This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft File: S6XEBCZt6xbZx4qpLoAtg_uibHE.mft (raw, json) Hash identifier: ef5jlLDVVPA2qdPAVdViCcUa1dWU2MqApKkOzjCdgCs= Subject key identifier: 39:03:5A:19:0C:66:10:1B:9C:6C:38:B6:6D:86:5E:37:D1:9D:D3:7D Authority key identifier: 4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71 Certificate issuer: /CN=4ba5c404266deb16d9c78aa92e802d83fba26c71 Certificate serial: 019AF3F73C31B83AD097FE98ED7480C29C41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft Manifest number: 0666 Signing time: Sat 06 Dec 2025 14:00:57 +0000 Manifest this update: Sat 06 Dec 2025 14:00:57 +0000 Manifest next update: Sun 07 Dec 2025 14:00:57 +0000 Files and hashes: 1: S6XEBCZt6xbZx4qpLoAtg_uibHE.crl (hash: mVLnQE2MCSBy1K9kOmj5cWInmPirBK4KBhlYmuKwdhU=) 2: eQ54edgYKIUcfPhFEws-eNJ8BAA.roa (hash: OAjHXz/8YyId26wIY7CC8yapukZc0Z6aGp6x02zSR/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:3c:31:b8:3a:d0:97:fe:98:ed:74:80:c2:9c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ba5c404266deb16d9c78aa92e802d83fba26c71 Validity Not Before: Dec 6 14:00:57 2025 GMT Not After : Dec 7 14:00:57 2025 GMT Subject: CN=39035a190c66101b9c6c38b66d865e37d19dd37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:47:6c:21:bb:11:27:12:13:fe:4a:d4:b7:85: 61:52:97:c5:57:10:07:d9:f7:05:1d:a5:4e:e1:1c: fa:ae:66:64:5a:29:8a:5e:66:41:91:2d:98:b1:4a: 6a:19:e5:18:9f:28:e1:5f:12:6e:37:49:fd:fe:6b: 96:aa:36:8a:f9:37:37:70:f9:a8:b9:0f:83:c5:c3: 99:93:9d:93:7a:ae:b8:aa:ed:f2:cc:d6:f1:7d:f6: 12:2c:00:cb:d9:eb:c1:55:75:3e:35:8a:f0:db:16: 00:ce:e7:c7:2a:d7:3f:43:74:ff:d4:84:a2:5e:1c: f5:05:70:2b:df:79:0f:0d:83:5d:27:ef:4d:35:61: c1:a9:e5:0a:96:1a:d7:7b:05:ea:14:e5:92:4c:67: 4f:43:b0:28:70:dc:79:08:8b:18:56:2e:cf:da:a2: 43:50:57:28:2b:88:f1:eb:24:13:e3:1e:28:c3:6a: 92:cc:87:96:2e:72:2c:1f:69:c3:8f:ac:cd:f8:20: c4:39:03:00:6e:08:0f:6f:36:db:7b:e8:55:08:25: ac:c8:35:46:23:05:24:39:c6:f0:3d:d4:20:00:e8: 32:34:07:5e:df:84:c8:92:f8:e1:f6:2e:62:43:b4: 5c:ab:cb:73:09:b8:be:4e:a7:f0:78:c0:d8:2c:ab: 7c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:03:5A:19:0C:66:10:1B:9C:6C:38:B6:6D:86:5E:37:D1:9D:D3:7D X509v3 Authority Key Identifier: keyid:4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:b3:8c:b5:7a:5e:9d:02:3c:dd:79:80:e2:97:fb:35:61:19: 7e:85:7f:cc:50:76:80:e6:87:0e:7e:1d:5a:e3:11:70:c3:d2: 