This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft File: C6VqvctPbwyGuDLswT9eJJch1vg.mft (raw, json) Hash identifier: GRBidF8iT0Yf6urCBKOmLP9k99OHkscf+0pWnWTcnbc= Subject key identifier: F1:E2:E7:68:A1:B5:F9:68:C2:34:26:2E:6C:26:EC:F0:56:23:7A:D1 Authority key identifier: 0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8 Certificate issuer: /CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8 Certificate serial: 019B269B75568D1C9C97754AD3D936547D23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft Manifest number: 0E25 Signing time: Tue 16 Dec 2025 10:01:20 +0000 Manifest this update: Tue 16 Dec 2025 10:01:20 +0000 Manifest next update: Wed 17 Dec 2025 10:01:20 +0000 Files and hashes: 1: 10gRzD3VrAGl4bbzZAnzRnZ-9NY.roa (hash: lcACm1XYWQGs+OoRyS5RawPhw9wP7Mmy1MtCSpjZTr8=) 2: C6VqvctPbwyGuDLswT9eJJch1vg.crl (hash: mtNiAuufhEosbL6N7M7/cvtDx0IzAi5LLIahbM9deYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:75:56:8d:1c:9c:97:75:4a:d3:d9:36:54:7d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8 Validity Not Before: Dec 16 10:01:20 2025 GMT Not After : Dec 17 10:01:20 2025 GMT Subject: CN=f1e2e768a1b5f968c234262e6c26ecf056237ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e0:36:b1:a5:83:5e:c5:d5:8e:77:4a:1d:76: 22:8b:f4:f0:a8:10:6b:c3:25:09:ba:4c:57:47:e5: 99:d5:5f:39:e5:b4:4c:31:6f:39:b9:d3:af:4f:c7: b8:bd:c4:ac:5a:f0:34:8e:36:ce:f9:77:f1:a6:3c: f6:d4:ec:d3:00:2d:c6:8f:00:03:3f:89:ae:ec:ea: e0:9d:83:25:f3:72:54:5a:4b:01:69:a0:be:18:85: 1c:03:c1:95:1e:24:f6:ea:ae:3e:da:8c:cc:47:27: 6d:3f:0d:d3:ed:e6:64:02:51:6d:03:40:8c:d7:7c: 69:49:0f:0e:84:19:39:08:65:d8:99:cd:08:8c:1d: f4:53:9c:12:14:ad:4a:38:fc:e9:04:de:1f:bd:66: 4c:ed:75:8d:ec:91:d1:98:f1:50:70:6c:bd:06:45: f8:04:7e:8a:da:91:af:10:cb:a6:4d:cd:20:0d:e9: 10:d8:d4:50:86:e7:82:55:23:af:ef:d6:4f:cc:5b: 9d:0e:58:2e:c5:6d:e2:30:80:f8:ea:03:47:29:ec: 6d:cc:81:0f:d3:34:c5:b7:99:b0:9c:77:97:c7:9f: 09:80:1d:1b:4a:0e:3b:37:77:99:e4:e9:89:87:50: 5c:74:81:fe:c1:c1:0c:c2:d3:cc:cf:16:72:e7:56: 86:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E2:E7:68:A1:B5:F9:68:C2:34:26:2E:6C:26:EC:F0:56:23:7A:D1 X509v3 Authority Key Identifier: keyid:0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:b5:27:5e:bc:77:90:ad:12:c0:1f:a9:60:39:fc:04:21:9e: 0a:22:09:d1:f2:b3:f3:65:03:23:a0:78:0c:43:6b:e7:70:5e: 