This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft File: Ap6YM29qbMnbzx7LSJVYDwlOPis.mft (raw, json) Hash identifier: hPAELjWVtWOKtvWyTKNYXJ7YEQsiUyDbCOY89PfVn+M= Subject key identifier: 80:1A:6B:06:70:64:11:F1:FC:9E:33:84:46:AF:02:63:25:D1:B3:46 Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b Certificate serial: 019B5C3FD25212DC9295AB66E42CA6AB6023 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft Manifest number: 0E89 Signing time: Fri 26 Dec 2025 20:00:45 +0000 Manifest this update: Fri 26 Dec 2025 20:00:45 +0000 Manifest next update: Sat 27 Dec 2025 20:00:45 +0000 Files and hashes: 1: Ap6YM29qbMnbzx7LSJVYDwlOPis.crl (hash: JMcQm05bDoUUkFOCAktJq7MsColUMW/OE2ZKYlzvQMw=) 2: FybckS4mS3PAuxN_d3EgWJtMQK4.roa (hash: MImS/nx2LOpK0AGTytgC4EXihDeCbzPO2eNXYJc+NdA=) 3: KpRFnijx4HYqUIUICY-ZUp7rRPk.roa (hash: tZGVcmUikk1vZ7sDIA+p4HCO8PzQlQBBtwwble5ZLjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:3f:d2:52:12:dc:92:95:ab:66:e4:2c:a6:ab:60:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b Validity Not Before: Dec 26 20:00:45 2025 GMT Not After : Dec 27 20:00:45 2025 GMT Subject: CN=801a6b06706411f1fc9e338446af026325d1b346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:64:ef:7e:00:5d:d5:d9:64:62:49:b4:64:b9: 78:16:4d:88:ff:2b:d3:63:f9:9c:ba:e6:d5:3f:46: a6:ed:4b:f5:2a:fb:bb:7f:f0:12:98:ab:f5:b2:eb: 3d:75:7a:55:00:69:37:d5:49:1f:c8:43:7d:3d:23: f9:70:d2:68:89:cd:a5:d4:4b:18:ca:a9:63:d0:b8: 5d:46:31:2d:92:00:d8:de:af:9f:94:2c:de:73:40: b7:6e:38:e5:ee:b4:f1:49:b8:59:95:68:fd:0b:9f: 86:7e:84:6e:ea:f3:43:83:86:71:3d:0f:80:b6:52: 5e:cc:db:e3:bf:cb:27:5b:c3:eb:4a:d2:1a:35:8d: e0:11:10:10:97:f1:e8:49:57:c2:91:78:44:80:fd: 53:b7:ba:e7:1f:d6:17:fd:44:7e:c1:35:1b:1a:05: a6:4d:1c:1d:79:36:7c:f4:83:d9:35:1b:82:1c:37: fd:8a:9e:7a:96:76:e5:ae:fe:d7:b0:fe:af:7b:c3: 0d:44:1b:63:53:f0:1a:40:a9:4a:20:dc:bd:85:c4: 8a:67:94:8a:d1:19:bb:e8:93:6c:26:cb:26:e1:51: f2:30:98:0a:08:d3:b7:6c:ef:39:7d:2d:30:d5:02: 10:61:71:84:2c:4c:4f:75:1b:47:73:17:6f:fe:8a: 05:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1A:6B:06:70:64:11:F1:FC:9E:33:84:46:AF:02:63:25:D1:B3:46 X509v3 Authority Key Identifier: keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:6b:8f:1f:d6:61:91:33:be:95:7e:a5:08:6e:0d:b1:8e:c6: 87:7c:be:e2:0c:61:19:fc:3a:38:61:70:7a:5d:49:91:6a:ec: