This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft File: g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft (raw, json) Hash identifier: BEhxYmx3xIYnlBP3xWAiqnGlLsYbyn9Hs0soGz7bqPg= Subject key identifier: 66:26:76:85:E0:44:44:FE:13:77:F8:F0:AC:C9:5D:5F:9E:6D:C4:0E Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A Certificate issuer: /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a Certificate serial: 019B36E9BD209BFDB5A21615D2CB70A29B96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft Manifest number: 1719 Signing time: Fri 19 Dec 2025 14:00:46 +0000 Manifest this update: Fri 19 Dec 2025 14:00:46 +0000 Manifest next update: Sat 20 Dec 2025 14:00:46 +0000 Files and hashes: 1: 7Atpb8ICQNgBoE2VxygDoXR916c.roa (hash: 9LfiFF+kHY8QeDVlYR0804RgSHl5CYTGB3eoMEBzGw0=) 2: g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl (hash: wvtLYl+3zR9O+D0jJct8g3mihuso+xwMoLdTCZoL4K4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:bd:20:9b:fd:b5:a2:16:15:d2:cb:70:a2:9b:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a Validity Not Before: Dec 19 14:00:46 2025 GMT Not After : Dec 20 14:00:46 2025 GMT Subject: CN=66267685e04444fe1377f8f0acc95d5f9e6dc40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2e:c4:1a:04:a1:c7:08:86:e4:b2:02:b5:16: 34:e2:2a:7c:5b:63:f9:33:c5:31:77:32:fb:c2:26: 69:29:2b:09:85:5f:c8:85:08:45:4a:7e:0b:45:96: 37:0f:04:82:e8:7b:df:d9:31:a9:c4:5c:5b:76:2b: b7:a0:9c:ae:9b:a9:50:76:32:81:b1:6f:9c:00:f2: 05:3f:02:4b:5c:6d:b1:8f:de:78:fe:e6:46:fb:6e: db:7d:ae:dc:02:e2:6a:c9:3f:a2:e7:81:ff:ef:53: ee:1c:76:69:0e:32:27:ad:97:27:06:d4:2e:4a:ba: 84:13:22:f4:c7:be:a0:48:a6:ff:5e:b5:9e:99:fd: 11:c6:50:f8:56:52:b5:0e:fe:2d:32:4d:3a:08:2e: f7:b5:f6:c8:1d:6a:52:44:1a:07:3e:8c:6c:ed:ae: 42:5d:01:cb:7f:9b:8f:f0:06:39:45:c7:cd:e7:3a: 16:4e:ec:73:a0:24:a8:51:b0:71:22:7f:a7:39:e1: 39:49:2f:1d:62:11:45:b3:4d:4d:b5:ee:23:65:d9: 60:9d:06:94:b4:7b:2d:48:ba:16:77:a9:94:91:c0: f8:82:b0:78:09:ac:39:04:d7:9c:f8:c5:fc:43:4f: 5f:34:77:9f:41:4e:c1:2c:31:b2:a9:da:fb:55:b2: 55:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:26:76:85:E0:44:44:FE:13:77:F8:F0:AC:C9:5D:5F:9E:6D:C4:0E X509v3 Authority Key Identifier: keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:c2:0b:75:d6:e2:9d:cc:46:63:c3:48:d5:64:f6:fb:4b:1c: db:35:ce:71:c5:77:d9:23:f8:8c:76:fb:1f:dd:6f:05:29:bc: 