This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft File: B6zZpp4bhJhwhFisUiB8-sHyw8s.mft (raw, json) Hash identifier: ZYp5DWA95BHHyKaK9xmJd4d3eq/wjMCQiFD/2rnxVPY= Subject key identifier: 51:60:A9:AD:94:A9:BA:B3:34:94:E8:84:3B:71:D8:9D:E8:3F:AE:84 Authority key identifier: 07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB Certificate issuer: /CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb Certificate serial: 019B33B192C954FECD9188F56D00A34656ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft Manifest number: 0E03 Signing time: Thu 18 Dec 2025 23:00:33 +0000 Manifest this update: Thu 18 Dec 2025 23:00:33 +0000 Manifest next update: Fri 19 Dec 2025 23:00:33 +0000 Files and hashes: 1: B6zZpp4bhJhwhFisUiB8-sHyw8s.crl (hash: lOOyj+7hlhqi6wfYxP7PG2E+gdzikR0xZgdJrn+A+kQ=) 2: lFbceLcRDwmhBa1zgOvzTV71-HE.roa (hash: mrrcAYvrU89Mw/RDvXkAWlxbSPvtKYbzm6HV1Q42sLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:92:c9:54:fe:cd:91:88:f5:6d:00:a3:46:56:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb Validity Not Before: Dec 18 23:00:33 2025 GMT Not After : Dec 19 23:00:33 2025 GMT Subject: CN=5160a9ad94a9bab33494e8843b71d89de83fae84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:09:03:5c:9b:d6:03:92:1d:d2:45:15:1a:9a: ab:8b:3a:70:8a:c0:ce:24:5a:70:9d:e8:4e:8a:e5: e2:a2:40:1f:2a:f2:24:6f:c2:41:42:2b:cb:7e:e8: d1:7e:ef:bb:ba:4c:71:dd:50:43:ab:85:24:01:4a: bd:3a:0b:9d:e9:62:7a:45:ce:96:37:5e:d1:98:85: c2:ea:1e:f7:2c:46:2b:ba:59:10:eb:39:73:aa:29: cd:19:97:05:a5:12:a3:8e:61:60:98:69:08:04:3c: c9:a6:d5:f8:be:e4:2b:d5:79:15:30:75:07:f9:24: d1:e2:86:79:ab:ca:3b:72:ac:1c:91:16:2a:d2:4b: 01:c1:fb:4b:e5:21:80:91:6c:bd:f3:43:fe:a3:d8: 1a:ad:90:b7:6c:23:4c:52:49:46:3d:7b:4b:0c:75: b6:6f:fb:21:b9:cd:9f:86:37:89:a8:88:69:00:e9: 81:96:a9:a3:22:90:fd:35:52:43:5c:7b:9d:53:51: 6b:15:23:0d:d6:42:56:a8:e9:ba:15:ca:69:36:fc: 7c:81:73:46:6d:88:35:8d:22:64:4a:41:d6:93:e8: 0b:44:63:18:71:fa:01:ab:41:c3:03:ab:b6:f2:0e: e1:7a:30:fc:2f:78:4e:2d:71:66:e3:44:ae:28:c7: 3f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:60:A9:AD:94:A9:BA:B3:34:94:E8:84:3B:71:D8:9D:E8:3F:AE:84 X509v3 Authority Key Identifier: keyid:07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:2a:f7:b7:7f:af:eb:03:12:ea:81:33:ac:ce:37:fa:f9:68: 49:4e:fd:fd:c4:73:b6:53:37:de:e2:80:89:fc:57:55:7a:c8: 