This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft File: b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft (raw, json) Hash identifier: GeQ/RyQqDCSLFy7ZPa3jXiU/wbv79zoDex3x32HeLYM= Subject key identifier: 56:EB:0C:F9:45:BF:3D:F2:3D:66:FF:7D:93:68:69:F3:54:E2:B2:34 Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB Certificate issuer: /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab Certificate serial: 019AB0961720BCE376B376A192E5F58973AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft Manifest number: 03BC Signing time: Sun 23 Nov 2025 12:00:17 +0000 Manifest this update: Sun 23 Nov 2025 12:00:17 +0000 Manifest next update: Mon 24 Nov 2025 12:00:17 +0000 Files and hashes: 1: 2tQqGK4g82dy1c5SML4akqkLzQs.roa (hash: 0ihiDi+ydh24SGVwQxglY4r4t8f0Ij3xsuV5NeDNJgU=) 2: BrIhz2KH_vM4WIq2N53pV91cJ44.roa (hash: Ivk1ZUmiBrRHxNS6VomQNXE8a7n/HscwWAHYMVYyWow=) 3: I1LQw1CBlPzdRK1ZEvgFu8378uI.roa (hash: iIDM1s8e551CHIuxRBUaodgRmli45m1JLpfi8ps3uPQ=) 4: XayvmfzLwFIrnB6YR1N8a3QlP3g.roa (hash: yW+e4Wc1yic51HqaRnNHy8V0Min8R+kpxRu8CLP1al8=) 5: YbYIY0qTeSsp6g9hGcy8a1n63ZI.roa (hash: Gjz0NNqi1uea9ZdNKd1fYQPsBvHDVmsLfdpqjwRA4dc=) 6: b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl (hash: AzGBes7oJzcUH2B8JMa3PxXf7A0rhB0hE2+mVLSGVDc=) 7: jHePdwysK6kNDI3bSqmeF8Twv-g.roa (hash: 99KfjDJeuSZw+7rcAWv6j4zVImWkkOPG8GX+d82LmKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b0:96:17:20:bc:e3:76:b3:76:a1:92:e5:f5:89:73:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab Validity Not Before: Nov 23 12:00:17 2025 GMT Not After : Nov 24 12:00:17 2025 GMT Subject: CN=56eb0cf945bf3df23d66ff7d936869f354e2b234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:db:2e:5e:f4:09:a9:09:2c:e6:7c:ad:b0:49: b2:d6:f3:26:75:ea:99:ac:8b:84:41:4d:f7:1c:15: ff:d7:9f:8b:20:ea:5b:c3:a9:6a:0d:fb:6e:8c:52: af:53:e4:24:54:46:61:a9:0c:12:e5:e6:86:61:c4: 0f:37:3e:6a:6d:86:49:be:6c:80:30:78:72:41:69: ba:fd:4b:75:c6:25:e5:2a:76:f2:7f:d4:a9:f3:b0: 5e:75:8b:5e:42:cb:1d:2e:c4:1e:c5:9f:2d:44:99: 4f:1a:18:ab:29:4f:80:72:66:2d:5b:08:29:6f:28: 80:06:ab:7d:fa:59:02:54:0b:f7:7f:f5:4d:16:e7: 03:1f:49:1a:75:42:05:e6:4f:8c:47:49:61:03:bd: 1c:f1:00:56:7c:e5:60:1e:69:b8:f9:d4:b2:c1:f2: 06:e5:68:00:73:aa:2e:15:f9:a2:40:3e:8a:d4:a9: 36:4a:ab:61:d5:c5:82:1f:dd:37:3c:5d:e7:6e:7b: bd:c2:ee:40:d6:76:09:e8:e7:7b:5e:7b:72:ca:66: 90:db:7f:06:fd:1c:66:59:4d:c0:35:c4:77:4d:7b: f3:0e:2e:d7:4f:7a:cd:f2:a2:6d:46:ee:ef:40:29: a4:01:36:50:17:4c:28:3a:ea:7d:93:f6:2d:f8:58: 55:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EB:0C:F9:45:BF:3D:F2:3D:66:FF:7D:93:68:69:F3:54:E2:B2:34 