This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft File: d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json) Hash identifier: i+VN1aqQCO5RnxWnCdQlMRoZoLZYdXZxK9AXohaueZo= Subject key identifier: 92:05:82:32:88:B8:97:85:2D:8D:12:03:DB:98:83:50:50:1C:A8:30 Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1 Certificate issuer: /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1 Certificate serial: 019AF0BF5CF137F8314F6C4055D5C437E04A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft Manifest number: 0E46 Signing time: Fri 05 Dec 2025 23:01:04 +0000 Manifest this update: Fri 05 Dec 2025 23:01:04 +0000 Manifest next update: Sat 06 Dec 2025 23:01:04 +0000 Files and hashes: 1: 3fVp55RM8WJ-CAkYXQzPen4QsPU.roa (hash: GhSbT3tbIT6J4s8weD/xKmKS+sqFk4JjUnduge7t9L0=) 2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: rucg1EJNbO3aSpBagGMYwJjHXXcuk8m5aaZxeOs4ogw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:5c:f1:37:f8:31:4f:6c:40:55:d5:c4:37:e0:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1 Validity Not Before: Dec 5 23:01:04 2025 GMT Not After : Dec 6 23:01:04 2025 GMT Subject: CN=9205823288b897852d8d1203db988350501ca830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:90:dc:72:8f:b3:61:e8:da:25:c8:b6:54:4f: 31:4a:9b:f4:87:f8:67:7a:6e:d6:4e:53:8c:0c:bf: f1:64:22:ba:59:14:2c:61:4b:8e:71:45:98:61:58: 86:69:61:b6:e0:bc:64:dc:6c:22:cb:6f:17:16:9a: 3a:81:0a:b2:bc:05:1e:d2:ca:de:c9:73:ea:89:f4: cd:9b:61:af:e6:95:74:7e:2e:8c:6e:de:5d:95:56: 48:df:50:11:20:69:2b:b6:2a:ac:77:b0:96:4b:6d: 06:5b:0a:45:8e:47:cb:b6:ca:e4:11:c7:d2:54:a8: ee:77:f2:5b:82:52:e8:c5:5e:fc:98:92:db:86:f6: 17:79:20:63:a4:24:1f:c8:0b:08:b6:d0:90:05:9a: 8a:f8:e5:47:d0:1e:ed:c8:c3:55:76:8d:1d:d1:c3: 74:2c:59:46:89:b6:e8:dc:5d:9b:4d:bc:0a:30:5a: 21:77:0b:e0:bb:0c:a3:21:a6:e5:fa:9b:17:d0:d7: d7:14:3d:17:84:23:86:b9:70:88:18:59:8f:4f:63: f9:a8:f4:ef:d2:95:55:d3:1b:58:08:c0:1e:98:4a: b2:7e:47:aa:06:f6:d4:eb:31:4e:f7:c3:99:45:44: b9:e5:0d:18:a2:68:92:85:34:bb:7e:d8:33:5e:5e: b2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:05:82:32:88:B8:97:85:2D:8D:12:03:DB:98:83:50:50:1C:A8:30 X509v3 Authority Key Identifier: keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ad:25:53:27:26:95:0b:ec:32:ab:f2:71:08:61:d6:5c:5d: d5:9b:c5:fb:4d:01:59:e3:0a:22:6d:bf:df:36:74:37:1e:0f: 38:fc:54:53:a8:57:01:cb:36:5c:a3:bc:b1:77:5a:1c:91:32: 2b:2a:2c:9e:ad:4b:03:78:37:e4:df:ff:04:58:09:77:90:b5: c2:86:c5:e2:36:e9:8f:e7:ac:0d:3f:75:99:48:f4:d4:ee:52: 00:44:a3:3b:d8:4d:55:44:07:09:8c:c1:75:0a:ef:a8:b8:ad: f3:4d:de:31:e9:c6:c4:95:fd:bb:dc:f3:e7:39:6c:0e:5c:40: 43:a7:01:84:20:ee:90:10:f1:b8:0c:10:61:03:09:1a:c3:06: 1f:91:51:37:15:a2:c8:be:29:31:17:07:82:35:a6:77:b1:86: 2f:2f:b7:9b:2d:4d:ea:0d:7a:50:9e:e8:60:2a:35:e0:5a:f2: 15:b5:48:dc:21:18:7b:36:a8:3f:04:67:30:c9:e0:12:1e:9e: 3b:b7:81:d5:a3:ca:e7:ab:4f:68:bd:fc:60:4d:ce:64:95:d7: db:75:40:bc:86:55:f3:60:b2:aa:fd:27:58:0b:d1:b0:de:58: c3:c4:4e:44:c5:ec:22:c5:bb:68:a9:af:f8:87:79:49:9d:1a: 7a:f1:dd:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv1zxN/gxT2xAVdXEN+BKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YTM1MGQ5ZmU0ZTlmOTBmZjNlODRlMmY5NjBjYjVkYzNk NmNlZTEwHhcNMjUxMjA1MjMwMTA0WhcNMjUxMjA2MjMwMTA0WjAzMTEwLwYDVQQD Eyg5MjA1ODIzMjg4Yjg5Nzg1MmQ4ZDEyMDNkYjk4ODM1MDUwMWNhODMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5Dcco+zYejaJci2VE8xSpv0h/hn em7WTlOMDL/xZCK6WRQsYUuOcUWYYViGaWG24Lxk3Gwiy28XFpo6gQqyvAUe0sre yXPqifTNm2Gv5pV0fi6Mbt5dlVZI31ARIGkrtiqsd7CWS20GWwpFjkfLtsrkEcfS VKjud/JbglLoxV78mJLbhvYXeSBjpCQfyAsIttCQBZqK+OVH0B7tyMNVdo0d0cN0 LFlGibbo3F2bTbwKMFohdwvguwyjIabl+psX0NfXFD0XhCOGuXCIGFmPT2P5qPTv 0pVV0xtYCMAemEqyfkeqBvbU6zFO98OZRUS55Q0YomiShTS7ftgzXl6yPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIFgjKIuJeFLY0SA9uYg1BQHKgwMB8GA1UdIwQY MBaAFHejUNn+Tp+Q/z6E4vlgy13D1s7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84YmM0NGItNWQ1YS00YjU0LWFiOTEt ZGExYzUxNWU1YjI5LzEvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84YmM0NGItNWQ1YS00YjU0LWFiOTEtZGExYzUxNWU1YjI5 LzEvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlK0lUycm lQvsMqvycQhh1lxd1ZvF+00BWeMKIm2/3zZ0Nx4POPxUU6hXAcs2XKO8sXdaHJEy Kyosnq1LA3g35N//BFgJd5C1wobF4jbpj+esDT91mUj01O5SAESjO9hNVUQHCYzB dQrvqLit803eMenGxJX9u9zz5zlsDlxAQ6cBhCDukBDxuAwQYQMJGsMGH5FRNxWi yL4pMRcHgjWmd7GGLy+3my1N6g16UJ7oYCo14FryFbVI3CEYezaoPwRnMMngEh6e O7eB1aPK56tPaL38YE3OZJXX23VAvIZV82Cyqv0nWAvRsN5Yw8RORMXsIsW7aKmv +Id5SZ0aevHdAw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:23 2025 by rpki-client