This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft File: r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft (raw, json) Hash identifier: D+QjFBZe+UiI1U+ju0xqJwYLB3fxJADz3kMsECBwafk= Subject key identifier: 66:53:DD:73:FB:3B:B0:4C:FE:46:7A:EE:0B:C4:06:3D:32:97:C2:35 Authority key identifier: AF:AC:83:E5:67:7B:11:05:0D:CE:CB:C2:77:30:83:1C:5E:6F:9C:6A Certificate issuer: /CN=afac83e5677b11050dcecbc27730831c5e6f9c6a Certificate serial: 019B5AF673ABDE6966D9FB036B9B08BA0143 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft Manifest number: 85 Signing time: Fri 26 Dec 2025 14:00:59 +0000 Manifest this update: Fri 26 Dec 2025 14:00:59 +0000 Manifest next update: Sat 27 Dec 2025 14:00:59 +0000 Files and hashes: 1: 7Xs2O9Awldvq_tdrSlwSHIZGxrA.roa (hash: k+cTXScEND34YVsYY+IQYbjLgi/okHp1fhBK53hmBF8=) 2: r6yD5Wd7EQUNzsvCdzCDHF5vnGo.crl (hash: UZgH98HfU5f2D7lRVu47S+fAs5HkL13zH+gDOXubEbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.crl rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft rsync://rpki.ripe.net/repository/DEFAULT/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:73:ab:de:69:66:d9:fb:03:6b:9b:08:ba:01:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac83e5677b11050dcecbc27730831c5e6f9c6a Validity Not Before: Dec 26 14:00:59 2025 GMT Not After : Dec 27 14:00:59 2025 GMT Subject: CN=6653dd73fb3bb04cfe467aee0bc4063d3297c235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d7:32:e7:7f:27:33:1d:d8:64:87:7b:0b:5c: 7e:01:5f:c9:a2:84:19:a4:ce:64:5f:0e:21:4c:13: 1e:20:69:96:1a:ad:9e:f8:c5:7e:7d:03:0c:21:38: e8:35:4d:02:64:3c:64:d9:8c:77:3f:77:1e:48:61: 77:58:e7:51:49:05:da:a8:3d:19:ad:11:23:dc:94: 4b:03:0d:59:31:4a:14:1c:2f:51:32:9f:62:2c:bd: 7a:e0:26:4b:c7:ad:6b:69:65:1a:bc:19:90:dc:90: 5f:a8:87:c4:95:e6:bd:e9:ab:71:35:b5:41:72:6e: 3f:b5:8e:f3:1e:cf:8b:30:50:05:cd:c0:b5:da:9f: fb:c2:9c:9c:2c:fc:69:f1:71:81:f7:25:cc:ca:60: 33:69:9c:9a:f8:fd:90:d4:db:68:0c:87:cd:27:1c: fa:11:37:26:33:9b:dc:e5:35:b6:6c:38:94:9f:7c: 7c:34:ba:f3:e5:dd:24:00:2e:b1:98:f7:6a:1e:05: d5:2b:ef:5a:d8:8e:69:0f:31:72:1c:78:f1:9c:ef: ef:1d:cf:17:78:d0:c5:d4:3a:51:f3:37:76:60:11: 5a:a4:85:ab:a7:b8:69:a9:97:da:67:7c:8a:28:9c: 34:ef:d4:61:0d:15:2d:0f:85:2d:d9:03:98:85:bc: 06:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:53:DD:73:FB:3B:B0:4C:FE:46:7A:EE:0B:C4:06:3D:32:97:C2:35 X509v3 Authority Key Identifier: keyid:AF:AC:83:E5:67:7B:11:05:0D:CE:CB:C2:77:30:83:1C:5E:6F:9C:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c4:0e:f8:b5:69:8f:81:50:a9:86:45:35:bd:11:1f:73:eb: