a:19:54:b6:82:c2:18:e5:ea: 17:ad:07:cb:f2:d4:ff:3a:6c:f1:8e:2c:d2:41:a3:9b:e4:e8: 14:4b:24:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsmcCD0EuCDsoIEp/zdjZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2N2U5ZGU4ZTgyNmNkZWUwZTY1ZjYyMjU4MzQzNGI4MWNm MzdiYWQwHhcNMjUxMjE4MjMwMTI4WhcNMjUxMjE5MjMwMTI4WjAzMTEwLwYDVQQD EyhlN2YyNjgyMTYwYzBmMjIzM2E2ZjgxMWFlNmYzYTIwZjZmYzE3YTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpgmLF117XS+nzBIhmAn26lXaDzE MpNYywB8bxxRUbU+6XTIQyYeyhsB77cgge802h1/270DMeNcIvwHMx5QndNwi20B FBXpr6MK2ckiEOCD6FnYZafjO7Ueydkmjaz5PGYGajGCmh8ez8+bJ6EiIjFYlOfP 2ZksT35yrASFGFaLicIAJ9fBv8r9Ab1SSvkYzA0PbuJi1bRgoFsxk8JP0/xgUO6z cCVnQB/c0xwEcppi83d4ZMbrFyb64Zn3/5V6tBZkDSLvn96/DQQoHBwXmPFvQzqo TfZOFQgmqOZLHQwv+ugoVJr5KNr7yXKNmwIpy14BAE7wwEihBukrqnfhGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfyaCFgwPIjOm+BGubzog9vwXoFMB8GA1UdIwQY MBaAFMZ+nejoJs3uDmX2Ilg0NLgc83utMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG42ZDZPZ216ZTRPWmZZaVdEUTB1Qnp6ZTYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wYjBjMWMtZTVlYS00NTU4LWJiZGQt MTk5ZTA1NmE2ODAwLzEveG42ZDZPZ216ZTRPWmZZaVdEUTB1Qnp6ZTYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8wYjBjMWMtZTVlYS00NTU4LWJiZGQtMTk5ZTA1NmE2ODAw LzEveG42ZDZPZ216ZTRPWmZZaVdEUTB1Qnp6ZTYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJfXa6bG H0pKf8u1S1qgEBC5CnyaJ96sGcinQYBaEe6IaZfDQs4feQKIJK76Y/r+lE+AJ65o rRaaUQwikbZAnc4yDJzfQrALFv/7FSAcRg0Kk3pAPZTw+8etAsWVAjQ64S+2NEXS CNKF+496kBADL55dggItE3Bbmpooi6wcP1IMhSGpiWa4h/mQW4oJUIcC2bzXp7Cq t0pSc6hBMfQBOus3iDJB8rHrBoYRKQAINvaKM3KviMY9pNpRe10PTnBIHGqIzLD1 UbNTuzXB9NXxxWqXhKsjqFnFH6mOPdLYRxF3ehlUtoLCGOXqF60Hy/LU/zps8Y4s 0kGjm+ToFEsk3Q== -----END CERTIFICATE-----Generated at Fri Dec 19 07:53:34 2025 by rpki-client