This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft File: rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft (raw, json) Hash identifier: wXktVxniK7xtcOI9Rtz9DiY4RsVI3kUsbFHhK8hz7dk= Subject key identifier: A4:1C:0C:B2:25:53:D8:B9:CF:FB:F6:C8:BB:0C:0F:FD:46:27:9A:24 Authority key identifier: AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B Certificate issuer: /CN=acfeacea5d812f3030c557e48c53758753fb6c6b Certificate serial: 019B3A2196411EB616EC7B84F3EDDEA1BEE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 05:00:38 +0000 Manifest this update: Sat 20 Dec 2025 05:00:38 +0000 Manifest next update: Sun 21 Dec 2025 05:00:38 +0000 Files and hashes: 1: 3i8SziI4yOANwHuCoVeJUFIkDmY.roa (hash: ApwThwemagVAYGDz/BhbEY+AhYokJz7tAT0f3Qt4Pto=) 2: rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl (hash: OSKV6GRq/ssm2o2UoC7Ltb9G/FG9JM5AT/523L6ZQ8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:96:41:1e:b6:16:ec:7b:84:f3:ed:de:a1:be:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acfeacea5d812f3030c557e48c53758753fb6c6b Validity Not Before: Dec 20 05:00:38 2025 GMT Not After : Dec 21 05:00:38 2025 GMT Subject: CN=a41c0cb22553d8b9cffbf6c8bb0c0ffd46279a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9f:40:46:ac:3a:a9:e6:10:a4:57:5e:3a:d4: 0a:5c:fa:f9:dc:73:53:7b:2a:5e:31:18:72:64:01: ae:1b:fc:6c:b0:bc:31:5a:bc:33:6a:11:66:d8:24: 38:a3:a7:a0:32:2d:08:05:9e:be:a7:8c:5f:76:f1: 8e:e7:64:5e:b9:4b:8d:9f:4e:ee:76:81:85:33:bf: 9f:33:0d:f4:6f:ce:1b:23:2c:9a:d2:52:0a:e8:13: 91:d3:83:61:60:a3:1d:46:ce:82:91:57:30:5a:06: c0:1c:44:7a:5c:e0:0b:ec:bf:18:33:9d:bd:cb:80: b1:eb:d7:33:53:d0:75:82:37:70:9d:6c:d8:f4:41: ee:cb:f2:c0:c8:9c:c0:68:23:fa:5b:b3:93:c9:38: 40:1f:82:53:46:81:b0:8b:6f:41:a2:ea:36:af:82: 29:d7:06:e2:a4:3d:f5:fb:62:18:7e:a4:cb:5f:c8: 47:61:e3:04:e4:f8:93:c5:57:6b:f1:c0:a8:6d:ba: 4c:2c:73:7f:d5:d5:8b:da:f1:0c:49:fe:11:ce:7e: 24:35:a1:e8:3e:a1:c8:22:73:6b:bb:72:e4:8c:7a: f8:1d:44:b4:c5:69:cb:00:b2:3f:56:e7:aa:87:7c: 04:8a:32:da:71:ca:f3:f1:63:23:40:d7:1b:db:22: 4c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1C:0C:B2:25:53:D8:B9:CF:FB:F6:C8:BB:0C:0F:FD:46:27:9A:24 X509v3 Authority Key Identifier: keyid:AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:94:a3:f1:94:2b:b6:eb:29:59:9a:a0:9d:96:42:79:d2:30: d9:2d:a0:78:ec:4f:b3:f9:4d:f3:81:4b:29:eb:cb:20:e5:29: 