This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft File: s6dYkEx1hW41haRDOuXsV_7xo8c.mft (raw, json) Hash identifier: fjf9CKX5REGQRKQ54BgsznNc4/vRERGa1MNwMO/k18Q= Subject key identifier: B2:DC:25:E9:E0:DA:BC:1D:F1:EA:49:39:F3:96:43:CA:D0:B6:33:66 Authority key identifier: B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7 Certificate issuer: /CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7 Certificate serial: 019AF16461C0E3F4E0C3359D854ABEED73D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:01:18 +0000 Manifest this update: Sat 06 Dec 2025 02:01:18 +0000 Manifest next update: Sun 07 Dec 2025 02:01:18 +0000 Files and hashes: 1: mD7Z7YeNOfK8jp-WeYlQt4uS5Qk.roa (hash: foJEvw+8/1mri1uVePD4Fo8lgGoj9wOcsREdvsruLoI=) 2: s6dYkEx1hW41haRDOuXsV_7xo8c.crl (hash: mT9uxThDltYp14n4q1N82rld39QMkYXfOIt9HqHACpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:61:c0:e3:f4:e0:c3:35:9d:85:4a:be:ed:73:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7 Validity Not Before: Dec 6 02:01:18 2025 GMT Not After : Dec 7 02:01:18 2025 GMT Subject: CN=b2dc25e9e0dabc1df1ea4939f39643cad0b63366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:84:2e:1f:c3:ca:fd:9a:44:0f:5a:68:4e:03: 76:c3:ef:0f:44:11:7d:41:a2:53:bf:23:91:50:b4: ec:d5:6e:14:69:21:7b:1e:6c:ed:c3:05:f8:02:d0: db:96:e7:dc:ab:4d:07:7f:ef:3b:8c:0a:59:c3:76: 5a:de:d9:3c:e2:41:f3:ff:4d:bd:da:16:e7:93:18: cb:77:2a:24:c6:d4:3e:ea:6f:1f:60:96:db:a2:5a: 08:60:a6:8b:65:7c:3f:ac:61:0c:18:05:64:4d:09: 14:49:16:70:ab:5f:e1:4e:f8:52:84:24:4e:ac:7f: a8:1d:fd:c0:1b:eb:ea:1d:c5:ed:2d:b4:74:d6:f7: e6:e8:58:60:ba:8b:26:c0:51:67:17:b4:d4:94:a6: fc:7d:20:80:1e:16:07:b0:a3:52:e1:f8:5c:b8:e8: 28:83:ca:0d:79:31:ff:8c:11:a4:bb:ac:77:e5:37: 71:55:8b:fa:1c:cb:19:d6:73:3c:5b:25:ae:07:d5: c0:19:64:c5:f7:6e:e8:59:bf:c5:ce:4c:73:5f:f5: 87:d5:43:7e:f6:75:67:59:6b:5f:4a:cd:f2:e8:e0: 6d:d6:07:b8:b7:3d:b4:59:9e:de:44:45:89:14:03: c2:9d:f8:cc:16:9a:37:3b:28:62:9f:89:58:ec:b6: 32:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DC:25:E9:E0:DA:BC:1D:F1:EA:49:39:F3:96:43:CA:D0:B6:33:66 X509v3 Authority Key Identifier: keyid:B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:3d:1d:53:44:8b:ee:54:86:f4:ce:c2:d3:87:bf:a2:f5:e6: 73:42:6d:75:c0:cc:fc:a5:51:f1:ea:fc:35:70:25:b8:7d:e4: 14:a4:29:d0:d7:25:71:ad:7f:22:d4:19:a4:04:5a:ce:43:39: 