This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft File: B6WU0muI6GkdHYGGAjtp6_GNH-k.mft (raw, json) Hash identifier: xaU7t2s2xhBY+P1FZhWFWJ45qlcvmrvQuDaisbcYxs8= Subject key identifier: C1:7A:7C:41:C7:BE:5A:C6:8A:1C:2F:AE:35:F7:73:AE:E9:7E:9D:A6 Authority key identifier: 07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9 Certificate issuer: /CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9 Certificate serial: 019B0DB6FF7C5929AE8F44274AB7CED0C1DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft Manifest number: 176D Signing time: Thu 11 Dec 2025 14:00:55 +0000 Manifest this update: Thu 11 Dec 2025 14:00:55 +0000 Manifest next update: Fri 12 Dec 2025 14:00:55 +0000 Files and hashes: 1: B6WU0muI6GkdHYGGAjtp6_GNH-k.crl (hash: XoL5d0FlXnVDYPIEbM2DmJZQWykUMFEiZbDIhP4BodI=) 2: tp-dB2xKIA-Dznn_c4mvWy8vGjo.roa (hash: lUu46cTL71HHo1Gr7lMNLrh2M9SW7foXyhj6RDawOf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:ff:7c:59:29:ae:8f:44:27:4a:b7:ce:d0:c1:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9 Validity Not Before: Dec 11 14:00:55 2025 GMT Not After : Dec 12 14:00:55 2025 GMT Subject: CN=c17a7c41c7be5ac68a1c2fae35f773aee97e9da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:4f:56:73:e3:90:d4:15:8d:0b:bd:19:b5: fb:3a:cf:d5:9c:28:52:a8:41:f2:ee:a0:a9:ae:b1: 96:62:36:3c:33:d8:23:de:58:f4:f0:04:01:d9:cc: e9:81:41:35:43:18:46:1b:8b:f3:ac:45:a2:f4:6c: 21:5a:e9:2a:49:1d:ea:1e:33:48:bb:82:17:66:14: 30:31:c1:7f:7f:6b:f3:3a:e7:7f:60:f4:e6:60:a1: be:7a:51:c0:2f:13:bc:83:42:08:e3:14:46:dc:58: c7:d3:f4:1c:2a:d9:ea:9c:17:82:71:89:b6:ab:17: 41:bb:c7:3c:0c:a9:3a:a7:08:b7:b2:10:b6:51:71: f0:6a:54:14:c8:73:e2:09:61:9c:31:71:5e:95:2b: 15:26:fd:c3:76:09:71:99:5d:5d:ec:3d:9d:63:84: 40:5c:44:dd:88:c1:6a:23:ce:e3:15:ef:8a:51:f3: df:dd:92:93:a8:fa:66:08:ca:8a:ce:ec:31:d4:c4: 5e:35:3c:5a:a4:87:d3:54:68:e6:b5:19:c4:6e:d7: b2:39:0e:bb:98:50:86:b5:4a:dd:da:4a:16:c9:38: e0:8e:85:42:4e:c5:d4:a6:00:e0:2f:f3:6d:ce:1c: ea:e4:30:73:5c:a1:a3:af:8b:df:27:af:b0:57:59: 8b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7A:7C:41:C7:BE:5A:C6:8A:1C:2F:AE:35:F7:73:AE:E9:7E:9D:A6 X509v3 Authority Key Identifier: keyid:07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:53:09:3d:28:36:e9:9b:aa:a4:ab:9c:b9:1a:d9:7d:79:3e: 42:61:88:4d:c5:41:b6:7b:38:f3:52:20:bb:00:f5:00:41:83: 