38:4a:cb:3e:e3:0f:27:67:8a:65:92:38:e6:de:2d:8a:c0:08: 04:33:c6:dd:85:d5:ea:78:69:55:fb:24:54:9a:3c:6d:c8:99: 90:ff:05:91:b8:49:3f:e4:64:fc:eb:b7:ab:92:ad:a1:65:cb: 7e:6a:fb:c8:96:f7:ec:55:39:e7:9e:10:73:1d:2f:3e:0c:b8: 93:78:40:45:18:41:5f:1f:c4:df:bf:06:c4:95:58:cd:6d:f1: 24:57:ff:35:5c:69:07:f6:a4:93:1e:9b:32:66:e5:f5:49:a5: 7c:a7:78:fb:52:28:c5:53:8d:0c:dd:52:ed:7b:50:21:5b:54: 6b:c4:52:07:c3:f5:c4:05:20:4d:0e:1c:16:93:55:b7:47:db: 47:19:b0:62:7b:25:be:96:ff:6b:04:62:bf:1e:77:c7:a8:c3: 74:17:f7:ec:93:5b:44:ec:69:8b:b6:b8:e0:22:e1:c6:7f:be: 26:90:ae:cd:10:21:4a:63:18:da:2b:97:2d:a8:23:f7:c0:23: 10:a9:34:50:2a:a0:b7:73:8a:42:5f:0b:79:4c:42:b4:b1:eb: fe:88:0f:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9zwxuDrQl/6Y7XSAwpxBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYTVjNDA0MjY2ZGViMTZkOWM3OGFhOTJlODAyZDgzZmJh MjZjNzEwHhcNMjUxMjA2MTQwMDU3WhcNMjUxMjA3MTQwMDU3WjAzMTEwLwYDVQQD EygzOTAzNWExOTBjNjYxMDFiOWM2YzM4YjY2ZDg2NWUzN2QxOWRkMzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kdsIbsRJxIT/krUt4VhUpfFVxAH 2fcFHaVO4Rz6rmZkWimKXmZBkS2YsUpqGeUYnyjhXxJuN0n9/muWqjaK+Tc3cPmo uQ+DxcOZk52Teq64qu3yzNbxffYSLADL2evBVXU+NYrw2xYAzufHKtc/Q3T/1ISi Xhz1BXAr33kPDYNdJ+9NNWHBqeUKlhrXewXqFOWSTGdPQ7AocNx5CIsYVi7P2qJD UFcoK4jx6yQT4x4ow2qSzIeWLnIsH2nDj6zN+CDEOQMAbggPbzbbe+hVCCWsyDVG IwUkOcbwPdQgAOgyNAde34TIkvjh9i5iQ7Rcq8tzCbi+TqfweMDYLKt8UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkDWhkMZhAbnGw4tm2GXjfRndN9MB8GA1UdIwQY MBaAFEulxAQmbesW2ceKqS6ALYP7omxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzZYRUJDWnQ2eGJaeDRxcExvQXRnX3VpYkhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8zZjI3NzItM2RhMy00OTIxLTljNTIt YjBiMDZlYjM0NGZiLzEvUzZYRUJDWnQ2eGJaeDRxcExvQXRnX3VpYkhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8zZjI3NzItM2RhMy00OTIxLTljNTItYjBiMDZlYjM0NGZi LzEvUzZYRUJDWnQ2eGJaeDRxcExvQXRnX3VpYkhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLOMtXpe nQI83XmA4pf7NWEZfoV/zFB2gOaHDn4dWuMRcMPSOErLPuMPJ2eKZZI45t4tisAI BDPG3YXV6nhpVfskVJo8bciZkP8FkbhJP+Rk/Ou3q5KtoWXLfmr7yJb37FU5554Q cx0vPgy4k3hARRhBXx/E378GxJVYzW3xJFf/NVxpB/akkx6bMmbl9UmlfKd4+1Io xVONDN1S7XtQIVtUa8RSB8P1xAUgTQ4cFpNVt0fbRxmwYnslvpb/awRivx53x6jD dBf37JNbROxpi7a44CLhxn++JpCuzRAhSmMY2iuXLagj98AjEKk0UCqgt3OKQl8L eUxCtLHr/ogPrA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:42:30 2025 by rpki-client