5c:0b:1a:cc:d8:3e:bc:bf:b7:4f:f7:7a:43:8b:25:d9:cc:37: 75:06:2d:12:91:67:46:1e:c8:1a:b3:a1:26:b2:39:70:0a:7c: 2d:54:93:30:fa:61:35:72:dd:78:73:48:61:d0:9b:2e:c6:7d: d5:e4:ba:c4:95:ba:61:a8:aa:16:c5:da:50:cd:34:c6:e0:d6: b7:27:8f:2d:1f:7c:28:fa:e1:20:8a:a3:6f:78:ee:0b:eb:d8: 01:bb:0e:85:45:01:bc:f4:38:a9:17:d6:74:e3:54:2e:87:7a: e1:6e:35:98:95:2f:46:53:04:3f:f9:50:58:22:cd:87:8e:ea: 89:01:b7:39:8c:98:07:da:46:28:6e:25:90:8b:7f:9b:82:19: ce:3d:95:0d:77:d8:88:d9:90:79:86:08:19:78:44:90:4b:12: 8e:4d:bf:39:5f:4d:24:96:68:e0:a8:91:e0:cd:43:ed:4a:bd: 2b:2a:46:2c:31:7c:b3:83:90:7c:1b:bc:40:39:a2:2e:62:e4: 10:e3:e0:5a:0e:2d:4e:14:43:f5:8c:48:55:d1:6c:35:a2:99: 12:60:9b:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IZZBHrYW7HuE8+3eob7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZmVhY2VhNWQ4MTJmMzAzMGM1NTdlNDhjNTM3NTg3NTNm YjZjNmIwHhcNMjUxMjIwMDUwMDM4WhcNMjUxMjIxMDUwMDM4WjAzMTEwLwYDVQQD EyhhNDFjMGNiMjI1NTNkOGI5Y2ZmYmY2YzhiYjBjMGZmZDQ2Mjc5YTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0p9ARqw6qeYQpFdeOtQKXPr53HNT eypeMRhyZAGuG/xssLwxWrwzahFm2CQ4o6egMi0IBZ6+p4xfdvGO52ReuUuNn07u doGFM7+fMw30b84bIyya0lIK6BOR04NhYKMdRs6CkVcwWgbAHER6XOAL7L8YM529 y4Cx69czU9B1gjdwnWzY9EHuy/LAyJzAaCP6W7OTyThAH4JTRoGwi29Bouo2r4Ip 1wbipD31+2IYfqTLX8hHYeME5PiTxVdr8cCobbpMLHN/1dWL2vEMSf4Rzn4kNaHo PqHIInNru3LkjHr4HUS0xWnLALI/Vueqh3wEijLaccrz8WMjQNcb2yJMJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQcDLIlU9i5z/v2yLsMD/1GJ5okMB8GA1UdIwQY MBaAFKz+rOpdgS8wMMVX5IxTdYdT+2xrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclA2czZsMkJMekF3eFZma2pGTjFoMVA3YkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yNzI3YjUtNWVjYi00ODVmLWI3ZDkt YTJmZDI4ODQwYTAzLzEvclA2czZsMkJMekF3eFZma2pGTjFoMVA3YkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8yNzI3YjUtNWVjYi00ODVmLWI3ZDktYTJmZDI4ODQwYTAz LzEvclA2czZsMkJMekF3eFZma2pGTjFoMVA3YkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZSj8ZQr tuspWZqgnZZCedIw2S2geOxPs/lN84FLKevLIOUpXAsazNg+vL+3T/d6Q4sl2cw3 dQYtEpFnRh7IGrOhJrI5cAp8LVSTMPphNXLdeHNIYdCbLsZ91eS6xJW6YaiqFsXa UM00xuDWtyePLR98KPrhIIqjb3juC+vYAbsOhUUBvPQ4qRfWdONULod64W41mJUv RlMEP/lQWCLNh47qiQG3OYyYB9pGKG4lkIt/m4IZzj2VDXfYiNmQeYYIGXhEkEsS jk2/OV9NJJZo4KiR4M1D7Uq9KypGLDF8s4OQfBu8QDmiLmLkEOPgWg4tThRD9YxI VdFsNaKZEmCbtA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:05:51 2025 by rpki-client