This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft File: v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft (raw, json) Hash identifier: +3a5qoaZOs2kLf0x8PNZ92La+DPaRQSGMG9gSFsg/5Y= Subject key identifier: 7A:A3:41:3D:B9:4D:03:D1:4A:6D:22:70:B3:93:E1:93:84:23:B8:CA Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC Certificate issuer: /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac Certificate serial: 019B5977B132446014D8D54607D83BFAD6FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft Manifest number: 142A Signing time: Fri 26 Dec 2025 07:02:54 +0000 Manifest this update: Fri 26 Dec 2025 07:02:54 +0000 Manifest next update: Sat 27 Dec 2025 07:02:54 +0000 Files and hashes: 1: CwTJXDuwwtXY5lds5AcNMw4m4MM.roa (hash: pkjwfyNy3tBr0gdIHHue6NuT85XueEkqyX3eSoK30mk=) 2: v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl (hash: o0DTWbvGuh+x5KFgKz2dzpC09LuKcxtj9553iCyB3Kc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:b1:32:44:60:14:d8:d5:46:07:d8:3b:fa:d6:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac Validity Not Before: Dec 26 07:02:54 2025 GMT Not After : Dec 27 07:02:54 2025 GMT Subject: CN=7aa3413db94d03d14a6d2270b393e1938423b8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d1:c0:8e:bf:1c:5b:9d:e8:11:3e:e1:c3:a9: be:e5:ac:48:d2:ed:72:aa:36:fe:1f:10:f7:f5:73: 67:0c:b3:5c:4d:19:38:d3:d3:99:23:86:c0:26:5e: fa:2d:ad:1b:7d:0e:67:2f:43:cb:73:c1:72:3f:2c: 6d:80:7b:09:1c:7b:bc:a9:dc:ec:e2:05:19:82:d0: 00:e7:49:c2:d7:e6:2d:74:9a:e4:67:b4:0b:8e:8f: 3a:1f:ba:5d:7b:4c:38:b5:4d:07:f3:bb:2e:f2:c4: 9c:e8:17:58:16:ee:47:fd:11:08:34:a4:87:82:2d: b9:8e:57:b6:61:51:e3:31:bf:81:94:e9:0e:e8:82: 0f:a8:20:b9:d0:77:bc:11:23:a8:cf:3e:2b:8c:08: e3:ae:5c:6a:a4:0a:7b:cc:9b:91:cd:70:60:50:89: 4c:55:23:0e:77:a9:35:5d:3e:81:26:9c:a4:11:9d: e1:4c:f7:21:7e:8f:cb:0a:66:3c:c5:4a:96:03:55: 09:e8:4e:3e:e8:4c:a4:c9:d2:35:18:ff:2f:74:1f: 91:58:1a:0e:7b:1e:40:f8:49:35:b6:8f:b8:5e:9b: c0:3b:1b:eb:4c:7b:74:3f:ec:fd:c0:e2:b0:3c:ff: c0:6a:fc:b0:f5:a1:7d:6c:08:37:b5:0f:9d:2d:16: f4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A3:41:3D:B9:4D:03:D1:4A:6D:22:70:B3:93:E1:93:84:23:B8:CA X509v3 Authority Key Identifier: keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b3:a1:ff:d8:31:88:4d:46:ca:ba:85:68:b6:7f:d2:99:09: 9d:2c:b8:0e:51:74:1e:70:26:9a:38:fc:b6:f6:a4:04:77:79: 3d:ad:04:2f:c1:a3:34:90:8f:73:cc:2f:15:76:c8:1f:97:d9: 2b:e6:24:d8:a1:6b:86:22:c9:21:d3:eb:56:2d:f5:8c:24:57: 79:55:b4:b6:2b:3d:c0:7e:63:79:ff:01:b1:f5:b4:43:3c:c8: 97:83:0e:22:cc:59:f2:f9:ae:3d:77:8d:87:69:64:08:6c:be: 48:83:e6:44:3c:79:69:e0:5d:19:ec:29:0f:44:a0:7a:18:e6: 63:4b:ab:79:86:24:bd:fb:c3:0c:48:e4:99:86:5e:ef:4a:dd: b3:67:62:66:28:03:a6:ac:51:b8:c6:4a:1e:fb:b0:1c:d8:9c: 32:05:f8:85:b2:bb:42:2b:1e:36:63:5c:64:8b:83:f6:b8:73: 0d:be:2a:d5:a3:54:6c:d9:22:94:f0:64:a1:81:ca:19:a8:a8: 14:91:91:71:0a:71:76:02:80:c7:e0:58:c1:3f:71:ac:01:4b: d5:d3:2e:ab:07:8b:2f:2f:b7:c3:9f:df:ec:2e:f9:11:20:c6: dc:b9:44:60:1a:3a:98:07:3a:3c:35:70:3c:3c:55:84:d3:b3: 4a:f4:f4:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd7EyRGAU2NVGB9g7+tb6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYTBhMzhmODVkMmY1MzA1M2I4Yzg5NDNkOTAxN2IwYjhm NzcxYWMwHhcNMjUxMjI2MDcwMjU0WhcNMjUxMjI3MDcwMjU0WjAzMTEwLwYDVQQD Eyg3YWEzNDEzZGI5NGQwM2QxNGE2ZDIyNzBiMzkzZTE5Mzg0MjNiOGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptHAjr8cW53oET7hw6m+5axI0u1y qjb+HxD39XNnDLNcTRk409OZI4bAJl76La0bfQ5nL0PLc8FyPyxtgHsJHHu8qdzs 4gUZgtAA50nC1+YtdJrkZ7QLjo86H7pde0w4tU0H87su8sSc6BdYFu5H/REINKSH gi25jle2YVHjMb+BlOkO6IIPqCC50He8ESOozz4rjAjjrlxqpAp7zJuRzXBgUIlM VSMOd6k1XT6BJpykEZ3hTPchfo/LCmY8xUqWA1UJ6E4+6EykydI1GP8vdB+RWBoO ex5A+Ek1to+4XpvAOxvrTHt0P+z9wOKwPP/Aavyw9aF9bAg3tQ+dLRb0rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqjQT25TQPRSm0icLOT4ZOEI7jKMB8GA1UdIwQY MBaAFL+go4+F0vUwU7jIlD2QF7C493GsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjZDamo0WFM5VEJUdU1pVVBaQVhzTGozY2F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80MDk5ZDctYzNjZS00NzIxLWIwZTkt N2FiMWZhMGJhMzk5LzEvdjZDamo0WFM5VEJUdU1pVVBaQVhzTGozY2F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi80MDk5ZDctYzNjZS00NzIxLWIwZTktN2FiMWZhMGJhMzk5 LzEvdjZDamo0WFM5VEJUdU1pVVBaQVhzTGozY2F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7Oh/9gx iE1GyrqFaLZ/0pkJnSy4DlF0HnAmmjj8tvakBHd5Pa0EL8GjNJCPc8wvFXbIH5fZ K+Yk2KFrhiLJIdPrVi31jCRXeVW0tis9wH5jef8BsfW0QzzIl4MOIsxZ8vmuPXeN h2lkCGy+SIPmRDx5aeBdGewpD0SgehjmY0ureYYkvfvDDEjkmYZe70rds2diZigD pqxRuMZKHvuwHNicMgX4hbK7QiseNmNcZIuD9rhzDb4q1aNUbNkilPBkoYHKGaio FJGRcQpxdgKAx+BYwT9xrAFL1dMuqweLLy+3w5/f7C75ESDG3LlEYBo6mAc6PDVw PDxVhNOzSvT0wQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:22 2025 by rpki-client