This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft File: C6yCgEcArTZTi_hvNMBz6XFDDaU.mft (raw, json) Hash identifier: jOhFvgY/uR54pGusg4T5u3dhBLTP75C1dCkl9r1qgFs= Subject key identifier: 25:C7:C7:E8:F4:B4:0D:C0:6E:E9:CB:65:0E:39:08:31:62:D9:59:51 Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5 Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5 Certificate serial: 019B217582564F947DE6E6D5910ADC1190F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft Manifest number: 1789 Signing time: Mon 15 Dec 2025 10:01:47 +0000 Manifest this update: Mon 15 Dec 2025 10:01:47 +0000 Manifest next update: Tue 16 Dec 2025 10:01:47 +0000 Files and hashes: 1: 1-kvVTAhrEOyteDMbQ1PRTmS7VII.roa (hash: 52wBCJcICQSnfXTj3sxR2Dw1bHQobSFBJQdmwW3ItOc=) 2: 1Rd2o3xUjPYq6-ROGbojsnIAO7o.roa (hash: cJibfgam1opzds5Qh9r7Y5ffttnidwSOVT40ptzFnqs=) 3: 7bJ_SXsvQs5jd90zxR_xlvABeGo.roa (hash: m0ZQ2Y2DbXV8jV6KvTNs6fUZ/bk3yiFcpgd8GYS9O7Q=) 4: C6yCgEcArTZTi_hvNMBz6XFDDaU.crl (hash: D2RPjvRDxmol1P8xjEMa5SdEzcgyvrqEyTQyv7oeWGk=) 5: EJIUsUOKvSLerwNQFS-Out5zZuM.roa (hash: D433E6UiMyX9KdcjAcomX19JFn+CfTOeAqT8DsBwSkY=) 6: IYymNdWawqstgCP4XTcQ0LRxyO4.roa (hash: zZeH4Zhf/0r9N1702in9DCWq7U55L0ULISwTrHj2H68=) 7: L1Bz6qAa7Tw2r0koEROI1LNkc8U.roa (hash: DocEMWhWVMmnhBegXTSWZpGGhsBAl4jcHIRujEDNT44=) 8: b_Dm6TuKr2O9F9em_a6cktDchPg.roa (hash: ehArjKJWDMxsQnB7k5Ijrml5MK5YWi9DCvAWzUWkArc=) 9: vdMwrE1WRBo6tPAM0c8ANEH4m7w.roa (hash: aAOimEwL2ZyXBynFWKnhjaaS/YCd7rqkh4wnbJ4qboQ=) 10: xkRsFChgw8FgF1z4ealSBYfjSiw.roa (hash: c2XTA6ndUBR9DMhPW66OSPqlDjn7RwF/yQC+0Ynbm/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:82:56:4f:94:7d:e6:e6:d5:91:0a:dc:11:90:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5 Validity Not Before: Dec 15 10:01:47 2025 GMT Not After : Dec 16 10:01:47 2025 GMT Subject: CN=25c7c7e8f4b40dc06ee9cb650e39083162d95951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c6:49:e4:06:88:af:46:a9:9d:2b:2e:91:39: 77:b9:a3:1d:56:e0:02:57:e1:79:cc:93:4a:1c:2a: 1d:1c:2a:26:01:23:50:f6:f9:09:fe:fc:09:da:8d: a0:aa:ab:15:38:01:3c:1a:45:24:24:67:12:c8:56: 02:0e:a4:95:b2:8d:43:1a:42:b3:d9:de:16:8e:40: 8f:54:0a:fa:76:87:8f:d1:3a:73:96:b3:d4:73:2a: 99:7a:33:a9:fc:bd:5a:71:9d:6d:d4:7b:97:89:20: 1d:37:aa:ae:3a:de:41:ac:55:54:ce:ee:25:e0:df: 1f:9c:f2:1b:ae:56:d0:d4:3c:e4:1c:4d:8c:28:d9: 01:53:d6:1b:05:93:b4:65:85:c3:b5:e3:d2:61:1d: 3e:48:6a:2f:80:d6:43:f2:85:b4:4e:63:55:2e:fb: 0f:8f:8d:44:7b:22:96:c7:7b:c4:45:64:6f:df:a4: 71:e7:39:52:e9:c4:9d:65:87:d2:33:4f:60:2c:1d: 59:6a:2b:c6:3c:26:f4:f9:4a:6b:f1:bd:85:14:65: 50:d2:65:fb:a8:fb:b0:25:15:24:00:85:79:82:f5: e5:56:03:8f:ce:ca:c7:df:73:bd:38:23:b4:89:c3: a1:17:62:53:6e:a5:79:c7:57:0f:da:02:a0:0b:7d: 10:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C7:C7:E8:F4:B4:0D:C0:6E:E9:CB:65:0E:39:08:31:62:D9:59:51 X509v3 Authority Key Identifier: keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:6d:c5:01:bb:39:6b:08:4b:54:2d:a7:ac:b3:47:ab:f7:c0: d2:bc:17:f7:b8:e5:40:8c:53:51:7a:74:ec:87:9d:bf:e9:81: c1:69:9d:eb:73:05:d2:76:7d:8b:ec:a9:5c:db:55:77:73:64: 2f:0c:0b:76:94:2e:34:d9:2d:34:e4:5a:a2:e7:44:24:2b:92: 91:32:92:6c:06:f2:dc:9d:59:b8:b2:68:48:51:67:7e:5e:a0: 9c:bd:cf:b1:5d:34:73:ed:c8:32:2f:79:d0:d6:98:0e:bb:74: 78:a3:3f:bb:a6:67:aa:69:53:c6:a2:f9:90:dc:2f:0e:5d:d5: 93:ce:14:18:1f:f1:22:c4:cc:5f:c0:d4:d1:1f:01:50:b5:de: c5:2f:ad:24:fa:d5:e6:cb:6d:db:11:34:25:67:11:0c:21:42: f3:e8:d6:df:b3:d6:15:d2:4e:bd:40:67:f3:a6:89:74:45:66: 2f:f2:ec:b5:6d:5e:32:c4:42:a1:55:da:1d:7c:46:b2:f8:67: 77:6c:bf:f5:e4:cb:3d:3a:ee:3a:0f:9d:fd:17:dc:1d:ee:0f: 55:44:dd:45:f9:33:6a:0e:8d:4b:38:b2:c4:a9:99:b3:35:a4: db:c6:05:60:62:35:df:35:97:ce:a6:b1:e1:a6:66:16:a5:f6: fc:7b:db:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdYJWT5R95ubVkQrcEZDyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYWM4MjgwNDcwMGFkMzY1MzhiZjg2ZjM0YzA3M2U5NzE0 MzBkYTUwHhcNMjUxMjE1MTAwMTQ3WhcNMjUxMjE2MTAwMTQ3WjAzMTEwLwYDVQQD EygyNWM3YzdlOGY0YjQwZGMwNmVlOWNiNjUwZTM5MDgzMTYyZDk1OTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8ZJ5AaIr0apnSsukTl3uaMdVuAC V+F5zJNKHCodHComASNQ9vkJ/vwJ2o2gqqsVOAE8GkUkJGcSyFYCDqSVso1DGkKz 2d4WjkCPVAr6doeP0TpzlrPUcyqZejOp/L1acZ1t1HuXiSAdN6quOt5BrFVUzu4l 4N8fnPIbrlbQ1DzkHE2MKNkBU9YbBZO0ZYXDtePSYR0+SGovgNZD8oW0TmNVLvsP j41EeyKWx3vERWRv36Rx5zlS6cSdZYfSM09gLB1ZaivGPCb0+Upr8b2FFGVQ0mX7 qPuwJRUkAIV5gvXlVgOPzsrH33O9OCO0icOhF2JTbqV5x1cP2gKgC30QPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXHx+j0tA3AbunLZQ45CDFi2VlRMB8GA1UdIwQY MBaAFAusgoBHAK02U4v4bzTAc+lxQw2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hNzI4OTEtZGUyZi00MTU2LWEwMTEt NDNmNjRiY2VhOTlkLzEvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9hNzI4OTEtZGUyZi00MTU2LWEwMTEtNDNmNjRiY2VhOTlk LzEvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAm3FAbs5 awhLVC2nrLNHq/fA0rwX97jlQIxTUXp07Iedv+mBwWmd63MF0nZ9i+ypXNtVd3Nk LwwLdpQuNNktNORaoudEJCuSkTKSbAby3J1ZuLJoSFFnfl6gnL3PsV00c+3IMi95 0NaYDrt0eKM/u6ZnqmlTxqL5kNwvDl3Vk84UGB/xIsTMX8DU0R8BULXexS+tJPrV 5stt2xE0JWcRDCFC8+jW37PWFdJOvUBn86aJdEVmL/LstW1eMsRCoVXaHXxGsvhn d2y/9eTLPTruOg+d/RfcHe4PVUTdRfkzag6NSziyxKmZszWk28YFYGI13zWXzqax 4aZmFqX2/Hvb9g== -----END CERTIFICATE-----Generated at Mon Dec 15 16:53:13 2025 by rpki-client