This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft File: I06fdccyb3ZciWbC7cAKmCpep_A.mft (raw, json) Hash identifier: 3XSB9i33lCZGXlzrNR9LM566IQGUqq34NA2BJ/XKLF4= Subject key identifier: C7:B8:6A:0E:54:21:1C:5D:1C:4F:B7:4D:23:5D:65:50:82:2C:78:24 Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0 Certificate issuer: /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0 Certificate serial: 019B19BB7F94F83B36D6B69AFEBCC8659B2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft Manifest number: 14E4 Signing time: Sat 13 Dec 2025 22:01:16 +0000 Manifest this update: Sat 13 Dec 2025 22:01:16 +0000 Manifest next update: Sun 14 Dec 2025 22:01:16 +0000 Files and hashes: 1: I06fdccyb3ZciWbC7cAKmCpep_A.crl (hash: jdmUbxfG61uyHCTamWPsO4AHQCch0LF3EDa9rdPn1AM=) 2: _abtUqDmMxDQ2RmQqkGL8N8DjTE.roa (hash: CRHU3YWrzulAziPCk+beyoXQoDHAl8oOT3cyglDGbAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:7f:94:f8:3b:36:d6:b6:9a:fe:bc:c8:65:9b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0 Validity Not Before: Dec 13 22:01:16 2025 GMT Not After : Dec 14 22:01:16 2025 GMT Subject: CN=c7b86a0e54211c5d1c4fb74d235d6550822c7824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:af:d4:44:ff:8f:05:1b:94:68:70:24:fc:3d: c6:c0:a0:70:71:b4:df:4a:ac:a8:46:e5:24:2d:71: a9:94:db:2b:17:55:15:3a:f0:de:3d:1f:f3:4d:e8: a0:90:cb:c7:a1:2e:3d:f8:66:25:3f:d3:32:60:b4: 64:92:ea:f9:29:54:c5:b3:0e:82:86:e0:8e:b8:26: 3c:32:7d:58:60:61:aa:be:33:b4:9c:fc:58:3f:e9: 7d:84:4a:bc:00:0d:73:ea:39:2b:8b:13:fb:5d:53: aa:08:17:0f:3b:f6:54:75:5e:3c:97:15:ff:72:ef: 88:6d:fe:39:e7:65:57:c0:e7:3c:3f:35:2a:2c:00: f0:82:ec:a8:46:16:dd:d4:d7:c0:cc:25:0f:66:f0: ff:f6:72:fa:f0:08:81:22:45:be:3f:e8:17:85:09: bb:fb:2c:32:b8:2e:95:d3:21:92:10:e2:50:6a:0f: c6:cf:03:5a:b1:41:30:e6:c0:5f:87:b1:bf:82:60: 75:4e:43:29:6c:00:67:82:29:b4:0f:b0:8b:7a:72: cd:d0:89:30:c2:81:de:88:d1:27:a5:2d:99:c5:f7: 03:0c:91:68:ab:fb:92:52:5f:90:c7:35:e5:58:81: 76:75:ae:b9:56:3e:c9:cc:06:75:22:43:08:fc:ed: 07:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B8:6A:0E:54:21:1C:5D:1C:4F:B7:4D:23:5D:65:50:82:2C:78:24 X509v3 Authority Key Identifier: keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:51:49:b0:ec:e6:e9:6d:d2:34:eb:3f:83:4d:eb:68:80:32: 7d:f3:52:74:90:44:1f:0a:4b:25:d2:85:7b:25:52:4c:ab:72: 