This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft File: t6XbvIM8xastSukpfi6rl18cGX0.mft (raw, json) Hash identifier: Qw5VUggxStuU7LZz5sMMFNZDezZSBzw/u6c1TzrLolQ= Subject key identifier: 5A:A7:82:B1:39:18:A6:F2:5B:9C:01:C0:2F:91:B0:37:72:61:ED:E3 Authority key identifier: B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D Certificate issuer: /CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d Certificate serial: 019AF1D17F5847AD0CB5ED44BCE0D7469687 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft Manifest number: 07F7 Signing time: Sat 06 Dec 2025 04:00:29 +0000 Manifest this update: Sat 06 Dec 2025 04:00:29 +0000 Manifest next update: Sun 07 Dec 2025 04:00:29 +0000 Files and hashes: 1: pKIlg5YmNEiNHDYBMKXqIV0XhFU.roa (hash: 516yZ2viMH4DtygFn77E9hucmTi9jK0KgNTpnz+3JZI=) 2: t6XbvIM8xastSukpfi6rl18cGX0.crl (hash: 5pGn56QN/4SCPmEDHhz+YmBj7qi0JPoZffthD2/tzg8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:7f:58:47:ad:0c:b5:ed:44:bc:e0:d7:46:96:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d Validity Not Before: Dec 6 04:00:29 2025 GMT Not After : Dec 7 04:00:29 2025 GMT Subject: CN=5aa782b13918a6f25b9c01c02f91b0377261ede3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4d:fb:f0:d3:c1:a6:4b:d9:03:5d:46:24:4d: 3e:01:f7:3e:93:53:4f:42:a0:25:41:c0:02:a9:18: 49:54:f4:b5:97:59:0e:65:6c:9d:db:4a:cd:dd:d6: 4b:95:1b:f7:e8:f9:7a:3f:33:ac:c2:86:bf:a3:e4: 47:16:1d:94:f7:0d:cc:6c:72:af:5e:9c:d6:12:31: 23:73:a3:fe:1d:6f:aa:fb:1a:d3:47:88:62:c6:31: ed:97:49:03:8b:d4:b9:a6:af:cb:d3:28:0b:20:12: fc:ac:74:13:22:fa:58:4a:a7:0d:fb:a3:33:0c:cb: 64:0c:bd:fa:ec:4d:8c:96:3e:19:a6:79:03:9d:a6: cb:0d:d2:6b:90:56:dc:ff:b2:e2:7b:c3:0a:7c:ba: e8:c9:3b:8b:f7:60:dc:33:5c:34:a9:27:1a:2f:62: b7:bc:76:87:99:77:1f:15:9b:d8:e6:1b:03:a8:5c: c4:31:a2:0d:76:1e:80:bd:6a:4a:18:f9:b7:a8:2c: 6f:98:60:81:90:d6:ea:39:49:fb:9e:5d:64:c5:ed: d3:87:4f:ce:d1:01:b4:23:90:ea:87:47:f3:31:4a: 9d:4e:69:d1:49:3c:9e:3a:0f:30:8d:85:82:73:38: e5:d1:f5:44:e7:19:62:4f:98:38:85:de:aa:5e:53: c9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A7:82:B1:39:18:A6:F2:5B:9C:01:C0:2F:91:B0:37:72:61:ED:E3 X509v3 Authority Key Identifier: keyid:B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:d0:47:64:47:bb:5b:dd:05:5f:69:bc:e6:79:d5:2a:89:76: 9f:7e:20:f0:71:93:01:2a:d0:b2:f0:3b:a1:14:d5:c9:11:47: b6:51:fa:3f:6a:d7:08:2c:c9:b7:d5:e6:0d:b3:69:c7:85:bb: 43:a4:62:ef:8e:96:98:d8:0f:5a:02:a4:cd:92:96:8f:e5:51: 3d:7e:c9:e7:6a:0c:63:48:8e:c9:08:8e:6c:b4:6d:aa:77:5f: a9:6b:26:06:6e:73:0b:08:fe:9a:fb:2f:6b:14:a2:6a:79:a0: 57:31:ea:69:cc:c2:e5:4d:50:af:8e:82:11:df:57:eb:c7:25: 24:ad:67:ea:a5:78:c0:a5:4e:6a:64:49:a7:80:1f:97:15:d7: 44:dc:8e:56:d3:4b:4c:4a:c8:aa:b2:0f:9b:47:ff:cb:49:67: 9d:a1:09:77:ab:1e:88:65:9b:f5:ec:e2:cb:24:7d:d3:da:48: a4:05:78:c2:f6:d5:c7:aa:ad:0b:7c:08:22:3f:db:a7:3f:6e: f3:b7:a5:20:ba:ea:b7:d6:1f:85:36:b8:c8:31:f3:f4:31:81: f5:84:18:96:71:d7:9f:fa:7c:f4:8d:72:f3:15:82:82:b4:0c: 19:b3:5f:4f:7d:9d:3f:5e:e8:55:b4:4c:6b:89:c2:c5:fd:5f: 0a:53:b0:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0X9YR60Mte1EvODXRpaHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YTVkYmJjODMzY2M1YWIyZDRhZTkyOTdlMmVhYjk3NWYx YzE5N2QwHhcNMjUxMjA2MDQwMDI5WhcNMjUxMjA3MDQwMDI5WjAzMTEwLwYDVQQD Eyg1YWE3ODJiMTM5MThhNmYyNWI5YzAxYzAyZjkxYjAzNzcyNjFlZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk378NPBpkvZA11GJE0+Afc+k1NP QqAlQcACqRhJVPS1l1kOZWyd20rN3dZLlRv36Pl6PzOswoa/o+RHFh2U9w3MbHKv XpzWEjEjc6P+HW+q+xrTR4hixjHtl0kDi9S5pq/L0ygLIBL8rHQTIvpYSqcN+6Mz DMtkDL367E2Mlj4ZpnkDnabLDdJrkFbc/7Lie8MKfLroyTuL92DcM1w0qScaL2K3 vHaHmXcfFZvY5hsDqFzEMaINdh6AvWpKGPm3qCxvmGCBkNbqOUn7nl1kxe3Th0/O 0QG0I5Dqh0fzMUqdTmnRSTyeOg8wjYWCczjl0fVE5xliT5g4hd6qXlPJTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqngrE5GKbyW5wBwC+RsDdyYe3jMB8GA1UdIwQY MBaAFLel27yDPMWrLUrpKX4uq5dfHBl9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZYYnZJTTh4YXN0U3VrcGZpNnJsMThjR1gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80MjlmZjktMDI2NS00NzZmLTkwMzUt NDE5MmEzNTdlYWI3LzEvdDZYYnZJTTh4YXN0U3VrcGZpNnJsMThjR1gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80MjlmZjktMDI2NS00NzZmLTkwMzUtNDE5MmEzNTdlYWI3 LzEvdDZYYnZJTTh4YXN0U3VrcGZpNnJsMThjR1gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9BHZEe7 W90FX2m85nnVKol2n34g8HGTASrQsvA7oRTVyRFHtlH6P2rXCCzJt9XmDbNpx4W7 Q6Ri746WmNgPWgKkzZKWj+VRPX7J52oMY0iOyQiObLRtqndfqWsmBm5zCwj+mvsv axSianmgVzHqaczC5U1Qr46CEd9X68clJK1n6qV4wKVOamRJp4AflxXXRNyOVtNL TErIqrIPm0f/y0lnnaEJd6seiGWb9eziyyR909pIpAV4wvbVx6qtC3wIIj/bpz9u 87elILrqt9YfhTa4yDHz9DGB9YQYlnHXn/p89I1y8xWCgrQMGbNfT32dP17oVbRM a4nCxf1fClOweQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:14 2025 by rpki-client