82:a7:52:86:6b:5c:67:8d:66:82:e8:ea:a9:db:18:e5:f0:45: fc:02:91:09:50:e7:47:05:67:a9:e3:7c:61:81:0d:b2:61:88: 99:5b:d1:9e:b6:f6:6a:dc:ae:fc:db:5f:ef:d8:be:07:da:2c: ac:da:37:73:81:6e:64:68:fb:ac:49:d3:24:9e:10:29:21:59: cb:bd:ff:0b:03:5b:26:5d:ef:8e:ce:ec:a6:1b:b6:bc:43:06: 93:be:28:7d:23:61:85:be:dc:33:2a:d0:1e:a0:8f:d8:bd:3e: 24:18:86:ab:83:af:aa:cb:de:17:c3:7c:fc:3c:8f:ac:9c:43: f3:ab:08:1a:2f:11:4a:01:22:6f:76:7f:85:77:86:e9:59:b5: 66:3c:b4:90:f2:9a:95:fd:ec:19:27:27:da:5f:70:9e:ca:f5: 67:59:55:a0:9f:72:41:06:f9:3e:e1:a1:8e:47:df:f5:4c:06: b5:43:b3:7f:ec:3d:bf:df:76:b2:72:98:38:6c:46:4a:05:63: 41:77:f5:35:dd:89:46:ce:63:fd:5e:6c:40:d9:5b:83:ac:54: 44:44:de:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsZLJVP7NkYj1bQCjRlbtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YWNkOWE2OWUxYjg0OTg3MDg0NThhYzUyMjA3Y2ZhYzFm MmMzY2IwHhcNMjUxMjE4MjMwMDMzWhcNMjUxMjE5MjMwMDMzWjAzMTEwLwYDVQQD Eyg1MTYwYTlhZDk0YTliYWIzMzQ5NGU4ODQzYjcxZDg5ZGU4M2ZhZTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AkDXJvWA5Id0kUVGpqrizpwisDO JFpwnehOiuXiokAfKvIkb8JBQivLfujRfu+7ukxx3VBDq4UkAUq9Ogud6WJ6Rc6W N17RmIXC6h73LEYrulkQ6zlzqinNGZcFpRKjjmFgmGkIBDzJptX4vuQr1XkVMHUH +STR4oZ5q8o7cqwckRYq0ksBwftL5SGAkWy980P+o9garZC3bCNMUklGPXtLDHW2 b/shuc2fhjeJqIhpAOmBlqmjIpD9NVJDXHudU1FrFSMN1kJWqOm6FcppNvx8gXNG bYg1jSJkSkHWk+gLRGMYcfoBq0HDA6u28g7hejD8L3hOLXFm40SuKMc/kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFgqa2UqbqzNJTohDtx2J3oP66EMB8GA1UdIwQY MBaAFAes2aaeG4SYcIRYrFIgfPrB8sPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjZ6WnBwNGJoSmh3aEZpc1VpQjgtc0h5dzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jYzhiYzgtMjQ0MC00OTlkLTlkOTct YmE4NDk3NzhmZjU4LzEvQjZ6WnBwNGJoSmh3aEZpc1VpQjgtc0h5dzhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9jYzhiYzgtMjQ0MC00OTlkLTlkOTctYmE4NDk3NzhmZjU4 LzEvQjZ6WnBwNGJoSmh3aEZpc1VpQjgtc0h5dzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyr3t3+v 6wMS6oEzrM43+vloSU79/cRztlM33uKAifxXVXrIgqdShmtcZ41mgujqqdsY5fBF /AKRCVDnRwVnqeN8YYENsmGImVvRnrb2atyu/Ntf79i+B9osrNo3c4FuZGj7rEnT JJ4QKSFZy73/CwNbJl3vjs7sphu2vEMGk74ofSNhhb7cMyrQHqCP2L0+JBiGq4Ov qsveF8N8/DyPrJxD86sIGi8RSgEib3Z/hXeG6Vm1Zjy0kPKalf3sGScn2l9wnsr1 Z1lVoJ9yQQb5PuGhjkff9UwGtUOzf+w9v992snKYOGxGSgVjQXf1Nd2JRs5j/V5s QNlbg6xURETelw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:42:56 2025 by rpki-client