This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft File: s6t6iYCGh8w9rXug998LrOAZ92M.mft (raw, json) Hash identifier: zTwAZC2zWZVqGR0OfaMpjpG7WjxjLt00CJiO1TNwX3o= Subject key identifier: C1:11:50:B9:67:71:9C:AA:FA:A3:46:FB:6A:10:5E:C0:74:8E:8B:BF Authority key identifier: B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63 Certificate issuer: /CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763 Certificate serial: 019AF12EAB057ED123DD6F3A9FC8B9D30CB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:02:38 +0000 Manifest this update: Sat 06 Dec 2025 01:02:38 +0000 Manifest next update: Sun 07 Dec 2025 01:02:38 +0000 Files and hashes: 1: UXfpgLEO-YbBFk6oonjH1Xm5FgM.roa (hash: AX0QM/Os3hFjFnv3WUz1vjkj1d0jSqhI2xTsC/dfmWk=) 2: s6t6iYCGh8w9rXug998LrOAZ92M.crl (hash: Rh7jNJamFz1+SpUBHA3BBm3BejypSbc0FmL7+ePGPQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ab:05:7e:d1:23:dd:6f:3a:9f:c8:b9:d3:0c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3ab7a89808687cc3dad7ba0f7df0bace019f763 Validity Not Before: Dec 6 01:02:38 2025 GMT Not After : Dec 7 01:02:38 2025 GMT Subject: CN=c11150b967719caafaa346fb6a105ec0748e8bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:69:68:7e:af:fa:82:57:7b:ca:e7:19:11:50: 9d:e3:e8:a5:d3:6c:d5:23:05:2e:b4:f3:29:6f:2c: 7d:41:16:e4:04:61:75:9d:a2:23:c8:be:cc:d5:a6: 03:2a:d3:02:57:87:86:ad:22:a3:76:04:ef:1d:e4: 6c:f6:77:8b:5f:49:54:82:cd:81:3f:5a:24:7d:11: f0:49:ce:d2:21:14:0a:49:03:c2:ad:1b:9e:93:3a: 6c:f1:29:52:6b:36:cc:ed:ca:33:a4:40:3a:ff:85: 82:45:9d:1d:6a:c1:02:cc:5f:bc:57:ff:94:e9:56: 75:bd:24:bf:6d:74:f8:b0:4f:66:58:ef:9a:5d:6f: 92:96:c7:0e:0f:dc:ca:eb:17:a9:79:28:e4:d5:eb: 04:61:85:be:50:12:6a:be:4c:0e:5a:80:3e:85:90: 56:c8:2a:f8:a3:6a:44:e7:e8:73:bc:60:79:e7:b1: 7b:c2:69:73:21:6c:14:3d:be:5a:2d:3f:c3:be:32: 83:9f:77:d3:2f:ea:0a:e8:8a:f2:b9:3f:9f:c2:37: 63:8d:64:e0:1e:34:aa:91:b9:4f:37:f0:05:14:e5: c9:d2:e6:f3:cd:a1:0b:89:fa:f2:c3:52:18:84:df: 52:52:8b:da:1c:20:39:d3:e5:da:fb:7a:35:26:f6: 4b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:11:50:B9:67:71:9C:AA:FA:A3:46:FB:6A:10:5E:C0:74:8E:8B:BF X509v3 Authority Key Identifier: keyid:B3:AB:7A:89:80:86:87:CC:3D:AD:7B:A0:F7:DF:0B:AC:E0:19:F7:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6t6iYCGh8w9rXug998LrOAZ92M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/83f939-05f1-4afa-aa10-8606a724d891/1/s6t6iYCGh8w9rXug998LrOAZ92M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a8:52:11:df:db:aa:53:9e:cd:cd:f6:71:05:93:60:af:b3: fe:bf:df:ac:e3:37:61:12:fb:3f:ca:52:9b:46:38:a6:e4:fc: 00:35:35:55:7a:d6:97:60:76:b9:02:cd:83:eb:29:f7:e7:86: 13:b0:a7:fb:35:f0:68:68:2f:0b:b1:1e:e8:54:2e:91:a4:b2: 47:a2:f9:9c:26:e6:bf:b8:64:2c:21:9b:a6:9e:20:e1:df:d3: 4f:1f:7c:8d:6a:4e:62:15:4d:14:36:74:3d:ac:d2:05:3f:18: 2e:71:82:c3:11:c8:74:57:91:4f:52:4f:3f:6e:c5:22:cd:b1: b4:3c:aa:eb:59:2b:df:c0:67:03:9d:5f:84:c5:6d:ef:4d:33: 2a:4b:eb:9d:e7:75:a0:54:85:34:a5:57:90:59:7b:be:b6:0f: 6b:3a:fd:b4:0d:8b:fb:af:38:6e:06:e7:a4:4a:c6:35:f9:b8: 2f:d8:7d:92:3d:a7:50:62:b6:86:65:28:83:f4:33:6e:24:9b: 0f:8a:03:0e:9e:fe:f4:c9:97:66:cb:6c:42:10:95:78:21:8a: b5:7a:93:dd:a1:61:7f:f3:c3:87:1c:c7:e0:04:f5:01:1f:fe: 06:7d:a9:96:d1:f3:fb:08:45:cf:bc:9a:db:87:7d:0c:6b:f7: 8f:1c:d3:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqsFftEj3W86n8i50wy4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYWI3YTg5ODA4Njg3Y2MzZGFkN2JhMGY3ZGYwYmFjZTAx OWY3NjMwHhcNMjUxMjA2MDEwMjM4WhcNMjUxMjA3MDEwMjM4WjAzMTEwLwYDVQQD EyhjMTExNTBiOTY3NzE5Y2FhZmFhMzQ2ZmI2YTEwNWVjMDc0OGU4YmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52lofq/6gld7yucZEVCd4+il02zV IwUutPMpbyx9QRbkBGF1naIjyL7M1aYDKtMCV4eGrSKjdgTvHeRs9neLX0lUgs2B P1okfRHwSc7SIRQKSQPCrRuekzps8SlSazbM7cozpEA6/4WCRZ0dasECzF+8V/+U 6VZ1vSS/bXT4sE9mWO+aXW+SlscOD9zK6xepeSjk1esEYYW+UBJqvkwOWoA+hZBW yCr4o2pE5+hzvGB557F7wmlzIWwUPb5aLT/DvjKDn3fTL+oK6IryuT+fwjdjjWTg HjSqkblPN/AFFOXJ0ubzzaELifryw1IYhN9SUovaHCA50+Xa+3o1JvZLzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMERULlncZyq+qNG+2oQXsB0jou/MB8GA1UdIwQY MBaAFLOreomAhofMPa17oPffC6zgGfdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84M2Y5MzktMDVmMS00YWZhLWFhMTAt ODYwNmE3MjRkODkxLzEvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS84M2Y5MzktMDVmMS00YWZhLWFhMTAtODYwNmE3MjRkODkx LzEvczZ0NmlZQ0doOHc5clh1Zzk5OExyT0FaOTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqhSEd/b qlOezc32cQWTYK+z/r/frOM3YRL7P8pSm0Y4puT8ADU1VXrWl2B2uQLNg+sp9+eG E7Cn+zXwaGgvC7Ee6FQukaSyR6L5nCbmv7hkLCGbpp4g4d/TTx98jWpOYhVNFDZ0 PazSBT8YLnGCwxHIdFeRT1JPP27FIs2xtDyq61kr38BnA51fhMVt700zKkvrned1 oFSFNKVXkFl7vrYPazr9tA2L+684bgbnpErGNfm4L9h9kj2nUGK2hmUog/QzbiSb D4oDDp7+9MmXZstsQhCVeCGKtXqT3aFhf/PDhxzH4AT1AR/+Bn2pltHz+whFz7ya 24d9DGv3jxzTPw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:05:13 2025 by rpki-client