This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft File: t6K9aUc7So6Fp2r72OW77ptLs0s.mft (raw, json) Hash identifier: nea6PO+6OcF3Qh/ryOqu5Tn+zGCzETk1N4yAXbVjs0U= Subject key identifier: 64:30:0D:AD:43:D2:BA:69:1A:21:AB:39:A0:1C:CE:AE:17:47:66:78 Authority key identifier: B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B Certificate issuer: /CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b Certificate serial: 019AF12E6EB5F0B0CB6B8790706C899EEFAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft Manifest number: 10C5 Signing time: Sat 06 Dec 2025 01:02:23 +0000 Manifest this update: Sat 06 Dec 2025 01:02:23 +0000 Manifest next update: Sun 07 Dec 2025 01:02:23 +0000 Files and hashes: 1: t6K9aUc7So6Fp2r72OW77ptLs0s.crl (hash: EduRIQl5e7PH0l29Ll6m0OYMvLqwVeSLsOQqkv3uTQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:6e:b5:f0:b0:cb:6b:87:90:70:6c:89:9e:ef:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b Validity Not Before: Dec 6 01:02:23 2025 GMT Not After : Dec 7 01:02:23 2025 GMT Subject: CN=64300dad43d2ba691a21ab39a01cceae17476678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:33:2d:3e:f8:4d:6a:93:e8:c8:6f:bb:46:86: 6a:d5:36:2b:60:2c:63:60:5b:40:a4:49:b8:05:39: 75:15:0f:ba:a7:72:98:3e:ae:3d:fb:22:22:67:92: da:71:d2:6c:34:f3:92:81:e5:79:e5:32:d7:12:f9: 23:14:72:c0:1f:ff:b8:5f:99:a5:ac:55:aa:6f:ab: 19:89:4a:74:ba:7c:bd:65:97:c5:a9:ad:ae:f0:d1: 1d:5f:9f:72:8e:13:1b:e7:9d:4b:80:b2:2e:61:6f: 65:0a:05:4e:60:b3:d5:c7:a6:e0:ee:66:7f:38:40: 44:d1:6f:a6:b5:7e:72:cb:11:89:af:37:7f:2c:26: b9:b8:1e:98:47:5c:92:39:9e:bc:5e:f4:9e:c0:58: 95:a7:8a:69:d0:ee:66:55:29:7b:1c:d5:19:70:1f: 55:4f:b1:2a:12:70:f5:e5:e1:52:8d:8f:b3:37:91: e5:0f:d0:d9:fe:a3:f1:5d:e0:29:16:42:41:79:a5: e5:2c:bc:64:63:5e:90:d2:96:a1:67:11:46:d1:54: ea:04:d5:7b:61:7b:d1:d4:1f:47:09:d1:87:ad:09: fc:2b:90:3a:10:b2:c6:85:6b:b1:d9:dc:83:3b:87: bb:99:5d:98:e7:7e:1c:6a:99:92:2e:36:a9:be:bb: a4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:30:0D:AD:43:D2:BA:69:1A:21:AB:39:A0:1C:CE:AE:17:47:66:78 X509v3 Authority Key Identifier: keyid:B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:1a:77:c3:9a:94:23:cc:04:76:60:6c:59:8c:43:28:3f:ce: 63:b3:5c:5b:57:dd:e7:0e:25:d1:56:c7:52:7a:ae:07:4e:19: 10:74:a8:51:75:84:93:7d:b6:92:ba:f9:9a:a2:d1:d1:34:dd: 7d:cf:57:f8:b1:aa:89:ac:5f:5f:a6:8e:b8:1e:7b:d6:ac:95: a2:3e:00:d4:9f:75:6b:0f:9b:33:ee:f8:e2:13:7e:3c:3e:fd: d7:9b:3e:f9:aa:02:85:b4:78:4e:4d:14:96:93:93:a4:61:7d: e4:10:46:e8:06:0c:95:58:f4:23:74:8e:19:3b:5d:02:ba:cd: 0f:f1:1b:9f:e6:6c:f9:9e:fe:84:ae:88:7a:d4:f9:2f:5d:44: 95:25:48:75:29:23:48:32:3b:a1:8a:a7:6d:c9:ac:09:e5:35: 59:e8:5d:83:65:38:f6:01:fa:55:b1:00:bf:e8:ba:4a:ff:54: 2d:59:54:55:e0:64:e8:b9:6d:61:68:08:ab:35:72:14:fa:24: ab:41:28:f6:38:76:71:a0:6b:3a:5e:58:6b:d5:4e:50:4b:b7: 10:6a:1a:9b:d6:84:8c:c2:b7:91:7c:5d:5b:cb:ba:43:85:fc: e8:e7:7c:dc:9a:de:d0:b8:87:02:d5:9c:f3:01:cf:40:ef:67: cc:d0:90:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLm618LDLa4eQcGyJnu+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YTJiZDY5NDczYjRhOGU4NWE3NmFmYmQ4ZTViYmVlOWI0 YmIzNGIwHhcNMjUxMjA2MDEwMjIzWhcNMjUxMjA3MDEwMjIzWjAzMTEwLwYDVQQD Eyg2NDMwMGRhZDQzZDJiYTY5MWEyMWFiMzlhMDFjY2VhZTE3NDc2Njc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTMtPvhNapPoyG+7RoZq1TYrYCxj YFtApEm4BTl1FQ+6p3KYPq49+yIiZ5LacdJsNPOSgeV55TLXEvkjFHLAH/+4X5ml rFWqb6sZiUp0uny9ZZfFqa2u8NEdX59yjhMb551LgLIuYW9lCgVOYLPVx6bg7mZ/ OEBE0W+mtX5yyxGJrzd/LCa5uB6YR1ySOZ68XvSewFiVp4pp0O5mVSl7HNUZcB9V T7EqEnD15eFSjY+zN5HlD9DZ/qPxXeApFkJBeaXlLLxkY16Q0pahZxFG0VTqBNV7 YXvR1B9HCdGHrQn8K5A6ELLGhWux2dyDO4e7mV2Y534capmSLjapvrukbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQwDa1D0rppGiGrOaAczq4XR2Z4MB8GA1UdIwQY MBaAFLeivWlHO0qOhadq+9jlu+6bS7NLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZLOWFVYzdTbzZGcDJyNzJPVzc3cHRMczBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NGQ1ZjYtZTY0MS00NDA4LWE3NmUt NTM4ODliZGM4NGY1LzEvdDZLOWFVYzdTbzZGcDJyNzJPVzc3cHRMczBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NGQ1ZjYtZTY0MS00NDA4LWE3NmUtNTM4ODliZGM4NGY1 LzEvdDZLOWFVYzdTbzZGcDJyNzJPVzc3cHRMczBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxp3w5qU I8wEdmBsWYxDKD/OY7NcW1fd5w4l0VbHUnquB04ZEHSoUXWEk322krr5mqLR0TTd fc9X+LGqiaxfX6aOuB571qyVoj4A1J91aw+bM+744hN+PD7915s++aoChbR4Tk0U lpOTpGF95BBG6AYMlVj0I3SOGTtdArrND/Ebn+Zs+Z7+hK6IetT5L11ElSVIdSkj SDI7oYqnbcmsCeU1Wehdg2U49gH6VbEAv+i6Sv9ULVlUVeBk6LltYWgIqzVyFPok q0Eo9jh2caBrOl5Ya9VOUEu3EGoam9aEjMK3kXxdW8u6Q4X86Od83Jre0LiHAtWc 8wHPQO9nzNCQ3g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:06 2025 by rpki-client