X509v3 Authority Key Identifier: keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:5f:41:c7:74:b9:04:d1:33:06:db:19:1f:4d:3b:f3:6f:4c: f6:00:74:0c:14:fd:ed:2f:68:8e:ff:2c:c1:d0:cb:ca:ae:88: 10:b2:d2:d4:dd:47:7e:0a:8a:b6:82:36:60:26:e9:2b:58:b1: d1:c2:6e:ac:46:3d:35:30:de:e9:8e:78:92:e4:f1:67:9a:1a: 9d:f1:cd:51:34:b8:2b:85:67:df:ab:84:46:23:65:06:77:15: 80:8a:fe:d2:b5:35:70:e7:32:ef:20:9f:0e:3f:a6:60:06:26: 7e:5e:be:6a:4d:9a:ce:a0:27:d4:43:11:06:05:1e:91:ea:bc: 83:cf:a8:71:01:4a:42:ee:a9:8a:e8:bf:69:e0:64:28:39:5a: 42:83:40:2c:b4:58:c1:ee:02:c3:36:15:22:f6:78:23:5c:72: bd:7a:04:46:3e:43:c8:82:19:15:b2:b1:9a:7a:5b:14:a9:f8: 58:f3:68:3e:09:3e:05:03:ad:20:0d:3e:be:c6:f5:0a:77:8d: 7a:74:e9:47:dd:0d:48:b2:d0:d0:1b:58:d6:48:0b:3f:28:a5: ae:c8:33:13:d6:a8:38:94:dc:0f:66:1e:06:2f:a0:fb:d8:6d: 01:7b:1c:a7:9d:9f:85:8f:ba:d9:d1:3b:27:85:d3:5b:e7:26: 87:2f:27:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqwlhcgvON2s3ahkuX1iXOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYTY0YTY0N2JkMmE1NTU3ZjcwZjY3NmFkY2M3NjkwNGZi ODcyYWIwHhcNMjUxMTIzMTIwMDE3WhcNMjUxMTI0MTIwMDE3WjAzMTEwLwYDVQQD Eyg1NmViMGNmOTQ1YmYzZGYyM2Q2NmZmN2Q5MzY4NjlmMzU0ZTJiMjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9suXvQJqQks5nytsEmy1vMmdeqZ rIuEQU33HBX/15+LIOpbw6lqDftujFKvU+QkVEZhqQwS5eaGYcQPNz5qbYZJvmyA MHhyQWm6/Ut1xiXlKnbyf9Sp87BedYteQssdLsQexZ8tRJlPGhirKU+AcmYtWwgp byiABqt9+lkCVAv3f/VNFucDH0kadUIF5k+MR0lhA70c8QBWfOVgHmm4+dSywfIG 5WgAc6ouFfmiQD6K1Kk2Sqth1cWCH903PF3nbnu9wu5A1nYJ6Od7XntyymaQ238G /RxmWU3ANcR3TXvzDi7XT3rN8qJtRu7vQCmkATZQF0woOup9k/Yt+FhV5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbrDPlFvz3yPWb/fZNoafNU4rI0MB8GA1UdIwQY MBaAFG+mSmR70qVVf3D2dq3MdpBPuHKrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZaS1pIdlNwVlZfY1BaMnJjeDJrRS00Y3FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yNThkYWUtNTRmYS00YTMzLWExOWQt ZTkxYjNhYmQxZmU4LzEvYjZaS1pIdlNwVlZfY1BaMnJjeDJrRS00Y3FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yNThkYWUtNTRmYS00YTMzLWExOWQtZTkxYjNhYmQxZmU4 LzEvYjZaS1pIdlNwVlZfY1BaMnJjeDJrRS00Y3FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm19Bx3S5 BNEzBtsZH007829M9gB0DBT97S9ojv8swdDLyq6IELLS1N1HfgqKtoI2YCbpK1ix 0cJurEY9NTDe6Y54kuTxZ5oanfHNUTS4K4Vn36uERiNlBncVgIr+0rU1cOcy7yCf Dj+mYAYmfl6+ak2azqAn1EMRBgUekeq8g8+ocQFKQu6piui/aeBkKDlaQoNALLRY we4CwzYVIvZ4I1xyvXoERj5DyIIZFbKxmnpbFKn4WPNoPgk+BQOtIA0+vsb1CneN enTpR90NSLLQ0BtY1kgLPyilrsgzE9aoOJTcD2YeBi+g+9htAXscp52fhY+62dE7 J4XTW+cmhy8nyA== -----END CERTIFICATE-----Generated at Sun Nov 23 13:27:24 2025 by rpki-client