This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft File: usA65sVFitKAdlulUnmAoG_sI6g.mft (raw, json) Hash identifier: dwx5QeJJRSSLUxyYQf0ynLNwygVgtIKko9GIWy9SW0I= Subject key identifier: EC:3D:B2:E6:7A:DE:1F:CF:0A:ED:80:56:7B:42:98:86:17:18:5D:E5 Authority key identifier: BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8 Certificate issuer: /CN=bac03ae6c5458ad280765ba5527980a06fec23a8 Certificate serial: 019AF42DD0A7FD76CFBAC1F2A51BC7A66B25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 15:00:34 +0000 Manifest this update: Sat 06 Dec 2025 15:00:34 +0000 Manifest next update: Sun 07 Dec 2025 15:00:34 +0000 Files and hashes: 1: umBmq8XFX-zXziXQ4pyACUgy-FQ.roa (hash: JuI2qHr6MZgrFWdKqrf8sXobXSWHVnMHISH4QdZzmLE=) 2: usA65sVFitKAdlulUnmAoG_sI6g.crl (hash: QQBjCvDIp+cfJbK7KyCXSQbJ9d9snGhFCO/+O00ZtNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:d0:a7:fd:76:cf:ba:c1:f2:a5:1b:c7:a6:6b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bac03ae6c5458ad280765ba5527980a06fec23a8 Validity Not Before: Dec 6 15:00:34 2025 GMT Not After : Dec 7 15:00:34 2025 GMT Subject: CN=ec3db2e67ade1fcf0aed80567b42988617185de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0f:31:bd:47:33:93:c4:54:4f:f8:c0:83:ce: 4e:cc:56:ed:89:26:2b:30:aa:60:56:03:82:50:31: f7:ae:be:63:1d:a0:e3:af:0e:3d:81:a7:da:98:66: 5d:00:b2:00:51:ac:68:5c:e3:53:67:f0:da:2c:d1: 47:3e:64:08:03:32:55:ef:0d:be:26:b1:80:08:f8: 8a:34:13:d0:ca:13:8d:f5:d5:fc:c5:56:76:b8:cd: e5:fb:6e:9b:27:5f:88:71:be:68:6d:88:10:d2:2c: 02:41:9d:19:3c:90:58:85:8a:81:81:fb:34:36:7b: 07:44:45:fb:f4:7a:a4:54:82:6a:63:c8:38:1a:70: 49:79:11:8b:b8:6a:cf:54:16:27:34:28:c3:9e:8d: 80:2e:cd:2a:0a:98:15:70:4f:48:3e:25:57:a7:5b: 8a:df:2e:41:41:e4:77:d5:0f:bc:ea:5e:e8:2d:72: c1:13:ed:a2:f8:b7:13:35:d4:b7:0a:44:ca:0d:6c: 56:9d:1e:d2:de:10:03:1e:55:58:b7:99:d5:41:5f: 45:8d:48:71:6f:62:b6:85:63:df:b1:28:5c:23:28: 53:ed:bd:27:b8:65:bb:f9:f5:44:62:6a:a2:9c:4b: 5d:c0:6a:f8:50:54:de:6a:58:15:4d:69:29:bd:66: ae:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3D:B2:E6:7A:DE:1F:CF:0A:ED:80:56:7B:42:98:86:17:18:5D:E5 X509v3 Authority Key Identifier: keyid:BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:da:d9:ab:fc:df:2e:a5:87:43:ef:4d:44:a4:99:33:55:54: 51:91:96:e0:2d:46:36:27:91:59:ce:7f:10:97:ac:72:bd:48: 