This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft File: x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json) Hash identifier: TonokNN42rH3pIOwe0yqExNTL60wYZL8T/nbReP+pZg= Subject key identifier: 10:7B:DB:F6:F3:BC:BA:EC:4B:E2:0D:2D:9A:13:37:1E:32:1D:36:1A Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38 Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438 Certificate serial: 019AF12D598EC459A4E9C95476D8597B4B60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:01:12 +0000 Manifest this update: Sat 06 Dec 2025 01:01:12 +0000 Manifest next update: Sun 07 Dec 2025 01:01:12 +0000 Files and hashes: 1: U9d60iaXFQDxSrHcLdT4ojLheZE.roa (hash: Gjhqz3LOzFes4JptTfh+vWteSpqEom7uInck02Q9Ins=) 2: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: J2uQqZ8iSS1mK4a+seWAtYhvK3orNoliVroJg7Qisms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:59:8e:c4:59:a4:e9:c9:54:76:d8:59:7b:4b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438 Validity Not Before: Dec 6 01:01:12 2025 GMT Not After : Dec 7 01:01:12 2025 GMT Subject: CN=107bdbf6f3bcbaec4be20d2d9a13371e321d361a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:16:5b:a7:f5:a4:de:75:99:07:4d:45:8d:c0: fa:0b:bc:d1:3e:6b:f2:15:da:ff:05:16:99:b0:3a: 90:3b:86:d3:41:f8:02:d1:bc:6d:1c:95:85:a9:b1: 79:b7:79:ed:e5:a6:bc:8f:42:c4:96:59:00:17:f3: 61:f4:f1:19:ea:4d:ea:ed:62:0a:cc:59:9e:83:3c: 0a:bb:ef:0f:19:27:5a:54:76:47:45:e5:b3:0d:aa: cd:9a:56:87:51:da:0d:81:10:39:04:47:46:36:25: 7d:53:0e:2c:cb:3d:80:9b:85:31:7e:46:c6:d5:08: d6:57:78:db:ef:6e:96:f0:80:b7:e3:c9:b5:70:e5: ea:0d:92:d7:4c:37:e6:ec:2b:69:bb:25:4f:9e:93: ae:f1:93:79:35:51:67:d6:5f:c6:a2:eb:8d:03:aa: 60:89:0d:52:09:51:83:0e:d8:b0:7d:0b:15:86:d0: 4a:fe:8f:34:83:0b:56:0e:a1:4b:c0:3f:75:b9:51: 85:c3:4b:56:07:b9:f7:a4:1f:83:46:a4:10:91:6d: 16:a4:07:8f:af:16:39:02:93:b9:11:4d:91:81:37: 58:31:f8:a3:bf:16:b7:9a:9e:6a:f2:72:f9:10:f6: 00:34:76:9d:57:a5:64:77:90:9b:25:e4:10:d3:a2: 93:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7B:DB:F6:F3:BC:BA:EC:4B:E2:0D:2D:9A:13:37:1E:32:1D:36:1A X509v3 Authority Key Identifier: keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:cc:ee:cc:58:1a:7a:74:ab:4b:da:34:7c:d5:14:8d:bf:46: de:e7:09:f1:8c:99:22:05:ed:10:d2:f8:41:0a:4e:e7:a6:95: b1:06:7c:a5:11:dd:64:d1:bb:b3:b6:e4:54:de:5d:cb:2a:d3: ba:62:0c:92:45:7d:94:3c:0e:34:3a:d3:7f:15:bd:93:b3:2a: ef:48:ea:1d:f2:8d:1b:a3:1e:34:40:f4:16:6b:68:82:51:ee: c5:56:69:b6:27:04:92:1b:39:2d:64:2c:44:c2:0d:1c:3a:1d: ee:53:a5:3d:a3:8d:31:9b:2b:31:74:5f:1a:0c:f5:95:67:c9: 52:b6:16:d8:e7:08:2d:69:1c:44:a0:e4:1f:87:4a:b1:a9:69: b4:14:28:91:96:2c:33:b2:32:a5:92:98:d4:5e:5e:e9:78:32: 09:82:ff:83:88:20:75:b3:43:01:c7:20:dc:05:5c:c4:ce:af: c5:be:ff:64:09:74:bb:04:e2:a1:ea:46:58:a6:08:82:a6:48: 20:d5:1a:3e:0e:a8:ac:57:df:bc:13:41:0d:0a:0f:ec:1b:b7: 7f:cc:3f:0c:d9:1a:22:ac:63:ea:89:52:03:f2:1f:79:d2:15: c8:b9:b1:20:61:d3:12:af:a3:76:f6:23:1b:c5:c3:b2:b6:4d: 7b:f4:97:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVmOxFmk6clUdthZe0tgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YTRkMmY2ODkxM2VhY2U2YzlmNTA5MmJkYzdkZDIwZjU3 NGY0MzgwHhcNMjUxMjA2MDEwMTEyWhcNMjUxMjA3MDEwMTEyWjAzMTEwLwYDVQQD EygxMDdiZGJmNmYzYmNiYWVjNGJlMjBkMmQ5YTEzMzcxZTMyMWQzNjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+xZbp/Wk3nWZB01FjcD6C7zRPmvy Fdr/BRaZsDqQO4bTQfgC0bxtHJWFqbF5t3nt5aa8j0LEllkAF/Nh9PEZ6k3q7WIK zFmegzwKu+8PGSdaVHZHReWzDarNmlaHUdoNgRA5BEdGNiV9Uw4syz2Am4UxfkbG 1QjWV3jb726W8IC348m1cOXqDZLXTDfm7CtpuyVPnpOu8ZN5NVFn1l/GouuNA6pg iQ1SCVGDDtiwfQsVhtBK/o80gwtWDqFLwD91uVGFw0tWB7n3pB+DRqQQkW0WpAeP rxY5ApO5EU2RgTdYMfijvxa3mp5q8nL5EPYANHadV6Vkd5CbJeQQ06KT/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBB72/bzvLrsS+INLZoTNx4yHTYaMB8GA1UdIwQY MBaAFMek0vaJE+rObJ9Qkr3H3SD1dPQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDZUUzlva1Q2czVzbjFDU3ZjZmRJUFYwOURnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mMDNjYTEtNzI2Yi00ZGU5LWI0MTkt ZjlhMWJiYzM2ODQ1LzEveDZUUzlva1Q2czVzbjFDU3ZjZmRJUFYwOURnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9mMDNjYTEtNzI2Yi00ZGU5LWI0MTktZjlhMWJiYzM2ODQ1 LzEveDZUUzlva1Q2czVzbjFDU3ZjZmRJUFYwOURnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABczuzFga enSrS9o0fNUUjb9G3ucJ8YyZIgXtENL4QQpO56aVsQZ8pRHdZNG7s7bkVN5dyyrT umIMkkV9lDwONDrTfxW9k7Mq70jqHfKNG6MeNED0FmtoglHuxVZpticEkhs5LWQs RMINHDod7lOlPaONMZsrMXRfGgz1lWfJUrYW2OcILWkcRKDkH4dKsalptBQokZYs M7IypZKY1F5e6XgyCYL/g4ggdbNDAccg3AVcxM6vxb7/ZAl0uwTioepGWKYIgqZI INUaPg6orFffvBNBDQoP7Bu3f8w/DNkaIqxj6olSA/IfedIVyLmxIGHTEq+jdvYj G8XDsrZNe/SXOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:37 2025 by rpki-client