This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json) Hash identifier: +sclEeN/672bP6XIdu7ilyFZc0nNwB3jbpXm1rjVmH0= Subject key identifier: CD:60:64:37:24:E2:2C:8B:A6:6E:D1:A2:5E:5F:8D:52:00:14:5C:3D Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2 Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2 Certificate serial: 019AF16498D5E82CD143CF9EA36BB47E4770 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft Manifest number: 0352 Signing time: Sat 06 Dec 2025 02:01:32 +0000 Manifest this update: Sat 06 Dec 2025 02:01:32 +0000 Manifest next update: Sun 07 Dec 2025 02:01:32 +0000 Files and hashes: 1: EiOlPx07xu7VkFJ-Fp9Fuqy8TzU.roa (hash: YTkNQ57L/BsF8+52AnZs1f7V2wA4xa87/fYc1vwFoig=) 2: GU1YI3vRymC8okEmp-zZRparjfs.roa (hash: q/QbAyjmOhWo1JcjW3JwZIKUXCaSn/iJ6pmWpIOWSpI=) 3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: CtagiS+5aliTibFklMmz7CYRkcXq+rFgowWlcxfKX8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:98:d5:e8:2c:d1:43:cf:9e:a3:6b:b4:7e:47:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2 Validity Not Before: Dec 6 02:01:32 2025 GMT Not After : Dec 7 02:01:32 2025 GMT Subject: CN=cd60643724e22c8ba66ed1a25e5f8d5200145c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4e:8c:75:c3:04:18:b6:40:12:42:2f:9c:88: fb:18:9a:f5:94:d9:54:c0:8c:fb:86:5e:ee:6d:91: e0:4c:94:fd:91:f2:07:d9:56:9a:c9:f5:45:01:0a: e4:09:40:54:98:4a:c6:5b:f6:1d:dd:ef:a5:03:5b: d9:1b:4d:89:26:49:76:3d:e4:b9:03:a7:81:99:e3: 85:9e:c1:69:f4:7f:c5:40:d0:3b:63:73:8f:ca:c6: d5:28:b7:ff:83:5a:f0:1e:4e:69:e0:d6:84:a4:47: 66:a5:63:cc:31:f1:cf:a2:3d:2c:bf:38:8e:9c:cc: 74:ac:33:ef:36:a1:8f:38:3c:b3:1f:8d:9f:d5:b6: 51:f1:a5:2a:18:76:30:c8:1b:d0:55:04:3b:f9:cb: 2c:b7:6f:cd:29:80:0f:f1:7c:75:f7:ff:95:1f:95: 30:ea:f1:26:bb:90:e2:28:50:72:f7:f0:79:98:bf: 93:30:96:24:9a:6a:dd:ed:07:a3:05:6f:30:13:8c: 54:8d:c6:e9:1c:98:31:08:c8:84:af:e4:57:08:f0: fc:20:ce:4c:11:c0:07:80:d0:76:ab:f5:fc:08:09: 06:df:54:16:58:78:96:c1:40:5b:e4:fe:bd:97:60: ba:c2:df:b3:c1:b8:18:31:50:c2:52:8d:14:7e:dc: 02:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:60:64:37:24:E2:2C:8B:A6:6E:D1:A2:5E:5F:8D:52:00:14:5C:3D X509v3 Authority Key Identifier: keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:25:f7:a9:66:14:f7:56:b0:b6:b5:8d:14:38:98:0c:58:31: bb:4a:77:ee:c5:22:d2:77:f1:ba:14:5f:f2:fe:52:00:6c:20: 8b:46:cf:e8:80:fb:73:1a:3d:67:e1:bb:73:10:e1:49:b4:fb: ba:4d:e3:b1:48:9d:fc:07:a1:0d:00:0c:64:1d:3d:96:2a:48: 2e:97:24:43:87:7f:e7:81:52:9a:6a:bb:22:7a:74:74:51:be: cf:cc:5a:35:75:ae:1e:e7:48:ea:62:31:c7:90:8e:74:6f:ab: 2f:ed:b2:43:5c:32:52:d9:b0:6a:2b:fb:17:17:b7:b1:d4:12: 4e:ce:40:6b:84:1b:19:7e:0f:fd:c8:3a:c2:ac:26:a0:3a:60: fa:cb:63:61:ff:fe:f3:3d:f8:3a:76:82:bd:3c:9f:43:57:11: db:ac:41:8f:c1:ec:40:ee:47:69:67:0e:87:e2:7a:d3:f1:41: 3c:af:54:05:c7:b9:d9:df:eb:8f:b8:b1:8c:b6:f0:83:20:27: 59:21:d5:ea:9a:25:40:1c:69:6f:67:78:a4:d3:8a:b7:5b:71: e0:8f:29:d5:0f:87:04:8d:e7:30:17:b9:b1:fe:87:a2:27:47: 7d:72:f9:1f:6a:25:02:00:96:e2:d1:6d:1d:ad:a3:26:c7:86: c0:05:da:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZJjV6CzRQ8+eo2u0fkdwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmYWM2OGY5MTIwNWM0NGU3MzAzMzZlNjAwYjYzMzRmOGM4 MWU4YzIwHhcNMjUxMjA2MDIwMTMyWhcNMjUxMjA3MDIwMTMyWjAzMTEwLwYDVQQD EyhjZDYwNjQzNzI0ZTIyYzhiYTY2ZWQxYTI1ZTVmOGQ1MjAwMTQ1YzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU6MdcMEGLZAEkIvnIj7GJr1lNlU wIz7hl7ubZHgTJT9kfIH2VaayfVFAQrkCUBUmErGW/Yd3e+lA1vZG02JJkl2PeS5 A6eBmeOFnsFp9H/FQNA7Y3OPysbVKLf/g1rwHk5p4NaEpEdmpWPMMfHPoj0svziO nMx0rDPvNqGPODyzH42f1bZR8aUqGHYwyBvQVQQ7+csst2/NKYAP8Xx19/+VH5Uw 6vEmu5DiKFBy9/B5mL+TMJYkmmrd7QejBW8wE4xUjcbpHJgxCMiEr+RXCPD8IM5M EcAHgNB2q/X8CAkG31QWWHiWwUBb5P69l2C6wt+zwbgYMVDCUo0UftwCGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1gZDck4iyLpm7Rol5fjVIAFFw9MB8GA1UdIwQY MBaAFD+saPkSBcROcwM25gC2M0+MgejCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lM2U0MGYtMTUwNS00MmU5LTk2ZjEt ZmVhNzRlODEwNTFhLzEvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9lM2U0MGYtMTUwNS00MmU5LTk2ZjEtZmVhNzRlODEwNTFh LzEvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciX3qWYU 91awtrWNFDiYDFgxu0p37sUi0nfxuhRf8v5SAGwgi0bP6ID7cxo9Z+G7cxDhSbT7 uk3jsUid/AehDQAMZB09lipILpckQ4d/54FSmmq7Inp0dFG+z8xaNXWuHudI6mIx x5COdG+rL+2yQ1wyUtmwaiv7Fxe3sdQSTs5Aa4QbGX4P/cg6wqwmoDpg+stjYf/+ 8z34OnaCvTyfQ1cR26xBj8HsQO5HaWcOh+J60/FBPK9UBce52d/rj7ixjLbwgyAn WSHV6polQBxpb2d4pNOKt1tx4I8p1Q+HBI3nMBe5sf6HoidHfXL5H2olAgCW4tFt Ha2jJseGwAXa8A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:54 2025 by rpki-client