08:6d:01:32:e5:1d:b5:76:56:bc:94:5a:62:24:b5:1d:2d:0b: 02:53:aa:e8:6c:5c:51:51:41:37:88:a5:82:a6:09:52:65:04: 35:2e:9c:19:1c:66:f6:b4:23:01:ac:5b:e1:13:92:a6:08:6d: f3:fe:cc:ee:5d:b0:20:bc:df:bc:e9:27:2d:fe:72:5c:24:29: f7:e3:cc:55:c8:fe:52:1c:bc:65:7e:1b:94:d3:52:67:f6:e5: b3:e3:3d:97:da:8a:68:e4:17:13:b7:db:93:b6:32:94:f0:54: e7:54:d4:2d:e2:b8:91:45:67:de:21:e3:7d:ee:c4:53:12:08: 57:59:7f:6e:26:75:37:cf:c4:12:f3:0f:c7:d7:52:bd:0b:27: 65:9c:22:a9:88:75:23:2c:8d:36:ea:af:d5:71:db:4d:bd:3c: 88:18:0c:9a:23:d3:bc:9c:e1:4a:bb:92:a9:e6:3d:03:d3:ee: 55:e0:4a:9e:cd:ad:f5:53:71:89:ae:50:6c:f7:63:39:ff:a5: cc:c5:d2:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGHA4/TgwzWdhUq+7XPSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTc1ODkwNGM3NTg1NmUzNTg1YTQ0MzNhZTVlYzU3ZmVm MWEzYzcwHhcNMjUxMjA2MDIwMTE4WhcNMjUxMjA3MDIwMTE4WjAzMTEwLwYDVQQD EyhiMmRjMjVlOWUwZGFiYzFkZjFlYTQ5MzlmMzk2NDNjYWQwYjYzMzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIQuH8PK/ZpED1poTgN2w+8PRBF9 QaJTvyORULTs1W4UaSF7HmztwwX4AtDblufcq00Hf+87jApZw3Za3tk84kHz/029 2hbnkxjLdyokxtQ+6m8fYJbboloIYKaLZXw/rGEMGAVkTQkUSRZwq1/hTvhShCRO rH+oHf3AG+vqHcXtLbR01vfm6FhguosmwFFnF7TUlKb8fSCAHhYHsKNS4fhcuOgo g8oNeTH/jBGku6x35TdxVYv6HMsZ1nM8WyWuB9XAGWTF927oWb/FzkxzX/WH1UN+ 9nVnWWtfSs3y6OBt1ge4tz20WZ7eREWJFAPCnfjMFpo3Oyhin4lY7LYygwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLcJeng2rwd8epJOfOWQ8rQtjNmMB8GA1UdIwQY MBaAFLOnWJBMdYVuNYWkQzrl7Ff+8aPHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZkWWtFeDFoVzQxaGFSRE91WHNWXzd4bzhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xNDljMDEtODQwZC00NWY2LTgyM2Yt ZTJmMGUxYzI2MTA1LzEvczZkWWtFeDFoVzQxaGFSRE91WHNWXzd4bzhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8xNDljMDEtODQwZC00NWY2LTgyM2YtZTJmMGUxYzI2MTA1 LzEvczZkWWtFeDFoVzQxaGFSRE91WHNWXzd4bzhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoj0dU0SL 7lSG9M7C04e/ovXmc0JtdcDM/KVR8er8NXAluH3kFKQp0Nclca1/ItQZpARazkM5 CG0BMuUdtXZWvJRaYiS1HS0LAlOq6GxcUVFBN4ilgqYJUmUENS6cGRxm9rQjAaxb 4ROSpght8/7M7l2wILzfvOknLf5yXCQp9+PMVcj+Uhy8ZX4blNNSZ/bls+M9l9qK aOQXE7fbk7YylPBU51TULeK4kUVn3iHjfe7EUxIIV1l/biZ1N8/EEvMPx9dSvQsn ZZwiqYh1IyyNNuqv1XHbTb08iBgMmiPTvJzhSruSqeY9A9PuVeBKns2t9VNxia5Q bPdjOf+lzMXSkA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:59 2025 by rpki-client