This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft File: p6dweK84e0jXCBDrFgTfCt4Rj9o.mft (raw, json) Hash identifier: OLYFN8Mk/1Nj4OOAirPb3Vvtm8ttQJc/BJHHf5yR4qM= Subject key identifier: 05:97:52:69:7C:9A:F3:91:47:7B:3B:F5:61:06:4D:E7:E1:FC:96:CC Authority key identifier: A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA Certificate issuer: /CN=a7a77078af387b48d70810eb1604df0ade118fda Certificate serial: 019AF50AA3382F1A7A40FB6AFB463B0CC922 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft Manifest number: 13A3 Signing time: Sat 06 Dec 2025 19:01:46 +0000 Manifest this update: Sat 06 Dec 2025 19:01:46 +0000 Manifest next update: Sun 07 Dec 2025 19:01:46 +0000 Files and hashes: 1: 9xMeWe1NRlriC37gII2JZoSHiUQ.roa (hash: v9S3o8GCSV8SJhwMOSoO5rVmagcl/wlT4/BQbEi4mBI=) 2: p6dweK84e0jXCBDrFgTfCt4Rj9o.crl (hash: KqbYCy56BfFjFFNWw8TVlO6YubCClXKyn3umVi0LA4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:a3:38:2f:1a:7a:40:fb:6a:fb:46:3b:0c:c9:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a77078af387b48d70810eb1604df0ade118fda Validity Not Before: Dec 6 19:01:46 2025 GMT Not After : Dec 7 19:01:46 2025 GMT Subject: CN=059752697c9af391477b3bf561064de7e1fc96cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ca:e0:34:99:0b:ab:13:cc:01:03:52:80:3d: a8:87:1a:73:2c:8b:34:f5:f4:a9:e4:80:af:1c:65: 1b:2c:17:b2:02:b9:9a:d0:a7:17:ba:79:a9:32:51: f0:17:67:bf:88:ea:9a:40:e1:c1:2e:72:d3:1f:10: 5b:c4:b9:c6:f5:31:12:7c:6d:d2:cc:e7:01:3e:60: 90:77:13:29:14:4a:3c:73:e8:fc:6e:d1:ad:ef:82: 0f:5f:f9:61:6b:f3:b6:82:fc:b8:e0:32:a4:11:49: b0:5d:bb:7e:03:4e:3b:54:1a:a8:31:ec:16:ac:8f: a2:0d:8b:c3:46:9a:03:86:23:da:d6:3d:fd:5a:e8: 73:b8:10:54:53:64:81:07:63:a7:f1:bd:49:bf:6d: 96:eb:bb:9b:6f:ce:06:cc:84:2a:da:26:b1:e6:3d: 68:f9:5d:13:06:0e:a4:43:0a:ca:40:f5:17:bc:ec: a5:e3:00:3b:9c:1b:b5:85:6d:30:a4:7d:94:76:be: 88:2a:17:aa:c3:37:1c:4b:ad:b6:c3:39:68:90:f7: ab:8b:ff:62:d5:00:ae:4b:7b:bd:9d:52:f5:45:c8: 07:96:9d:2e:76:fd:27:9b:b5:5c:9f:87:9e:85:f9: 64:b7:a1:0a:79:b1:80:84:2e:f9:f5:21:82:56:94: 76:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:97:52:69:7C:9A:F3:91:47:7B:3B:F5:61:06:4D:E7:E1:FC:96:CC X509v3 Authority Key Identifier: keyid:A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:fa:df:81:e0:6b:f4:8f:50:8d:c7:6a:b6:10:9e:6a:60:fb: fb:f4:06:9c:33:65:4a:36:40:08:e6:ae:02:70:e5:97:11:fd: e3:b8:22:dd:9e:d5:67:8a:a4:71:58:a7:16:12:bf:1d:01:d9: c7:e0:00:66:cf:ef:a3:35:17:c2:92:e8:6f:0d:6f:d0:ed:65: ee:81:3d:19:50:fb:9a:f6:11:61:90:28:f5:68:80:92:9a:24: 01:d3:c1:05:e0:64:4e:15:4f:38:f1:2b:93:ba:2c:42:7a:a0: af:89:95:55:a2:1a:b4:74:bd:1c:c4:8c:fa:ca:ad:55:ec:4e: 74:41:e2:6b:83:62:a6:92:65:42:e3:92:ac:29:f7:94:4d:98: bc:c8:66:bd:4c:ae:85:b2:f3:55:28:16:96:76:ab:bc:f5:5e: bb:15:6f:a3:94:ce:6e:a4:30:57:96:72:b6:a6:20:8f:43:1d: 1d:cd:ec:50:ee:90:f2:0f:24:66:d5:2b:9a:b3:18:ef:6f:16: b8:c8:a2:8b:29:53:82:fd:17:8c:30:d6:46:4e:0f:e7:3d:e1: b9:92:42:b9:25:2e:1f:51:d3:f9:06:82:16:f2:33:d3:7a:bf: ba:74:4f:69:d9:2f:83:24:72:a8:9f:2c:c1:c7:01:c5:14:07: 4f:06:9a:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CqM4Lxp6QPtq+0Y7DMkiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YTc3MDc4YWYzODdiNDhkNzA4MTBlYjE2MDRkZjBhZGUx MThmZGEwHhcNMjUxMjA2MTkwMTQ2WhcNMjUxMjA3MTkwMTQ2WjAzMTEwLwYDVQQD EygwNTk3NTI2OTdjOWFmMzkxNDc3YjNiZjU2MTA2NGRlN2UxZmM5NmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosrgNJkLqxPMAQNSgD2ohxpzLIs0 9fSp5ICvHGUbLBeyArma0KcXunmpMlHwF2e/iOqaQOHBLnLTHxBbxLnG9TESfG3S zOcBPmCQdxMpFEo8c+j8btGt74IPX/lha/O2gvy44DKkEUmwXbt+A047VBqoMewW rI+iDYvDRpoDhiPa1j39WuhzuBBUU2SBB2On8b1Jv22W67ubb84GzIQq2iax5j1o +V0TBg6kQwrKQPUXvOyl4wA7nBu1hW0wpH2Udr6IKheqwzccS622wzlokPeri/9i 1QCuS3u9nVL1RcgHlp0udv0nm7Vcn4eehflkt6EKebGAhC759SGCVpR2XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWXUml8mvORR3s79WEGTefh/JbMMB8GA1UdIwQY MBaAFKencHivOHtI1wgQ6xYE3wreEY/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDZkd2VLODRlMGpYQ0JEckZnVGZDdDRSajlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wMjFmNmItNmZkMC00MzY1LTkyZjct NGRlNDdiODA0NDBhLzEvcDZkd2VLODRlMGpYQ0JEckZnVGZDdDRSajlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8wMjFmNmItNmZkMC00MzY1LTkyZjctNGRlNDdiODA0NDBh LzEvcDZkd2VLODRlMGpYQ0JEckZnVGZDdDRSajlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPrfgeBr 9I9QjcdqthCeamD7+/QGnDNlSjZACOauAnDllxH947gi3Z7VZ4qkcVinFhK/HQHZ x+AAZs/vozUXwpLobw1v0O1l7oE9GVD7mvYRYZAo9WiAkpokAdPBBeBkThVPOPEr k7osQnqgr4mVVaIatHS9HMSM+sqtVexOdEHia4NippJlQuOSrCn3lE2YvMhmvUyu hbLzVSgWlnarvPVeuxVvo5TObqQwV5ZytqYgj0MdHc3sUO6Q8g8kZtUrmrMY728W uMiiiylTgv0XjDDWRk4P5z3huZJCuSUuH1HT+QaCFvIz03q/unRPadkvgyRyqJ8s wccBxRQHTwaazw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:13 2025 by rpki-client