This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft File: s6t6iYCGh8w9rXug998LrOAZ92M.mft (raw, json) Hash identifier: u/oYreAynURqc1Ap3VqTg9HFi6+C4bR5fGm705IBCpw= Subject key identifier: 3F:BD:4E:36:40:B1:18:58:6C:B6:D2:5E:FD:A6:D2:DE:BB:27:5A:19 Authority key identifier: B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63 Certificate issuer: /CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763 Certificate serial: 019B3C7FDA56FE5520E22474C73D213216CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 16:02:50 +0000 Manifest this update: Sat 20 Dec 2025 16:02:50 +0000 Manifest next update: Sun 21 Dec 2025 16:02:50 +0000 Files and hashes: 1: UXfpgLEO-YbBFk6oonjH1Xm5FgM.roa (hash: AX0QM/Os3hFjFnv3WUz1vjkj1d0jSqhI2xTsC/dfmWk=) 2: s6t6iYCGh8w9rXug998LrOAZ92M.crl (hash: X0LEtp5HUGunYYcjbg0+dbMMLYDqxLXt6hsZMiYsqn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:da:56:fe:55:20:e2:24:74:c7:3d:21:32:16:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763 Validity Not Before: Dec 20 16:02:50 2025 GMT Not After : Dec 21 16:02:50 2025 GMT Subject: CN=3fbd4e3640b118586cb6d25efda6d2debb275a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9a:16:6a:18:ec:22:a0:b9:f6:21:04:b4:f7: 3e:ad:90:ff:78:e5:6c:bf:5e:00:7f:08:1d:f6:12: 29:8d:13:6d:e6:08:b2:dc:0b:df:3b:8f:39:a1:35: 2c:37:02:b5:fd:a2:75:93:63:f9:be:31:0f:3e:bc: e5:91:39:c8:e4:d5:c4:d8:ce:07:19:c6:55:f8:f3: 6c:cf:4d:66:e3:2e:bd:55:20:4d:4d:b5:60:ca:34: a9:14:cc:df:2b:63:61:91:88:ef:71:a3:ff:b3:a4: 38:14:21:07:a5:d6:78:a1:da:5d:23:83:64:70:2c: 0a:40:a3:73:7c:5e:68:d2:f8:b6:71:44:26:50:2a: 57:c4:c5:94:10:f2:92:93:b1:30:2d:25:e7:c2:d0: fc:a8:ae:b8:29:84:66:de:c7:24:21:a7:21:dc:d3: d1:c8:48:4b:da:b8:75:66:70:4c:64:b6:17:c0:64: 5e:8a:08:4b:f1:19:e5:f8:a3:dd:b2:25:45:9f:ca: 95:b1:e6:e0:bf:82:90:16:3f:63:ee:3c:aa:e6:15: ef:97:c3:62:81:d0:a6:89:41:47:84:9e:92:a9:e0: 41:97:4a:1b:04:4a:e0:b5:54:e5:2a:81:9b:55:c5: bb:33:6d:05:12:a2:4c:14:7a:d1:16:b8:fc:1a:09: d2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BD:4E:36:40:B1:18:58:6C:B6:D2:5E:FD:A6:D2:DE:BB:27:5A:19 X509v3 Authority Key Identifier: keyid:B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:67:52:28:9e:17:fe:44:71:8a:89:2b:e3:82:0c:a0:a8:f3: 76:7a:e7:d9:d6:58:e7:c0:75:7a:c0:6f:9a:d9:03:a1:f4:ba: 7b:62:22:84:ab:c6:e7:fc:c3:a1:a7:d0:da:b6:20:32:be:6c: 8c:ba:42:c1:ab:d0:69:f9:77:20:cf:40:9c:15:ff:6d:09:4e: 36:b7:5d:b3:b6:db:1e:0a:07:76:74:32:ed:2e:cb:c6:d9:81: 91:b5:ca:d1:be:92:99:aa:a1:1f:79:ef:c7:49:5a:ed:dd:f3: f1:75:c1:79:c5:1d:68:d7:84:3d:f0:a1:b0:9d:a8:24:2a:67: e4:ee:8e:f1:96:c2:35:a2:7d:59:75:d8:cf:10:89:d0:d0:87: 2a:5b:a4:18:17:87:fd:ff:df:aa:81:3b:cf:e1:bc:90:2b:5c: 6e:5e:6d:ad:b0:eb:2b:c4:77:ed:f2:a9:c6:b5:9f:29:61:3b: 45:7f:b9:fd:a3:38:0a:00:37:a6:86:24:5e:c1:a3:ca:d6:3f: 54:6e:4c:4a:9b:60:e6:e5:f4:ab:93:12:41:ba:ef:f6:50:93: f4:cd:8f:97:73:5c:5f:2c:ec:27:9f:83:d7:c8:5e:24:fe:2a: 8c:6d:54:8f:a2:7f:df:d8:51:a3:2e:a2:5e:d7:3b:b0:55:7d: ac:89:b0:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f9pW/lUg4iR0xz0hMhbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYWI3YTg5ODA4Njg3Y2MzZGFkN2JhMGY3ZGYwYmFjZTAx OWY3NjMwHhcNMjUxMjIwMTYwMjUwWhcNMjUxMjIxMTYwMjUwWjAzMTEwLwYDVQQD EygzZmJkNGUzNjQwYjExODU4NmNiNmQyNWVmZGE2ZDJkZWJiMjc1YTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJoWahjsIqC59iEEtPc+rZD/eOVs v14Afwgd9hIpjRNt5giy3AvfO485oTUsNwK1/aJ1k2P5vjEPPrzlkTnI5NXE2M4H GcZV+PNsz01m4y69VSBNTbVgyjSpFMzfK2NhkYjvcaP/s6Q4FCEHpdZ4odpdI4Nk cCwKQKNzfF5o0vi2cUQmUCpXxMWUEPKSk7EwLSXnwtD8qK64KYRm3sckIach3NPR yEhL2rh1ZnBMZLYXwGReighL8Rnl+KPdsiVFn8qVsebgv4KQFj9j7jyq5hXvl8Ni gdCmiUFHhJ6SqeBBl0obBErgtVTlKoGbVcW7M20FEqJMFHrRFrj8GgnSxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+9TjZAsRhYbLbSXv2m0t67J1oZMB8GA1UdIwQY MBaAFLOreomAhofMPa17oPffC6zgGfdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84M2Y5MzktMDVmMS00YWZhLWFhMTAt ODYwNmE3MjRkODkxLzEvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS84M2Y5MzktMDVmMS00YWZhLWFhMTAtODYwNmE3MjRkODkx LzEvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2dSKJ4X /kRxiokr44IMoKjzdnrn2dZY58B1esBvmtkDofS6e2IihKvG5/zDoafQ2rYgMr5s jLpCwavQafl3IM9AnBX/bQlONrdds7bbHgoHdnQy7S7LxtmBkbXK0b6SmaqhH3nv x0la7d3z8XXBecUdaNeEPfChsJ2oJCpn5O6O8ZbCNaJ9WXXYzxCJ0NCHKlukGBeH /f/fqoE7z+G8kCtcbl5trbDrK8R37fKpxrWfKWE7RX+5/aM4CgA3poYkXsGjytY/ VG5MSptg5uX0q5MSQbrv9lCT9M2Pl3NcXyzsJ5+D18heJP4qjG1Uj6J/39hRoy6i Xtc7sFV9rImwuA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:59:06 2025 by rpki-client