This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft File: RpNQgcd6h0XntiuTuC2iliN5suI.mft (raw, json) Hash identifier: 2FCMGHadzNxWPGmNtUKCWssaZZfTIh83hToc0J5ZOog= Subject key identifier: A7:53:43:70:25:AD:35:BC:CF:28:70:6B:9D:88:AA:11:C8:A8:45:9F Authority key identifier: 46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2 Certificate issuer: /CN=46935081c77a8745e7b62b93b82da2962379b2e2 Certificate serial: 019AF08888EDB9119BFC64CD1BA120542DD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 22:01:11 +0000 Manifest this update: Fri 05 Dec 2025 22:01:11 +0000 Manifest next update: Sat 06 Dec 2025 22:01:11 +0000 Files and hashes: 1: 5S9DzB-Zkm3msjgPAbdmsNofi_E.roa (hash: JVrfzyFqi2bm7cADIRU0rzxEk+g6lOHGxW3e0YIX/NA=) 2: RpNQgcd6h0XntiuTuC2iliN5suI.crl (hash: UtF802FJcsec68reJK/6iPm4GY284mkEN97Q62l89Hg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:88:ed:b9:11:9b:fc:64:cd:1b:a1:20:54:2d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46935081c77a8745e7b62b93b82da2962379b2e2 Validity Not Before: Dec 5 22:01:11 2025 GMT Not After : Dec 6 22:01:11 2025 GMT Subject: CN=a753437025ad35bccf28706b9d88aa11c8a8459f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:02:d6:25:16:b4:e3:14:a9:0d:e6:cd:7a:ac: 90:15:64:f8:3d:e4:ac:d3:8b:0c:6f:7b:c2:d7:70: 44:bb:a7:6b:d1:b1:60:8d:4b:26:71:4f:15:32:19: 26:11:dc:5e:3a:ad:43:43:b7:0a:5e:b7:35:0f:3b: 22:81:fd:34:34:5a:15:3d:0e:7b:e2:49:53:52:8b: c0:e8:0d:ac:6e:4e:cc:d7:73:01:ef:42:9f:eb:ad: a8:55:84:ec:cb:a0:ec:ce:ae:8e:c9:70:3a:b3:1d: b7:22:dd:48:1e:f6:c7:70:94:62:80:82:4f:b0:5a: 15:5a:f4:16:94:4d:82:9e:3c:28:43:06:87:63:0e: 84:5b:c0:6f:8f:a2:c6:32:7b:c8:6f:97:81:60:39: 8c:3d:d9:8f:a3:5e:0f:37:2b:d3:6b:65:76:83:be: a1:2a:98:c5:39:12:04:83:61:55:c5:f3:1b:7c:6d: b1:4f:7c:cc:c4:68:b3:60:d2:92:3a:d8:93:bf:7f: 2c:4e:e1:6d:36:0e:71:88:bf:71:6c:4d:7f:ca:10: 70:67:4c:e8:2c:06:6b:c7:c9:62:bb:3d:c8:1f:99: 4a:1b:8a:8c:e4:f9:c1:77:ca:67:5b:0d:b2:0e:03: 0c:da:5b:33:66:7b:d9:b8:ac:fd:78:88:bf:04:b8: f7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:53:43:70:25:AD:35:BC:CF:28:70:6B:9D:88:AA:11:C8:A8:45:9F X509v3 Authority Key Identifier: keyid:46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:b4:60:68:89:01:5a:9d:b6:5a:8d:dd:bd:96:af:d2:f7:2a: be:f7:58:b6:ae:b1:8a:19:fe:3b:44:95:86:b9:69:fe:3c:c3: