This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft File: D6vrbvgg09UvBTciM8VB7ksU82E.mft (raw, json) Hash identifier: D/U2t2nz0/ehPSGQmvq1ZEUPFnTGn2KlODiQQwM8pjQ= Subject key identifier: 20:A2:93:42:42:54:2B:A4:D3:93:B8:9B:83:18:08:EA:66:56:1A:F3 Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61 Certificate issuer: /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361 Certificate serial: 019B4438367C164E818611C06B422111DDFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 04:01:33 +0000 Manifest this update: Mon 22 Dec 2025 04:01:33 +0000 Manifest next update: Tue 23 Dec 2025 04:01:33 +0000 Files and hashes: 1: Bk-PC_3JIm04gifM592QQdoN3Ks.roa (hash: iME6n6jnCDzSVb0/SGfLuBM5Wc4sPCswNojVHBOxZCs=) 2: D6vrbvgg09UvBTciM8VB7ksU82E.crl (hash: 0+eOz3c/8av6bGoYoxG9qc/tXCLxPwAjSJsoWPspm1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:36:7c:16:4e:81:86:11:c0:6b:42:21:11:dd:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361 Validity Not Before: Dec 22 04:01:33 2025 GMT Not After : Dec 23 04:01:33 2025 GMT Subject: CN=20a2934242542ba4d393b89b831808ea66561af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1e:cd:fe:79:e1:c6:73:6a:b7:c1:4b:22:92: 2e:0f:64:b1:e0:6f:d3:e7:16:1b:77:4f:d6:96:b0: 1e:55:d0:d1:4b:34:75:0a:5c:cf:4e:34:f7:1c:05: a9:a0:28:8b:3a:f3:61:2a:0b:7e:05:a2:1c:83:9a: 98:f7:28:e4:18:33:dd:55:4e:2e:f5:16:a6:e4:be: ad:0d:48:87:c3:9f:40:a9:d0:fb:37:45:4b:71:4c: cc:fb:b8:ed:7a:ba:34:b9:dc:67:b4:04:b4:97:f0: dc:0e:bc:10:9a:34:8f:e5:6a:19:88:10:1a:4e:d3: 17:65:d3:11:e2:0a:b1:f7:61:bb:53:4b:45:5e:93: 88:4b:bc:42:cc:da:65:02:a2:5e:ee:d2:25:cf:1a: 59:45:a5:37:b0:0f:7f:1c:84:40:5f:93:64:e0:3b: 01:a7:a9:ad:5b:f5:40:14:ac:47:66:bf:40:9c:b6: f4:f9:ba:58:e6:ef:90:15:5d:48:ed:62:8a:50:5e: 30:08:46:09:46:83:9e:97:9a:b1:da:8f:2c:42:8d: c5:6a:40:89:28:93:e5:44:49:0c:ff:dc:a3:4e:1e: 70:18:68:03:77:6d:f1:e3:61:55:7c:d9:17:66:88: e8:09:3d:09:51:fa:2f:d5:53:c7:4f:c8:9e:13:2a: a1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A2:93:42:42:54:2B:A4:D3:93:B8:9B:83:18:08:EA:66:56:1A:F3 X509v3 Authority Key Identifier: keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:a3:56:52:1f:79:63:0f:f6:12:de:c4:51:7a:f3:9d:3c:95: 93:86:01:e5:da:e5:b1:d1:32:93:b1:d2:de:8b:bf:3f:67:23: 0c:0b:24:14:c8:c6:8e:97:a9:a5:0e:8e:98:a0:f1:8e:75:45: 51:e8:62:55:4c:52:d4:b3:15:f4:51:9f:8e:70:3a:d9:2d:2a: 18:cc:8b:c2:ff:62:d2:0b:f4:dd:f2:fd:f8:1f:e5:07:71:fd: be:e2:2e:e6:58:9f:77:53:16:eb:14:f1:10:07:e1:ae:68:9b: bf:d3:44:0e:52:56:9d:f1:80:cf:b6:ba:d0:42:c8:1b:20:22: e2:02:9d:e0:a1:21:b2:bc:2f:a9:42:00:68:b4:2c:e9:b2:16: a5:ea:a8:a6:29:d9:f0:78:7a:5c:85:58:91:ee:9e:7d:e7:b6: 1f:c2:fa:cd:7e:74:b8:68:32:b2:21:45:83:6f:42:59:f9:de: 31:fe:22:95:36:e0:ab:54:09:3a:3b:96:4c:32:22:6f:fe:7c: 3b:a4:5f:a4:c0:78:73:c3:bc:f6:b8:e2:48:2b:1f:95:6d:29: 63:67:34:c8:5a:d4:dc:d9:01:69:d1:80:55:4d:e1:69:1b:f7: 67:39:80:65:a3:34:10:65:a8:7f:c7:c1:c5:b5:9d:12:cc:91: 88:c0:af:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEODZ8Fk6BhhHAa0IhEd3/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmYWJlYjZlZjgyMGQzZDUyZjA1MzcyMjMzYzU0MWVlNGIx NGYzNjEwHhcNMjUxMjIyMDQwMTMzWhcNMjUxMjIzMDQwMTMzWjAzMTEwLwYDVQQD EygyMGEyOTM0MjQyNTQyYmE0ZDM5M2I4OWI4MzE4MDhlYTY2NTYxYWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B7N/nnhxnNqt8FLIpIuD2Sx4G/T 5xYbd0/WlrAeVdDRSzR1ClzPTjT3HAWpoCiLOvNhKgt+BaIcg5qY9yjkGDPdVU4u 9Ram5L6tDUiHw59AqdD7N0VLcUzM+7jtero0udxntAS0l/DcDrwQmjSP5WoZiBAa TtMXZdMR4gqx92G7U0tFXpOIS7xCzNplAqJe7tIlzxpZRaU3sA9/HIRAX5Nk4DsB p6mtW/VAFKxHZr9AnLb0+bpY5u+QFV1I7WKKUF4wCEYJRoOel5qx2o8sQo3FakCJ KJPlREkM/9yjTh5wGGgDd23x42FVfNkXZojoCT0JUfov1VPHT8ieEyqhwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCik0JCVCuk05O4m4MYCOpmVhrzMB8GA1UdIwQY MBaAFA+r6274INPVLwU3IjPFQe5LFPNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mM2Q4MzQtY2VlZC00YmJkLWFiZTEt NWEzNzEyNjcwNWFkLzEvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mM2Q4MzQtY2VlZC00YmJkLWFiZTEtNWEzNzEyNjcwNWFk LzEvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqNWUh95 Yw/2Et7EUXrznTyVk4YB5drlsdEyk7HS3ou/P2cjDAskFMjGjpeppQ6OmKDxjnVF UehiVUxS1LMV9FGfjnA62S0qGMyLwv9i0gv03fL9+B/lB3H9vuIu5lifd1MW6xTx EAfhrmibv9NEDlJWnfGAz7a60ELIGyAi4gKd4KEhsrwvqUIAaLQs6bIWpeqopinZ 8Hh6XIVYke6efee2H8L6zX50uGgysiFFg29CWfneMf4ilTbgq1QJOjuWTDIib/58 O6RfpMB4c8O89rjiSCsflW0pY2c0yFrU3NkBadGAVU3haRv3ZzmAZaM0EGWof8fB xbWdEsyRiMCvjQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:48:55 2025 by rpki-client