This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.mft File: re6JwT1t5zqJRAS_fq-e5eQN6jM.mft (raw, json) Hash identifier: pb1RBFCfNsXXl4Zj0vXHCvnaGlNWXZznI8T0Tlj4ex0= Subject key identifier: 3E:EE:5D:9D:9D:F8:3E:53:5E:5F:5C:A2:7A:85:A1:8C:70:F8:7A:90 Authority key identifier: AD:EE:89:C1:3D:6D:E7:3A:89:44:04:BF:7E:AF:9E:E5:E4:0D:EA:33 Certificate issuer: /CN=adee89c13d6de73a894404bf7eaf9ee5e40dea33 Certificate serial: 019AF1D1D5F1A05F80F36470FD89D7657ED6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/re6JwT1t5zqJRAS_fq-e5eQN6jM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.mft Manifest number: 07CF Signing time: Sat 06 Dec 2025 04:00:52 +0000 Manifest this update: Sat 06 Dec 2025 04:00:52 +0000 Manifest next update: Sun 07 Dec 2025 04:00:52 +0000 Files and hashes: 1: GGsR3CTZp_ySYvfRDUPF91N6wRs.roa (hash: +hbDhYAqa8s6kUaFV+M346NJRpWW83Nz49mGZoVut4k=) 2: re6JwT1t5zqJRAS_fq-e5eQN6jM.crl (hash: wj3hk71T4CnZP9sKqbUOqJxOmyt7u06jtKSOAOxNKJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.mft rsync://rpki.ripe.net/repository/DEFAULT/re6JwT1t5zqJRAS_fq-e5eQN6jM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d5:f1:a0:5f:80:f3:64:70:fd:89:d7:65:7e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adee89c13d6de73a894404bf7eaf9ee5e40dea33 Validity Not Before: Dec 6 04:00:52 2025 GMT Not After : Dec 7 04:00:52 2025 GMT Subject: CN=3eee5d9d9df83e535e5f5ca27a85a18c70f87a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4e:0b:ab:c4:6f:8f:74:da:ef:e9:3d:0c:97: 3b:e0:51:9b:42:42:8d:83:88:c7:03:15:6d:2a:03: 81:39:a6:cc:94:11:98:95:0f:51:e8:8b:63:36:90: 37:80:46:0b:d5:15:38:c6:1f:0e:12:a7:28:4d:da: 99:4d:36:ea:dd:dd:a7:49:06:bd:bc:42:10:3c:9c: 42:d6:ba:c0:ec:8f:16:27:ac:c0:98:9a:47:7e:74: 91:43:b4:bb:12:69:64:e8:0d:0a:f1:dc:87:f6:bd: 1b:4c:49:e8:5f:b9:95:ea:4c:19:9f:db:a1:c0:6a: 64:06:f7:d6:7d:f3:e6:77:c8:12:be:98:36:0e:79: 67:4e:99:fd:9d:c0:a1:34:d7:3f:0d:e5:89:b4:a6: 42:92:e7:35:98:c6:6f:22:b0:31:94:a3:75:22:86: bd:96:8e:54:7d:ae:73:c7:47:eb:c0:7d:04:8f:b8: 90:b7:b3:17:91:1d:08:d3:54:92:53:54:e1:ad:bd: 72:64:6b:7c:09:98:6a:cc:96:c3:a6:39:a7:68:0e: 16:eb:64:41:9c:4f:2f:26:e8:e9:a8:85:ea:96:e8: ec:32:50:30:16:21:50:a2:47:6f:1d:66:96:13:5d: 26:8b:78:39:40:1d:e9:d3:31:10:94:08:3c:88:92: 53:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EE:5D:9D:9D:F8:3E:53:5E:5F:5C:A2:7A:85:A1:8C:70:F8:7A:90 X509v3 Authority Key Identifier: keyid:AD:EE:89:C1:3D:6D:E7:3A:89:44:04:BF:7E:AF:9E:E5:E4:0D:EA:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/re6JwT1t5zqJRAS_fq-e5eQN6jM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b29d96-da9e-47a0-9fb1-1243b46795f8/1/re6JwT1t5zqJRAS_fq-e5eQN6jM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:14:bc:72:ca:51:68:2c:e8:da:20:ff:c8:b9:a8:00:e7:be: 4f:d8:24:00:f9:10:8e:20:f3:38:0e:cf:71:f5:2e:03:8f:f7: 54:96:fe:b7:34:80:62:8a:6d:a1:ef:c9:6b:ab:f4:10:b0:8d: 6b:d8:46:9c:87:7a:49:4d:5f:bf:c4:87:c4:1e:c5:90:51:0b: 64:a8:42:c9:b2:b8:2b:07:9b:07:da:28:2c:5e:cb:0d:fb:53: 0f:a3:e4:d8:f7:34:74:4b:10:7a:26:7d:c4:32:cf:d1:a4:5d: f9:be:ae:a2:8a:7c:6f:6b:ec:5b:ef:dd:cc:fd:27:50:63:e5: 59:26:1a:d1:8c:e3:a6:54:b6:06:78:37:ce:a3:27:a3:0d:15: e3:bc:65:2e:67:0b:7b:ed:df:0a:da:33:54:01:01:c1:2f:72: 4c:28:de:75:eb:35:0a:96:ef:b4:ed:f1:99:da:cc:5f:5f:61: 31:f2:ac:2d:b6:9f:1a:a7:3f:e5:10:9e:ae:4c:65:7f:f0:bd: 7f:02:1c:9e:8a:22:04:e5:39:db:57:97:43:df:bd:65:12:90: 91:f3:91:a1:35:1f:40:aa:5d:e5:f1:64:6b:ae:82:c0:43:35: d2:37:89:6a:5a:a6:9b:fc:c2:f2:ef:31:77:ed:a9:80:d0:ff: dc:61:18:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dXxoF+A82Rw/YnXZX7WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZWU4OWMxM2Q2ZGU3M2E4OTQ0MDRiZjdlYWY5ZWU1ZTQw ZGVhMzMwHhcNMjUxMjA2MDQwMDUyWhcNMjUxMjA3MDQwMDUyWjAzMTEwLwYDVQQD EygzZWVlNWQ5ZDlkZjgzZTUzNWU1ZjVjYTI3YTg1YTE4YzcwZjg3YTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs04Lq8Rvj3Ta7+k9DJc74FGbQkKN g4jHAxVtKgOBOabMlBGYlQ9R6ItjNpA3gEYL1RU4xh8OEqcoTdqZTTbq3d2nSQa9 vEIQPJxC1rrA7I8WJ6zAmJpHfnSRQ7S7Emlk6A0K8dyH9r0bTEnoX7mV6kwZn9uh wGpkBvfWffPmd8gSvpg2DnlnTpn9ncChNNc/DeWJtKZCkuc1mMZvIrAxlKN1Ioa9 lo5Ufa5zx0frwH0Ej7iQt7MXkR0I01SSU1Thrb1yZGt8CZhqzJbDpjmnaA4W62RB nE8vJujpqIXqlujsMlAwFiFQokdvHWaWE10mi3g5QB3p0zEQlAg8iJJTZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7uXZ2d+D5TXl9conqFoYxw+HqQMB8GA1UdIwQY MBaAFK3uicE9bec6iUQEv36vnuXkDeozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmU2SndUMXQ1enFKUkFTX2ZxLWU1ZVFONmpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iMjlkOTYtZGE5ZS00N2EwLTlmYjEt MTI0M2I0Njc5NWY4LzEvcmU2SndUMXQ1enFKUkFTX2ZxLWU1ZVFONmpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iMjlkOTYtZGE5ZS00N2EwLTlmYjEtMTI0M2I0Njc5NWY4 LzEvcmU2SndUMXQ1enFKUkFTX2ZxLWU1ZVFONmpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRS8cspR aCzo2iD/yLmoAOe+T9gkAPkQjiDzOA7PcfUuA4/3VJb+tzSAYoptoe/Ja6v0ELCN a9hGnId6SU1fv8SHxB7FkFELZKhCybK4KwebB9ooLF7LDftTD6Pk2Pc0dEsQeiZ9 xDLP0aRd+b6uoop8b2vsW+/dzP0nUGPlWSYa0YzjplS2Bng3zqMnow0V47xlLmcL e+3fCtozVAEBwS9yTCjedes1CpbvtO3xmdrMX19hMfKsLbafGqc/5RCerkxlf/C9 fwIcnooiBOU521eXQ9+9ZRKQkfORoTUfQKpd5fFka66CwEM10jeJalqmm/zC8u8x d+2pgND/3GEYOw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:57:22 2025 by rpki-client