This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft File: d6Hu06zg_C-KoADeaHpJvv0nkdg.mft (raw, json) Hash identifier: B3t8z9lWfzcJakqaZzhpuKHdnYp1hLY08PNNxuGWM3w= Subject key identifier: 28:8C:A9:FD:68:7E:66:88:5F:F9:C2:AE:52:E8:5C:0C:60:A3:86:95 Authority key identifier: 77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8 Certificate issuer: /CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8 Certificate serial: 019B2BC1FD63263A12B8F6BABB3209DAEB11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft Manifest number: 106E Signing time: Wed 17 Dec 2025 10:01:32 +0000 Manifest this update: Wed 17 Dec 2025 10:01:32 +0000 Manifest next update: Thu 18 Dec 2025 10:01:32 +0000 Files and hashes: 1: 1tIKgu9zIxn-X__dh7X40Ez2yro.roa (hash: I7j76og90Bzenb6NN5y/FV3ZxjjrPcp5unqi/MuouAM=) 2: d6Hu06zg_C-KoADeaHpJvv0nkdg.crl (hash: woQTgyEalYiWQsKpEMNn797QHRCuKBJsN/xqC9Nuzso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:fd:63:26:3a:12:b8:f6:ba:bb:32:09:da:eb:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8 Validity Not Before: Dec 17 10:01:32 2025 GMT Not After : Dec 18 10:01:32 2025 GMT Subject: CN=288ca9fd687e66885ff9c2ae52e85c0c60a38695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8b:5e:22:25:37:32:c5:32:b9:74:7b:dc:7c: 9e:7f:c3:34:3e:35:03:b1:c7:51:93:52:c1:c0:10: ca:9a:18:52:a5:34:be:0f:12:43:17:da:b1:34:12: 4f:90:d1:c3:e0:56:0c:24:1f:47:be:c3:9b:59:b6: 1a:0e:e5:80:88:41:40:a0:c4:79:cf:8f:35:ee:9b: 12:de:84:19:71:75:bc:82:b0:cc:db:7a:a6:d9:bd: 6d:0c:46:73:f9:1c:11:41:46:61:05:a5:d0:df:0c: d8:6f:4d:67:6d:7f:07:cb:1b:1a:bb:97:bf:3c:d4: 78:ba:09:5f:bf:a0:fa:2c:ad:21:60:fb:2c:94:29: ba:46:17:e5:db:44:14:a4:ef:a2:f6:9e:86:39:1e: 8b:83:5e:dc:67:b5:d3:44:b1:28:82:ac:ca:a0:80: 69:d5:30:30:82:fa:e0:66:64:bb:46:4a:49:ad:ee: b8:ce:6d:4e:41:90:1c:f7:3e:e0:fd:73:62:19:82: c9:0c:e7:a8:f5:72:29:45:b0:7b:09:ce:29:ff:bc: ad:2d:05:2d:24:99:1b:f9:85:57:42:1b:88:d9:2f: 25:75:f6:7e:76:55:f4:cb:9b:01:36:2d:e2:bc:79: f9:f9:f2:61:c5:7d:bb:9d:cc:74:c1:35:68:58:c4: ce:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8C:A9:FD:68:7E:66:88:5F:F9:C2:AE:52:E8:5C:0C:60:A3:86:95 X509v3 Authority Key Identifier: keyid:77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b3:4f:49:6e:d3:fe:7c:d6:61:de:63:bc:a1:60:b0:f4:7f: cd:09:c9:a9:0d:5c:73:95:88:cd:9e:f2:b1:4c:d2:15:76:1c: 