This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft File: P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft (raw, json) Hash identifier: 45ytVIEsuUBnLsCFPhihN0vMOlkLxoOYbvNBrKxXNxw= Subject key identifier: 88:D2:3B:71:59:2A:61:3B:81:9A:0D:99:A8:80:22:03:0B:BE:B6:5C Authority key identifier: 3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F Certificate issuer: /CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f Certificate serial: 019AF088CDA7B189766DF62DC356228ADEFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft Manifest number: 1763 Signing time: Fri 05 Dec 2025 22:01:28 +0000 Manifest this update: Fri 05 Dec 2025 22:01:28 +0000 Manifest next update: Sat 06 Dec 2025 22:01:28 +0000 Files and hashes: 1: P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl (hash: G1pRqJzTp5C4xQXgzTK3llH3RLczoVIRvIog4VpqJ7E=) 2: nJCyjIsWdPchQmqQbO_MPjGVVDE.roa (hash: Cr0JPO8tp2KrCcxC2yxuo3jq4OH+RZvqc/vb9Mmb68M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:cd:a7:b1:89:76:6d:f6:2d:c3:56:22:8a:de:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f Validity Not Before: Dec 5 22:01:28 2025 GMT Not After : Dec 6 22:01:28 2025 GMT Subject: CN=88d23b71592a613b819a0d99a88022030bbeb65c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:33:62:c4:13:b6:3b:f1:f5:7c:35:d7:c3:b2: 99:21:f3:64:59:d2:8c:05:1b:c5:23:41:ad:e2:c7: 0c:dc:68:9d:98:cd:78:4c:70:e1:4f:78:8a:e1:a5: 5b:10:66:49:49:09:7c:34:66:71:a9:ec:47:b7:cb: ef:d9:97:9c:dc:8f:30:f9:aa:12:98:f7:4b:58:ad: e2:d6:5a:02:17:fa:cb:86:8d:eb:ca:ff:5a:2e:22: 31:4b:d8:0a:6a:1f:73:9c:7f:ae:58:8d:cd:5f:fe: 40:f9:82:be:54:b8:fb:0d:69:f4:b1:35:eb:47:2a: 4f:f2:bd:3b:7b:a9:d9:1b:d9:ec:c2:da:f0:55:13: ce:aa:fc:6d:24:6b:cd:82:28:cc:2a:fc:73:a0:2a: f6:3e:8e:04:26:23:38:27:ed:92:98:cb:e1:fc:21: c9:2d:ba:e0:fc:b3:a5:84:71:25:66:59:c1:c2:b7: 4d:49:91:fc:76:87:75:cc:89:43:4e:53:70:b1:47: fc:c7:3c:9d:89:b5:e6:ef:4e:f0:3c:e3:1d:9e:16: 47:ef:e9:d6:9c:f0:5a:a2:0b:3e:ec:7e:ff:e0:73: 5a:85:76:93:90:6b:ae:bf:a2:a6:2c:81:f4:0c:52: a8:9f:c6:ec:09:b1:7d:96:1c:06:8a:8a:de:1d:ef: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D2:3B:71:59:2A:61:3B:81:9A:0D:99:A8:80:22:03:0B:BE:B6:5C X509v3 Authority Key Identifier: keyid:3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f1:b0:99:75:9e:aa:ff:a6:41:2b:f6:f5:3c:96:70:9c:1d: 73:3a:b5:a1:02:66:f9:d5:1d:92:45:9a:93:af:ce:cd:03:17: d2:cf:8c:63:24:32:9d:1c:84:af:82:44:98:e9:98:1a:9a:67: fb:cd:b5:de:e9:6f:7d:27:58:1b:96:ab:68:60:08:48:16:20: d5:24:5a:1c:1e:d1:a1:d9:3a:9d:03:22:90:07:2f:cd:2c:dc: e8:c6:f4:0f:9b:a0:93:af:6a:de:64:a6:84:a1:68:db:34:3b: fe:bb:7b:cf:fe:00:2c:1e:62:de:df:f9:6b:f6:9d:ad:01:a1: 69:ee:fd:2e:05:73:cf:53:30:f6:15:0e:d0:0e:ff:a3:fe:b7: 60:bc:a7:be:f8:d6:b5:2a:55:c3:d2:c4:7f:02:66:b6:b1:82: ba:86:20:74:49:08:69:d2:ef:0a:39:bb:2f:f1:97:b8:3f:d3: bc:bc:b9:c2:98:73:40:a6:22:da:7c:a3:82:9a:54:bf:17:6f: 45:97:63:c6:2e:d5:3a:38:fc:a2:ce:f6:9f:a6:4e:ae:1e:e9: 79:3e:1a:f7:2e:33:de:f9:66:fc:8a:86:96:35:25:2f:1f:7f: ad:d8:39:99:f2:43:3c:fa:fc:10:0c:f1:53:3c:28:7a:e8:df: 85:79:ca:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiM2nsYl2bfYtw1Yiit7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmYTQwZmNmYTgzNmJiMGI1YjNlMTI5NDA0Y2IzMWU4NTI1 MGIwMWYwHhcNMjUxMjA1MjIwMTI4WhcNMjUxMjA2MjIwMTI4WjAzMTEwLwYDVQQD Eyg4OGQyM2I3MTU5MmE2MTNiODE5YTBkOTlhODgwMjIwMzBiYmViNjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozNixBO2O/H1fDXXw7KZIfNkWdKM BRvFI0Gt4scM3GidmM14THDhT3iK4aVbEGZJSQl8NGZxqexHt8vv2Zec3I8w+aoS mPdLWK3i1loCF/rLho3ryv9aLiIxS9gKah9znH+uWI3NX/5A+YK+VLj7DWn0sTXr RypP8r07e6nZG9nswtrwVRPOqvxtJGvNgijMKvxzoCr2Po4EJiM4J+2SmMvh/CHJ Lbrg/LOlhHElZlnBwrdNSZH8dod1zIlDTlNwsUf8xzydibXm707wPOMdnhZH7+nW nPBaogs+7H7/4HNahXaTkGuuv6KmLIH0DFKon8bsCbF9lhwGioreHe9xqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjSO3FZKmE7gZoNmaiAIgMLvrZcMB8GA1UdIwQY MBaAFD+kD8+oNrsLWz4SlATLMehSULAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDZRUHo2ZzJ1d3RiUGhLVUJNc3g2RkpRc0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lMjEwYjktN2EzZi00MTBiLWJhNTYt MDcyNDA4OTI4OWJiLzEvUDZRUHo2ZzJ1d3RiUGhLVUJNc3g2RkpRc0I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9lMjEwYjktN2EzZi00MTBiLWJhNTYtMDcyNDA4OTI4OWJi LzEvUDZRUHo2ZzJ1d3RiUGhLVUJNc3g2RkpRc0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvGwmXWe qv+mQSv29TyWcJwdczq1oQJm+dUdkkWak6/OzQMX0s+MYyQynRyEr4JEmOmYGppn +8213ulvfSdYG5araGAISBYg1SRaHB7Rodk6nQMikAcvzSzc6Mb0D5ugk69q3mSm hKFo2zQ7/rt7z/4ALB5i3t/5a/adrQGhae79LgVzz1Mw9hUO0A7/o/63YLynvvjW tSpVw9LEfwJmtrGCuoYgdEkIadLvCjm7L/GXuD/TvLy5wphzQKYi2nyjgppUvxdv RZdjxi7VOjj8os72n6ZOrh7peT4a9y4z3vlm/IqGljUlLx9/rdg5mfJDPPr8EAzx UzwoeujfhXnKug== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:50 2025 by rpki-client