This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft File: _6vCNZX9gER9mPXsNRMWG9JHP8Y.mft (raw, json) Hash identifier: kzNm7BynV+1xWiU5XMyUwb162maKwXdStvMJUKQ15lI= Subject key identifier: 5B:74:04:BE:C4:B5:DE:71:05:D1:71:E8:78:0D:FD:36:97:A6:38:94 Authority key identifier: FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6 Certificate issuer: /CN=ffabc23595fd80447d98f5ec3513161bd2473fc6 Certificate serial: 019B372167A6D3D6B7BC7E1634200300B651 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 15:01:34 +0000 Manifest this update: Fri 19 Dec 2025 15:01:34 +0000 Manifest next update: Sat 20 Dec 2025 15:01:34 +0000 Files and hashes: 1: _6vCNZX9gER9mPXsNRMWG9JHP8Y.crl (hash: CFhrrkuSw5g7VkhFPiXu7UG1K1IKtWhMuP+UTIa32ts=) 2: n0WE9rwocCHCYcBXCKZfpxQ3G2M.roa (hash: BVGoc++GdN0W0NrCtzzymI9R4sw/BZhgTYZXjkBBFbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:67:a6:d3:d6:b7:bc:7e:16:34:20:03:00:b6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffabc23595fd80447d98f5ec3513161bd2473fc6 Validity Not Before: Dec 19 15:01:34 2025 GMT Not After : Dec 20 15:01:34 2025 GMT Subject: CN=5b7404bec4b5de7105d171e8780dfd3697a63894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f9:bf:1c:f7:3d:88:4c:f4:c4:84:11:0f:04: 55:d7:4f:fd:f4:0d:62:e0:49:ba:7f:30:52:ce:15: b3:2e:60:24:ca:29:69:4d:6d:25:3b:4e:87:3d:0f: fc:59:bd:56:a7:af:89:fb:35:2b:29:e9:32:a4:76: 9c:8b:bd:aa:b7:16:50:cc:27:7a:29:df:1d:0c:95: f5:60:52:b7:f4:83:61:b6:61:27:e0:50:39:20:57: 36:2b:97:f9:d5:a8:a2:7d:68:c2:0b:f7:84:5d:c8: db:bc:de:4c:57:2e:b8:20:01:23:78:c8:d9:1e:c4: 5f:5a:07:85:da:81:08:62:15:8f:a7:eb:09:d3:f0: d4:05:09:f5:a7:8f:c2:9c:c9:74:d9:f4:28:77:f5: 55:3f:26:39:81:e3:3c:bc:40:cf:5e:21:34:09:2a: a1:70:f0:43:3a:b3:cb:47:1c:a4:f9:ea:19:7d:90: 0d:e3:c0:7c:85:f6:0c:9a:c8:6e:fa:ef:24:45:f3: d8:a9:13:2a:42:41:e9:ce:cd:12:89:35:63:fa:d2: b1:df:f4:d6:38:a5:d8:10:86:e6:de:fa:3a:5f:75: c4:bf:4d:28:e2:ad:2a:bb:c7:fa:38:79:ff:3f:6b: 40:f5:83:8d:68:37:92:07:bc:fd:72:e5:92:1c:84: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:74:04:BE:C4:B5:DE:71:05:D1:71:E8:78:0D:FD:36:97:A6:38:94 X509v3 Authority Key Identifier: keyid:FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4d:f7:39:29:0b:bc:ee:03:fa:d7:cb:06:e9:78:f9:c3:89: 1a:80:be:49:8b:fc:6c:79:56:b4:6a:77:2c:ba:16:a3:24:e7: 