This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.mft File: ISv6b940VbwJkojp_0UNmtghbGA.mft (raw, json) Hash identifier: 6fb9TpD+N4gBBspeZ6aICe+mN0DM8MlmwuA/95gSURs= Subject key identifier: D3:40:2F:06:AE:12:DC:D7:8E:16:44:7F:A1:3D:2B:91:0C:87:6F:5C Authority key identifier: 21:2B:FA:6F:DE:34:55:BC:09:92:88:E9:FF:45:0D:9A:D8:21:6C:60 Certificate issuer: /CN=212bfa6fde3455bc099288e9ff450d9ad8216c60 Certificate serial: 019B593EE09B7DDDA932C44936FC2BE180CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.mft Manifest number: 1C Signing time: Fri 26 Dec 2025 06:00:51 +0000 Manifest this update: Fri 26 Dec 2025 06:00:51 +0000 Manifest next update: Sat 27 Dec 2025 06:00:51 +0000 Files and hashes: 1: ISv6b940VbwJkojp_0UNmtghbGA.crl (hash: Wc91TMaSt5EppkZUjMzN1zhuU+zgz+421Ze8ghtUKwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.mft rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:e0:9b:7d:dd:a9:32:c4:49:36:fc:2b:e1:80:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=212bfa6fde3455bc099288e9ff450d9ad8216c60 Validity Not Before: Dec 26 06:00:51 2025 GMT Not After : Dec 27 06:00:51 2025 GMT Subject: CN=d3402f06ae12dcd78e16447fa13d2b910c876f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e3:f3:84:42:a2:21:82:ca:db:73:9d:2e:fa: 4a:b6:f1:af:15:11:45:dd:15:f7:47:cd:0d:24:d5: f6:ad:06:7a:ac:11:54:71:fd:4e:de:a6:e3:f1:e8: bc:b2:19:73:54:62:ac:48:1a:ee:62:91:c3:70:49: 0c:7b:ff:28:db:95:56:19:e7:d9:b9:e8:c2:be:ad: 62:e0:ee:19:1e:cb:e0:90:c5:a9:01:5e:dc:92:09: 86:03:c3:e3:6f:b3:bf:f4:95:79:17:e5:0b:ad:0c: 06:bd:bf:11:a8:12:ca:5c:0b:bd:6e:06:a1:4a:2d: 26:47:96:c9:a0:7c:94:04:d7:c1:e0:b8:0e:7a:0f: 29:e8:8e:8d:27:27:7e:e8:79:26:84:12:97:b9:94: aa:7d:a3:67:7a:2c:8f:f2:13:92:2f:d1:0a:f4:f9: ce:9f:83:d0:ae:ba:63:b3:b1:be:75:40:4e:0e:44: e0:ef:f5:bc:9e:9f:ef:ea:0f:16:ab:83:bd:ed:4d: 9a:ca:83:83:28:e9:92:4f:b3:66:f1:a6:15:6b:f3: 30:f5:33:18:5d:60:f2:7f:61:72:be:13:ec:ec:07: 8f:4f:2d:0b:8d:6f:b5:26:0a:07:7b:3e:7b:fc:2d: d3:d1:99:63:5b:b8:35:4d:42:ff:0d:d5:e2:0c:8a: 52:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:40:2F:06:AE:12:DC:D7:8E:16:44:7F:A1:3D:2B:91:0C:87:6F:5C X509v3 Authority Key Identifier: keyid:21:2B:FA:6F:DE:34:55:BC:09:92:88:E9:FF:45:0D:9A:D8:21:6C:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:c5:b0:80:cc:26:c7:40:b5:33:5a:53:83:e7:18:86:ac:64: 32:c3:cc:fd:7e:08:a5:e8:07:81:d1:9b:9d:4d:05:6f:23:10: 