e7:be:f1:4a:92:b3:b0:7b:86:f3:d3:46:9f:ea:3d:38:6e:d9: ca:0f:4d:6f:03:3d:9a:35:d2:31:35:de:77:68:1b:77:1b:27: 5d:07:74:01:e0:2c:8e:0a:44:e5:91:d9:70:b5:3c:8b:98:f9: a1:57:5e:00:ff:ca:2d:e5:43:08:ce:fb:8c:f6:21:f8:b9:a6: 38:6a:84:9c:67:75:b6:fb:55:bc:b1:69:12:36:41:41:94:9c: c2:4c:cd:aa:9d:b3:1f:c0:82:62:47:ae:98:b7:19:38:98:d3: 3e:1a:36:47:cc:77:3d:8c:b0:ba:ad:cd:92:b1:9e:8d:98:a7: 70:a5:9b:50:ab:21:12:f5:6c:35:be:53:c1:43:48:0f:f5:f3: 82:8d:be:79:b4:7c:ad:be:f8:69:7d:41:2f:a1:f0:f2:08:87: f3:f5:ae:00:5e:2a:a9:8d:9a:6f:fa:24:83:b3:f0:95:42:48: d6:22:3b:36:b2:2e:26:4f:22:16:7b:31:37:f6:e7:3f:5f:85: cf:d7:a4:65:85:49:f4:11:39:34:b7:f9:ab:53:51:de:63:d4: 0b:a9:c3:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcP9JSEtySlatm5Cymq2AjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyOWU5ODMzNmY2YTZjYzlkYmNmMWVjYjQ4OTU1ODBmMDk0 ZTNlMmIwHhcNMjUxMjI2MjAwMDQ1WhcNMjUxMjI3MjAwMDQ1WjAzMTEwLwYDVQQD Eyg4MDFhNmIwNjcwNjQxMWYxZmM5ZTMzODQ0NmFmMDI2MzI1ZDFiMzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2TvfgBd1dlkYkm0ZLl4Fk2I/yvT Y/mcuubVP0am7Uv1Kvu7f/ASmKv1sus9dXpVAGk31UkfyEN9PSP5cNJoic2l1EsY yqlj0LhdRjEtkgDY3q+flCzec0C3bjjl7rTxSbhZlWj9C5+GfoRu6vNDg4ZxPQ+A tlJezNvjv8snW8PrStIaNY3gERAQl/HoSVfCkXhEgP1Tt7rnH9YX/UR+wTUbGgWm TRwdeTZ89IPZNRuCHDf9ip56lnblrv7XsP6ve8MNRBtjU/AaQKlKINy9hcSKZ5SK 0Rm76JNsJssm4VHyMJgKCNO3bO85fS0w1QIQYXGELExPdRtHcxdv/ooFjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAaawZwZBHx/J4zhEavAmMl0bNGMB8GA1UdIwQY MBaAFAKemDNvamzJ288ey0iVWA8JTj4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXA2WU0yOXFiTW5ieng3TFNKVllEd2xPUGlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mYmMxNDEtOTlmYy00ZjgzLWI1ODUt MGZlNmY1NWRiM2Y2LzEvQXA2WU0yOXFiTW5ieng3TFNKVllEd2xPUGlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9mYmMxNDEtOTlmYy00ZjgzLWI1ODUtMGZlNmY1NWRiM2Y2 LzEvQXA2WU0yOXFiTW5ieng3TFNKVllEd2xPUGlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWuPH9Zh kTO+lX6lCG4NsY7Gh3y+4gxhGfw6OGFwel1JkWrs577xSpKzsHuG89NGn+o9OG7Z yg9NbwM9mjXSMTXed2gbdxsnXQd0AeAsjgpE5ZHZcLU8i5j5oVdeAP/KLeVDCM77 jPYh+LmmOGqEnGd1tvtVvLFpEjZBQZScwkzNqp2zH8CCYkeumLcZOJjTPho2R8x3 PYywuq3NkrGejZincKWbUKshEvVsNb5TwUNID/Xzgo2+ebR8rb74aX1BL6Hw8giH 8/WuAF4qqY2ab/okg7PwlUJI1iI7NrIuJk8iFnsxN/bnP1+Fz9ekZYVJ9BE5NLf5 q1NR3mPUC6nDuw== -----END CERTIFICATE-----Generated at Fri Dec 26 21:21:07 2025 by rpki-client