This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft File: D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft (raw, json) Hash identifier: PNuxglqZmiKQqT3SP2Bg4ZUaOEazRnGzN2hrPn9NvNM= Subject key identifier: 82:7C:5C:71:27:2E:1E:62:CE:73:71:95:93:1C:F6:61:2E:3F:BD:EA Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B Certificate issuer: /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b Certificate serial: 019AF12DFED73975AE0AE286B618593F74DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft Manifest number: 09B6 Signing time: Sat 06 Dec 2025 01:01:54 +0000 Manifest this update: Sat 06 Dec 2025 01:01:54 +0000 Manifest next update: Sun 07 Dec 2025 01:01:54 +0000 Files and hashes: 1: 6C2Szm3cfjp9bAf9_VEG9JmuRyM.roa (hash: m6tO4ROtbLwqmMtYoGkRxelczMRQ44EOZBvyjQVDxjY=) 2: D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl (hash: J/vvAlodfM4ACqOOT/K/4iMmjdNnqrK+zr7VFHH5vag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:fe:d7:39:75:ae:0a:e2:86:b6:18:59:3f:74:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b Validity Not Before: Dec 6 01:01:54 2025 GMT Not After : Dec 7 01:01:54 2025 GMT Subject: CN=827c5c71272e1e62ce737195931cf6612e3fbdea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:62:b5:ab:bb:eb:6e:70:31:25:56:85:a3:11: 9f:a2:5a:ff:e7:70:64:5c:42:d3:50:2e:18:1f:5e: 39:d3:a2:51:d4:8f:e7:00:ea:d9:56:02:d8:12:2a: e3:2a:06:17:23:43:39:d3:42:53:90:52:9f:43:69: 36:c2:e4:9e:a6:16:a9:c1:ef:53:54:98:d9:06:85: 12:1a:d7:07:eb:04:f9:9b:ce:42:1b:b8:92:0a:37: 32:5e:de:69:17:bd:dc:f2:f9:14:14:f0:9d:37:de: 9b:6f:17:37:fc:d9:d7:0b:a5:3f:28:27:c2:96:af: 82:3a:07:dd:f6:51:80:0e:27:3b:4a:46:88:ed:a2: 79:d2:c2:e1:8d:a7:97:57:88:68:a0:9e:59:a1:03: ec:d4:0b:92:a5:c9:0d:ff:66:65:7a:0d:d6:c0:99: 3c:77:b4:65:e3:b9:3a:40:fd:b7:c3:b7:69:2c:5e: 54:7f:4e:79:de:73:c5:66:04:a3:03:8e:b7:a7:c0: d3:ba:31:e6:0e:7e:2c:2d:91:c6:87:9b:98:4d:0d: e0:15:00:19:99:df:e5:b5:14:15:a0:f1:5e:f1:81: c1:c4:64:5e:4f:24:ef:8a:42:c1:b6:12:b5:3d:0b: 08:62:75:2f:bf:54:3f:cd:8a:7b:38:e3:53:95:b2: 47:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7C:5C:71:27:2E:1E:62:CE:73:71:95:93:1C:F6:61:2E:3F:BD:EA X509v3 Authority Key Identifier: keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:99:3b:3b:fe:14:02:b2:7a:da:78:e6:3f:a1:86:c7:12:2b: b3:56:21:8e:cc:47:7c:51:bc:ac:2d:74:7a:c1:00:17:ed:87: a9:bc:5b:a4:8d:7c:99:cd:6b:8f:be:c8:b7:70:fa:33:b5:35: 92:b2:89:ec:48:74:8b:4c:94:1f:ae:8c:74:6e:12:e5:5b:42: ce:84:c2:c3:6a:3f:7f:80:a4:05:c9:6f:f8:f0:50:2c:bd:a6: 6d:be:13:1f:fd:81:cb:15:8f:65:e0:e2:8b:0f:6b:e2:13:12: 6e:f0:76:fd:e6:7e:99:41:c9:12:62:a6:a3:1a:a5:68:db:cf: 4c:bc:00:aa:c9:da:fe:9c:6a:44:f7:09:6e:cc:f9:87:61:33: f6:1e:6c:92:65:f4:be:14:79:44:af:73:2d:aa:86:c4:6f:16: 07:16:04:9f:19:bc:e3:0f:e5:d3:ca:c2:cb:7a:19:d3:a3:09: e2:b8:e8:38:ad:c9:4c:8d:ee:c6:05:17:1a:3d:6b:06:05:14: 29:39:12:b6:e9:0d:d1:05:e3:71:7d:cd:d8:20:09:66:fd:bb: 2b:64:b5:79:fa:79:34:a5:28:20:95:38:60:83:7d:c6:4c:4c: 90:d4:60:40:3a:6c:57:03:bd:0c:90:07:23:dd:9a:eb:e5:ef: ba:c1:96:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLf7XOXWuCuKGthhZP3TcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmODI3YTVhMjRlNzcxY2MxNGZhNjliYjc0YjNlNzYwMTY3 YjAyNmIwHhcNMjUxMjA2MDEwMTU0WhcNMjUxMjA3MDEwMTU0WjAzMTEwLwYDVQQD Eyg4MjdjNWM3MTI3MmUxZTYyY2U3MzcxOTU5MzFjZjY2MTJlM2ZiZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+GK1q7vrbnAxJVaFoxGfolr/53Bk XELTUC4YH14506JR1I/nAOrZVgLYEirjKgYXI0M500JTkFKfQ2k2wuSephapwe9T VJjZBoUSGtcH6wT5m85CG7iSCjcyXt5pF73c8vkUFPCdN96bbxc3/NnXC6U/KCfC lq+COgfd9lGADic7SkaI7aJ50sLhjaeXV4hooJ5ZoQPs1AuSpckN/2Zleg3WwJk8 d7Rl47k6QP23w7dpLF5Uf0553nPFZgSjA463p8DTujHmDn4sLZHGh5uYTQ3gFQAZ md/ltRQVoPFe8YHBxGReTyTvikLBthK1PQsIYnUvv1Q/zYp7OONTlbJHIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJ8XHEnLh5iznNxlZMc9mEuP73qMB8GA1UdIwQY MBaAFA+Celok53HMFPppu3Sz52AWewJrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDRKNldpVG5jY3dVLW1tN2RMUG5ZQlo3QW1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yNGE2YjMtMmU2MC00NDYzLTkyMGIt Y2JkYWVkMGQwMGFkLzEvRDRKNldpVG5jY3dVLW1tN2RMUG5ZQlo3QW1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8yNGE2YjMtMmU2MC00NDYzLTkyMGItY2JkYWVkMGQwMGFk LzEvRDRKNldpVG5jY3dVLW1tN2RMUG5ZQlo3QW1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtJk7O/4U ArJ62njmP6GGxxIrs1YhjsxHfFG8rC10esEAF+2HqbxbpI18mc1rj77It3D6M7U1 krKJ7Eh0i0yUH66MdG4S5VtCzoTCw2o/f4CkBclv+PBQLL2mbb4TH/2ByxWPZeDi iw9r4hMSbvB2/eZ+mUHJEmKmoxqlaNvPTLwAqsna/pxqRPcJbsz5h2Ez9h5skmX0 vhR5RK9zLaqGxG8WBxYEnxm84w/l08rCy3oZ06MJ4rjoOK3JTI3uxgUXGj1rBgUU KTkStukN0QXjcX3N2CAJZv27K2S1efp5NKUoIJU4YIN9xkxMkNRgQDpsVwO9DJAH I92a6+XvusGWzg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:29 2025 by rpki-client