This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft File: R6guVXeaHqTvmWf4IdXMBbe9mek.mft (raw, json) Hash identifier: lQisDY7D+wwJWwFZD75xc9HZIUHMFxqDwd0k50kY0vY= Subject key identifier: DD:60:4D:55:05:03:52:E0:57:3C:72:2C:50:71:9C:22:8B:E0:DF:2C Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9 Certificate issuer: /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9 Certificate serial: 019AF0BF1785AE31E27815687A5681981DBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 23:00:46 +0000 Manifest this update: Fri 05 Dec 2025 23:00:46 +0000 Manifest next update: Sat 06 Dec 2025 23:00:46 +0000 Files and hashes: 1: CFUwFBzQtfgbafFzZOyLhQjWkGM.roa (hash: 97CGeBu3yLbE5oYRJj25Ylb6GhnLEinlvUvhqt045H4=) 2: R6guVXeaHqTvmWf4IdXMBbe9mek.crl (hash: N14XlRrqPcDke4NiDZaigSYbfcBvK/sCS51Jon0XN7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:17:85:ae:31:e2:78:15:68:7a:56:81:98:1d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9 Validity Not Before: Dec 5 23:00:46 2025 GMT Not After : Dec 6 23:00:46 2025 GMT Subject: CN=dd604d55050352e0573c722c50719c228be0df2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8d:db:7d:2e:78:23:1a:e7:25:41:dc:c8:9f: 6e:b4:9a:e3:44:bc:01:81:68:23:e4:44:04:e3:09: 8c:ce:96:11:71:18:bc:d2:cf:3f:e4:3d:28:09:dc: dc:ed:07:c8:00:d0:e4:18:a3:4c:3e:ad:c6:87:04: 2b:af:3a:f6:35:b6:55:39:90:5b:fd:5b:99:b9:52: 55:8a:6a:5b:88:77:b6:44:03:ec:2e:a6:e3:75:9a: 9a:e6:a4:a6:41:a6:cf:08:02:71:ca:12:15:57:57: f6:85:54:6f:a2:de:cc:c7:f8:fe:b1:2b:8f:73:6f: 1e:1d:c6:fc:3e:a0:8f:03:00:6b:76:76:b6:1d:3f: bf:62:bc:99:a1:74:b0:a0:19:f5:4e:6d:00:ea:62: 4b:29:bd:7b:bf:6f:11:68:6a:c6:47:cb:47:a7:6c: b8:60:c8:86:fb:71:90:2d:63:ca:56:76:ef:25:4b: 2f:b5:50:66:2d:41:ce:84:fb:f1:bd:5f:f2:df:a2: 4c:f1:5c:b5:a5:3d:d0:3c:70:56:76:e0:36:ae:bf: a8:dc:0e:9d:0d:89:dc:9c:55:b4:8b:f7:9e:95:fe: 19:31:1c:6d:84:b1:5b:4c:50:35:00:ec:bb:31:66: be:a2:b0:43:93:21:9c:91:5a:bd:4c:14:2d:5d:dd: 39:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:60:4D:55:05:03:52:E0:57:3C:72:2C:50:71:9C:22:8B:E0:DF:2C X509v3 Authority Key Identifier: keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:bb:73:d0:30:79:cb:12:2c:c4:4e:85:09:38:42:67:b3:ca: 69:6d:38:6c:02:9b:23:57:3a:95:de:97:fb:c8:83:8d:f9:f5: 61:86:62:3a:ad:0f:0f:ca:5d:1c:c8:c4:2d:70:a3:21:a8:65: 2a:a1:5d:0a:89:4e:13:51:a9:9a:e1:a1:0a:e2:78:c7:47:59: a0:f4:aa:c8:8f:7a:80:52:e0:8a:57:86:d0:98:9a:f8:91:73: 29:d4:fb:78:5d:24:df:34:8c:02:eb:02:3d:bf:f9:d0:83:a4: 4b:9a:41:9f:2e:29:ed:4c:5a:64:30:e5:b0:78:04:51:ef:49: 4b:b4:b5:92:6e:0b:4d:4d:82:1f:a3:ab:19:da:5c:cd:01:f9: 07:35:3a:ca:54:10:fc:67:09:07:0d:e6:2e:1e:d7:84:00:97: c6:8e:26:2e:0e:a2:85:06:14:c3:02:5d:14:ba:c5:ed:f0:df: 3b:57:44:97:28:44:1d:e0:27:3f:d2:2c:2d:ce:34:1f:20:a0: 0e:9a:f2:c1:b5:89:e1:85:f7:0e:fd:5a:9b:6b:fb:f7:9c:79: 6b:68:86:8a:1c:ec:9f:d1:c3:6d:78:87:97:14:12:16:ff:9b: cb:d8:a3:0b:d7:ae:22:05:be:a9:df:02:48:f9:96:78:54:59: 00:ec:49:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxeFrjHieBVoelaBmB26MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3YTgyZTU1Nzc5YTFlYTRlZjk5NjdmODIxZDVjYzA1Yjdi ZDk5ZTkwHhcNMjUxMjA1MjMwMDQ2WhcNMjUxMjA2MjMwMDQ2WjAzMTEwLwYDVQQD EyhkZDYwNGQ1NTA1MDM1MmUwNTczYzcyMmM1MDcxOWMyMjhiZTBkZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA443bfS54IxrnJUHcyJ9utJrjRLwB gWgj5EQE4wmMzpYRcRi80s8/5D0oCdzc7QfIANDkGKNMPq3GhwQrrzr2NbZVOZBb /VuZuVJVimpbiHe2RAPsLqbjdZqa5qSmQabPCAJxyhIVV1f2hVRvot7Mx/j+sSuP c28eHcb8PqCPAwBrdna2HT+/YryZoXSwoBn1Tm0A6mJLKb17v28RaGrGR8tHp2y4 YMiG+3GQLWPKVnbvJUsvtVBmLUHOhPvxvV/y36JM8Vy1pT3QPHBWduA2rr+o3A6d DYncnFW0i/eelf4ZMRxthLFbTFA1AOy7MWa+orBDkyGckVq9TBQtXd05KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1gTVUFA1LgVzxyLFBxnCKL4N8sMB8GA1UdIwQY MBaAFEeoLlV3mh6k75ln+CHVzAW3vZnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81OWFmYWItZTBhOC00MmQwLTg3M2It NjAwNWMwMTExZjFlLzEvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS81OWFmYWItZTBhOC00MmQwLTg3M2ItNjAwNWMwMTExZjFl LzEvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7tz0DB5 yxIsxE6FCThCZ7PKaW04bAKbI1c6ld6X+8iDjfn1YYZiOq0PD8pdHMjELXCjIahl KqFdColOE1GpmuGhCuJ4x0dZoPSqyI96gFLgileG0Jia+JFzKdT7eF0k3zSMAusC Pb/50IOkS5pBny4p7UxaZDDlsHgEUe9JS7S1km4LTU2CH6OrGdpczQH5BzU6ylQQ /GcJBw3mLh7XhACXxo4mLg6ihQYUwwJdFLrF7fDfO1dElyhEHeAnP9IsLc40HyCg DprywbWJ4YX3Dv1am2v795x5a2iGihzsn9HDbXiHlxQSFv+by9ijC9euIgW+qd8C SPmWeFRZAOxJRg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:08 2025 by rpki-client