This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft File: g06Y-uclpT43QqjU7ehT9P9juRM.mft (raw, json) Hash identifier: 9lkjxkSEkBvASiQKuodmN36SS8PdQ89ijW54C3rPKfg= Subject key identifier: 95:DB:35:AD:86:8D:12:1B:70:21:92:93:B0:CC:E7:5D:DA:5B:F5:C6 Authority key identifier: 83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13 Certificate issuer: /CN=834e98fae725a53e3742a8d4ede853f4ff63b913 Certificate serial: 019B1014439EFED3A58EF366DC4B1ED63194 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft Manifest number: 0523 Signing time: Fri 12 Dec 2025 01:02:01 +0000 Manifest this update: Fri 12 Dec 2025 01:02:01 +0000 Manifest next update: Sat 13 Dec 2025 01:02:01 +0000 Files and hashes: 1: g06Y-uclpT43QqjU7ehT9P9juRM.crl (hash: aO/n3mfbQo8ErjSPD7YqQyfZrXQDZBxbtv4ZSgFHO+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:43:9e:fe:d3:a5:8e:f3:66:dc:4b:1e:d6:31:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=834e98fae725a53e3742a8d4ede853f4ff63b913 Validity Not Before: Dec 12 01:02:01 2025 GMT Not After : Dec 13 01:02:01 2025 GMT Subject: CN=95db35ad868d121b70219293b0cce75dda5bf5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:70:68:1c:2b:dd:c0:bd:6d:38:02:c9:91:f3: 4d:04:f1:a8:e7:4d:da:e4:68:97:7c:29:97:37:03: a2:c6:5f:2a:f5:8f:1e:e2:42:3c:2a:fb:e3:c9:c6: fc:6c:90:e7:2e:ac:51:c4:66:36:4b:30:26:5f:23: 9b:28:59:76:b8:00:ed:d3:c4:d7:93:17:f4:aa:c6: d5:c8:8b:ee:48:7b:9a:a8:36:72:40:7b:35:8c:5f: 60:34:fb:a7:3e:5d:19:c7:ec:23:62:54:5d:a2:51: 41:49:55:81:e4:bd:d6:b1:14:b1:b7:e5:82:76:19: 0b:06:30:b9:f8:22:ce:38:f7:54:4b:79:46:65:94: fa:1b:69:7e:53:8c:08:8b:9e:86:37:1b:28:45:c7: 21:d2:9f:b6:3f:48:56:1e:95:e5:68:23:94:39:fa: 37:7d:60:e9:f4:aa:12:b3:42:fa:95:e8:0d:f8:62: cf:29:49:84:1e:7b:b9:1b:51:7e:67:10:a9:72:dc: c6:7f:81:6b:a7:0a:ec:df:80:14:1a:f3:e0:4f:a0: 3e:cc:2e:da:43:28:9c:36:65:9b:88:e5:b6:0a:aa: 48:f9:19:a7:ee:9a:b9:35:21:cc:d9:a3:99:38:54: ba:0f:60:38:cf:b4:27:81:71:4b:a0:bc:b9:d7:ad: d7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DB:35:AD:86:8D:12:1B:70:21:92:93:B0:CC:E7:5D:DA:5B:F5:C6 X509v3 Authority Key Identifier: keyid:83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:36:f7:b3:8b:9d:2a:52:76:c5:f3:92:4e:31:93:88:b8:19: c0:7d:3d:d2:33:04:a9:25:5b:48:31:77:8d:22:c4:b2:10:df: 7f:30:fe:4e:f7:53:69:1d:94:68:86:30:44:a4:a4:a0:04:97: 