This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json) Hash identifier: zZ2N6g60Ahug5mu+yqBY4Y9DSdLmDA8jrctMdRk27fs= Subject key identifier: E1:6A:EF:A4:A0:9C:AE:3C:85:30:C3:1D:4A:11:A9:A2:1B:E1:67:EE Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50 Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150 Certificate serial: 019B40C87EE932A95626B80C6C966258E3E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft Manifest number: 04B5 Signing time: Sun 21 Dec 2025 12:00:40 +0000 Manifest this update: Sun 21 Dec 2025 12:00:40 +0000 Manifest next update: Mon 22 Dec 2025 12:00:40 +0000 Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: y2oSsVEKs+JjgLUuAO3EWO/8HjXSN/Q5WchlB9jLgCI=) 2: BDHKukDv4jqfvg5mUVq9SOfKkHk.roa (hash: r69AyZ5q//j/yv/BwLLu5AvuWEdbokVUHIhkdE53vJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:7e:e9:32:a9:56:26:b8:0c:6c:96:62:58:e3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150 Validity Not Before: Dec 21 12:00:40 2025 GMT Not After : Dec 22 12:00:40 2025 GMT Subject: CN=e16aefa4a09cae3c8530c31d4a11a9a21be167ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bf:cd:13:10:cd:b3:e2:50:31:3a:09:82:d5: 9c:42:82:b4:0b:1b:e1:a0:d7:c3:47:81:87:57:a6: 28:60:9c:c1:be:7f:07:8c:01:ae:45:45:3f:e0:b5: 47:66:07:85:09:66:d1:1b:c8:62:37:11:67:74:9e: d6:bd:cc:5f:9c:8c:8b:35:a3:e9:ea:10:4e:93:a7: d0:a8:6d:d2:3f:fb:56:ee:06:7f:ad:4b:38:1d:e8: 09:f6:6f:47:e5:62:32:53:b6:ce:32:d2:fd:0e:4b: a6:a7:c9:b5:d7:09:e0:9d:06:6a:4c:ec:0e:72:09: 30:f9:7b:77:c4:83:f9:f1:17:1b:7b:42:e5:e3:7f: 4c:ef:5d:89:3f:c5:b3:2f:27:5f:9d:fc:b1:b0:01: 16:0d:d4:58:e8:46:25:76:06:4e:64:d0:c2:a1:52: 5b:70:fc:f0:4f:f3:46:75:85:a9:f6:f4:53:0e:9d: ae:53:32:a9:c3:07:38:44:0c:42:6e:b1:1c:40:db: f1:60:ce:14:12:8c:67:94:c4:12:9c:65:e2:1a:2a: b2:0f:32:e1:ae:d1:fe:66:7b:68:e1:ce:7d:b3:2c: 84:52:e9:a1:4c:4a:37:9e:47:56:18:e3:fe:2b:f9: 07:fa:c9:97:0f:bc:62:23:1c:45:af:67:71:d0:7d: b5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6A:EF:A4:A0:9C:AE:3C:85:30:C3:1D:4A:11:A9:A2:1B:E1:67:EE X509v3 Authority Key Identifier: keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:98:2a:96:ec:57:f5:0a:25:53:9d:0f:83:ed:6d:2c:45:fd: 54:fd:55:bc:ab:57:88:24:73:bd:e8:b1:3e:82:f7:db:7f:da: 78:53:78:46:b0:be:8e:a6:e0:e6:63:20:d9:f1:a2:bf:65:9c: 47:e6:55:38:ef:e6:e4:ed:d0:ed:40:23:27:53:37:1b:fe:80: a5:a6:49:a5:d1:a3:df:3b:00:6f:e4:ed:96:e6:d2:c8:00:a6: f6:cd:52:cf:ad:d2:0b:e8:39:be:a6:50:4e:53:2d:2a:66:2c: 0c:bb:7b:85:ff:12:74:e1:e9:03:86:7f:41:10:bd:ea:66:45: 0f:df:4f:b8:cf:b0:2f:b3:d9:4e:31:0c:04:73:34:9e:1c:95: 70:69:83:20:3b:08:4f:53:3c:8b:b6:d3:50:2c:13:f8:1f:bb: 7f:82:28:92:61:ae:30:13:5a:03:e5:2f:2d:da:ec:ce:5e:35: c7:22:f4:8a:05:57:e8:70:68:f2:13:e0:06:f2:90:db:9b:0e: cc:cc:a3:61:d3:1a:37:26:56:e4:9c:3d:eb:bb:ba:3b:a7:1c: c6:03:87:2b:af:d0:48:f6:e1:d6:32:1a:09:30:2d:72:6b:98: 87:64:8a:1e:aa:e1:96:d1:fb:ec:0a:bc:ee:c3:5e:38:15:e2: 33:c3:14:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyH7pMqlWJrgMbJZiWOPgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYTYyYjMwOWEzNzg1NDI1OTBhMTJiMzljNWY3MGNkYjBl N2IxNTAwHhcNMjUxMjIxMTIwMDQwWhcNMjUxMjIyMTIwMDQwWjAzMTEwLwYDVQQD EyhlMTZhZWZhNGEwOWNhZTNjODUzMGMzMWQ0YTExYTlhMjFiZTE2N2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7/NExDNs+JQMToJgtWcQoK0Cxvh oNfDR4GHV6YoYJzBvn8HjAGuRUU/4LVHZgeFCWbRG8hiNxFndJ7WvcxfnIyLNaPp 6hBOk6fQqG3SP/tW7gZ/rUs4HegJ9m9H5WIyU7bOMtL9Dkump8m11wngnQZqTOwO cgkw+Xt3xIP58Rcbe0Ll439M712JP8WzLydfnfyxsAEWDdRY6EYldgZOZNDCoVJb cPzwT/NGdYWp9vRTDp2uUzKpwwc4RAxCbrEcQNvxYM4UEoxnlMQSnGXiGiqyDzLh rtH+Znto4c59syyEUumhTEo3nkdWGOP+K/kH+smXD7xiIxxFr2dx0H21QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFq76SgnK48hTDDHUoRqaIb4WfuMB8GA1UdIwQY MBaAFAOmKzCaN4VCWQoSs5xfcM2w57FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDJhMTktNDc0Ni00NzhmLTk5MzYt MjczM2Y2OTljYjYyLzEvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDJhMTktNDc0Ni00NzhmLTk5MzYtMjczM2Y2OTljYjYy LzEvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5gqluxX 9QolU50Pg+1tLEX9VP1VvKtXiCRzveixPoL323/aeFN4RrC+jqbg5mMg2fGiv2Wc R+ZVOO/m5O3Q7UAjJ1M3G/6ApaZJpdGj3zsAb+TtlubSyACm9s1Sz63SC+g5vqZQ TlMtKmYsDLt7hf8SdOHpA4Z/QRC96mZFD99PuM+wL7PZTjEMBHM0nhyVcGmDIDsI T1M8i7bTUCwT+B+7f4IokmGuMBNaA+UvLdrszl41xyL0igVX6HBo8hPgBvKQ25sO zMyjYdMaNyZW5Jw967u6O6ccxgOHK6/QSPbh1jIaCTAtcmuYh2SKHqrhltH77Aq8 7sNeOBXiM8MU0Q== -----END CERTIFICATE-----Generated at Sun Dec 21 15:41:20 2025 by rpki-client