This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft File: 06xQ4EWCKCMXbkeDLeyPIRt08BM.mft (raw, json) Hash identifier: kvLvmUqWu544PfSf5J/Xxf3zs2CewQf07/jPJBSwnVU= Subject key identifier: C6:21:81:F8:54:AC:ED:17:E2:D6:3C:73:AF:4D:72:64:14:07:D6:16 Authority key identifier: D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13 Certificate issuer: /CN=d3ac50e045822823176e47832dec8f211b74f013 Certificate serial: 019B597775259F0A20FAD25F7778C3BDC8B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft Manifest number: 0455 Signing time: Fri 26 Dec 2025 07:02:39 +0000 Manifest this update: Fri 26 Dec 2025 07:02:39 +0000 Manifest next update: Sat 27 Dec 2025 07:02:39 +0000 Files and hashes: 1: 06xQ4EWCKCMXbkeDLeyPIRt08BM.crl (hash: zrYc+ddweIyKQ7XDxNQQ6ygpRxvP4mKB2Gtesyz5Zeg=) 2: J7at31yuwr6xPDnvAJre3wzoR9o.roa (hash: RbmaLbG1z0L4l1ON8n9W5icIKF2KnmAyzavN38bNAhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:75:25:9f:0a:20:fa:d2:5f:77:78:c3:bd:c8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3ac50e045822823176e47832dec8f211b74f013 Validity Not Before: Dec 26 07:02:39 2025 GMT Not After : Dec 27 07:02:39 2025 GMT Subject: CN=c62181f854aced17e2d63c73af4d72641407d616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fc:af:3a:cc:3c:ae:15:b7:3c:21:c2:1c:d0: 98:25:aa:88:39:80:c1:ce:69:88:b0:10:c0:61:8c: 88:6a:c0:a6:8c:82:37:69:17:2e:c2:49:5d:17:1c: 7b:ab:e4:5b:55:42:ad:d4:83:3e:b9:cb:d1:c0:09: ee:db:06:cf:94:25:db:f6:8d:93:1f:af:30:98:73: 4a:61:55:0f:59:d4:46:74:00:eb:e3:a4:f2:d5:77: 92:12:98:ef:86:56:ff:f6:05:60:42:0e:32:6b:4a: d5:24:ca:49:de:68:f8:17:d5:a1:d1:a4:80:86:85: 64:00:1a:ef:17:1e:49:01:1d:39:ea:56:63:21:ca: 76:41:50:c6:1e:23:68:8b:14:18:6a:a8:20:50:f0: 6d:ae:78:14:9b:68:84:c7:15:da:f3:19:7d:47:3c: 54:20:b7:0e:22:c8:e8:af:88:00:36:ae:b6:07:5a: df:04:6e:7f:f8:c6:44:b3:47:e2:ad:81:30:c0:18: 37:c4:90:e4:1e:4c:74:44:10:13:63:4f:91:b7:02: 92:e4:6e:59:10:69:9a:c8:23:29:7d:43:56:cd:89: 2e:53:94:f3:39:a8:3c:f0:81:c5:ab:0c:1a:4f:cf: 65:10:88:8a:37:7c:78:41:8e:af:03:87:ca:85:23: 42:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:21:81:F8:54:AC:ED:17:E2:D6:3C:73:AF:4D:72:64:14:07:D6:16 X509v3 Authority Key Identifier: keyid:D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:28:e8:1c:12:ec:e9:10:81:a3:3e:c4:f3:bf:98:57:65:41: ad:0c:80:54:5f:7f:11:ee:4c:15:f8:b2:59:7e:35:b9:68:82: 