This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft File: n6c21GmBzkhjlN_vnHOLfr62Gm0.mft (raw, json) Hash identifier: c3CrYDtXnwz60AQfap6PE0jdgll4p2TEFmOvRlKscgg= Subject key identifier: F5:8F:1E:42:A5:53:8D:F3:EA:78:91:2E:BC:61:B4:1F:72:DB:85:47 Authority key identifier: 9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D Certificate issuer: /CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d Certificate serial: 019AF38A2625E3263B8E15B9F1021409091D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft Manifest number: 1357 Signing time: Sat 06 Dec 2025 12:01:48 +0000 Manifest this update: Sat 06 Dec 2025 12:01:48 +0000 Manifest next update: Sun 07 Dec 2025 12:01:48 +0000 Files and hashes: 1: _h71B272PJZJXIBvxnSAiFkPc3o.roa (hash: 8epdxNIo68sqlqhgpXPr6uBYOM7OF4qT5O2HTRBPkF4=) 2: n6c21GmBzkhjlN_vnHOLfr62Gm0.crl (hash: +bdoO4i2xH4LsWe6fQiukfz9EL3jw+9hG0bUhfb9vCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:26:25:e3:26:3b:8e:15:b9:f1:02:14:09:09:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d Validity Not Before: Dec 6 12:01:48 2025 GMT Not After : Dec 7 12:01:48 2025 GMT Subject: CN=f58f1e42a5538df3ea78912ebc61b41f72db8547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:a8:93:ff:10:b1:da:80:0c:f1:cd:a5:53: 37:aa:60:98:13:41:47:78:9e:b4:53:6a:2f:67:f2: 98:73:6e:1f:ca:9f:1c:56:23:77:0f:04:9d:fc:29: 51:5f:71:99:46:bd:d6:ae:81:5f:fe:f2:b1:70:3a: 9b:7f:14:f5:6f:2b:5b:0c:21:14:3d:90:5f:3a:ac: 7d:0a:9d:93:28:43:1a:10:07:f0:a5:db:e3:5a:ba: b3:8b:bd:a2:53:44:a9:cf:d9:8b:a4:db:18:5f:8f: 6e:2a:b5:e0:0e:82:a2:2e:32:df:62:cd:d0:83:e0: a7:09:59:ba:e5:c6:a8:e9:c9:fa:c6:27:fc:75:82: 14:5a:2e:d6:84:14:e9:ad:0b:50:4b:0f:8d:a4:4e: cc:7f:fc:e9:b3:93:93:1c:d8:19:ab:c7:c5:eb:41: e8:5b:c6:62:45:b1:ba:65:fd:91:1a:f6:3d:66:b7: d2:a9:54:9e:9e:5b:01:19:79:39:62:b8:55:b0:11: 7f:aa:ba:b9:70:01:e7:df:36:05:a3:96:0d:e7:bc: fe:29:f0:aa:a9:ab:ff:ec:09:86:35:80:35:ee:4f: fd:e6:70:bf:81:a1:1d:90:1f:7d:ca:21:e6:be:a9: a9:02:72:be:5a:f2:66:79:c7:72:b6:2d:32:99:74: 49:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8F:1E:42:A5:53:8D:F3:EA:78:91:2E:BC:61:B4:1F:72:DB:85:47 X509v3 Authority Key Identifier: keyid:9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:85:f7:03:fe:78:f7:66:3c:50:c0:33:f5:98:75:f8:9b:4e: 5d:a9:cd:7e:9a:e6:4a:b0:b9:a4:ae:ec:82:2f:63:4c:64:63: 