This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json) Hash identifier: tyJs7jeCrPweU2sRCw8fLp6wFwppABcZwfgJdsNemF0= Subject key identifier: 76:BC:44:0C:D2:45:21:9F:E6:93:84:96:43:81:E9:FF:C0:1E:2A:98 Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa Certificate serial: 019B38A13B36294ABA436F6348BAE251F0B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 22:00:49 +0000 Manifest this update: Fri 19 Dec 2025 22:00:49 +0000 Manifest next update: Sat 20 Dec 2025 22:00:49 +0000 Files and hashes: 1: 139lyeNlCTZU0BOy4AWB3XIegPQ.roa (hash: VzrpaxikQ2FR1JamVqwQwq75MdkFdQ6cyhvfG8bUdXQ=) 2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: kMa1pA/cLg1l1uP8LIidgzDnxYB6W2E5CmURNhOK8Gs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:3b:36:29:4a:ba:43:6f:63:48:ba:e2:51:f0:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa Validity Not Before: Dec 19 22:00:49 2025 GMT Not After : Dec 20 22:00:49 2025 GMT Subject: CN=76bc440cd245219fe69384964381e9ffc01e2a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:07:41:46:cb:da:ac:20:47:24:84:1e:a2:21: d5:78:36:4d:aa:79:7a:34:62:c0:83:92:cf:95:32: 8d:6e:4f:25:d9:28:96:52:a0:60:30:c6:93:40:5d: 56:3c:bd:22:af:6b:7f:ee:03:89:60:30:a9:6a:99: fd:aa:20:19:28:e8:df:d8:1a:95:b7:8f:e7:28:2d: a4:8f:87:4d:14:13:28:b5:8c:e8:00:7b:e5:99:77: 6e:e3:c3:fe:c4:fd:e3:3a:fa:a1:97:88:4e:66:87: df:3d:c5:02:14:b7:80:32:de:4d:b5:0f:39:c4:57: 46:04:5e:75:b4:39:17:69:6f:f0:ca:c8:26:01:7e: d2:af:0f:b3:e4:28:f4:71:6a:4f:bf:23:cf:85:c2: 74:37:dc:a6:49:f6:32:13:b3:82:bc:f5:72:65:85: ee:c0:e6:ea:d2:92:ac:dc:62:f9:79:aa:18:9d:8c: 38:4a:27:07:46:d9:a0:90:cb:9f:cb:60:bc:b9:23: aa:56:56:78:bc:40:20:0c:47:4b:7d:a2:bf:79:d5: fe:25:00:9e:6d:1f:e1:31:15:2b:75:3f:62:28:5e: ab:b5:ac:6d:d0:9d:e4:1a:d3:0c:0b:e6:dd:5d:cd: 1f:a8:53:8b:6c:73:48:1c:65:93:04:bf:c7:05:24: f9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BC:44:0C:D2:45:21:9F:E6:93:84:96:43:81:E9:FF:C0:1E:2A:98 X509v3 Authority Key Identifier: keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:a7:c4:ca:6c:5b:92:c5:15:79:d6:41:c4:83:cc:c5:2b:eb: a4:ea:41:17:e2:79:58:45:b7:63:4c:1c:da:fc:c6:b1:15:1a: 3c:fa:7c:66:55:76:36:71:96:f1:d9:06:ed:d4:4c:64:43:63: eb:e3:31:3a:da:b1:76:0d:10:d1:e1:15:76:09:1e:24:52:b0: fe:2b:96:47:09:46:d6:f8:8c:6a:bc:09:7e:b1:1f:7a:35:d1: 14:3b:41:eb:7a:e8:1d:89:11:0c:c6:55:80:7b:e8:40:cd:f2: 6e:70:94:47:94:16:b5:a3:fa:06:6d:75:ca:79:d1:8f:32:cd: 8e:9f:12:7b:6a:8a:e9:24:aa:40:79:f3:92:c1:d5:fd:08:85: 12:a1:6c:d7:d5:f1:4e:f6:d7:9b:f1:df:a8:9a:53:8f:9c:b3: 72:df:af:54:1a:48:7d:23:60:45:5a:fb:f6:0c:29:19:a3:e4: a5:20:01:a8:26:e9:c0:0a:a0:b3:75:2e:97:aa:bb:c8:2e:ef: 5e:7d:ec:00:e3:ee:5b:1d:31:c6:bd:2e:2e:9b:39:cc:c4:d3: f1:69:c6:f4:8f:64:4c:ce:56:c7:19:0b:6b:0e:7d:b6:16:92: f9:10:a7:bc:15:a8:61:6f:39:c6:33:7c:5f:f3:14:fe:87:d5: de:3e:aa:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oTs2KUq6Q29jSLriUfCyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNjZjNTNiMTM1NjZkMDFjNGE4OTNhZGYxMzBiYmI0ZmEx NjUzYWEwHhcNMjUxMjE5MjIwMDQ5WhcNMjUxMjIwMjIwMDQ5WjAzMTEwLwYDVQQD Eyg3NmJjNDQwY2QyNDUyMTlmZTY5Mzg0OTY0MzgxZTlmZmMwMWUyYTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAdBRsvarCBHJIQeoiHVeDZNqnl6 NGLAg5LPlTKNbk8l2SiWUqBgMMaTQF1WPL0ir2t/7gOJYDCpapn9qiAZKOjf2BqV t4/nKC2kj4dNFBMotYzoAHvlmXdu48P+xP3jOvqhl4hOZoffPcUCFLeAMt5NtQ85 xFdGBF51tDkXaW/wysgmAX7Srw+z5Cj0cWpPvyPPhcJ0N9ymSfYyE7OCvPVyZYXu wObq0pKs3GL5eaoYnYw4SicHRtmgkMufy2C8uSOqVlZ4vEAgDEdLfaK/edX+JQCe bR/hMRUrdT9iKF6rtaxt0J3kGtMMC+bdXc0fqFOLbHNIHGWTBL/HBST5hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHa8RAzSRSGf5pOElkOB6f/AHiqYMB8GA1UdIwQY MBaAFGtmxTsTVm0BxKiTrfEwu7T6FlOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2Yt N2JjMjY4YTBiNTE3LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2YtN2JjMjY4YTBiNTE3 LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0KfEymxb ksUVedZBxIPMxSvrpOpBF+J5WEW3Y0wc2vzGsRUaPPp8ZlV2NnGW8dkG7dRMZENj 6+MxOtqxdg0Q0eEVdgkeJFKw/iuWRwlG1viMarwJfrEfejXRFDtB63roHYkRDMZV gHvoQM3ybnCUR5QWtaP6Bm11ynnRjzLNjp8Se2qK6SSqQHnzksHV/QiFEqFs19Xx TvbXm/HfqJpTj5yzct+vVBpIfSNgRVr79gwpGaPkpSABqCbpwAqgs3Uul6q7yC7v Xn3sAOPuWx0xxr0uLps5zMTT8WnG9I9kTM5WxxkLaw59thaS+RCnvBWoYW85xjN8 X/MU/ofV3j6qQA== -----END CERTIFICATE-----Generated at Sat Dec 20 03:53:29 2025 by rpki-client