This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft File: P6LWhQu8RyBVepF03LyXYK7MCxo.mft (raw, json) Hash identifier: vP5K2UHWgF14q4MGiGRH1NorGnm017DxRpGIHDX4E0E= Subject key identifier: 50:CA:59:6C:AB:E2:EB:A4:CC:69:D6:90:29:54:16:AD:79:99:50:24 Authority key identifier: 3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A Certificate issuer: /CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a Certificate serial: 019AF19AC1011A25E728BE1B31C2C90B78C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft Manifest number: 146D Signing time: Sat 06 Dec 2025 03:00:42 +0000 Manifest this update: Sat 06 Dec 2025 03:00:42 +0000 Manifest next update: Sun 07 Dec 2025 03:00:42 +0000 Files and hashes: 1: GAO-zTi3etu6ipkvC2n1MQjAfa8.roa (hash: xkkdl+Sobv3rMi6edmSVvQinnG04ZdzSM/7er87DV0E=) 2: P6LWhQu8RyBVepF03LyXYK7MCxo.crl (hash: K3NqCZYfP+6dQuVn1uV/Nv7dRQF3Ao2qCg/I+wHxwwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c1:01:1a:25:e7:28:be:1b:31:c2:c9:0b:78:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a Validity Not Before: Dec 6 03:00:42 2025 GMT Not After : Dec 7 03:00:42 2025 GMT Subject: CN=50ca596cabe2eba4cc69d690295416ad79995024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:58:2f:bf:d3:1c:40:2a:e5:bd:d3:21:22:0b: 7f:bf:83:2e:79:89:0e:b1:9e:da:a7:13:2f:35:40: e7:dd:d3:07:1a:9d:24:93:a8:77:2f:c7:fb:e3:00: 52:fa:49:d8:1b:24:b4:36:e2:67:bf:c9:0b:e9:cb: e4:32:35:81:39:6e:7d:5a:10:34:c1:6f:0e:60:4f: b6:d2:b2:31:a6:c7:c8:5a:2c:bc:b2:f3:07:d3:82: 8b:43:35:09:2b:f7:a6:d9:f4:fa:5c:87:b9:82:c1: 22:d0:0b:26:a7:b5:34:a4:e9:38:0b:eb:20:01:e8: 07:06:20:05:7d:a1:01:34:ba:96:65:64:8e:14:82: 3a:dd:1a:53:d8:57:44:d1:b3:34:15:78:d7:0e:2a: 75:7d:f0:0d:30:c8:e2:1e:4b:ec:d2:34:a6:a7:4b: ef:3c:ca:6a:51:14:5e:95:2b:f8:e2:dc:13:10:4b: d8:a6:ad:15:21:ac:03:aa:c8:f4:41:9f:f6:30:d3: d8:b0:0e:df:c4:2a:65:45:b8:89:16:1f:6a:e2:01: c2:3a:ef:28:62:ba:37:4a:8a:95:1b:dc:ab:98:fb: 51:46:ae:ee:e5:c6:c7:f5:25:88:2d:fd:ed:f0:2c: 9b:7b:73:63:53:28:f7:79:e0:8e:03:41:14:fc:12: 0d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:CA:59:6C:AB:E2:EB:A4:CC:69:D6:90:29:54:16:AD:79:99:50:24 X509v3 Authority Key Identifier: keyid:3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:96:07:e6:db:41:5a:51:4b:43:bd:7d:5a:4b:0b:f2:9d:60: f1:05:c9:9b:d8:d0:11:97:fe:26:4c:60:48:16:ba:5b:75:d7: