This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft File: g06Y-uclpT43QqjU7ehT9P9juRM.mft (raw, json) Hash identifier: 8ohkqiCTPi2IGvuI2z8PR15dC7a68WgotOPMxwl1VBE= Subject key identifier: 4F:85:CB:02:88:11:98:CA:0B:8B:F2:52:CA:6D:3B:DB:02:B8:31:61 Authority key identifier: 83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13 Certificate issuer: /CN=834e98fae725a53e3742a8d4ede853f4ff63b913 Certificate serial: 019B4815AEA6FF6D82CA31AC178714003D55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft Manifest number: 0540 Signing time: Mon 22 Dec 2025 22:02:18 +0000 Manifest this update: Mon 22 Dec 2025 22:02:18 +0000 Manifest next update: Tue 23 Dec 2025 22:02:18 +0000 Files and hashes: 1: g06Y-uclpT43QqjU7ehT9P9juRM.crl (hash: JAVd7sCMQ/iy7ZDJKzQgGP6OYhYLDhy3P3OIcvjDFrk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:ae:a6:ff:6d:82:ca:31:ac:17:87:14:00:3d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=834e98fae725a53e3742a8d4ede853f4ff63b913 Validity Not Before: Dec 22 22:02:18 2025 GMT Not After : Dec 23 22:02:18 2025 GMT Subject: CN=4f85cb02881198ca0b8bf252ca6d3bdb02b83161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c5:20:d6:25:4d:11:4b:ff:84:ea:25:02:69: 02:1d:d1:d1:76:4b:e2:73:41:46:6d:f5:20:b7:a4: 48:25:2e:c4:43:2b:e3:40:54:eb:bc:9a:c4:19:01: 62:3f:e2:87:76:e9:fa:4c:0d:30:42:e8:8c:04:91: 32:3c:b9:2c:11:b1:83:b9:6a:76:8c:32:1b:d0:b8: 17:fb:ba:4b:bc:d7:b1:37:a0:3b:c6:f6:69:e3:87: a7:c6:81:cf:0f:a9:02:98:cf:ed:df:13:48:c1:ab: 84:f4:13:1d:8b:65:95:01:26:71:92:8b:8c:33:fd: e5:ed:20:04:22:36:4d:55:19:9f:94:6f:dc:91:08: b5:4a:3b:fe:d2:10:8a:37:f9:24:8e:1a:36:86:01: e3:62:4b:a5:53:77:69:42:8a:52:cc:3c:97:82:07: 56:0e:63:b3:13:81:14:69:c5:3c:0f:3c:cc:df:12: 16:91:cd:57:3f:f4:db:7d:bf:c7:cc:07:34:a6:1b: ec:9f:1e:a8:20:63:5d:61:50:81:32:a5:85:d3:5c: f5:61:30:78:76:86:d2:1c:83:0c:42:40:cd:c6:a6: 10:ca:90:c2:86:ab:7c:3d:f2:bf:30:ff:b8:a1:50: 9e:fe:8a:33:fc:43:d9:98:87:c5:87:a6:12:9d:39: fc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:85:CB:02:88:11:98:CA:0B:8B:F2:52:CA:6D:3B:DB:02:B8:31:61 X509v3 Authority Key Identifier: keyid:83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:af:0e:d0:12:10:6e:b7:f6:43:fc:3c:5b:7d:17:90:4c:42: 66:5d:1f:f0:dd:0b:11:2b:6b:f2:ff:89:2a:ad:7d:18:00:28: 80:33:38:dd:36:1e:75:fb:4d:2e:be:0c:0d:93:01:69:f2:7a: ec:2c:24:f7:c5:65:66:73:96:45:ff:c1:7b:a4:9a:9c:01:b5: 8a:60:3a:1f:f8:bb:92:08:56:34:5a:97:10:d7:12:3f:6f:76: 91:36:ce:54:5f:8b:75:86:44:65:75:4b:12:3d:62:04:2e:a2: 7d:1d:b3:84:2a:7e:70:3d:f6:ec:35:8b:01:a2:e7:69:6a:3c: f2:0f:82:c7:70:c7:33:fb:17:11:23:38:0c:cf:62:4a:61:8d: dd:9e:18:a5:1c:1e:13:d1:ea:0f:ba:f0:0c:f9:71:b5:8c:75: 2c:31:3b:bc:e7:ce:aa:a9:03:e9:00:e9:55:df:77:e5:42:dc: a3:5e:e0:42:6e:6c:d5:11:89:59:d6:18:c4:22:ea:0e:e5:17: fe:b3:0a:d8:47:1f:b0:4e:57:93:31:d5:c7:33:90:5e:cd:cc: ab:ad:50:1d:bf:00:d5:30:c3:cc:e3:3c:55:92:62:25:d2:64: ef:c2:7b:af:16:98:41:e1:e5:85:f7:68:f3:fd:ae:5d:c4:26: 15:51:9e:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFa6m/22CyjGsF4cUAD1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNGU5OGZhZTcyNWE1M2UzNzQyYThkNGVkZTg1M2Y0ZmY2 M2I5MTMwHhcNMjUxMjIyMjIwMjE4WhcNMjUxMjIzMjIwMjE4WjAzMTEwLwYDVQQD Eyg0Zjg1Y2IwMjg4MTE5OGNhMGI4YmYyNTJjYTZkM2JkYjAyYjgzMTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsUg1iVNEUv/hOolAmkCHdHRdkvi c0FGbfUgt6RIJS7EQyvjQFTrvJrEGQFiP+KHdun6TA0wQuiMBJEyPLksEbGDuWp2 jDIb0LgX+7pLvNexN6A7xvZp44enxoHPD6kCmM/t3xNIwauE9BMdi2WVASZxkouM M/3l7SAEIjZNVRmflG/ckQi1Sjv+0hCKN/kkjho2hgHjYkulU3dpQopSzDyXggdW DmOzE4EUacU8DzzM3xIWkc1XP/Tbfb/HzAc0phvsnx6oIGNdYVCBMqWF01z1YTB4 dobSHIMMQkDNxqYQypDChqt8PfK/MP+4oVCe/ooz/EPZmIfFh6YSnTn8aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+FywKIEZjKC4vyUsptO9sCuDFhMB8GA1UdIwQY MBaAFINOmPrnJaU+N0Ko1O3oU/T/Y7kTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzA2WS11Y2xwVDQzUXFqVTdlaFQ5UDlqdVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81NzY5MzMtOGE1Yi00ZGNiLWFjMWYt MWE1MjliMmY1ZDk3LzEvZzA2WS11Y2xwVDQzUXFqVTdlaFQ5UDlqdVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny81NzY5MzMtOGE1Yi00ZGNiLWFjMWYtMWE1MjliMmY1ZDk3 LzEvZzA2WS11Y2xwVDQzUXFqVTdlaFQ5UDlqdVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOa8O0BIQ brf2Q/w8W30XkExCZl0f8N0LEStr8v+JKq19GAAogDM43TYedftNLr4MDZMBafJ6 7Cwk98VlZnOWRf/Be6SanAG1imA6H/i7kghWNFqXENcSP292kTbOVF+LdYZEZXVL Ej1iBC6ifR2zhCp+cD327DWLAaLnaWo88g+Cx3DHM/sXESM4DM9iSmGN3Z4YpRwe E9HqD7rwDPlxtYx1LDE7vOfOqqkD6QDpVd935ULco17gQm5s1RGJWdYYxCLqDuUX /rMK2EcfsE5XkzHVxzOQXs3Mq61QHb8A1TDDzOM8VZJiJdJk78J7rxaYQeHlhfdo 8/2uXcQmFVGePw== -----END CERTIFICATE-----Generated at Tue Dec 23 05:01:35 2025 by rpki-client