This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft File: 0auJR6hgH0uhqFvRwHs_OE95YR0.mft (raw, json) Hash identifier: /+ocxvAYX2CoIDI98vmy+R+GqOyoEUCmcp/Ej2neeCs= Subject key identifier: D3:B2:C5:D2:D0:43:57:3D:DB:6D:D6:8C:28:0C:0E:B8:5A:A3:E8:06 Authority key identifier: D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D Certificate issuer: /CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d Certificate serial: 019B41000D2C78C350F79F186F5A26AB975E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft Manifest number: 067C Signing time: Sun 21 Dec 2025 13:01:20 +0000 Manifest this update: Sun 21 Dec 2025 13:01:20 +0000 Manifest next update: Mon 22 Dec 2025 13:01:20 +0000 Files and hashes: 1: 0auJR6hgH0uhqFvRwHs_OE95YR0.crl (hash: /DxVUz7Flqi1I3kAoL7IQPxOKB9jx7uyCHQdw+klpio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:0d:2c:78:c3:50:f7:9f:18:6f:5a:26:ab:97:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d Validity Not Before: Dec 21 13:01:20 2025 GMT Not After : Dec 22 13:01:20 2025 GMT Subject: CN=d3b2c5d2d043573ddb6dd68c280c0eb85aa3e806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7a:6d:1f:ff:77:2b:83:94:86:68:f6:30:84: a7:41:a8:de:7e:ef:f9:42:43:af:26:24:8e:d5:b1: 5b:76:93:22:1b:b8:c5:93:54:da:d6:cb:94:e0:ca: 72:9c:f0:cd:f5:5d:75:d0:f6:b1:db:48:ca:aa:89: 29:02:7c:1c:fd:fe:a9:87:f4:80:9f:a8:f4:2f:4b: f0:f0:c3:8e:26:9c:40:10:fe:90:56:bf:c8:44:51: 21:65:2a:06:03:28:52:df:51:83:83:7b:70:59:bf: 68:ae:05:8a:57:1f:c3:08:fd:19:28:b9:12:81:13: 84:6f:bb:c9:16:f9:dc:79:bd:fe:81:22:37:79:64: c3:d7:5a:74:96:38:a4:8d:23:1b:35:85:7d:bd:c5: 1c:2f:81:d0:ae:48:36:01:49:6e:eb:e5:47:de:4e: c5:18:78:15:ac:34:f7:2c:fd:6b:f3:4f:7b:01:44: ab:42:cd:55:d9:f7:e7:2c:e3:ff:79:6a:b2:45:4b: b1:df:98:85:ee:2f:62:08:ff:d4:02:a6:2c:0c:39: cc:4b:7e:88:60:bc:e7:a4:48:c9:4e:e5:3d:ff:e9: a6:09:06:85:2e:c6:b3:e7:c6:f5:07:c1:32:8d:ff: f6:77:58:bf:82:85:0b:cb:13:01:96:40:76:a5:1d: 9e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B2:C5:D2:D0:43:57:3D:DB:6D:D6:8C:28:0C:0E:B8:5A:A3:E8:06 X509v3 Authority Key Identifier: keyid:D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a3:d8:38:af:79:91:dc:fa:66:a1:43:23:28:b1:48:84:27: e2:ce:bf:aa:27:e8:c7:16:24:16:29:3b:5c:ab:a8:be:4c:07: 8b:95:fc:75:62:ee:43:2e:07:eb:ed:ca:82:da:78:80:5e:f1: a1:f0:42:f8:c0:cf:a0:17:51:76:f0:1d:80:12:a3:77:a7:c1: ce:b4:3e:ae:27:3c:c5:94:27:eb:4c:22:5e:fb:c2:13:2d:17: 75:b2:c5:91:75:8d:8a:64:6d:df:63:d9:ab:b8:dd:47:73:31: 43:f4:d6:80:d0:c0:1e:5c:18:a2:61:00:45:02:42:62:76:68: 35:5e:76:39:c3:f7:a3:4f:da:45:fa:af:ef:14:bc:78:8b:05: 64:ad:9f:bf:06:66:c6:4c:aa:83:82:c5:30:4c:dd:ca:34:6e: 29:49:a1:ed:d2:87:a8:4f:93:7a:3d:57:0a:48:bb:da:e9:97: 9e:54:54:d0:7c:ad:95:b3:ce:a3:fd:8a:2d:1d:4b:05:44:5f: d1:34:8b:67:9f:c9:5e:2b:af:8f:e2:22:61:00:60:8b:aa:4a: c0:9a:c1:10:d7:4c:73:ef:b7:aa:ea:1b:f3:10:1f:3a:07:a4: 0e:bd:30:8d:e5:0f:af:20:9d:14:c9:77:50:37:8e:e3:3a:51: bf:d6:29:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBAA0seMNQ958Yb1omq5deMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYWI4OTQ3YTg2MDFmNGJhMWE4NWJkMWMwN2IzZjM4NGY3 OTYxMWQwHhcNMjUxMjIxMTMwMTIwWhcNMjUxMjIyMTMwMTIwWjAzMTEwLwYDVQQD EyhkM2IyYzVkMmQwNDM1NzNkZGI2ZGQ2OGMyODBjMGViODVhYTNlODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHptH/93K4OUhmj2MISnQajefu/5 QkOvJiSO1bFbdpMiG7jFk1Ta1suU4MpynPDN9V110Pax20jKqokpAnwc/f6ph/SA n6j0L0vw8MOOJpxAEP6QVr/IRFEhZSoGAyhS31GDg3twWb9orgWKVx/DCP0ZKLkS gROEb7vJFvnceb3+gSI3eWTD11p0ljikjSMbNYV9vcUcL4HQrkg2AUlu6+VH3k7F GHgVrDT3LP1r8097AUSrQs1V2ffnLOP/eWqyRUux35iF7i9iCP/UAqYsDDnMS36I YLznpEjJTuU9/+mmCQaFLsaz58b1B8Eyjf/2d1i/goULyxMBlkB2pR2ezwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOyxdLQQ1c9223WjCgMDrhao+gGMB8GA1UdIwQY MBaAFNGriUeoYB9Loahb0cB7PzhPeWEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGF1SlI2aGdIMHVocUZ2UndIc19PRTk1WVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82MThlMzYtZTBjMy00MjhhLWFmZDEt NDNjYzkwMTE3YWFjLzEvMGF1SlI2aGdIMHVocUZ2UndIc19PRTk1WVIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS82MThlMzYtZTBjMy00MjhhLWFmZDEtNDNjYzkwMTE3YWFj LzEvMGF1SlI2aGdIMHVocUZ2UndIc19PRTk1WVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6PYOK95 kdz6ZqFDIyixSIQn4s6/qifoxxYkFik7XKuovkwHi5X8dWLuQy4H6+3Kgtp4gF7x ofBC+MDPoBdRdvAdgBKjd6fBzrQ+ric8xZQn60wiXvvCEy0XdbLFkXWNimRt32PZ q7jdR3MxQ/TWgNDAHlwYomEARQJCYnZoNV52OcP3o0/aRfqv7xS8eIsFZK2fvwZm xkyqg4LFMEzdyjRuKUmh7dKHqE+Tej1XCki72umXnlRU0HytlbPOo/2KLR1LBURf 0TSLZ5/JXiuvj+IiYQBgi6pKwJrBENdMc++3quob8xAfOgekDr0wjeUPryCdFMl3 UDeO4zpRv9Yp5g== -----END CERTIFICATE-----Generated at Sun Dec 21 19:33:27 2025 by rpki-client