This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft File: dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json) Hash identifier: uOZ2EFSz9B7Vb36yGUtGrTGzKvUxnUUcwZQUNZwVpPs= Subject key identifier: 01:F0:A0:C8:43:E1:A1:C4:94:9B:78:19:FD:5C:37:85:36:C2:A8:7D Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39 Certificate issuer: /CN=765ea3400a3748c3b6c61268d492f8bf0a908239 Certificate serial: 019AF276F509B75635CEDA4685F216913C16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft Manifest number: 12E5 Signing time: Sat 06 Dec 2025 07:01:13 +0000 Manifest this update: Sat 06 Dec 2025 07:01:13 +0000 Manifest next update: Sun 07 Dec 2025 07:01:13 +0000 Files and hashes: 1: JmRIXqWgLbHOS_DUn9tYXP3VwvE.roa (hash: 07OywnLuhNnV2ffg9k1J1SDz7HRBDcbP+ENwBGJ8ZCU=) 2: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: RKw+kb55DgxjLczrQwXk7uS0NzyDppLdrvx4Fl0rPhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f5:09:b7:56:35:ce:da:46:85:f2:16:91:3c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239 Validity Not Before: Dec 6 07:01:13 2025 GMT Not After : Dec 7 07:01:13 2025 GMT Subject: CN=01f0a0c843e1a1c4949b7819fd5c378536c2a87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:67:bc:0d:6b:c9:a3:49:62:d7:51:59:03:05: b2:fe:e4:d9:92:a5:f6:5f:1c:7e:0f:40:be:f1:a0: cc:04:d9:36:58:00:27:96:81:7e:d8:40:42:3b:18: 62:65:ce:3a:0b:17:5d:d1:32:51:f7:47:8b:d9:24: f8:a6:40:b1:71:0b:d4:81:8c:5c:bf:96:45:b1:5e: 7d:02:a0:94:c2:7d:c2:a7:8a:53:a1:eb:a5:f7:7a: 57:59:5c:3c:3e:7f:50:df:52:18:65:31:1c:a9:8e: a1:cb:93:25:66:cc:f8:5b:64:b1:13:04:85:6e:d7: 77:c0:59:7a:2c:26:f6:b6:d9:2a:63:ad:6c:97:d3: 33:81:0a:ec:0f:42:f2:17:53:b3:75:95:97:9a:b0: df:17:15:20:dd:a6:54:ba:21:55:3d:79:93:97:f8: 1d:70:f8:18:7c:58:5a:c2:10:52:58:8d:0e:17:70: b1:b3:a9:29:55:97:0d:03:85:3b:ae:f7:22:af:ae: b1:8d:08:90:dd:a8:0e:ea:55:70:11:5c:b4:5e:01: ce:1b:39:12:db:49:7d:65:79:d1:07:55:a7:05:91: f6:ab:d5:cb:d3:3d:3e:e0:8e:84:2d:b9:ec:04:59: fb:aa:ec:fa:a2:03:27:c7:69:bb:d1:32:73:ce:af: fb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F0:A0:C8:43:E1:A1:C4:94:9B:78:19:FD:5C:37:85:36:C2:A8:7D X509v3 Authority Key Identifier: keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:9f:87:d4:80:87:f1:06:36:e6:35:e7:27:6d:e4:30:f8:96: ac:05:2a:47:be:3e:32:d5:c6:7b:c1:9b:8c:86:5f:97:12:84: 57:1e:84:2a:6e:9c:37:93:79:28:38:b6:ce:40:90:0f:b4:b5: 7d:61:2b:73:a9:39:51:35:19:d6:dc:00:16:4c:48:51:69:d1: b1:58:50:e5:41:2d:21:6f:8f:0d:b1:fc:bc:8f:84:b6:56:b4: 75:2f:58:e6:07:1e:49:91:58:f3:94:66:08:d8:d7:9b:42:83: 36:58:13:fd:e3:7a:22:d3:22:70:66:19:ef:fe:e1:cc:2e:17: f0:d0:ee:48:7d:9d:57:c8:04:f1:61:94:bf:ea:88:9f:30:1a: 4f:26:c4:80:52:6c:85:23:02:d5:c4:68:43:db:09:29:38:d1: d8:ce:43:b9:fc:33:eb:50:f0:a1:40:26:d2:02:81:e1:da:3d: 3a:99:50:52:e0:d3:24:ba:0d:87:16:51:63:df:b0:e7:01:42: a8:48:81:38:7f:07:d6:e5:60:74:3c:c6:39:7d:a6:23:86:04: 4f:48:20:00:6f:cd:26:23:f8:e6:81:fb:d1:b2:93:0f:93:5c: f9:4d:65:78:79:4a:3b:c5:a1:5a:a5:96:b4:01:8b:36:86:8a: 6f:5e:6f:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvUJt1Y1ztpGhfIWkTwWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NWVhMzQwMGEzNzQ4YzNiNmM2MTI2OGQ0OTJmOGJmMGE5 MDgyMzkwHhcNMjUxMjA2MDcwMTEzWhcNMjUxMjA3MDcwMTEzWjAzMTEwLwYDVQQD EygwMWYwYTBjODQzZTFhMWM0OTQ5Yjc4MTlmZDVjMzc4NTM2YzJhODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWe8DWvJo0li11FZAwWy/uTZkqX2 Xxx+D0C+8aDMBNk2WAAnloF+2EBCOxhiZc46Cxdd0TJR90eL2ST4pkCxcQvUgYxc v5ZFsV59AqCUwn3Cp4pToeul93pXWVw8Pn9Q31IYZTEcqY6hy5MlZsz4W2SxEwSF btd3wFl6LCb2ttkqY61sl9MzgQrsD0LyF1OzdZWXmrDfFxUg3aZUuiFVPXmTl/gd cPgYfFhawhBSWI0OF3Cxs6kpVZcNA4U7rvcir66xjQiQ3agO6lVwEVy0XgHOGzkS 20l9ZXnRB1WnBZH2q9XL0z0+4I6ELbnsBFn7quz6ogMnx2m70TJzzq/7FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHwoMhD4aHElJt4Gf1cN4U2wqh9MB8GA1UdIwQY MBaAFHZeo0AKN0jDtsYSaNSS+L8KkII5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGw2alFBbzNTTU8yeGhKbzFKTDR2d3FRZ2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83NGUxNWYtZjQ4Ny00NTU5LWJmZGQt MGZjNThlNThjYWM5LzEvZGw2alFBbzNTTU8yeGhKbzFKTDR2d3FRZ2prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS83NGUxNWYtZjQ4Ny00NTU5LWJmZGQtMGZjNThlNThjYWM5 LzEvZGw2alFBbzNTTU8yeGhKbzFKTDR2d3FRZ2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJ+H1ICH 8QY25jXnJ23kMPiWrAUqR74+MtXGe8GbjIZflxKEVx6EKm6cN5N5KDi2zkCQD7S1 fWErc6k5UTUZ1twAFkxIUWnRsVhQ5UEtIW+PDbH8vI+Etla0dS9Y5gceSZFY85Rm CNjXm0KDNlgT/eN6ItMicGYZ7/7hzC4X8NDuSH2dV8gE8WGUv+qInzAaTybEgFJs hSMC1cRoQ9sJKTjR2M5Dufwz61DwoUAm0gKB4do9OplQUuDTJLoNhxZRY9+w5wFC qEiBOH8H1uVgdDzGOX2mI4YET0ggAG/NJiP45oH70bKTD5Nc+U1leHlKO8WhWqWW tAGLNoaKb15vfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:16:59 2025 by rpki-client