dc:09:37:dc:3a:bf:0e:09:4d:cd:16:03:3a:c0:b3:03:ac:60: 33:a7:3d:5a:71:f7:44:2f:e9:a9:8b:a0:e3:04:94:54:50:fa: b8:a6:c5:0e:d0:b0:48:71:d0:73:93:3a:16:38:dc:32:4a:02: 15:bb:35:03:49:a1:af:b8:4e:60:d1:22:bd:ab:e9:14:ee:23: 6c:0c:b7:13:62:0e:6d:c2:43:be:ad:ac:64:f8:29:0b:5d:3a: c2:28:bb:62:db:fd:94:41:f8:66:5b:24:60:b3:c4:b2:fa:24: 7d:51:4f:b7:e0:6c:52:65:df:59:3c:af:a7:c5:86:be:c2:3b: 86:a7:56:7d:68:01:30:37:59:24:fc:a2:cf:2e:09:fe:ee:55: f2:93:8d:87:17:a2:17:ea:0c:37:7d:20:ac:7d:82:c1:ca:a7: 5b:4b:e3:e7:5b:34:63:d4:93:ac:7d:4a:ed:4c:2e:36:d2:e2: 21:d6:04:ab:9d:d0:6c:10:a7:6a:11:6f:7b:68:58:42:47:1e: 63:55:64:6f:63:30:35:a8:96:d5:89:65:7b:b6:e1:c3:b4:19: ed:fa:56:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsEBGiXnKL4bMcLJC3jJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmYTJkNjg1MGJiYzQ3MjA1NTdhOTE3NGRjYmM5NzYwYWVj YzBiMWEwHhcNMjUxMjA2MDMwMDQyWhcNMjUxMjA3MDMwMDQyWjAzMTEwLwYDVQQD Eyg1MGNhNTk2Y2FiZTJlYmE0Y2M2OWQ2OTAyOTU0MTZhZDc5OTk1MDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVgvv9McQCrlvdMhIgt/v4MueYkO sZ7apxMvNUDn3dMHGp0kk6h3L8f74wBS+knYGyS0NuJnv8kL6cvkMjWBOW59WhA0 wW8OYE+20rIxpsfIWiy8svMH04KLQzUJK/em2fT6XIe5gsEi0Asmp7U0pOk4C+sg AegHBiAFfaEBNLqWZWSOFII63RpT2FdE0bM0FXjXDip1ffANMMjiHkvs0jSmp0vv PMpqURRelSv44twTEEvYpq0VIawDqsj0QZ/2MNPYsA7fxCplRbiJFh9q4gHCOu8o Yro3SoqVG9yrmPtRRq7u5cbH9SWILf3t8Cybe3NjUyj3eeCOA0EU/BINNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDKWWyr4uukzGnWkClUFq15mVAkMB8GA1UdIwQY MBaAFD+i1oULvEcgVXqRdNy8l2CuzAsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDZMV2hRdThSeUJWZXBGMDNMeVhZSzdNQ3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jM2M3NTgtYTI1My00OTg5LWFlMmQt OWM2NWQxODhlNTRlLzEvUDZMV2hRdThSeUJWZXBGMDNMeVhZSzdNQ3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9jM2M3NTgtYTI1My00OTg5LWFlMmQtOWM2NWQxODhlNTRl LzEvUDZMV2hRdThSeUJWZXBGMDNMeVhZSzdNQ3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJYH5ttB WlFLQ719WksL8p1g8QXJm9jQEZf+JkxgSBa6W3XX3Ak33Dq/DglNzRYDOsCzA6xg M6c9WnH3RC/pqYug4wSUVFD6uKbFDtCwSHHQc5M6FjjcMkoCFbs1A0mhr7hOYNEi vavpFO4jbAy3E2IObcJDvq2sZPgpC106wii7Ytv9lEH4ZlskYLPEsvokfVFPt+Bs UmXfWTyvp8WGvsI7hqdWfWgBMDdZJPyizy4J/u5V8pONhxeiF+oMN30grH2Cwcqn W0vj51s0Y9STrH1K7UwuNtLiIdYEq53QbBCnahFve2hYQkceY1Vkb2MwNaiW1Yll e7bhw7QZ7fpW6g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:35 2025 by rpki-client