This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft File: h6Tl13JcWGiqvqAluDjcwjPG_8k.mft (raw, json) Hash identifier: jWtlR9ytMJAiAJOp44ztn0ww+oAD8dYf+jnHH3qGJiA= Subject key identifier: 97:B9:E5:8C:C9:F2:23:E3:82:48:13:C0:F8:F9:38:46:BE:66:D5:38 Authority key identifier: 87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9 Certificate issuer: /CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9 Certificate serial: 019AF0BF66A43B63AB7926021E914B511A07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft Manifest number: 1497 Signing time: Fri 05 Dec 2025 23:01:06 +0000 Manifest this update: Fri 05 Dec 2025 23:01:06 +0000 Manifest next update: Sat 06 Dec 2025 23:01:06 +0000 Files and hashes: 1: 326zxIS7flVicYpYeyjZhIJPEQc.roa (hash: 7OXoJx4K7+k1nQ/ABjRnbXIbMj5YXCBVmfp1DpVjQws=) 2: h6Tl13JcWGiqvqAluDjcwjPG_8k.crl (hash: rbBp8B3aAEH6JHRVBWRfpsjep83RW0tjM4DDPlpmuRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:66:a4:3b:63:ab:79:26:02:1e:91:4b:51:1a:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9 Validity Not Before: Dec 5 23:01:06 2025 GMT Not After : Dec 6 23:01:06 2025 GMT Subject: CN=97b9e58cc9f223e3824813c0f8f93846be66d538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:33:5d:33:c0:94:61:4b:09:d2:40:58:49: 16:44:4c:39:18:3f:6a:29:d9:53:a1:f2:b4:9f:57: 4e:b3:1e:ad:2e:56:c5:b7:14:39:c9:e2:42:ca:e5: 0e:c8:4a:07:5a:19:cc:6b:4b:8b:45:8b:69:c6:5f: 17:d5:f1:e9:50:cf:16:49:c8:49:d6:5d:83:67:42: b3:33:95:3c:b1:0b:79:1b:70:a5:ea:76:af:43:90: 2a:73:5a:fe:03:ad:3a:5c:c8:80:8b:c6:02:db:4a: ff:9f:98:15:45:a8:54:45:bd:6e:b1:35:8b:3a:ff: 8f:19:85:39:7a:d5:88:7a:f5:7a:33:e2:ad:8f:6a: 0f:e2:e2:f6:89:f8:38:9f:af:83:c2:12:fb:41:0d: 44:a5:5d:c0:fc:82:64:d1:f7:b8:32:1a:4d:1e:0c: 3d:e9:54:c9:b1:5b:ae:be:8c:31:fa:11:69:4c:8a: 52:19:b9:1a:46:a3:d4:58:57:4b:05:0e:93:77:58: 6f:d0:3f:35:23:14:fe:d3:57:c4:2d:85:18:02:25: ff:b2:91:e8:91:31:db:e8:aa:c5:40:dc:36:f7:b9: 91:66:94:09:78:2b:b3:2a:f5:f6:db:b9:b6:1e:a2: 3f:2a:25:31:02:a0:ff:18:77:f9:5e:db:fc:bd:be: 70:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B9:E5:8C:C9:F2:23:E3:82:48:13:C0:F8:F9:38:46:BE:66:D5:38 X509v3 Authority Key Identifier: keyid:87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:bd:25:67:76:5a:81:18:2b:16:3f:6b:14:12:97:d6:99:4a: bd:a6:91:79:49:a6:05:3d:e2:ad:c0:3e:26:52:11:8d:02:23: 