This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft File: s6RxSmlcY88unErephcYJ9hm4pg.mft (raw, json) Hash identifier: 1emfCXCs32giMRoy9jnCRjTCVS/DWzmobEivkq5tCEE= Subject key identifier: 71:5A:02:31:F7:EC:0D:7A:35:B1:09:AF:C1:F9:37:12:BA:12:3D:27 Authority key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98 Certificate issuer: /CN=b3a4714a695c63cf2e9c4adea6171827d866e298 Certificate serial: 019AF276FFD1E0FA4D12267D64633EAB93B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft Manifest number: 14CD Signing time: Sat 06 Dec 2025 07:01:16 +0000 Manifest this update: Sat 06 Dec 2025 07:01:16 +0000 Manifest next update: Sun 07 Dec 2025 07:01:16 +0000 Files and hashes: 1: UIgf9ajrQrDmAPpLPV90kRuj32I.roa (hash: AlX36a6BnwjhKrdVjNHSqwcRq3yixFLnOubI+UNJ9cQ=) 2: cBeaN8r92MWoqfdvhQH_ewA_rkk.roa (hash: yNYMjmHLoWXkkp0dQFYuWRyyRjSNzH1ulJxUwxp290s=) 3: s6RxSmlcY88unErephcYJ9hm4pg.crl (hash: XL0Lo36CEWVpu8PQldPEIqV113QCTpWVirs0s/BSVCc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ff:d1:e0:fa:4d:12:26:7d:64:63:3e:ab:93:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a4714a695c63cf2e9c4adea6171827d866e298 Validity Not Before: Dec 6 07:01:16 2025 GMT Not After : Dec 7 07:01:16 2025 GMT Subject: CN=715a0231f7ec0d7a35b109afc1f93712ba123d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fd:92:b1:5b:a0:63:2d:4e:56:9e:f9:5e:cc: 70:96:05:28:e3:4e:2e:66:7a:3b:58:67:2a:6c:24: 0e:b6:32:53:e5:cf:b6:b5:88:67:6b:d7:c9:69:ba: e9:91:af:af:46:19:1b:cf:ae:df:81:8f:37:4f:95: 42:5f:99:c8:36:fb:0e:33:1a:8d:26:39:a3:9b:6e: b4:4e:47:e9:dc:39:fb:b6:10:bb:98:b8:ce:f3:4f: f1:a0:ad:2f:5e:d6:24:70:32:90:d3:61:4e:17:61: 5a:48:70:ca:e9:26:12:2d:fe:6b:97:61:42:2a:e0: 2b:b0:55:31:ae:75:af:dd:58:65:cb:ff:35:4d:7d: 72:a4:73:ea:e9:fb:d3:2e:34:ae:b5:33:b1:5a:5c: 1c:2a:71:db:91:b8:81:23:c7:6f:7d:65:c6:35:90: 63:5c:ee:a4:ab:ce:50:35:fe:5b:6e:44:4e:86:85: 62:de:cb:05:5d:9f:41:0c:d4:d7:54:5b:92:a8:1a: 2d:14:3e:02:d0:65:29:10:27:0f:2a:5d:23:de:a4: 30:e1:d3:c5:47:43:a0:92:82:5a:ff:b4:55:2e:08: ad:7d:c0:d2:ee:ec:35:1f:5e:9b:e5:5b:76:a0:bd: e7:7d:40:da:6c:8b:06:7d:33:03:45:a3:dd:f1:e2: 2d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5A:02:31:F7:EC:0D:7A:35:B1:09:AF:C1:F9:37:12:BA:12:3D:27 X509v3 Authority Key Identifier: keyid:B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:1f:3c:a3:b7:e0:ae:49:28:5d:af:6b:b9:03:61:7a:5a:4b: 