This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft File: s6qVFyKhmXGkTmLKktHJEoTRLiE.mft (raw, json) Hash identifier: bDaz6tA1pUoF9RUO/g30FC81FtvHmvh6s4n85VKsu4I= Subject key identifier: 75:BD:1A:2C:02:BA:6B:90:55:64:43:33:1D:BE:21:27:57:D2:71:BE Authority key identifier: B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21 Certificate issuer: /CN=b3aa951722a19971a44e62ca92d1c91284d12e21 Certificate serial: 019AF1D24F75F00B0CA7E6401237B8A00F15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:01:22 +0000 Manifest this update: Sat 06 Dec 2025 04:01:22 +0000 Manifest next update: Sun 07 Dec 2025 04:01:22 +0000 Files and hashes: 1: fcyT5TdBuZSpYCMKnr2rChuJmjI.roa (hash: Fmex2r2S8TmdcqcCkZmisW8YFG5UQhik8Ca5wAVTb7s=) 2: s6qVFyKhmXGkTmLKktHJEoTRLiE.crl (hash: JHeQHWEWE9p9aYOhlZGBxN+ssZuwmMNAG+oJBvltBhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4f:75:f0:0b:0c:a7:e6:40:12:37:b8:a0:0f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3aa951722a19971a44e62ca92d1c91284d12e21 Validity Not Before: Dec 6 04:01:22 2025 GMT Not After : Dec 7 04:01:22 2025 GMT Subject: CN=75bd1a2c02ba6b90556443331dbe212757d271be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:22:8c:55:90:1f:f8:35:de:4c:46:7d:2d:32: a7:ee:ad:bb:df:88:89:52:67:47:93:1a:12:59:24: 92:4f:29:9f:c9:04:5e:29:6b:cb:e5:d9:f1:e6:a4: 52:af:8f:90:94:82:b5:62:ea:c3:ca:9a:91:16:68: d3:04:24:49:44:0d:10:fd:3f:3d:46:ff:80:3c:ae: 19:14:d3:37:98:f8:45:ab:49:60:12:29:74:14:e0: d7:1f:29:9d:bf:c8:6b:16:46:18:3b:1b:d4:a8:df: 2d:4b:a8:43:0a:08:58:a4:69:e5:cd:d5:30:2b:0a: 15:bb:d7:3c:f5:f3:a9:64:18:78:69:8b:9d:03:fc: dc:73:b4:fe:55:11:ed:22:fb:84:2d:ea:ce:20:94: 9e:b8:fd:ed:03:c6:c3:eb:e0:fe:11:0e:13:7f:17: cd:58:e8:08:d6:b0:5f:c0:6c:89:07:41:fe:93:0a: 9d:fe:8f:7e:31:e3:ed:21:93:e5:6d:7e:f4:38:b6: 65:18:d9:94:74:09:6d:35:f6:b1:ec:60:d0:76:34: 52:12:f5:db:8b:3a:47:da:7a:b2:df:5e:90:7c:13: 19:41:12:53:8b:f1:ed:29:65:a0:ea:1f:35:9d:9c: ff:44:89:f6:d8:54:f1:c7:ea:9c:80:9f:96:bb:26: c0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BD:1A:2C:02:BA:6B:90:55:64:43:33:1D:BE:21:27:57:D2:71:BE X509v3 Authority Key Identifier: keyid:B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:fb:c2:ac:7d:29:e1:99:84:0d:65:e9:4b:b8:cc:b6:f2:0a: ea:c8:72:f9:05:e3:bc:3d:89:6f:5e:bc:7b:32:b9:d3:1b:a7: 