53:b2:3f:db:8a:1b:f9:70:22:a7:44:1f:e3:6d:a0:61:e2:98: ab:fa:c0:5d:8f:aa:dc:c5:ec:13:5c:95:70:1a:ef:44:ca:b8: 72:6e:e6:3e:04:cf:6c:a9:02:d8:40:bf:e4:ed:3a:62:ea:8e: b7:0d:91:19:54:41:03:77:08:c7:78:6c:d8:c0:04:cc:10:d0: e1:bc:68:8d:b6:e6:da:60:fd:24:c8:70:09:10:47:e8:73:d1: d7:08:21:ae:b3:90:11:b6:50:88:d3:ac:bb:cc:1a:3a:4d:ef: ae:be:72:2f:32:6c:e4:e4:4b:43:3b:a6:f5:81:c2:66:6a:ce: eb:5d:d4:4f:8c:20:46:cc:b7:b5:62:1c:3c:1b:95:b1:f2:31: d2:71:0f:20:cd:c1:49:1d:ef:7a:b2:a9:27:1a:f5:35:ba:9b: a2:90:6a:1b:d5:27:71:4d:f5:33:9b:82:bc:62:ab:e1:c3:5c: ba:46:4a:37:77:1b:24:38:69:6a:36:3f:c1:76:b5:39:57:4d: 99:d2:fd:09:8c:98:d3:7b:18:0b:95:6e:ff:64:cc:84:b5:89: c8:3c:e2:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2akO2OreSYCHpFLURoHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YTRlNWQ3NzI1YzU4NjhhYWJlYTAyNWI4MzhkY2MyMzNj NmZmYzkwHhcNMjUxMjA1MjMwMTA2WhcNMjUxMjA2MjMwMTA2WjAzMTEwLwYDVQQD Eyg5N2I5ZTU4Y2M5ZjIyM2UzODI0ODEzYzBmOGY5Mzg0NmJlNjZkNTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVgzXTPAlGFLCdJAWEkWREw5GD9q KdlTofK0n1dOsx6tLlbFtxQ5yeJCyuUOyEoHWhnMa0uLRYtpxl8X1fHpUM8WSchJ 1l2DZ0KzM5U8sQt5G3Cl6navQ5Aqc1r+A606XMiAi8YC20r/n5gVRahURb1usTWL Ov+PGYU5etWIevV6M+Ktj2oP4uL2ifg4n6+DwhL7QQ1EpV3A/IJk0fe4MhpNHgw9 6VTJsVuuvowx+hFpTIpSGbkaRqPUWFdLBQ6Td1hv0D81IxT+01fELYUYAiX/spHo kTHb6KrFQNw297mRZpQJeCuzKvX227m2HqI/KiUxAqD/GHf5Xtv8vb5wZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJe55YzJ8iPjgkgTwPj5OEa+ZtU4MB8GA1UdIwQY MBaAFIek5ddyXFhoqr6gJbg43MIzxv/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDZUbDEzSmNXR2lxdnFBbHVEamN3alBHXzhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My82NTU1YzMtMDU0Ni00ZWVmLTg2NDgt NTA2YTIxNTk1Y2I4LzEvaDZUbDEzSmNXR2lxdnFBbHVEamN3alBHXzhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My82NTU1YzMtMDU0Ni00ZWVmLTg2NDgtNTA2YTIxNTk1Y2I4 LzEvaDZUbDEzSmNXR2lxdnFBbHVEamN3alBHXzhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFL0lZ3Za gRgrFj9rFBKX1plKvaaReUmmBT3ircA+JlIRjQIjU7I/24ob+XAip0Qf422gYeKY q/rAXY+q3MXsE1yVcBrvRMq4cm7mPgTPbKkC2EC/5O06YuqOtw2RGVRBA3cIx3hs 2MAEzBDQ4bxojbbm2mD9JMhwCRBH6HPR1wghrrOQEbZQiNOsu8waOk3vrr5yLzJs 5ORLQzum9YHCZmrO613UT4wgRsy3tWIcPBuVsfIx0nEPIM3BSR3verKpJxr1Nbqb opBqG9UncU31M5uCvGKr4cNcukZKN3cbJDhpajY/wXa1OVdNmdL9CYyY03sYC5Vu /2TMhLWJyDziKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:31:23 2025 by rpki-client