66:75:c2:95:bc:26:04:1f:f6:1e:c7:39:02:cf:5c:bc:4a:7f: 72:66:5f:2e:78:c5:e2:b6:28:7a:50:37:a2:9e:4a:d8:ee:d5: 89:f0:e7:5a:f3:47:f0:ab:5e:2a:7e:fa:41:87:33:52:48:6f: 36:77:8d:0c:4d:53:97:39:ae:32:dc:10:57:64:9a:8c:a2:3f: 7e:0e:03:45:82:12:b5:49:74:41:06:64:8f:af:45:58:c1:72: 4a:8f:0e:08:ee:3d:be:21:d5:ca:0f:22:90:a2:67:dc:7b:25: bb:2a:9a:1b:8f:d5:48:4c:c9:07:bf:92:44:a7:ec:54:47:27: ac:38:86:f5:8a:ea:5f:79:b3:46:40:08:96:a0:b7:f2:9d:8e: 14:8a:6b:a2:ea:e2:78:28:fe:b4:83:8c:60:09:3b:c1:0b:06: 50:34:51:6b:9d:44:1b:06:77:15:37:1d:ac:3a:00:bc:24:83: a5:3e:f3:89:ca:5d:f6:99:6d:e6:7e:a5:3e:6b:b3:32:5f:d4: b9:71:a5:80:53:c2:25:f4:a4:74:0a:16:3d:2b:17:e3:f2:f8: 68:ec:e1:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LdCn/XbPusHypRvHpmslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYzAzYWU2YzU0NThhZDI4MDc2NWJhNTUyNzk4MGEwNmZl YzIzYTgwHhcNMjUxMjA2MTUwMDM0WhcNMjUxMjA3MTUwMDM0WjAzMTEwLwYDVQQD EyhlYzNkYjJlNjdhZGUxZmNmMGFlZDgwNTY3YjQyOTg4NjE3MTg1ZGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig8xvUczk8RUT/jAg85OzFbtiSYr MKpgVgOCUDH3rr5jHaDjrw49gafamGZdALIAUaxoXONTZ/DaLNFHPmQIAzJV7w2+ JrGACPiKNBPQyhON9dX8xVZ2uM3l+26bJ1+Icb5obYgQ0iwCQZ0ZPJBYhYqBgfs0 NnsHREX79HqkVIJqY8g4GnBJeRGLuGrPVBYnNCjDno2ALs0qCpgVcE9IPiVXp1uK 3y5BQeR31Q+86l7oLXLBE+2i+LcTNdS3CkTKDWxWnR7S3hADHlVYt5nVQV9FjUhx b2K2hWPfsShcIyhT7b0nuGW7+fVEYmqinEtdwGr4UFTealgVTWkpvWaukwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOw9suZ63h/PCu2AVntCmIYXGF3lMB8GA1UdIwQY MBaAFLrAOubFRYrSgHZbpVJ5gKBv7COoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXNBNjVzVkZpdEtBZGx1bFVubUFvR19zSTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lOTMxZTYtYTE1Mi00YTFhLWIwOGEt MTA4MWFlYjEyMWIzLzEvdXNBNjVzVkZpdEtBZGx1bFVubUFvR19zSTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9lOTMxZTYtYTE1Mi00YTFhLWIwOGEtMTA4MWFlYjEyMWIz LzEvdXNBNjVzVkZpdEtBZGx1bFVubUFvR19zSTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdrZq/zf LqWHQ+9NRKSZM1VUUZGW4C1GNieRWc5/EJescr1IZnXClbwmBB/2Hsc5As9cvEp/ cmZfLnjF4rYoelA3op5K2O7VifDnWvNH8KteKn76QYczUkhvNneNDE1TlzmuMtwQ V2SajKI/fg4DRYIStUl0QQZkj69FWMFySo8OCO49viHVyg8ikKJn3HsluyqaG4/V SEzJB7+SRKfsVEcnrDiG9YrqX3mzRkAIlqC38p2OFIprourieCj+tIOMYAk7wQsG UDRRa51EGwZ3FTcdrDoAvCSDpT7zicpd9plt5n6lPmuzMl/UuXGlgFPCJfSkdAoW PSsX4/L4aOzhuw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:59:05 2025 by rpki-client