This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft File: P6xJAcwjvke_qfEqYET6Y0USIQc.mft (raw, json) Hash identifier: 2Vk19eTYsmyhW9UIRVHZ9RsD5vWNWnT0PJMwaAwhsyc= Subject key identifier: DA:0A:F5:2F:0B:A8:0B:74:68:4B:1F:BD:9B:38:24:A2:8D:88:34:7E Authority key identifier: 3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07 Certificate issuer: /CN=3fac4901cc23be47bfa9f12a6044fa6345122107 Certificate serial: 019AF208B1017E91F9E20ACF865FB11DE532 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft Manifest number: 069F Signing time: Sat 06 Dec 2025 05:00:47 +0000 Manifest this update: Sat 06 Dec 2025 05:00:47 +0000 Manifest next update: Sun 07 Dec 2025 05:00:47 +0000 Files and hashes: 1: I2T3vW_f2hKmlZWnd51x-GtOD7M.roa (hash: oNoWZuXx4HX98BE5ZXv2y66gUnUeaQrrJOmk84paoXM=) 2: P6xJAcwjvke_qfEqYET6Y0USIQc.crl (hash: kfwM7qwaWLktnyJi6hDYRye//2KS0LH/z/0sPAm8z5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b1:01:7e:91:f9:e2:0a:cf:86:5f:b1:1d:e5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fac4901cc23be47bfa9f12a6044fa6345122107 Validity Not Before: Dec 6 05:00:47 2025 GMT Not After : Dec 7 05:00:47 2025 GMT Subject: CN=da0af52f0ba80b74684b1fbd9b3824a28d88347e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9a:37:e8:5e:a6:99:24:44:31:a5:92:66:19: 0f:71:0a:6a:5c:71:5e:08:8e:0a:28:54:a9:88:62: de:2c:49:1e:45:46:99:7f:54:40:84:56:4d:d5:87: ef:d0:82:ca:f1:8e:27:3c:6d:fe:1c:f2:27:21:59: 43:f1:23:94:fe:21:9a:c5:36:12:a6:2f:b3:e5:cd: 68:08:3b:03:44:54:cd:30:18:ff:f8:58:a8:c5:14: ec:0c:87:2e:0c:bb:16:be:80:68:c0:8a:58:f3:f8: d9:9a:35:f9:40:03:35:8f:16:01:5d:6c:e8:2e:46: 88:9a:7a:b3:aa:86:6e:26:fd:76:cf:a0:10:15:b0: 8d:24:64:dd:f4:b5:3b:b7:9c:55:76:19:8e:4a:53: 01:20:30:12:bf:b5:dc:71:5e:ac:1b:7b:af:1c:03: c9:a8:fa:4a:83:d2:69:95:e2:b3:f7:f1:03:b5:e2: 7a:07:d0:dd:e0:6a:df:be:cb:84:c6:b9:6a:3b:79: 95:d5:89:95:06:b0:fd:5c:cf:ee:8e:63:e2:f4:17: 28:4d:19:15:c9:ab:ea:d7:40:69:57:59:36:fd:c6: ff:16:50:41:70:0f:e7:2a:cb:09:48:a0:4d:a5:32: d4:2a:71:c4:66:4c:0c:bc:7c:cb:ae:c1:06:29:68: 8b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0A:F5:2F:0B:A8:0B:74:68:4B:1F:BD:9B:38:24:A2:8D:88:34:7E X509v3 Authority Key Identifier: keyid:3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:7f:cb:2d:66:d0:d5:f9:9f:5e:10:54:90:54:af:10:e5:f1: 72:e6:62:92:07:20:86:9c:74:8c:c3:66:97:51:18:07:eb:55: c7:3c:45:e9:b3:42:a3:98:4a:53:7b:60:4c:11:db:1d:80:35: 93:32:77:05:1d:8e:cf:3b:a6:46:fb:a5:76:57:d0:9a:00:2a: 34:d4:75:7c:50:77:cb:76:c8:e9:d1:17:3a:2e:5a:98:33:3e: 4d:be:2e:e9:9b:b7:b5:b6:63:05:58:7e:70:7e:39:32:d4:0b: b2:df:33:86:16:3a:ac:09:0c:bb:9b:08:8c:1b:c9:50:68:9d: 5b:5e:20:b5:0d:7e:41:11:31:1b:e6:37:21:5a:85:54:9c:7d: 8d:7a:5a:6a:80:66:f9:0b:45:a9:b7:22:bd:36:11:ff:8c:cc: c1:09:b8:c3:69:4a:13:4a:41:61:e6:8d:c5:9f:b0:da:96:40: bf:78:b1:09:75:75:96:79:a8:4e:3f:2a:a7:69:99:52:61:4f: 55:22:99:c1:68:22:15:27:31:b6:a1:d2:9d:40:b7:83:5f:c8: ba:df:b5:db:9c:cd:0c:9f:19:78:22:c7:f5:ea:8a:05:73:4d: 28:e7:54:f8:a8:8c:c5:4a:fe:68:8f:19:ac:87:e6:44:37:f2: fa:c7:46:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLEBfpH54grPhl+xHeUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmYWM0OTAxY2MyM2JlNDdiZmE5ZjEyYTYwNDRmYTYzNDUx MjIxMDcwHhcNMjUxMjA2MDUwMDQ3WhcNMjUxMjA3MDUwMDQ3WjAzMTEwLwYDVQQD EyhkYTBhZjUyZjBiYTgwYjc0Njg0YjFmYmQ5YjM4MjRhMjhkODgzNDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJo36F6mmSREMaWSZhkPcQpqXHFe CI4KKFSpiGLeLEkeRUaZf1RAhFZN1Yfv0ILK8Y4nPG3+HPInIVlD8SOU/iGaxTYS pi+z5c1oCDsDRFTNMBj/+FioxRTsDIcuDLsWvoBowIpY8/jZmjX5QAM1jxYBXWzo LkaImnqzqoZuJv12z6AQFbCNJGTd9LU7t5xVdhmOSlMBIDASv7XccV6sG3uvHAPJ qPpKg9JpleKz9/EDteJ6B9Dd4GrfvsuExrlqO3mV1YmVBrD9XM/ujmPi9BcoTRkV yavq10BpV1k2/cb/FlBBcA/nKssJSKBNpTLUKnHEZkwMvHzLrsEGKWiLkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoK9S8LqAt0aEsfvZs4JKKNiDR+MB8GA1UdIwQY MBaAFD+sSQHMI75Hv6nxKmBE+mNFEiEHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wZmZkOTUtOThlNi00Mjc5LTk4N2Yt NzNhNjM0MTU1ZWU5LzEvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wZmZkOTUtOThlNi00Mjc5LTk4N2YtNzNhNjM0MTU1ZWU5 LzEvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw3/LLWbQ 1fmfXhBUkFSvEOXxcuZikgcghpx0jMNml1EYB+tVxzxF6bNCo5hKU3tgTBHbHYA1 kzJ3BR2OzzumRvuldlfQmgAqNNR1fFB3y3bI6dEXOi5amDM+Tb4u6Zu3tbZjBVh+ cH45MtQLst8zhhY6rAkMu5sIjBvJUGidW14gtQ1+QRExG+Y3IVqFVJx9jXpaaoBm +QtFqbcivTYR/4zMwQm4w2lKE0pBYeaNxZ+w2pZAv3ixCXV1lnmoTj8qp2mZUmFP VSKZwWgiFScxtqHSnUC3g1/Iut+125zNDJ8ZeCLH9eqKBXNNKOdU+KiMxUr+aI8Z rIfmRDfy+sdGzA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:28:41 2025 by rpki-client