3e:86:35:85:e4:3a:22:3b:7e:06:15:0c:61:f7:aa:6b:3b:1d: b7:1a:01:34:9d:02:da:2b:fe:8e:6c:2a:b1:9a:b1:b5:97:5f: 4e:bf:e4:64:e5:8b:2e:b4:bb:13:1d:2b:9a:e6:10:f4:49:96: 0f:eb:4d:01:1b:fd:c4:34:d0:b6:ad:8d:ca:0b:96:f8:c6:d6: 6f:99:8a:41:13:4f:c1:65:86:ba:6b:83:75:71:5d:3f:d5:94: 71:57:11:ff:60:1a:10:bc:3a:63:9e:54:8b:13:6f:d5:41:29: e4:54:87:dc:57:98:93:2e:d7:29:60:02:20:f8:6b:88:d9:86: 50:a7:2b:27:e5:27:e8:1c:f2:67:f4:50:52:34:38:2c:32:de: d5:f0:87:d5:52:e9:ba:e6:1c:a1:eb:d1:b6:82:5d:c8:77:1c: ae:b7:c5:7b:7f:93:35:39:5c:35:49:da:5c:42:2a:48:0f:68: 5c:e2:e6:ee:f9:e1:82:43:29:b0:28:c8:f8:81:18:b2:06:8d: 43:78:51:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFEOe/tOljvNm3Ese1jGUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNGU5OGZhZTcyNWE1M2UzNzQyYThkNGVkZTg1M2Y0ZmY2 M2I5MTMwHhcNMjUxMjEyMDEwMjAxWhcNMjUxMjEzMDEwMjAxWjAzMTEwLwYDVQQD Eyg5NWRiMzVhZDg2OGQxMjFiNzAyMTkyOTNiMGNjZTc1ZGRhNWJmNWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynBoHCvdwL1tOALJkfNNBPGo503a 5GiXfCmXNwOixl8q9Y8e4kI8Kvvjycb8bJDnLqxRxGY2SzAmXyObKFl2uADt08TX kxf0qsbVyIvuSHuaqDZyQHs1jF9gNPunPl0Zx+wjYlRdolFBSVWB5L3WsRSxt+WC dhkLBjC5+CLOOPdUS3lGZZT6G2l+U4wIi56GNxsoRcch0p+2P0hWHpXlaCOUOfo3 fWDp9KoSs0L6legN+GLPKUmEHnu5G1F+ZxCpctzGf4Frpwrs34AUGvPgT6A+zC7a QyicNmWbiOW2CqpI+Rmn7pq5NSHM2aOZOFS6D2A4z7QngXFLoLy5163XgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXbNa2GjRIbcCGSk7DM513aW/XGMB8GA1UdIwQY MBaAFINOmPrnJaU+N0Ko1O3oU/T/Y7kTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzA2WS11Y2xwVDQzUXFqVTdlaFQ5UDlqdVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81NzY5MzMtOGE1Yi00ZGNiLWFjMWYt MWE1MjliMmY1ZDk3LzEvZzA2WS11Y2xwVDQzUXFqVTdlaFQ5UDlqdVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny81NzY5MzMtOGE1Yi00ZGNiLWFjMWYtMWE1MjliMmY1ZDk3 LzEvZzA2WS11Y2xwVDQzUXFqVTdlaFQ5UDlqdVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzb3s4ud KlJ2xfOSTjGTiLgZwH090jMEqSVbSDF3jSLEshDffzD+TvdTaR2UaIYwRKSkoASX PoY1heQ6Ijt+BhUMYfeqazsdtxoBNJ0C2iv+jmwqsZqxtZdfTr/kZOWLLrS7Ex0r muYQ9EmWD+tNARv9xDTQtq2NyguW+MbWb5mKQRNPwWWGumuDdXFdP9WUcVcR/2Aa ELw6Y55UixNv1UEp5FSH3FeYky7XKWACIPhriNmGUKcrJ+Un6BzyZ/RQUjQ4LDLe 1fCH1VLpuuYcoevRtoJdyHccrrfFe3+TNTlcNUnaXEIqSA9oXOLm7vnhgkMpsCjI +IEYsgaNQ3hRFg== -----END CERTIFICATE-----Generated at Fri Dec 12 05:20:08 2025 by rpki-client