This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft File: x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json) Hash identifier: DrQPk8UxFvu1pHfUJgp+luMTVXMydfbP7mXkisGeFUo= Subject key identifier: 75:69:6E:56:01:C3:C3:9C:D0:94:02:AF:C9:42:51:4C:DC:44:15:A2 Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc Certificate serial: 019B35327AB6459D6FCD8A2F6EBDA509E4B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft Manifest number: 14C7 Signing time: Fri 19 Dec 2025 06:00:59 +0000 Manifest this update: Fri 19 Dec 2025 06:00:59 +0000 Manifest next update: Sat 20 Dec 2025 06:00:59 +0000 Files and hashes: 1: 1-nvEOeF_8-seqo32QYrx6ZTVBbQ.roa (hash: wVf2ruzd40pFbTR8RI0Ob3qelEQ26yizyOMJb6WWHNQ=) 2: G0WvFuc_CxaN6eARB2yClzaX2KQ.roa (hash: OXBzj+MAAD5v1p61n5nSRmMEjnNH86aTtUDpVIx76+o=) 3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: IX5jmrB19xzjuyRjU6s/LSfMkVBer2bnCZAWdUJ1Hzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:7a:b6:45:9d:6f:cd:8a:2f:6e:bd:a5:09:e4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc Validity Not Before: Dec 19 06:00:59 2025 GMT Not After : Dec 20 06:00:59 2025 GMT Subject: CN=75696e5601c3c39cd09402afc942514cdc4415a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b1:c3:d0:6e:68:3b:bd:bb:97:49:eb:a6:b7: e6:d6:54:62:65:f8:b8:8a:5f:3c:96:d5:e9:83:c9: fe:16:d6:b5:a4:92:e0:e6:5e:b6:1e:c6:3c:c7:ac: 19:09:56:ca:02:7d:4e:d0:08:4a:21:b0:d5:a0:f7: 02:5e:b5:8f:21:e8:75:c1:71:9d:3a:be:11:33:79: 05:99:b2:ad:fa:b6:65:f9:03:bb:db:b2:0f:2d:bc: 3e:b2:82:1b:5b:c6:da:a7:d6:7f:01:3f:0b:53:a9: 04:e8:90:21:f7:5b:4a:43:5c:be:78:40:75:28:4e: 77:8a:9c:df:a1:db:c5:0b:b6:28:96:ac:bc:5f:54: 1a:b1:2a:a3:b2:61:73:10:f2:44:e2:58:dc:84:79: 7f:1e:c6:11:d6:a0:31:26:a8:48:51:71:bc:21:c3: 24:43:aa:01:e6:00:4c:d9:ac:81:12:0c:6e:c2:45: 3f:c5:b1:d5:66:5c:b6:22:b6:56:be:36:9e:ed:0d: da:29:8b:0c:cb:fd:8a:b4:91:1a:c9:91:fe:b1:f3: 0d:8e:e7:06:b3:0d:95:67:e1:2d:ae:78:2d:7f:2e: d7:51:49:84:25:6f:c1:0b:ff:27:14:ff:b4:e9:93: 3d:ad:f8:79:5b:f4:cc:52:57:54:db:c6:f2:97:ec: 7e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:69:6E:56:01:C3:C3:9C:D0:94:02:AF:C9:42:51:4C:DC:44:15:A2 X509v3 Authority Key Identifier: keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ca:f0:e6:b3:18:9b:c1:92:3c:86:e4:19:4c:03:19:54:c4: d7:d2:d6:1b:7b:22:04:28:12:fa:a2:52:52:4a:2c:f7:c3:ba: ff:83:b8:73:d8:56:24:55:e8:dc:59:dc:41:47:af:af:6b:b8: 03:69:54:f9:3f:63:3b:f9:59:5d:ee:14:8b:bf:f4:ef:4e:9b: 38:af:ea:19:56:43:28:a5:23:5c:1d:95:a1:54:9f:13:cf:9a: 42:67:f0:ec:1c:2f:ec:4a:d1:bd:31:54:60:86:1e:be:e8:54: 41:34:26:83:7a:72:20:35:66:06:0d:7e:4c:ed:44:cd:fe:0e: c0:6b:de:47:c3:0b:8f:2f:d7:ef:4d:11:6a:b2:70:e1:87:3d: e1:51:e7:eb:70:0b:fa:3b:59:2f:96:e4:99:e4:c6:97:7d:5f: 88:01:2b:5f:49:ab:45:56:59:b1:c5:39:6e:21:57:43:3f:f7: ae:71:64:65:cb:3e:2b:0b:70:0a:c6:29:0f:3b:c2:52:ca:37: 4f:81:c7:78:47:16:f2:6f:1b:83:78:08:71:4c:ca:90:cc:b4: d5:b4:aa:2c:52:5a:de:84:32:39:04:c4:5b:8a:50:dd:4b:a8: 16:94:91:a2:60:7f:c5:c6:ab:db:72:21:2e:a0:a2:2e:aa:aa: 85:53:fd:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mnq2RZ1vzYovbr2lCeS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YWI2YjIyNTRlNDU3MzBhYWZhNDVhYjUxOTczMjAzNjE0 YmI2Y2MwHhcNMjUxMjE5MDYwMDU5WhcNMjUxMjIwMDYwMDU5WjAzMTEwLwYDVQQD Eyg3NTY5NmU1NjAxYzNjMzljZDA5NDAyYWZjOTQyNTE0Y2RjNDQxNWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrHD0G5oO727l0nrprfm1lRiZfi4 il88ltXpg8n+Fta1pJLg5l62HsY8x6wZCVbKAn1O0AhKIbDVoPcCXrWPIeh1wXGd Or4RM3kFmbKt+rZl+QO727IPLbw+soIbW8bap9Z/AT8LU6kE6JAh91tKQ1y+eEB1 KE53ipzfodvFC7Yolqy8X1QasSqjsmFzEPJE4ljchHl/HsYR1qAxJqhIUXG8IcMk Q6oB5gBM2ayBEgxuwkU/xbHVZly2IrZWvjae7Q3aKYsMy/2KtJEayZH+sfMNjucG sw2VZ+Etrngtfy7XUUmEJW/BC/8nFP+06ZM9rfh5W/TMUldU28byl+x+cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVpblYBw8Oc0JQCr8lCUUzcRBWiMB8GA1UdIwQY MBaAFMerayJU5FcwqvpFq1GXMgNhS7bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zM2I2OWQtZjRjYS00M2FhLTk3ODAt MWQ1NWQ1OTI5Y2VjLzEveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8zM2I2OWQtZjRjYS00M2FhLTk3ODAtMWQ1NWQ1OTI5Y2Vj LzEveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcrw5rMY m8GSPIbkGUwDGVTE19LWG3siBCgS+qJSUkos98O6/4O4c9hWJFXo3FncQUevr2u4 A2lU+T9jO/lZXe4Ui7/0706bOK/qGVZDKKUjXB2VoVSfE8+aQmfw7Bwv7ErRvTFU YIYevuhUQTQmg3pyIDVmBg1+TO1Ezf4OwGveR8MLjy/X700RarJw4Yc94VHn63AL +jtZL5bkmeTGl31fiAErX0mrRVZZscU5biFXQz/3rnFkZcs+KwtwCsYpDzvCUso3 T4HHeEcW8m8bg3gIcUzKkMy01bSqLFJa3oQyOQTEW4pQ3UuoFpSRomB/xcar23Ih LqCiLqqqhVP9Qg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:35:25 2025 by rpki-client