74:0c:d8:29:05:51:6c:08:e3:d5:7a:64:8b:b0:36:e5:d5:e6: 5a:9c:37:88:7d:1d:27:22:45:b9:84:47:da:e4:89:cc:7a:55: 50:43:2a:9f:2c:00:21:90:df:05:90:3e:f9:1b:53:24:73:fa: 10:de:53:c9:18:b7:da:de:ac:3b:bb:ce:62:90:3a:ab:7e:9a: 5f:d4:6b:dd:c5:e4:62:39:d2:31:05:9c:c7:7d:04:1c:a0:97: 7e:3e:77:27:73:34:bd:66:a1:1b:e3:55:d6:c2:2d:f7:d2:07: d8:d0:6c:2e:eb:27:3b:3c:52:a9:a0:04:53:e2:51:06:c6:21: f9:70:d6:9e:ae:36:43:bb:d9:b0:66:d7:de:6f:7d:47:99:54: 56:b9:91:45:ed:92:ae:fa:cc:b8:a1:01:e5:b5:8a:a6:03:21: f6:37:7c:75:59:5d:f1:91:2c:f1:0b:91:b7:bc:dc:b2:77:ed: 21:65:c9:7e:99:0e:ec:37:fb:9e:35:e5:8f:eb:2b:7a:79:07: 80:03:07:0e:24:e7:fa:5e:1d:1d:66:00:6d:5b:b4:c7:08:19: 99:7c:97:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26b0gm/21ohYV0stwopuWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYWM4OGYwMTcwY2JmZTQ0NmNmZDMxYTU4MjNjZGUwZTA5 MzE5OWEwHhcNMjUxMjE5MTQwMDQ2WhcNMjUxMjIwMTQwMDQ2WjAzMTEwLwYDVQQD Eyg2NjI2NzY4NWUwNDQ0NGZlMTM3N2Y4ZjBhY2M5NWQ1ZjllNmRjNDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky7EGgShxwiG5LICtRY04ip8W2P5 M8UxdzL7wiZpKSsJhV/IhQhFSn4LRZY3DwSC6Hvf2TGpxFxbdiu3oJyum6lQdjKB sW+cAPIFPwJLXG2xj954/uZG+27bfa7cAuJqyT+i54H/71PuHHZpDjInrZcnBtQu SrqEEyL0x76gSKb/XrWemf0RxlD4VlK1Dv4tMk06CC73tfbIHWpSRBoHPoxs7a5C XQHLf5uP8AY5RcfN5zoWTuxzoCSoUbBxIn+nOeE5SS8dYhFFs01Nte4jZdlgnQaU tHstSLoWd6mUkcD4grB4Caw5BNec+MX8Q09fNHefQU7BLDGyqdr7VbJViQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYmdoXgRET+E3f48KzJXV+ebcQOMB8GA1UdIwQY MBaAFIOsiPAXDL/kRs/TGlgjzeDgkxmaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzZ5SThCY012LVJHejlNYVdDUE40T0NUR1pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lZDY5ZGMtODBkNy00MzM2LWEyMmQt ODQ4YWY2OThkMGQ4LzEvZzZ5SThCY012LVJHejlNYVdDUE40T0NUR1pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lZDY5ZGMtODBkNy00MzM2LWEyMmQtODQ4YWY2OThkMGQ4 LzEvZzZ5SThCY012LVJHejlNYVdDUE40T0NUR1pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcILddbi ncxGY8NI1WT2+0sc2zXOccV32SP4jHb7H91vBSm8dAzYKQVRbAjj1Xpki7A25dXm Wpw3iH0dJyJFuYRH2uSJzHpVUEMqnywAIZDfBZA++RtTJHP6EN5TyRi32t6sO7vO YpA6q36aX9Rr3cXkYjnSMQWcx30EHKCXfj53J3M0vWahG+NV1sIt99IH2NBsLusn OzxSqaAEU+JRBsYh+XDWnq42Q7vZsGbX3m99R5lUVrmRRe2SrvrMuKEB5bWKpgMh 9jd8dVld8ZEs8QuRt7zcsnftIWXJfpkO7Df7njXlj+srenkHgAMHDiTn+l4dHWYA bVu0xwgZmXyXpQ== -----END CERTIFICATE-----Generated at Fri Dec 19 21:09:56 2025 by rpki-client