97:5f:40:7a:06:34:05:27:6c:a2:92:f1:5d:6f:ed:f6:46:bc: e4:d8:51:4b:be:42:35:89:e5:a8:91:8f:d8:f1:51:b5:5b:65: 3c:17:8a:fe:31:06:3d:c4:8d:72:a4:3a:ce:f7:74:f8:db:b9: 41:d8:39:0e:82:30:0a:34:a7:4d:90:4a:5b:9e:b5:79:88:c6: d1:7a:5d:38:78:45:a0:4a:bb:d6:ed:76:db:d3:2d:d0:b2:99: 3c:0b:bc:40:2c:92:91:e5:d8:c4:22:db:04:80:ab:8f:08:b9: 5c:c5:0d:15:e6:1c:5c:95:3a:7a:88:ca:f4:7e:3d:b9:f6:5e: 6f:ad:f0:f4:71:74:43:b0:4e:02:13:d3:91:37:67:31:20:91: 2c:03:dc:16:9e:e8:4e:d6:6a:ce:4c:d9:ad:27:0a:e5:6a:27: bb:ce:6e:95:ba:83:6f:d0:b6:5e:91:8d:88:01:5b:58:9b:b3: 26:6c:e1:01:8f:61:2c:66:9b:a7:c2:a8:68:05:fd:df:d7:4b: 6b:c1:6b:f2:6b:e9:c4:b1:6a:dd:e9:40:df:99:f0:a4:32:50: 66:fc:ee:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmm3VWjRycl3VK09k2VH0jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYTU2YWJkY2I0ZjZmMGM4NmI4MzJlY2MxM2Y1ZTI0OTcy MWQ2ZjgwHhcNMjUxMjE2MTAwMTIwWhcNMjUxMjE3MTAwMTIwWjAzMTEwLwYDVQQD EyhmMWUyZTc2OGExYjVmOTY4YzIzNDI2MmU2YzI2ZWNmMDU2MjM3YWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouA2saWDXsXVjndKHXYii/TwqBBr wyUJukxXR+WZ1V855bRMMW85udOvT8e4vcSsWvA0jjbO+Xfxpjz21OzTAC3GjwAD P4mu7OrgnYMl83JUWksBaaC+GIUcA8GVHiT26q4+2ozMRydtPw3T7eZkAlFtA0CM 13xpSQ8OhBk5CGXYmc0IjB30U5wSFK1KOPzpBN4fvWZM7XWN7JHRmPFQcGy9BkX4 BH6K2pGvEMumTc0gDekQ2NRQhueCVSOv79ZPzFudDlguxW3iMID46gNHKextzIEP 0zTFt5mwnHeXx58JgB0bSg47N3eZ5OmJh1BcdIH+wcEMwtPMzxZy51aGRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHi52ihtflowjQmLmwm7PBWI3rRMB8GA1UdIwQY MBaAFAular3LT28Mhrgy7ME/XiSXIdb4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZWcXZjdFBid3lHdURMc3dUOWVKSmNoMXZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83OGE4NjEtYjkxOC00ZWE3LTg4YTgt NjAzY2IwODM3MTRiLzEvQzZWcXZjdFBid3lHdURMc3dUOWVKSmNoMXZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC83OGE4NjEtYjkxOC00ZWE3LTg4YTgtNjAzY2IwODM3MTRi LzEvQzZWcXZjdFBid3lHdURMc3dUOWVKSmNoMXZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrUnXrx3 kK0SwB+pYDn8BCGeCiIJ0fKz82UDI6B4DENr53Bel19AegY0BSdsopLxXW/t9ka8 5NhRS75CNYnlqJGP2PFRtVtlPBeK/jEGPcSNcqQ6zvd0+Nu5Qdg5DoIwCjSnTZBK W561eYjG0XpdOHhFoEq71u1229Mt0LKZPAu8QCySkeXYxCLbBICrjwi5XMUNFeYc XJU6eojK9H49ufZeb63w9HF0Q7BOAhPTkTdnMSCRLAPcFp7oTtZqzkzZrScK5Won u85ulbqDb9C2XpGNiAFbWJuzJmzhAY9hLGabp8KoaAX939dLa8Fr8mvpxLFq3elA 35nwpDJQZvzunQ== -----END CERTIFICATE-----Generated at Tue Dec 16 16:11:33 2025 by rpki-client