This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft File: t6j-qPyoAMH8Se8thckuMjdSsO0.mft (raw, json) Hash identifier: IOa51QUOfl8tw03ywCEHJWJTNPUMSUVZ9ssE0STIXt0= Subject key identifier: 20:8D:07:7F:57:94:9B:A2:0A:4C:0E:6F:51:7C:D6:94:BB:B8:56:98 Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED Certificate issuer: /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed Certificate serial: 019AF23FD0D7B3095CD983B0799E3AD84B01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft Manifest number: 172F Signing time: Sat 06 Dec 2025 06:00:59 +0000 Manifest this update: Sat 06 Dec 2025 06:00:59 +0000 Manifest next update: Sun 07 Dec 2025 06:00:59 +0000 Files and hashes: 1: 5TC6JtPaOArue3YcZw58kMkX_gQ.roa (hash: 8vxNN4NZRh1zE+O+pnXNTkgLjPcYvbg7k5S7vJax1zs=) 2: t6j-qPyoAMH8Se8thckuMjdSsO0.crl (hash: PvP1eDmqzdPUmjSPYd7kLAviomq3mHTDjqymiAub5uE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d0:d7:b3:09:5c:d9:83:b0:79:9e:3a:d8:4b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed Validity Not Before: Dec 6 06:00:59 2025 GMT Not After : Dec 7 06:00:59 2025 GMT Subject: CN=208d077f57949ba20a4c0e6f517cd694bbb85698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ce:ce:76:ac:c1:13:50:c6:1f:29:92:29:d2: 55:e4:0b:c4:8a:d8:f9:d3:d9:fd:39:9b:80:e3:2b: 88:34:34:a0:09:d2:59:c6:37:ea:29:2f:0c:57:fa: a2:7f:bd:3a:21:86:0d:c1:79:3d:77:03:c9:35:e1: b2:b0:9a:fa:d9:bc:e3:ea:45:3a:a3:5f:34:3e:87: a7:41:9a:03:d8:10:bf:ed:fa:94:ba:e7:34:07:d0: e2:8e:f3:93:97:19:0c:93:a3:34:0d:41:af:06:c6: e1:83:e9:9d:0d:08:11:72:b1:e7:74:a9:f1:08:e0: 12:a1:0b:45:57:ff:28:ec:b0:e6:03:38:95:33:41: ad:84:44:b0:83:08:9a:da:96:09:ca:6c:88:08:93: ba:ab:4f:a8:11:c7:a5:6e:a7:80:6e:e8:13:6a:a1: 65:d9:ec:fe:8c:01:af:ba:9a:2c:b1:0c:bd:e1:35: b3:43:c5:63:86:d4:d4:fe:0e:20:0a:c8:a6:0e:3c: 9d:38:09:b4:6c:1a:69:16:ba:33:94:c7:68:b4:8c: 30:a3:a1:d7:c1:54:ea:95:b8:6b:f0:db:21:eb:08: c6:ce:4e:c0:e5:9c:83:fc:fa:de:6a:0d:48:ec:e7: 88:3a:9c:43:71:5a:f7:49:f0:b0:05:35:95:4f:8e: 4a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8D:07:7F:57:94:9B:A2:0A:4C:0E:6F:51:7C:D6:94:BB:B8:56:98 X509v3 Authority Key Identifier: keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:80:ff:d5:7a:27:36:68:37:0a:ef:ff:e3:4e:af:12:01:1e: 38:21:46:a7:c5:18:e5:50:de:24:01:f4:f2:48:6a:5c:f4:e4: 5c:c2:3c:e8:d2:23:43:d9:e1:da:c2:8f:cd:5f:48:dc:10:53: a4:2e:c3:f4:4c:d7:c4:69:1c:d3:36:52:73:cf:6c:d3:07:9c: 02:e2:e4:6b:2c:d4:dc:94:85:ff:40:b1:39:d6:c5:46:be:11: 52:cb:5b:81:17:b0:46:53:a6:7c:40:e6:1a:f5:ff:c9:ac:16: 4b:69:e5:da:40:10:32:d0:6d:02:43:9a:30:fc:b2:0d:4a:3f: 4d:43:1c:42:9c:4a:33:93:24:0d:a8:e4:d7:1c:55:36:e9:89: 73:16:c5:d9:11:ef:d7:72:4b:2d:a9:b0:55:e0:c1:cd:5e:4c: c8:d4:53:f6:62:db:de:38:d9:84:ca:cd:a5:09:c4:29:66:64: 35:11:6b:af:21:3c:b6:be:bb:c2:7a:61:75:4d:b9:d8:d7:34: fe:64:70:79:74:3c:00:39:51:7c:c1:a9:a2:0d:80:08:5d:d9: d0:e6:77:9b:3e:10:21:ae:d1:62:dd:82:8e:5e:cc:b6:26:95: ad:b4:46:35:f2:c6:39:bb:c1:39:75:9c:e8:39:ee:91:ff:da: ff:a3:3a:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9DXswlc2YOweZ462EsBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YThmZWE4ZmNhODAwYzFmYzQ5ZWYyZDg1YzkyZTMyMzc1 MmIwZWQwHhcNMjUxMjA2MDYwMDU5WhcNMjUxMjA3MDYwMDU5WjAzMTEwLwYDVQQD EygyMDhkMDc3ZjU3OTQ5YmEyMGE0YzBlNmY1MTdjZDY5NGJiYjg1Njk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq87OdqzBE1DGHymSKdJV5AvEitj5 09n9OZuA4yuINDSgCdJZxjfqKS8MV/qif706IYYNwXk9dwPJNeGysJr62bzj6kU6 o180PoenQZoD2BC/7fqUuuc0B9DijvOTlxkMk6M0DUGvBsbhg+mdDQgRcrHndKnx COASoQtFV/8o7LDmAziVM0GthESwgwia2pYJymyICJO6q0+oEcelbqeAbugTaqFl 2ez+jAGvupossQy94TWzQ8VjhtTU/g4gCsimDjydOAm0bBppFrozlMdotIwwo6HX wVTqlbhr8Nsh6wjGzk7A5ZyD/Preag1I7OeIOpxDcVr3SfCwBTWVT45KUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCNB39XlJuiCkwOb1F81pS7uFaYMB8GA1UdIwQY MBaAFLeo/qj8qADB/EnvLYXJLjI3UrDtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jZTE2NDMtYzA4ZC00MGY2LTk0NDQt YWY3MTRhZDUyZjI5LzEvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9jZTE2NDMtYzA4ZC00MGY2LTk0NDQtYWY3MTRhZDUyZjI5 LzEvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACID/1Xon Nmg3Cu//406vEgEeOCFGp8UY5VDeJAH08khqXPTkXMI86NIjQ9nh2sKPzV9I3BBT pC7D9EzXxGkc0zZSc89s0wecAuLkayzU3JSF/0CxOdbFRr4RUstbgRewRlOmfEDm GvX/yawWS2nl2kAQMtBtAkOaMPyyDUo/TUMcQpxKM5MkDajk1xxVNumJcxbF2RHv 13JLLamwVeDBzV5MyNRT9mLb3jjZhMrNpQnEKWZkNRFrryE8tr67wnphdU252Nc0 /mRweXQ8ADlRfMGpog2ACF3Z0OZ3mz4QIa7RYt2Cjl7MtiaVrbRGNfLGObvBOXWc 6Dnukf/a/6M6kA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:57 2025 by rpki-client