74:e6:34:e0:24:45:b6:b8:f9:b0:9d:d6:31:07:46:37:17:fe: a1:3b:e6:63:54:f1:74:fc:94:64:60:1e:de:da:8a:9e:68:91: 18:5a:35:29:6b:e9:58:0f:22:b9:32:ed:f0:a1:cb:a4:cc:83: 92:50:06:8a:a2:fd:cc:e8:e1:52:c5:64:67:46:9a:89:63:09: 6a:64:02:77:18:74:3e:67:5e:de:27:09:66:73:6d:b8:85:05: b2:83:0e:36:50:3d:fc:91:24:b1:a3:4e:20:2f:cb:1d:9c:90: 4a:e6:75:0b:2f:26:5b:85:be:08:24:39:ca:a4:62:9e:35:10: 8a:44:da:9d:37:ad:83:93:ac:17:c8:62:ab:8d:6d:6d:9b:3c: f4:68:83:b5:73:6c:1d:14:e8:e2:b7:97:e0:75:62:b2:a8:92: 9b:ef:ab:af:a2:34:4b:03:05:ac:b8:a6:0f:ec:00:9c:e0:81: 0c:76:22:3b:9d:a9:2b:ed:04:29:a6:24:ff:95:e8:5b:ad:1a: cf:a3:3f:5c:5b:a5:03:03:73:c8:95:5b:d2:47:12:6b:2a:2d: 17:e1:b4:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziiYl4yY7jhW58QIUCQkdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYTczNmQ0Njk4MWNlNDg2Mzk0ZGZlZjljNzM4YjdlYmVi NjFhNmQwHhcNMjUxMjA2MTIwMTQ4WhcNMjUxMjA3MTIwMTQ4WjAzMTEwLwYDVQQD EyhmNThmMWU0MmE1NTM4ZGYzZWE3ODkxMmViYzYxYjQxZjcyZGI4NTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQeok/8QsdqADPHNpVM3qmCYE0FH eJ60U2ovZ/KYc24fyp8cViN3DwSd/ClRX3GZRr3WroFf/vKxcDqbfxT1bytbDCEU PZBfOqx9Cp2TKEMaEAfwpdvjWrqzi72iU0Spz9mLpNsYX49uKrXgDoKiLjLfYs3Q g+CnCVm65cao6cn6xif8dYIUWi7WhBTprQtQSw+NpE7Mf/zps5OTHNgZq8fF60Ho W8ZiRbG6Zf2RGvY9ZrfSqVSenlsBGXk5YrhVsBF/qrq5cAHn3zYFo5YN57z+KfCq qav/7AmGNYA17k/95nC/gaEdkB99yiHmvqmpAnK+WvJmecdyti0ymXRJYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWPHkKlU43z6niRLrxhtB9y24VHMB8GA1UdIwQY MBaAFJ+nNtRpgc5IY5Tf75xzi36+thptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjZjMjFHbUJ6a2hqbE5fdm5IT0xmcjYyR20wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80ZDc0ZDktNmM0Yy00YjE0LTgxNWYt ZDI2MjgwM2NmNjQ0LzEvbjZjMjFHbUJ6a2hqbE5fdm5IT0xmcjYyR20wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80ZDc0ZDktNmM0Yy00YjE0LTgxNWYtZDI2MjgwM2NmNjQ0 LzEvbjZjMjFHbUJ6a2hqbE5fdm5IT0xmcjYyR20wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeoX3A/54 92Y8UMAz9Zh1+JtOXanNfprmSrC5pK7sgi9jTGRjdOY04CRFtrj5sJ3WMQdGNxf+ oTvmY1TxdPyUZGAe3tqKnmiRGFo1KWvpWA8iuTLt8KHLpMyDklAGiqL9zOjhUsVk Z0aaiWMJamQCdxh0Pmde3icJZnNtuIUFsoMONlA9/JEksaNOIC/LHZyQSuZ1Cy8m W4W+CCQ5yqRinjUQikTanTetg5OsF8hiq41tbZs89GiDtXNsHRTo4reX4HVisqiS m++rr6I0SwMFrLimD+wAnOCBDHYiO52pK+0EKaYk/5XoW60az6M/XFulAwNzyJVb 0kcSayotF+G05g== -----END CERTIFICATE-----Generated at Sat Dec 6 21:57:56 2025 by rpki-client