48:bb:7f:ba:8f:e6:2a:e0:b7:d8:02:73:c6:67:ec:d0:66:7d: f6:67:82:2d:a0:4b:05:a2:e5:c3:24:44:c0:94:76:c3:47:3c: a6:11:82:bc:1a:c6:25:23:8a:53:8d:a1:24:37:a4:bf:af:61: 2d:51:3a:3f:97:c7:ee:54:90:1d:49:75:30:45:66:30:36:29: 04:ae:94:85:13:74:d6:29:16:2c:4c:af:cf:cc:9c:70:41:90: a0:75:8e:4f:df:7d:77:8f:92:85:a6:89:39:a5:ab:2e:6e:7b: 42:31:18:45:cf:e8:db:a4:f7:35:78:ca:06:e0:9c:62:1b:80: 3d:f1:a0:07:5e:68:a2:ac:8f:d8:53:91:f0:9f:30:f5:e3:1d: f7:2d:0d:84:a4:80:4d:2b:bb:8a:22:24:12:6c:37:b1:55:ea: 65:cf:85:87:d5:e8:c2:2b:00:6b:22:7d:d5:e7:d2:58:05:48: 90:f4:84:9f:63:c1:ca:28:d5:a9:00:90:c1:36:dd:28:3a:62: 3a:36:11:88:46:79:92:31:c1:d4:e1:78:23:e0:95:d2:2d:38: ae:a9:8b:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu3+U+Ds21raa/rzIZZstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGU5Zjc1YzczMjZmNzY1Yzg5NjZjMmVkYzAwYTk4MmE1 ZWE3ZjAwHhcNMjUxMjEzMjIwMTE2WhcNMjUxMjE0MjIwMTE2WjAzMTEwLwYDVQQD EyhjN2I4NmEwZTU0MjExYzVkMWM0ZmI3NGQyMzVkNjU1MDgyMmM3ODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq/URP+PBRuUaHAk/D3GwKBwcbTf SqyoRuUkLXGplNsrF1UVOvDePR/zTeigkMvHoS49+GYlP9MyYLRkkur5KVTFsw6C huCOuCY8Mn1YYGGqvjO0nPxYP+l9hEq8AA1z6jkrixP7XVOqCBcPO/ZUdV48lxX/ cu+Ibf4552VXwOc8PzUqLADwguyoRhbd1NfAzCUPZvD/9nL68AiBIkW+P+gXhQm7 +ywyuC6V0yGSEOJQag/GzwNasUEw5sBfh7G/gmB1TkMpbABngim0D7CLenLN0Ikw woHeiNEnpS2ZxfcDDJFoq/uSUl+QxzXlWIF2da65Vj7JzAZ1IkMI/O0HQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMe4ag5UIRxdHE+3TSNdZVCCLHgkMB8GA1UdIwQY MBaAFCNOn3XHMm92XIlmwu3ACpgqXqfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTA2ZmRjY3liM1pjaVdiQzdjQUttQ3BlcF9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82MzVhMGQtOTIxZi00NzExLWI3ZDQt NzdkZWUyZDc5YWU0LzEvSTA2ZmRjY3liM1pjaVdiQzdjQUttQ3BlcF9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82MzVhMGQtOTIxZi00NzExLWI3ZDQtNzdkZWUyZDc5YWU0 LzEvSTA2ZmRjY3liM1pjaVdiQzdjQUttQ3BlcF9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlFJsOzm 6W3SNOs/g03raIAyffNSdJBEHwpLJdKFeyVSTKtySLt/uo/mKuC32AJzxmfs0GZ9 9meCLaBLBaLlwyREwJR2w0c8phGCvBrGJSOKU42hJDekv69hLVE6P5fH7lSQHUl1 MEVmMDYpBK6UhRN01ikWLEyvz8yccEGQoHWOT999d4+ShaaJOaWrLm57QjEYRc/o 26T3NXjKBuCcYhuAPfGgB15ooqyP2FOR8J8w9eMd9y0NhKSATSu7iiIkEmw3sVXq Zc+Fh9XowisAayJ91efSWAVIkPSEn2PByijVqQCQwTbdKDpiOjYRiEZ5kjHB1OF4 I+CV0i04rqmLhQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:56:24 2025 by rpki-client