This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft File: t6hswzTG4Oq4PyUr2D7ulWklykA.mft (raw, json) Hash identifier: 7+1OTHBQmitKtV/poVHTZ7eu/ACZ8gY5qIvGM90faCw= Subject key identifier: B1:57:DB:79:EB:8C:2A:6C:1F:69:32:A6:0F:E9:6C:5C:F8:77:5C:E5 Authority key identifier: B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40 Certificate issuer: /CN=b7a86cc334c6e0eab83f252bd83eee956925ca40 Certificate serial: 019AF19B1F205612EA7DBE435C05B0C8724B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:01:06 +0000 Manifest this update: Sat 06 Dec 2025 03:01:06 +0000 Manifest next update: Sun 07 Dec 2025 03:01:06 +0000 Files and hashes: 1: YDZQqJLg6f9-JdbHT4bYmgUJjh0.roa (hash: cInsk0zvLYwt9OlQZPLFwtQxycESn1Vx2ttrJFC0hi8=) 2: t6hswzTG4Oq4PyUr2D7ulWklykA.crl (hash: U5Vd0H+VFbtwNwB2XQXhxuzS9cqXuZFketzPfQCIbFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:1f:20:56:12:ea:7d:be:43:5c:05:b0:c8:72:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7a86cc334c6e0eab83f252bd83eee956925ca40 Validity Not Before: Dec 6 03:01:06 2025 GMT Not After : Dec 7 03:01:06 2025 GMT Subject: CN=b157db79eb8c2a6c1f6932a60fe96c5cf8775ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:36:38:bf:d8:01:ff:03:04:59:dd:64:d6:52: 87:9a:a6:02:56:70:2f:66:f4:7e:80:cd:5b:0d:d9: 8b:29:a0:0d:c3:00:bc:62:3d:d3:2c:46:22:6e:82: 2e:4f:66:10:46:b0:61:2e:61:b8:48:9e:44:f4:db: e2:ab:de:02:f0:8a:b9:9b:49:a0:c2:81:27:3d:d6: 49:ce:3d:5c:a8:60:46:97:59:56:98:c9:fc:c4:0a: 4e:f3:57:59:7c:47:22:ca:86:85:67:f3:35:39:0d: 41:af:87:3a:91:35:2b:74:88:f5:3e:a5:8f:2c:66: fc:60:8e:cf:35:88:c3:f8:c0:60:e8:fc:a0:17:13: 8d:3e:3f:3c:f4:71:87:94:99:82:50:d3:42:52:9e: 70:32:8a:4a:d9:8d:18:74:41:bd:c9:1d:a8:57:ef: 20:a0:b0:38:47:ae:b7:38:25:2b:03:82:13:0f:46: 36:6a:17:98:bb:17:46:45:14:83:70:ac:d0:e2:82: 9d:75:50:b0:e9:93:03:5a:0b:62:a0:69:d7:8d:4f: c1:11:d0:5e:58:1f:99:08:e1:2d:52:8c:8a:29:be: dd:9a:e7:2c:90:6f:d1:8b:6c:c3:b0:ed:96:80:d8: da:4b:25:9f:6d:12:6d:0a:21:6f:0f:61:fc:00:13: 17:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:57:DB:79:EB:8C:2A:6C:1F:69:32:A6:0F:E9:6C:5C:F8:77:5C:E5 X509v3 Authority Key Identifier: keyid:B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:76:79:2d:c2:55:df:28:62:04:46:12:dd:0c:db:dc:fc:4f: 2e:2e:cf:a1:72:0f:32:ad:df:a8:9c:98:42:f9:8c:34:fa:1d: 