83:ce:1e:b9:45:40:75:5b:ba:6f:ee:75:e0:aa:00:e9:58:85: 23:86:a3:0f:1d:63:be:91:a1:d3:89:15:32:d9:69:40:2b:e5: 88:84:9f:99:9f:ba:a5:3c:bd:9e:cc:31:41:2c:27:1d:e4:5d: b5:53:0b:5f:94:62:94:71:36:18:85:b8:8a:98:90:69:69:77: ad:af:bd:d6:e3:fe:fd:1a:78:5b:bb:08:9d:86:eb:c3:22:c2: 39:11:7b:7a:c8:78:2b:cb:7d:44:57:d2:04:fd:69:a1:e5:9d: fb:a7:fa:28:46:48:c5:f6:56:9d:41:09:e6:fe:da:47:70:db: ce:c1:05:21:6c:e4:4e:be:91:66:31:6b:9d:4a:96:1c:c5:d8: 5c:a5:7f:95:99:35:5a:96:37:51:af:84:01:5f:28:f6:1e:27: 96:d4:ad:6a:17:09:20:4a:3e:2e:76:04:8a:67:91:9b:13:bf: 87:48:6b:ad:e7:a9:19:6b:cd:29:28:de:60:35:8a:58:d5:5d: 4d:59:41:7c:b5:3b:5d:32:db:91:0d:bc:b0:ae:35:3b:4a:74: 16:e6:21:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IWem09a3vH4WNCADALZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYWJjMjM1OTVmZDgwNDQ3ZDk4ZjVlYzM1MTMxNjFiZDI0 NzNmYzYwHhcNMjUxMjE5MTUwMTM0WhcNMjUxMjIwMTUwMTM0WjAzMTEwLwYDVQQD Eyg1Yjc0MDRiZWM0YjVkZTcxMDVkMTcxZTg3ODBkZmQzNjk3YTYzODk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/m/HPc9iEz0xIQRDwRV10/99A1i 4Em6fzBSzhWzLmAkyilpTW0lO06HPQ/8Wb1Wp6+J+zUrKekypHaci72qtxZQzCd6 Kd8dDJX1YFK39INhtmEn4FA5IFc2K5f51aiifWjCC/eEXcjbvN5MVy64IAEjeMjZ HsRfWgeF2oEIYhWPp+sJ0/DUBQn1p4/CnMl02fQod/VVPyY5geM8vEDPXiE0CSqh cPBDOrPLRxyk+eoZfZAN48B8hfYMmshu+u8kRfPYqRMqQkHpzs0SiTVj+tKx3/TW OKXYEIbm3vo6X3XEv00o4q0qu8f6OHn/P2tA9YONaDeSB7z9cuWSHITv9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFt0BL7Etd5xBdFx6HgN/TaXpjiUMB8GA1UdIwQY MBaAFP+rwjWV/YBEfZj17DUTFhvSRz/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZ2Q05aWDlnRVI5bVBYc05STVdHOUpIUDhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xOTEyMTktNDdjOS00YjFiLThlNDYt ZGQ4YTY4ZGJkM2I2LzEvXzZ2Q05aWDlnRVI5bVBYc05STVdHOUpIUDhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8xOTEyMTktNDdjOS00YjFiLThlNDYtZGQ4YTY4ZGJkM2I2 LzEvXzZ2Q05aWDlnRVI5bVBYc05STVdHOUpIUDhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAE33OSkL vO4D+tfLBul4+cOJGoC+SYv8bHlWtGp3LLoWoyTng84euUVAdVu6b+514KoA6ViF I4ajDx1jvpGh04kVMtlpQCvliISfmZ+6pTy9nswxQSwnHeRdtVMLX5RilHE2GIW4 ipiQaWl3ra+91uP+/Rp4W7sInYbrwyLCORF7esh4K8t9RFfSBP1poeWd+6f6KEZI xfZWnUEJ5v7aR3DbzsEFIWzkTr6RZjFrnUqWHMXYXKV/lZk1WpY3Ua+EAV8o9h4n ltStahcJIEo+LnYEimeRmxO/h0hrreepGWvNKSjeYDWKWNVdTVlBfLU7XTLbkQ28 sK41O0p0FuYhnw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:09:32 2025 by rpki-client