83:0b:db:f7:7b:2f:e0:f0:d9:cf:a5:81:ba:88:2d:29:12:a9: 17:db:31:94:b1:0e:24:9a:11:16:60:53:bb:00:4f:01:48:12: cd:18:ba:08:ab:81:f7:a4:2a:b0:f1:4b:66:d9:16:5c:e2:88: 59:9e:b7:ec:76:c7:d7:b7:b2:15:7a:0f:83:3c:1c:f5:3e:5a: c8:6a:f2:fe:bb:67:07:7e:a5:be:03:47:12:73:35:67:d3:b7: 48:c5:0d:60:a0:ea:23:5b:75:36:8e:20:97:ce:40:a2:35:aa: 8c:ce:12:00:e8:fd:e6:86:06:f5:a5:c9:4c:8c:f8:9b:70:9d: a6:14:3e:07:ed:9c:ac:11:92:e4:3a:6e:c8:79:69:4b:e2:23: 59:8b:a9:31:e8:6c:b6:75:b4:cd:69:38:e4:6f:60:bf:87:94: f7:8a:ad:ef:ee:fd:92:82:58:b8:25:fa:9c:e9:3c:83:6c:e3: 15:80:b8:c5:28:71:87:3f:83:1e:18:9a:d4:d9:ab:24:33:f0: 90:99:b5:e9:0c:60:16:b9:02:47:aa:65:54:1f:71:67:34:b4: 9a:d4:6c:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0k918AsMp+ZAEje4oA8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYWE5NTE3MjJhMTk5NzFhNDRlNjJjYTkyZDFjOTEyODRk MTJlMjEwHhcNMjUxMjA2MDQwMTIyWhcNMjUxMjA3MDQwMTIyWjAzMTEwLwYDVQQD Eyg3NWJkMWEyYzAyYmE2YjkwNTU2NDQzMzMxZGJlMjEyNzU3ZDI3MWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCKMVZAf+DXeTEZ9LTKn7q2734iJ UmdHkxoSWSSSTymfyQReKWvL5dnx5qRSr4+QlIK1YurDypqRFmjTBCRJRA0Q/T89 Rv+APK4ZFNM3mPhFq0lgEil0FODXHymdv8hrFkYYOxvUqN8tS6hDCghYpGnlzdUw KwoVu9c89fOpZBh4aYudA/zcc7T+VRHtIvuELerOIJSeuP3tA8bD6+D+EQ4TfxfN WOgI1rBfwGyJB0H+kwqd/o9+MePtIZPlbX70OLZlGNmUdAltNfax7GDQdjRSEvXb izpH2nqy316QfBMZQRJTi/HtKWWg6h81nZz/RIn22FTxx+qcgJ+WuybAAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHW9GiwCumuQVWRDMx2+ISdX0nG+MB8GA1UdIwQY MBaAFLOqlRcioZlxpE5iypLRyRKE0S4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZxVkZ5S2htWEdrVG1MS2t0SEpFb1RSTGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mZGVhN2MtYTFiYy00OGE5LWFjZDMt YTAwM2M0YjYxYTVmLzEvczZxVkZ5S2htWEdrVG1MS2t0SEpFb1RSTGlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9mZGVhN2MtYTFiYy00OGE5LWFjZDMtYTAwM2M0YjYxYTVm LzEvczZxVkZ5S2htWEdrVG1MS2t0SEpFb1RSTGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/vCrH0p 4ZmEDWXpS7jMtvIK6shy+QXjvD2Jb168ezK50xungwvb93sv4PDZz6WBuogtKRKp F9sxlLEOJJoRFmBTuwBPAUgSzRi6CKuB96QqsPFLZtkWXOKIWZ637HbH17eyFXoP gzwc9T5ayGry/rtnB36lvgNHEnM1Z9O3SMUNYKDqI1t1No4gl85AojWqjM4SAOj9 5oYG9aXJTIz4m3CdphQ+B+2crBGS5DpuyHlpS+IjWYupMehstnW0zWk45G9gv4eU 94qt7+79koJYuCX6nOk8g2zjFYC4xShxhz+DHhia1NmrJDPwkJm16QxgFrkCR6pl VB9xZzS0mtRsyw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:23 2025 by rpki-client