21:63:97:19:ff:5b:14:d6:ba:5d:62:c0:5e:2d:c2:ff:05:f0: 17:cd:f3:0c:cc:a0:97:b1:2b:b6:5e:bd:7d:bd:22:c7:2f:75: 54:03:79:ad:a9:1d:9e:69:f4:80:25:f0:f5:0f:3f:0d:03:03: 1a:a4:26:f8:29:41:b7:68:b2:a3:b6:9a:db:ec:56:ce:9b:ba: 08:29:9f:b3:6e:cb:36:2c:0b:6a:7d:b3:f1:03:9d:37:74:46: f0:47:23:14:72:ce:b2:fd:bd:21:68:f5:e0:a5:16:bd:55:c9: c1:97:f8:a5:5f:2e:c4:a0:6f:e6:72:d5:da:89:b4:03:02:06: fa:5a:69:d9:5e:5f:e7:f2:06:1f:dd:e7:ab:35:f2:f1:fb:cb: 94:45:a0:65:ac:24:88:da:e8:c7:25:23:de:bf:ac:58:12:d7: 7d:f9:f6:ef:ce:b0:90:2b:1d:3b:7d:86:82:c9:af:e0:1c:c2: 08:5c:23:3d:c0:9c:93:36:c6:62:e7:98:42:9f:f2:b5:8b:0a: cc:35:e2:52:ff:88:64:4b:6c:17:42:dc:fc:ee:6f:ab:eb:3d: a4:9f:51:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmx8gVhLqfb5DXAWwyHJLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YTg2Y2MzMzRjNmUwZWFiODNmMjUyYmQ4M2VlZTk1Njky NWNhNDAwHhcNMjUxMjA2MDMwMTA2WhcNMjUxMjA3MDMwMTA2WjAzMTEwLwYDVQQD EyhiMTU3ZGI3OWViOGMyYTZjMWY2OTMyYTYwZmU5NmM1Y2Y4Nzc1Y2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjY4v9gB/wMEWd1k1lKHmqYCVnAv ZvR+gM1bDdmLKaANwwC8Yj3TLEYiboIuT2YQRrBhLmG4SJ5E9Nviq94C8Iq5m0mg woEnPdZJzj1cqGBGl1lWmMn8xApO81dZfEciyoaFZ/M1OQ1Br4c6kTUrdIj1PqWP LGb8YI7PNYjD+MBg6PygFxONPj889HGHlJmCUNNCUp5wMopK2Y0YdEG9yR2oV+8g oLA4R663OCUrA4ITD0Y2aheYuxdGRRSDcKzQ4oKddVCw6ZMDWgtioGnXjU/BEdBe WB+ZCOEtUoyKKb7dmucskG/Ri2zDsO2WgNjaSyWfbRJtCiFvD2H8ABMXSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFX23nrjCpsH2kypg/pbFz4d1zlMB8GA1UdIwQY MBaAFLeobMM0xuDquD8lK9g+7pVpJcpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZoc3d6VEc0T3E0UHlVcjJEN3VsV2tseWtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81MDM2YmUtMTM4Yi00NDJlLTk2M2Yt NTdjZDcyOTU3Yjg5LzEvdDZoc3d6VEc0T3E0UHlVcjJEN3VsV2tseWtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC81MDM2YmUtMTM4Yi00NDJlLTk2M2YtNTdjZDcyOTU3Yjg5 LzEvdDZoc3d6VEc0T3E0UHlVcjJEN3VsV2tseWtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3Z5LcJV 3yhiBEYS3Qzb3PxPLi7PoXIPMq3fqJyYQvmMNPodIWOXGf9bFNa6XWLAXi3C/wXw F83zDMygl7Ertl69fb0ixy91VAN5rakdnmn0gCXw9Q8/DQMDGqQm+ClBt2iyo7aa 2+xWzpu6CCmfs27LNiwLan2z8QOdN3RG8EcjFHLOsv29IWj14KUWvVXJwZf4pV8u xKBv5nLV2om0AwIG+lpp2V5f5/IGH93nqzXy8fvLlEWgZawkiNroxyUj3r+sWBLX ffn2786wkCsdO32Ggsmv4BzCCFwjPcCckzbGYueYQp/ytYsKzDXiUv+IZEtsF0Lc /O5vq+s9pJ9REQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:47 2025 by rpki-client