df:60:c5:a4:89:83:f0:58:b8:94:55:f1:f9:1d:24:c0:2f:9a: 81:ea:7f:af:e9:f4:25:00:65:3f:e6:ed:4b:14:04:3f:e0:ae: 84:60:22:5a:9c:78:ee:47:73:f6:57:69:c9:09:0d:e0:32:34: 01:ea:38:0d:85:81:09:ce:e2:ca:b0:d3:75:39:a2:16:b4:eb: 3d:ba:4e:6a:66:c8:a4:43:79:86:f0:79:08:3b:9c:1f:51:24: b3:cc:91:ed:dc:99:d0:1e:03:46:75:f7:aa:eb:f2:48:fb:b6: 01:a2:df:74:e1:70:b4:0e:f1:a3:76:e9:d9:57:d6:d8:b8:e4: a8:3c:b9:c6:0b:36:82:5e:f5:ff:47:d4:72:cf:fe:a6:19:2b: 8f:bb:da:c8:43:75:94:c1:eb:94:0f:a9:bc:dd:e8:a6:57:24: 05:58:63:17:45:12:82:81:c0:ae:0c:4f:12:7e:1c:d6:ad:31: c7:a0:8b:42:5e:a7:fc:99:93:34:29:31:70:a2:43:ab:6e:f6: 87:7d:c2:3d:0b:83:84:5a:d5:71:49:53:ab:9b:80:62:8e:7f: 10:46:6f:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiIjtuRGb/GTNG6EgVC3WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OTM1MDgxYzc3YTg3NDVlN2I2MmI5M2I4MmRhMjk2MjM3 OWIyZTIwHhcNMjUxMjA1MjIwMTExWhcNMjUxMjA2MjIwMTExWjAzMTEwLwYDVQQD EyhhNzUzNDM3MDI1YWQzNWJjY2YyODcwNmI5ZDg4YWExMWM4YTg0NTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmALWJRa04xSpDebNeqyQFWT4PeSs 04sMb3vC13BEu6dr0bFgjUsmcU8VMhkmEdxeOq1DQ7cKXrc1Dzsigf00NFoVPQ57 4klTUovA6A2sbk7M13MB70Kf662oVYTsy6Dszq6OyXA6sx23It1IHvbHcJRigIJP sFoVWvQWlE2CnjwoQwaHYw6EW8Bvj6LGMnvIb5eBYDmMPdmPo14PNyvTa2V2g76h KpjFORIEg2FVxfMbfG2xT3zMxGizYNKSOtiTv38sTuFtNg5xiL9xbE1/yhBwZ0zo LAZrx8liuz3IH5lKG4qM5PnBd8pnWw2yDgMM2lszZnvZuKz9eIi/BLj3dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdTQ3AlrTW8zyhwa52IqhHIqEWfMB8GA1UdIwQY MBaAFEaTUIHHeodF57Yrk7gtopYjebLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnBOUWdjZDZoMFhudGl1VHVDMmlsaU41c3VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85MDYwNmUtOTMxNi00ZWEzLWJjNzQt YTM1YzI3ZDk1MTg2LzEvUnBOUWdjZDZoMFhudGl1VHVDMmlsaU41c3VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85MDYwNmUtOTMxNi00ZWEzLWJjNzQtYTM1YzI3ZDk1MTg2 LzEvUnBOUWdjZDZoMFhudGl1VHVDMmlsaU41c3VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLRgaIkB Wp22Wo3dvZav0vcqvvdYtq6xihn+O0SVhrlp/jzD32DFpImD8Fi4lFXx+R0kwC+a gep/r+n0JQBlP+btSxQEP+CuhGAiWpx47kdz9ldpyQkN4DI0Aeo4DYWBCc7iyrDT dTmiFrTrPbpOambIpEN5hvB5CDucH1Eks8yR7dyZ0B4DRnX3quvySPu2AaLfdOFw tA7xo3bp2VfW2LjkqDy5xgs2gl71/0fUcs/+phkrj7vayEN1lMHrlA+pvN3oplck BVhjF0USgoHArgxPEn4c1q0xx6CLQl6n/JmTNCkxcKJDq272h33CPQuDhFrVcUlT q5uAYo5/EEZvww== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:15 2025 by rpki-client