This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft File: EN06cveQsl7j0imsmfaacb8dgpQ.mft (raw, json) Hash identifier: ZppiJY32UeuWcE0XgYSvGVZq9k/FbdkNntl4YhttGEQ= Subject key identifier: F4:0A:7A:69:7A:78:6D:8D:58:AD:C3:34:BB:56:EC:E3:C4:4C:6A:97 Authority key identifier: 10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94 Certificate issuer: /CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294 Certificate serial: 019AF088A03DA7F1570253643463C8E0CBD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 22:01:16 +0000 Manifest this update: Fri 05 Dec 2025 22:01:16 +0000 Manifest next update: Sat 06 Dec 2025 22:01:16 +0000 Files and hashes: 1: EN06cveQsl7j0imsmfaacb8dgpQ.crl (hash: cEa8yUpvGllNnvkZg4bDwJcHwlKlu7YUvaF9tRsyVho=) 2: c5PalyNSyST_aAI1KT3QGDFOwJs.roa (hash: mO2ZdsVC3fTegCqI2v7PXch94it/WJD1mL1+9bQtLsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:a0:3d:a7:f1:57:02:53:64:34:63:c8:e0:cb:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294 Validity Not Before: Dec 5 22:01:16 2025 GMT Not After : Dec 6 22:01:16 2025 GMT Subject: CN=f40a7a697a786d8d58adc334bb56ece3c44c6a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fb:42:f1:7d:e3:1a:70:00:54:27:2f:96:d5: fe:e4:9f:84:30:56:f0:55:66:b2:da:db:e6:81:d5: 06:7b:99:41:60:90:11:f6:a7:b7:db:20:42:c8:35: 44:ac:75:81:64:25:0b:b0:5d:f6:d6:46:db:35:42: a4:0d:57:95:50:00:8c:9c:ce:6d:58:05:a7:31:2f: f6:9f:17:cd:12:50:a6:a9:e4:9a:af:59:f0:73:70: 29:94:95:56:38:9f:87:29:c1:97:2a:16:ff:75:a5: bb:1a:12:4e:70:1d:02:b7:0a:ca:b1:f9:1a:c0:f4: b2:65:6e:bc:85:53:00:53:b1:5b:30:da:ff:2f:1d: d4:01:c6:a4:0e:12:7a:93:f8:4a:a7:14:2b:db:ee: 01:c5:1d:2d:34:34:96:a0:a9:f3:a6:c5:05:22:c0: cc:a9:c7:af:7e:13:b4:4c:45:8b:49:30:87:8c:6d: b5:d7:17:5d:aa:ac:f9:46:d0:aa:80:53:99:db:1d: 9f:66:fd:40:04:00:a1:17:b7:65:9a:ba:64:47:50: 7e:fa:d2:a0:3e:ec:4d:20:66:f1:20:be:a2:e7:be: 53:82:ad:a9:e7:ec:34:a1:b3:bc:98:9f:16:5c:3f: 14:82:d6:03:3c:8d:ba:1e:09:cc:fe:9f:11:ea:58: 91:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0A:7A:69:7A:78:6D:8D:58:AD:C3:34:BB:56:EC:E3:C4:4C:6A:97 X509v3 Authority Key Identifier: keyid:10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a7:68:9e:5b:dd:00:d3:90:38:bd:2d:63:be:64:e2:22:8d: de:07:93:01:32:d1:42:98:d7:54:2a:b4:3c:d8:8d:7c:08:63: 02:4e:3d:d9:13:89:71:59:7d:c3:19:95:fc:1d:3d:84:ae:f9: 93:33:3c:20:ba:f5:88:7f:db:d4:2d:3f:ee:3e:72:86:7c:14: b4:c4:df:60:cf:47:f6:49:42:24:56:a3:4f:9c:91:91:ee:6a: ab:3e:9a:b5:98:75:35:e0:ea:c2:79:be:36:d6:fb:7f:4c:90: fb:aa:35:44:6f:94:e1:0c:18:4c:61:5c:8a:dd:e9:ce:51:13: 4e:b4:9c:2c:e2:69:54:85:d5:4b:0e:2d:0b:5c:05:df:42:29: 0b:69:04:f8:07:c3:3f:42:8d:cd:3c:f0:e9:b4:7e:8d:ff:c6: 50:da:15:da:09:78:13:6f:90:b3:b1:cb:b0:f4:58:f0:13:f9: 1b:c0:6b:b2:db:9f:21:76:86:15:a4:e1:aa:88:0e:80:cb:51: 02:48:de:c4:95:7a:f3:f1:e6:9e:6f:8d:1d:a2:dc:5f:76:df: ab:03:96:da:07:b1:39:59:b6:30:81:21:b1:e8:db:0c:56:8e: 5d:0b:5a:2c:25:60:b5:dd:dc:72:aa:bf:f0:a6:c1:fd:35:3d: 96:c8:bd:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiKA9p/FXAlNkNGPI4MvTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZGQzYTcyZjc5MGIyNWVlM2QyMjlhYzk5ZjY5YTcxYmYx ZDgyOTQwHhcNMjUxMjA1MjIwMTE2WhcNMjUxMjA2MjIwMTE2WjAzMTEwLwYDVQQD EyhmNDBhN2E2OTdhNzg2ZDhkNThhZGMzMzRiYjU2ZWNlM2M0NGM2YTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/tC8X3jGnAAVCcvltX+5J+EMFbw VWay2tvmgdUGe5lBYJAR9qe32yBCyDVErHWBZCULsF321kbbNUKkDVeVUACMnM5t WAWnMS/2nxfNElCmqeSar1nwc3AplJVWOJ+HKcGXKhb/daW7GhJOcB0CtwrKsfka wPSyZW68hVMAU7FbMNr/Lx3UAcakDhJ6k/hKpxQr2+4BxR0tNDSWoKnzpsUFIsDM qcevfhO0TEWLSTCHjG211xddqqz5RtCqgFOZ2x2fZv1ABAChF7dlmrpkR1B++tKg PuxNIGbxIL6i575Tgq2p5+w0obO8mJ8WXD8UgtYDPI26HgnM/p8R6liRfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQKeml6eG2NWK3DNLtW7OPETGqXMB8GA1UdIwQY MBaAFBDdOnL3kLJe49IprJn2mnG/HYKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU4wNmN2ZVFzbDdqMGltc21mYWFjYjhkZ3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iNTRmMmEtZDg5OC00ZDAzLWI3ODkt OWNiMjYxZTY2NzYyLzEvRU4wNmN2ZVFzbDdqMGltc21mYWFjYjhkZ3BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iNTRmMmEtZDg5OC00ZDAzLWI3ODktOWNiMjYxZTY2NzYy LzEvRU4wNmN2ZVFzbDdqMGltc21mYWFjYjhkZ3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKdonlvd ANOQOL0tY75k4iKN3geTATLRQpjXVCq0PNiNfAhjAk492ROJcVl9wxmV/B09hK75 kzM8ILr1iH/b1C0/7j5yhnwUtMTfYM9H9klCJFajT5yRke5qqz6atZh1NeDqwnm+ Ntb7f0yQ+6o1RG+U4QwYTGFcit3pzlETTrScLOJpVIXVSw4tC1wF30IpC2kE+AfD P0KNzTzw6bR+jf/GUNoV2gl4E2+Qs7HLsPRY8BP5G8BrstufIXaGFaThqogOgMtR AkjexJV68/Hmnm+NHaLcX3bfqwOW2gexOVm2MIEhsejbDFaOXQtaLCVgtd3ccqq/ 8KbB/TU9lsi9Ew== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:23 2025 by rpki-client