5d:4e:9b:9c:c8:11:c6:9b:b4:86:fe:0a:1b:6c:03:54:67:2c: ea:44:fa:2a:d7:32:40:d7:5b:40:4e:fe:59:7d:9c:b4:25:55: 08:b0:f4:1b:26:c8:fb:74:8e:cb:48:01:c7:fc:53:35:bf:30: bd:8a:f6:6a:d7:13:57:91:b2:33:10:80:55:3c:35:5e:f2:88: cd:51:1d:c8:42:10:84:9c:cc:08:1c:3a:a2:43:d6:c1:e8:76: 06:71:67:9a:d3:57:a7:3d:52:60:9f:8d:8a:70:32:8b:f3:94: 6a:20:1f:5e:4b:b2:6a:cd:6c:f1:bf:e7:9e:40:ec:f2:45:17: c2:7f:63:56:38:a3:75:b8:ba:f2:75:91:26:a5:64:8d:40:42: 25:b5:29:39:21:5b:77:9c:f1:2c:16:44:84:55:db:dd:f5:2a: 67:d7:85:b0:e1:2c:83:2d:b8:0e:27:8c:6e:06:9e:33:91:90: da:7c:83:89:64:90:cc:aa:cb:84:1b:19:d4:69:ff:6b:c3:20: 63:95:67:a4:78:44:6e:17:ea:a3:b3:0c:8a:84:36:95:5b:69: 09:5d:d2:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPuCbfd2pMsRJNvwr4YDLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMmJmYTZmZGUzNDU1YmMwOTkyODhlOWZmNDUwZDlhZDgy MTZjNjAwHhcNMjUxMjI2MDYwMDUxWhcNMjUxMjI3MDYwMDUxWjAzMTEwLwYDVQQD EyhkMzQwMmYwNmFlMTJkY2Q3OGUxNjQ0N2ZhMTNkMmI5MTBjODc2ZjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquPzhEKiIYLK23OdLvpKtvGvFRFF 3RX3R80NJNX2rQZ6rBFUcf1O3qbj8ei8shlzVGKsSBruYpHDcEkMe/8o25VWGefZ uejCvq1i4O4ZHsvgkMWpAV7ckgmGA8Pjb7O/9JV5F+ULrQwGvb8RqBLKXAu9bgah Si0mR5bJoHyUBNfB4LgOeg8p6I6NJyd+6HkmhBKXuZSqfaNneiyP8hOSL9EK9PnO n4PQrrpjs7G+dUBODkTg7/W8np/v6g8Wq4O97U2ayoODKOmST7Nm8aYVa/Mw9TMY XWDyf2FyvhPs7AePTy0LjW+1JgoHez57/C3T0ZljW7g1TUL/DdXiDIpS7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNALwauEtzXjhZEf6E9K5EMh29cMB8GA1UdIwQY MBaAFCEr+m/eNFW8CZKI6f9FDZrYIWxgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVN2NmI5NDBWYndKa29qcF8wVU5tdGdoYkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81ZGMxMGQtNGI2Ny00Y2E1LWI1MWIt ZjRhYzA0YWRiZDk1LzEvSVN2NmI5NDBWYndKa29qcF8wVU5tdGdoYkdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC81ZGMxMGQtNGI2Ny00Y2E1LWI1MWItZjRhYzA0YWRiZDk1 LzEvSVN2NmI5NDBWYndKa29qcF8wVU5tdGdoYkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8WwgMwm x0C1M1pTg+cYhqxkMsPM/X4IpegHgdGbnU0FbyMQXU6bnMgRxpu0hv4KG2wDVGcs 6kT6KtcyQNdbQE7+WX2ctCVVCLD0GybI+3SOy0gBx/xTNb8wvYr2atcTV5GyMxCA VTw1XvKIzVEdyEIQhJzMCBw6okPWweh2BnFnmtNXpz1SYJ+NinAyi/OUaiAfXkuy as1s8b/nnkDs8kUXwn9jVjijdbi68nWRJqVkjUBCJbUpOSFbd5zxLBZEhFXb3fUq Z9eFsOEsgy24DieMbgaeM5GQ2nyDiWSQzKrLhBsZ1Gn/a8MgY5VnpHhEbhfqo7MM ioQ2lVtpCV3Sbg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:19 2025 by rpki-client