44:a5:9b:3e:00:9e:4e:bc:85:71:20:d0:eb:f0:3d:4c:fd:7f: cd:dc:7c:2c:53:a2:be:7c:01:70:0d:d1:5c:32:7b:18:20:0f: fe:f4:a7:a3:33:29:5c:e1:a5:8b:77:0f:bd:6b:45:10:d7:8c: c4:3b:89:b7:3e:24:a1:2b:86:d1:e7:93:5e:f1:76:69:63:8c: 12:22:59:dc:93:b9:ad:96:f0:c0:bd:f3:c1:e2:ae:63:fe:d0: 7d:41:37:44:60:4c:b9:f5:df:db:78:35:b1:99:0c:a5:1b:9f: 36:ee:a3:b3:61:6e:f0:d4:66:97:a3:a2:74:c5:87:18:bb:e2: f7:34:79:88:39:e4:da:f3:b7:50:98:b6:bf:89:a6:34:29:6c: cb:f9:95:9c:86:47:d0:53:66:9f:e0:a4:a1:85:66:dc:59:80: 63:9c:61:c2:7c:c3:1f:e8:96:cb:bc:d6:02:4e:18:91:11:69: fe:89:bc:39:be:e8:cf:6a:6b:14:42:84:b6:15:21:5c:49:d2: a2:b4:da:5b:0d:04:dd:51:61:5c:03:67:25:6e:b6:74:d1:6b: 7b:9f:e6:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd3Ulnwog+tJfd3jDvci4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYWM1MGUwNDU4MjI4MjMxNzZlNDc4MzJkZWM4ZjIxMWI3 NGYwMTMwHhcNMjUxMjI2MDcwMjM5WhcNMjUxMjI3MDcwMjM5WjAzMTEwLwYDVQQD EyhjNjIxODFmODU0YWNlZDE3ZTJkNjNjNzNhZjRkNzI2NDE0MDdkNjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvyvOsw8rhW3PCHCHNCYJaqIOYDB zmmIsBDAYYyIasCmjII3aRcuwkldFxx7q+RbVUKt1IM+ucvRwAnu2wbPlCXb9o2T H68wmHNKYVUPWdRGdADr46Ty1XeSEpjvhlb/9gVgQg4ya0rVJMpJ3mj4F9Wh0aSA hoVkABrvFx5JAR056lZjIcp2QVDGHiNoixQYaqggUPBtrngUm2iExxXa8xl9RzxU ILcOIsjor4gANq62B1rfBG5/+MZEs0firYEwwBg3xJDkHkx0RBATY0+RtwKS5G5Z EGmayCMpfUNWzYkuU5TzOag88IHFqwwaT89lEIiKN3x4QY6vA4fKhSNCAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYhgfhUrO0X4tY8c69NcmQUB9YWMB8GA1UdIwQY MBaAFNOsUOBFgigjF25Hgy3sjyEbdPATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDZ4UTRFV0NLQ01YYmtlRExleVBJUnQwOEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9mOTZjOWMtNzcyZC00YjA1LWE4OWUt NTQ4ZDMwMmNjZWRiLzEvMDZ4UTRFV0NLQ01YYmtlRExleVBJUnQwOEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9mOTZjOWMtNzcyZC00YjA1LWE4OWUtNTQ4ZDMwMmNjZWRi LzEvMDZ4UTRFV0NLQ01YYmtlRExleVBJUnQwOEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApijoHBLs 6RCBoz7E87+YV2VBrQyAVF9/Ee5MFfiyWX41uWiCRKWbPgCeTryFcSDQ6/A9TP1/ zdx8LFOivnwBcA3RXDJ7GCAP/vSnozMpXOGli3cPvWtFENeMxDuJtz4koSuG0eeT XvF2aWOMEiJZ3JO5rZbwwL3zweKuY/7QfUE3RGBMufXf23g1sZkMpRufNu6js2Fu 8NRml6OidMWHGLvi9zR5iDnk2vO3UJi2v4mmNClsy/mVnIZH0FNmn+CkoYVm3FmA Y5xhwnzDH+iWy7zWAk4YkRFp/om8Ob7oz2prFEKEthUhXEnSorTaWw0E3VFhXANn JW62dNFre5/mBA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:57 2025 by rpki-client