77:2d:fe:a8:70:6e:b9:d0:55:17:5a:07:6a:19:38:e4:96:ba: 6c:b6:18:13:ca:62:c4:8d:fa:da:63:04:9e:27:ef:47:62:55: 4f:0c:28:0c:20:c8:ca:aa:85:a8:2d:0e:4e:1f:fe:06:48:32: 1b:62:d7:a6:74:f5:0e:e0:b0:a0:a6:a9:cd:5c:97:91:cd:cf: 15:c0:d0:58:30:fb:19:4f:8b:3b:4f:d4:34:7b:8b:20:7c:90: 23:5b:ba:fe:b0:80:4f:42:b8:5d:62:e1:53:c1:9c:2a:ef:2b: 99:c4:84:e0:f5:27:1e:d4:6d:41:d7:75:6a:48:1c:dc:ff:53: f6:a6:87:4a:b6:80:1a:bb:ca:7c:31:7a:e5:ca:0d:51:28:fd: 23:99:de:27:d7:0f:bb:bf:f1:6c:3c:6a:9f:ee:b4:df:ae:fd: b5:36:f0:65:e8:14:ae:c1:d4:ce:30:db:70:88:8b:79:d7:ff: 72:5a:c5:15:56:0f:50:f3:a3:3a:4d:8c:11:42:d8:c2:46:d2: 38:ef:80:71:9a:de:86:10:dc:47:59:df:b5:49:2e:16:9e:fe: b0:55:1c:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtv98WSmuj0QnSrfO0MHeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YTU5NGQyNmI4OGU4NjkxZDFkODE4NjAyM2I2OWViZjE4 ZDFmZTkwHhcNMjUxMjExMTQwMDU1WhcNMjUxMjEyMTQwMDU1WjAzMTEwLwYDVQQD EyhjMTdhN2M0MWM3YmU1YWM2OGExYzJmYWUzNWY3NzNhZWU5N2U5ZGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX9PVnPjkNQVjQu9GbX7Os/VnChS qEHy7qCprrGWYjY8M9gj3lj08AQB2czpgUE1QxhGG4vzrEWi9GwhWukqSR3qHjNI u4IXZhQwMcF/f2vzOud/YPTmYKG+elHALxO8g0II4xRG3FjH0/QcKtnqnBeCcYm2 qxdBu8c8DKk6pwi3shC2UXHwalQUyHPiCWGcMXFelSsVJv3DdglxmV1d7D2dY4RA XETdiMFqI87jFe+KUfPf3ZKTqPpmCMqKzuwx1MReNTxapIfTVGjmtRnEbteyOQ67 mFCGtUrd2koWyTjgjoVCTsXUpgDgL/Ntzhzq5DBzXKGjr4vfJ6+wV1mLQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMF6fEHHvlrGihwvrjX3c67pfp2mMB8GA1UdIwQY MBaAFAellNJriOhpHR2BhgI7aevxjR/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjZXVTBtdUk2R2tkSFlHR0FqdHA2X0dOSC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kODE5YTctZTJhYi00MDUwLWFmY2Qt NGQ5NTYxZjhiOTY3LzEvQjZXVTBtdUk2R2tkSFlHR0FqdHA2X0dOSC1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kODE5YTctZTJhYi00MDUwLWFmY2QtNGQ5NTYxZjhiOTY3 LzEvQjZXVTBtdUk2R2tkSFlHR0FqdHA2X0dOSC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu1MJPSg2 6ZuqpKucuRrZfXk+QmGITcVBtns481IguwD1AEGDdy3+qHBuudBVF1oHahk45Ja6 bLYYE8pixI362mMEnifvR2JVTwwoDCDIyqqFqC0OTh/+BkgyG2LXpnT1DuCwoKap zVyXkc3PFcDQWDD7GU+LO0/UNHuLIHyQI1u6/rCAT0K4XWLhU8GcKu8rmcSE4PUn HtRtQdd1akgc3P9T9qaHSraAGrvKfDF65coNUSj9I5neJ9cPu7/xbDxqn+603679 tTbwZegUrsHUzjDbcIiLedf/clrFFVYPUPOjOk2MEULYwkbSOO+AcZrehhDcR1nf tUkuFp7+sFUcBQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:20:27 2025 by rpki-client