59:24:9c:de:2c:c6:b2:f3:93:bb:e6:4c:04:bf:1c:13:dd:10: 3a:c8:24:dd:d4:aa:57:0e:c5:f6:96:ae:85:fb:fb:4f:16:9b: 98:28:11:9d:60:ce:8c:50:af:d8:fa:d5:17:cb:1f:29:c2:95: 48:e4:47:51:88:31:11:09:d5:a9:ab:1d:dd:ea:7f:35:d4:1b: 7c:bd:d3:54:4b:4b:8a:a7:93:6a:4a:16:dd:13:46:5f:56:a4: 1d:45:f0:de:57:41:5d:2d:52:73:34:58:6d:f6:60:45:bb:c7: a1:6c:e2:ad:65:62:15:63:0c:21:14:49:d2:3d:64:de:a1:06: 93:07:cf:e3:ae:0a:c0:5f:85:ce:6d:2f:b3:f6:46:c7:2f:0a: dc:ff:90:db:2b:a5:37:3b:04:fe:9b:df:53:83:f4:1f:fc:0a: 5d:81:c8:3c:75:45:55:c5:fd:ab:bc:09:8f:67:49:2e:3e:36: 9e:a8:fa:bb:17:ad:34:50:9c:42:c0:95:c9:73:61:9c:7c:0c: 16:80:cf:4a:ee:10:a0:be:7c:e2:70:a0:a2:9c:7b:f6:2a:f3: 6b:2f:28:c5:4d:a2:6e:f9:0f:77:9d:d5:52:a7:f3:62:30:81: df:ea:77:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydv/R4PpNEiZ9ZGM+q5O3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTQ3MTRhNjk1YzYzY2YyZTljNGFkZWE2MTcxODI3ZDg2 NmUyOTgwHhcNMjUxMjA2MDcwMTE2WhcNMjUxMjA3MDcwMTE2WjAzMTEwLwYDVQQD Eyg3MTVhMDIzMWY3ZWMwZDdhMzViMTA5YWZjMWY5MzcxMmJhMTIzZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/2SsVugYy1OVp75XsxwlgUo404u Zno7WGcqbCQOtjJT5c+2tYhna9fJabrpka+vRhkbz67fgY83T5VCX5nINvsOMxqN Jjmjm260Tkfp3Dn7thC7mLjO80/xoK0vXtYkcDKQ02FOF2FaSHDK6SYSLf5rl2FC KuArsFUxrnWv3Vhly/81TX1ypHPq6fvTLjSutTOxWlwcKnHbkbiBI8dvfWXGNZBj XO6kq85QNf5bbkROhoVi3ssFXZ9BDNTXVFuSqBotFD4C0GUpECcPKl0j3qQw4dPF R0OgkoJa/7RVLgitfcDS7uw1H16b5Vt2oL3nfUDabIsGfTMDRaPd8eItJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFaAjH37A16NbEJr8H5NxK6Ej0nMB8GA1UdIwQY MBaAFLOkcUppXGPPLpxK3qYXGCfYZuKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZSeFNtbGNZODh1bkVyZXBoY1lKOWhtNHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85YTcyZTAtZmI5Yy00ZTcyLWFmMzQt ZGM0OGNlY2QxNTQ1LzEvczZSeFNtbGNZODh1bkVyZXBoY1lKOWhtNHBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85YTcyZTAtZmI5Yy00ZTcyLWFmMzQtZGM0OGNlY2QxNTQ1 LzEvczZSeFNtbGNZODh1bkVyZXBoY1lKOWhtNHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKh88o7fg rkkoXa9ruQNhelpLWSSc3izGsvOTu+ZMBL8cE90QOsgk3dSqVw7F9pauhfv7Txab mCgRnWDOjFCv2PrVF8sfKcKVSORHUYgxEQnVqasd3ep/NdQbfL3TVEtLiqeTakoW 3RNGX1akHUXw3ldBXS1SczRYbfZgRbvHoWzirWViFWMMIRRJ0j1k3qEGkwfP464K wF+Fzm0vs/ZGxy8K3P+Q2yulNzsE/pvfU4P0H/wKXYHIPHVFVcX9q7wJj2dJLj42 nqj6uxetNFCcQsCVyXNhnHwMFoDPSu4QoL584nCgopx79irzay8oxU2ibvkPd53V UqfzYjCB3+p3TQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:49 2025 by rpki-client