4a:4c:11:40:b6:12:6f:6a:5a:84:62:0a:a2:b5:89:ec:9c:72: 13:59:56:b8:1d:cc:a3:03:e6:b7:3d:34:b9:c3:d5:4c:cf:44: 04:f4:8e:cd:2a:0f:d8:3e:9e:b2:7e:15:bd:cc:be:aa:e6:65: 4e:57:88:9b:6a:b9:11:2c:f8:87:e6:d1:76:be:df:99:48:bb: d0:49:96:72:cb:01:c2:73:ab:86:a8:e4:20:d6:ba:f4:ab:6b: 08:a2:0d:77:87:ef:f4:e5:57:01:1e:a7:18:9e:06:bd:c6:7a: da:95:dd:74:01:22:e2:fa:f3:7a:13:ef:e7:11:4c:f0:c5:c8: 92:10:b0:1a:05:45:00:f0:19:a1:3f:fc:65:ba:fc:24:fa:46: d9:9e:bc:26:b8:eb:18:8f:bc:27:68:f5:6b:dd:c1:05:82:d0: 69:13:7f:35:c3:41:29:cf:2d:a0:70:54:3d:f9:04:f5:80:b2: 39:33:4b:af:11:1f:20:2c:ef:80:bf:01:bd:7e:e3:45:22:d6: 34:a1:e4:bd:6c:ad:5c:c3:07:dc:9b:1b:99:3e:ad:1d:45:8a: 74:f9:4e:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwf1jJjoSuPa6uzIJ2usRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YTFlZWQzYWNlMGZjMmY4YWEwMDBkZTY4N2E0OWJlZmQy NzkxZDgwHhcNMjUxMjE3MTAwMTMyWhcNMjUxMjE4MTAwMTMyWjAzMTEwLwYDVQQD EygyODhjYTlmZDY4N2U2Njg4NWZmOWMyYWU1MmU4NWMwYzYwYTM4Njk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIteIiU3MsUyuXR73Hyef8M0PjUD scdRk1LBwBDKmhhSpTS+DxJDF9qxNBJPkNHD4FYMJB9HvsObWbYaDuWAiEFAoMR5 z4817psS3oQZcXW8grDM23qm2b1tDEZz+RwRQUZhBaXQ3wzYb01nbX8Hyxsau5e/ PNR4uglfv6D6LK0hYPsslCm6Rhfl20QUpO+i9p6GOR6Lg17cZ7XTRLEogqzKoIBp 1TAwgvrgZmS7RkpJre64zm1OQZAc9z7g/XNiGYLJDOeo9XIpRbB7Cc4p/7ytLQUt JJkb+YVXQhuI2S8ldfZ+dlX0y5sBNi3ivHn5+fJhxX27ncx0wTVoWMTOgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiMqf1ofmaIX/nCrlLoXAxgo4aVMB8GA1UdIwQY MBaAFHeh7tOs4PwviqAA3mh6Sb79J5HYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDZIdTA2emdfQy1Lb0FEZWFIcEp2djBua2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80ZjNlMTEtZmQwZi00ZTcxLTkzNjkt MjIwNGVlMjE3MjgwLzEvZDZIdTA2emdfQy1Lb0FEZWFIcEp2djBua2RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80ZjNlMTEtZmQwZi00ZTcxLTkzNjktMjIwNGVlMjE3Mjgw LzEvZDZIdTA2emdfQy1Lb0FEZWFIcEp2djBua2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7NPSW7T /nzWYd5jvKFgsPR/zQnJqQ1cc5WIzZ7ysUzSFXYcSkwRQLYSb2pahGIKorWJ7Jxy E1lWuB3MowPmtz00ucPVTM9EBPSOzSoP2D6esn4Vvcy+quZlTleIm2q5ESz4h+bR dr7fmUi70EmWcssBwnOrhqjkINa69KtrCKINd4fv9OVXAR6nGJ4GvcZ62pXddAEi 4vrzehPv5xFM8MXIkhCwGgVFAPAZoT/8Zbr8JPpG2Z68JrjrGI+8J2j1a93BBYLQ aRN/NcNBKc8toHBUPfkE9YCyOTNLrxEfICzvgL8BvX7jRSLWNKHkvWytXMMH3Jsb mT6tHUWKdPlONA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:29:49 2025 by rpki-client