This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json) Hash identifier: pBqZQUxTu43BJm2XwG9Fy+Xmx/rkV6WeCGQ31YCq2V4= Subject key identifier: AB:01:C7:BB:E7:4A:B1:B6:4C:5F:2E:35:B5:38:ED:08:40:FD:0C:18 Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56 Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756 Certificate serial: 019B2364603E213EEFA072C83871185DE143 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft Manifest number: 159B Signing time: Mon 15 Dec 2025 19:02:19 +0000 Manifest this update: Mon 15 Dec 2025 19:02:19 +0000 Manifest next update: Tue 16 Dec 2025 19:02:19 +0000 Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: 0SHINgOQXhGg0ZyI0pbAk8WPAytaRW527jw9ZcM5oj4=) 2: tbW3C2BxGOP8RipICwkXorNWMa0.roa (hash: sAyggufTAiW8TAkDGmUgXEYrufIqSzYFIzTOlTIqneg=) 3: u1VhcVTy354RLIy1HL3zp9mHr4s.roa (hash: bTXjEk3aPbxZmee9JV98PLXefqyqj+KHu6+Sm9Lnq+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:60:3e:21:3e:ef:a0:72:c8:38:71:18:5d:e1:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756 Validity Not Before: Dec 15 19:02:19 2025 GMT Not After : Dec 16 19:02:19 2025 GMT Subject: CN=ab01c7bbe74ab1b64c5f2e35b538ed0840fd0c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:f7:a6:22:ac:78:20:be:36:2a:0f:f6:54: a8:e9:23:1b:cd:11:46:5d:bc:4a:b6:33:f9:d9:08: 3e:c3:af:cf:59:1d:00:68:d6:d0:5e:5a:ff:7b:18: 6f:94:f2:84:67:00:86:6f:86:e8:da:1d:84:3a:80: 6c:24:04:bc:55:87:b8:d5:a5:31:38:49:88:ce:59: 29:91:55:fc:ac:9d:7b:d2:11:5a:58:67:d0:e4:c5: ab:11:70:72:70:7a:f2:eb:f1:ab:5a:e3:74:91:51: 2a:19:7e:3c:f6:bb:e5:94:c4:85:e8:5b:d9:07:2a: 61:c4:f3:f4:b4:76:81:c1:18:90:52:07:13:9f:65: 8d:8a:dc:f0:27:5c:34:ce:c2:19:e4:ab:14:7e:79: 24:08:0c:cd:4d:49:e5:11:86:57:cb:5d:28:d8:d9: 4b:f2:57:00:9e:bc:86:94:21:21:fa:62:91:03:93: fd:f4:b9:82:a2:43:42:cc:63:50:65:c6:6c:c8:ea: c0:9b:f0:d4:16:c0:5c:ef:d3:5b:0a:2c:7a:e4:90: 37:f1:d7:62:cd:29:79:dd:29:44:02:cd:3c:4f:9d: 7e:d5:c4:2c:6a:39:b3:3c:4b:e8:b1:25:84:04:fe: 88:35:43:4b:4a:62:01:5d:06:5c:c2:22:72:d8:cb: c5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:01:C7:BB:E7:4A:B1:B6:4C:5F:2E:35:B5:38:ED:08:40:FD:0C:18 X509v3 Authority Key Identifier: keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8e:7c:48:31:e3:bf:62:31:1d:c2:07:59:4c:bf:ea:4d:8c: ed:f8:00:aa:f5:e2:8a:a6:35:e3:67:01:4b:50:cb:37:89:0d: f1:86:f8:a8:b0:a8:8e:1e:80:58:e6:9b:bb:30:13:23:3c:40: 4a:25:e0:b4:32:df:14:79:4b:69:91:9f:e6:05:ad:5b:f0:f3: 5c:11:f6:6d:50:00:3d:a9:34:1e:11:14:f7:3d:cd:f2:9c:81: cc:d2:33:e8:db:4b:b3:18:82:07:96:7a:12:77:38:dc:71:70: 21:97:11:2e:97:2d:7c:a9:97:e1:7d:81:bb:20:80:2b:f8:26: 8c:54:53:50:a4:25:d6:cc:71:6c:73:b9:9f:37:40:4a:27:54: 54:69:3f:1a:4b:f8:dc:29:8d:9a:2b:0d:8d:37:e6:58:85:e3: 25:80:5f:86:7d:6f:74:c1:d0:4a:12:6e:14:13:c1:67:cb:bb: df:6f:5d:ee:07:d6:d0:b4:1c:81:b0:72:f8:eb:0b:7d:e4:ef: f2:7a:04:1e:fc:6c:b1:00:97:9d:c8:05:14:89:47:e8:58:5a: 08:93:0e:08:6e:e6:15:74:c2:58:11:6b:df:11:58:ff:9a:af: d7:b6:02:5a:f7:eb:f3:76:b7:f4:65:74:65:8a:0d:d7:2e:b7: d6:85:cb:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZGA+IT7voHLIOHEYXeFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYTdjM2JlMDZiYzQ1YzNmMTJiOTBiMTg1Mjc4YWQ0ZWM5 MTk3NTYwHhcNMjUxMjE1MTkwMjE5WhcNMjUxMjE2MTkwMjE5WjAzMTEwLwYDVQQD EyhhYjAxYzdiYmU3NGFiMWI2NGM1ZjJlMzViNTM4ZWQwODQwZmQwYzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUf3piKseCC+NioP9lSo6SMbzRFG XbxKtjP52Qg+w6/PWR0AaNbQXlr/exhvlPKEZwCGb4bo2h2EOoBsJAS8VYe41aUx OEmIzlkpkVX8rJ170hFaWGfQ5MWrEXBycHry6/GrWuN0kVEqGX489rvllMSF6FvZ ByphxPP0tHaBwRiQUgcTn2WNitzwJ1w0zsIZ5KsUfnkkCAzNTUnlEYZXy10o2NlL 8lcAnryGlCEh+mKRA5P99LmCokNCzGNQZcZsyOrAm/DUFsBc79NbCix65JA38ddi zSl53SlEAs08T51+1cQsajmzPEvosSWEBP6INUNLSmIBXQZcwiJy2MvFCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsBx7vnSrG2TF8uNbU47QhA/QwYMB8GA1UdIwQY MBaAFNOnw74GvEXD8SuQsYUnitTskZdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jZWNmYjYtMDdmYi00Mjc1LWIwNmEt OGFhNTBkNjcwMzdjLzEvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9jZWNmYjYtMDdmYi00Mjc1LWIwNmEtOGFhNTBkNjcwMzdj LzEvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHo58SDHj v2IxHcIHWUy/6k2M7fgAqvXiiqY142cBS1DLN4kN8Yb4qLCojh6AWOabuzATIzxA SiXgtDLfFHlLaZGf5gWtW/DzXBH2bVAAPak0HhEU9z3N8pyBzNIz6NtLsxiCB5Z6 Enc43HFwIZcRLpctfKmX4X2BuyCAK/gmjFRTUKQl1sxxbHO5nzdASidUVGk/Gkv4 3CmNmisNjTfmWIXjJYBfhn1vdMHQShJuFBPBZ8u7329d7gfW0LQcgbBy+OsLfeTv 8noEHvxssQCXncgFFIlH6FhaCJMOCG7mFXTCWBFr3xFY/5qv17YCWvfr83a39GV0 ZYoN1y631oXLdA== -----END CERTIFICATE-----Generated at Tue Dec 16 04:22:57 2025 by rpki-client