This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json) Hash identifier: G/Bn988wemAryyCpjqq31dSWbu0OecHlTqt5662dQ58= Subject key identifier: 67:05:D1:C8:B8:8B:AB:7D:1F:A6:F1:B7:C2:24:E4:3F:00:BE:FF:14 Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5 Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5 Certificate serial: 019AF4659798BD9A056E951148F6AA3FCDB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft Manifest number: 0FD3 Signing time: Sat 06 Dec 2025 16:01:29 +0000 Manifest this update: Sat 06 Dec 2025 16:01:29 +0000 Manifest next update: Sun 07 Dec 2025 16:01:29 +0000 Files and hashes: 1: StPgXcpmiy5JYaEeTseShVrOOPw.roa (hash: 2TP419yQVLSPbiDET0BATqZqoaVVJJbtbUq/1dj+vY4=) 2: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: MjAvCxH4ADD3Q9GYSgbbsCIACT66ZcV+cvQPAOASOkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:97:98:bd:9a:05:6e:95:11:48:f6:aa:3f:cd:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5 Validity Not Before: Dec 6 16:01:29 2025 GMT Not After : Dec 7 16:01:29 2025 GMT Subject: CN=6705d1c8b88bab7d1fa6f1b7c224e43f00beff14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9e:a6:71:47:d1:11:9e:58:d3:3e:52:1d:73: 5d:dc:f1:e6:d0:e8:bc:cf:a8:b0:e5:87:a3:fb:66: 61:97:3a:7f:cb:d8:d3:15:5e:df:9b:34:d7:f3:ca: 84:fc:cf:f5:5e:d6:4c:f4:21:04:7c:6f:57:15:95: f3:36:86:6b:51:0a:b1:46:e7:e2:db:3b:7d:53:c0: e7:4f:aa:7a:c3:b4:20:c7:52:bd:41:b5:b9:5e:07: 33:93:49:62:de:54:f7:6d:d2:e2:41:eb:98:ce:19: 27:18:40:95:88:38:36:d0:c5:21:03:d1:c5:f2:6e: 05:d3:e7:3a:d5:00:ea:82:a9:e1:82:74:4d:a4:32: 2d:56:41:56:fe:07:e1:b9:f7:b5:b9:38:b4:73:4b: 20:ae:3b:fd:28:d6:b7:05:fb:cc:6f:7d:9f:7f:4e: 39:53:3b:06:5f:6c:4a:a9:5a:b7:b1:d0:82:91:e1: 93:e2:c5:a6:39:07:fd:b2:31:7a:c0:4a:60:17:5e: 88:41:79:4f:be:64:6d:12:f2:c7:07:36:60:27:89: de:62:12:92:04:5b:0d:b8:f8:f7:29:d2:97:d2:cc: 54:77:22:d3:c5:c3:5d:1c:3d:4d:42:9d:0a:17:11: f4:38:59:7b:96:34:88:ce:05:8b:b1:95:02:67:95: c1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:05:D1:C8:B8:8B:AB:7D:1F:A6:F1:B7:C2:24:E4:3F:00:BE:FF:14 X509v3 Authority Key Identifier: keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:17:38:1d:6c:26:65:ba:32:ca:b9:e8:08:16:d2:53:74:da: 56:ba:5c:b0:94:ac:d9:45:1a:27:f0:fa:42:f2:47:76:a6:35: 47:66:c9:46:5a:29:2b:28:f4:7f:e8:04:f5:e3:3b:92:cd:18: 9a:48:e2:81:eb:e8:73:3d:b8:c8:7d:86:e5:7e:39:f3:e6:12: 88:47:ce:c3:1f:0f:a7:5c:94:93:6e:75:13:e3:0f:36:16:12: 29:bf:40:11:09:ab:02:b5:84:3e:9c:99:f8:47:f7:b2:2a:3e: 66:8f:cb:06:a4:36:ae:8f:f9:29:ca:65:20:47:0f:59:41:c0: 32:51:d2:3f:e0:12:75:98:99:fe:3a:6d:cc:61:69:08:e6:ef: 81:b4:f7:71:b6:a9:dd:55:24:e8:d2:d3:25:f8:83:72:99:c8: 0e:3e:58:17:a9:03:a8:37:74:56:62:bb:1f:4a:40:e0:80:dc: 46:24:6f:b4:68:f2:4a:b5:83:4c:7a:72:4d:c8:50:03:77:31: 4d:79:c5:7f:67:3b:5b:36:f6:af:3d:09:6f:2f:a3:f8:b6:4c: ec:9f:7c:50:75:ae:79:ad:37:02:93:68:63:fa:e3:fd:52:a4: 56:1d:26:a9:80:87:4a:4a:a7:0e:34:81:d0:d8:c4:d5:46:f6: 56:8f:43:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZZeYvZoFbpURSPaqP823MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YTljMzRkM2Y4NDNjZGIwMzViN2MzMGIzZTg0ZTIyNDEy NTIyYzUwHhcNMjUxMjA2MTYwMTI5WhcNMjUxMjA3MTYwMTI5WjAzMTEwLwYDVQQD Eyg2NzA1ZDFjOGI4OGJhYjdkMWZhNmYxYjdjMjI0ZTQzZjAwYmVmZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk56mcUfREZ5Y0z5SHXNd3PHm0Oi8 z6iw5Yej+2Zhlzp/y9jTFV7fmzTX88qE/M/1XtZM9CEEfG9XFZXzNoZrUQqxRufi 2zt9U8DnT6p6w7Qgx1K9QbW5Xgczk0li3lT3bdLiQeuYzhknGECViDg20MUhA9HF 8m4F0+c61QDqgqnhgnRNpDItVkFW/gfhufe1uTi0c0sgrjv9KNa3BfvMb32ff045 UzsGX2xKqVq3sdCCkeGT4sWmOQf9sjF6wEpgF16IQXlPvmRtEvLHBzZgJ4neYhKS BFsNuPj3KdKX0sxUdyLTxcNdHD1NQp0KFxH0OFl7ljSIzgWLsZUCZ5XBlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcF0ci4i6t9H6bxt8Ik5D8Avv8UMB8GA1UdIwQY MBaAFLepw00/hDzbA1t8MLPoTiJBJSLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEt M2E1NzY4MDIxNDE4LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEtM2E1NzY4MDIxNDE4 LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRc4HWwm ZboyyrnoCBbSU3TaVrpcsJSs2UUaJ/D6QvJHdqY1R2bJRlopKyj0f+gE9eM7ks0Y mkjigevocz24yH2G5X458+YSiEfOwx8Pp1yUk251E+MPNhYSKb9AEQmrArWEPpyZ +Ef3sio+Zo/LBqQ2ro/5KcplIEcPWUHAMlHSP+ASdZiZ/jptzGFpCObvgbT3cbap 3VUk6NLTJfiDcpnIDj5YF6kDqDd0VmK7H0pA4IDcRiRvtGjySrWDTHpyTchQA3cx TXnFf2c7Wzb2rz0Jby+j+LZM7J98UHWuea03ApNoY/rj/VKkVh0mqYCHSkqnDjSB 0NjE1Ub2Vo9D4w== -----END CERTIFICATE-----Generated at Sun Dec 7 00:37:44 2025 by rpki-client