c7:0c:35:9f:09:5b:5b:00:62:8f:9b:79:ad:b9:3f:3b:e1:95: 5c:10:c4:e0:cd:b3:1c:55:47:ba:a9:32:79:dc:ea:53:46:52: 54:9f:ac:f2:e4:a0:1c:25:ac:4e:32:fb:b1:b2:73:63:ca:14: 00:17:c9:c6:58:36:e6:e6:99:46:9b:78:3c:12:21:83:d0:9a: ed:9a:5c:43:40:cd:57:c9:ad:17:40:2e:60:75:8c:c4:b0:dc: 66:43:f8:11:63:68:a7:a5:82:c9:84:96:0d:cf:a6:39:a4:fd: 64:42:69:ee:f9:42:8e:84:f5:f0:28:28:72:74:28:4c:b2:d4: e2:6d:9c:bd:e4:1c:c9:65:fb:9c:99:d6:ab:53:f0:2d:a1:32: c2:62:30:d7:4d:ca:88:90:01:ed:86:e3:0d:a4:c8:ec:7a:7a: e1:15:a9:75:91:88:8d:88:cb:e1:82:1d:e7:e6:f5:f5:cc:07: 23:9c:68:53:e3:af:f4:ec:3b:78:fb:cf:06:d2:bc:a4:73:70: 0a:8c:70:d6:fe:d6:c0:ad:ad:2f:51:b8:e9:83:13:38:9f:da: 00:ee:02:3f:19:a3:95:c9:29:17:09:c8:94:2d:d1:c6:e6:57: e6:d5:fc:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9nOr3mlm2fsDa5sIugFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYWM4M2U1Njc3YjExMDUwZGNlY2JjMjc3MzA4MzFjNWU2 ZjljNmEwHhcNMjUxMjI2MTQwMDU5WhcNMjUxMjI3MTQwMDU5WjAzMTEwLwYDVQQD Eyg2NjUzZGQ3M2ZiM2JiMDRjZmU0NjdhZWUwYmM0MDYzZDMyOTdjMjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztcy538nMx3YZId7C1x+AV/JooQZ pM5kXw4hTBMeIGmWGq2e+MV+fQMMITjoNU0CZDxk2Yx3P3ceSGF3WOdRSQXaqD0Z rREj3JRLAw1ZMUoUHC9RMp9iLL164CZLx61raWUavBmQ3JBfqIfElea96atxNbVB cm4/tY7zHs+LMFAFzcC12p/7wpycLPxp8XGB9yXMymAzaZya+P2Q1NtoDIfNJxz6 ETcmM5vc5TW2bDiUn3x8NLrz5d0kAC6xmPdqHgXVK+9a2I5pDzFyHHjxnO/vHc8X eNDF1DpR8zd2YBFapIWrp7hpqZfaZ3yKKJw079RhDRUtD4Ut2QOYhbwGBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZT3XP7O7BM/kZ67gvEBj0yl8I1MB8GA1UdIwQY MBaAFK+sg+VnexEFDc7Lwncwgxxeb5xqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjZ5RDVXZDdFUVVOenN2Q2R6Q0RIRjV2bkdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9jMjM1N2EtYzNlNS00MTczLWJjNDEt YTA2NDY3NjJkNTY3LzEvcjZ5RDVXZDdFUVVOenN2Q2R6Q0RIRjV2bkdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9jMjM1N2EtYzNlNS00MTczLWJjNDEtYTA2NDY3NjJkNTY3 LzEvcjZ5RDVXZDdFUVVOenN2Q2R6Q0RIRjV2bkdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsQO+LVp j4FQqYZFNb0RH3Prxww1nwlbWwBij5t5rbk/O+GVXBDE4M2zHFVHuqkyedzqU0ZS VJ+s8uSgHCWsTjL7sbJzY8oUABfJxlg25uaZRpt4PBIhg9Ca7ZpcQ0DNV8mtF0Au YHWMxLDcZkP4EWNop6WCyYSWDc+mOaT9ZEJp7vlCjoT18CgocnQoTLLU4m2cveQc yWX7nJnWq1PwLaEywmIw103KiJAB7YbjDaTI7Hp64RWpdZGIjYjL4YId5+b19cwH I5xoU+Ov9Ow7ePvPBtK8pHNwCoxw1v7WwK2tL1G46YMTOJ/aAO4CPxmjlckpFwnI lC3RxuZX5tX8Gw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:58:08 2025 by rpki-client