This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft File: 10L6T7KPryihjordTBDJYzfDxMU.mft (raw, json) Hash identifier: Z6RQFcpUJQr9HgpaJiwuy93xFyUzUQuVrC3+poKWb5U= Subject key identifier: 00:E5:8A:82:96:E2:8A:E2:38:FD:48:E3:20:FC:24:68:A2:5B:EB:DD Authority key identifier: D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5 Certificate issuer: /CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5 Certificate serial: 019AF31D5606061D400EF46925976C20F869 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 10:02:57 +0000 Manifest this update: Sat 06 Dec 2025 10:02:57 +0000 Manifest next update: Sun 07 Dec 2025 10:02:57 +0000 Files and hashes: 1: 10L6T7KPryihjordTBDJYzfDxMU.crl (hash: YwjypX4xIZZzersZdzisR39f58CkRcVTjPRY/1AvdpY=) 2: DIiJmhkGPOYoFSzKU5OJGHxPZv0.roa (hash: wVFQMX+v03An5N7stfoX0LOfftlraoV2nDd1HWqmadg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:56:06:06:1d:40:0e:f4:69:25:97:6c:20:f8:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5 Validity Not Before: Dec 6 10:02:57 2025 GMT Not After : Dec 7 10:02:57 2025 GMT Subject: CN=00e58a8296e28ae238fd48e320fc2468a25bebdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:08:ba:3d:fe:bd:70:63:c6:37:f2:95:9e:9d: 02:6b:5a:7b:da:4c:bf:92:80:32:ac:d4:b6:51:e6: fe:28:51:0c:9e:a3:46:97:84:43:05:84:a8:68:1a: b7:cb:15:7e:b6:cc:a9:4b:7d:2e:2d:cc:e8:2d:79: 5c:d0:94:1e:47:00:92:6c:0e:d2:ac:ff:3d:24:f8: c9:e8:c2:56:08:e3:e1:a0:a8:4e:f6:74:3a:6d:56: 99:7a:71:c2:20:e6:11:3c:f6:49:fb:95:5a:7c:7d: 38:3a:38:08:d4:78:63:69:1b:ff:3f:4c:ad:97:58: 8c:51:84:e8:e3:2e:9c:81:f4:6b:78:b3:ec:f9:11: a9:a4:44:51:3a:03:94:51:b3:12:dc:99:db:07:23: e1:0e:68:bc:08:82:9f:d9:d7:e3:27:40:a7:3e:11: 98:e4:c9:30:fa:75:3b:72:1d:23:1a:7a:cd:19:84: a0:1b:71:49:01:9e:a7:03:d3:78:16:31:5c:89:bf: f9:10:47:0f:75:46:fb:81:b3:4f:f4:29:cd:f8:7b: 47:80:2c:d9:fd:63:bf:6c:2c:a4:93:be:0e:c7:6e: b4:1c:39:ef:cc:b5:25:55:61:c4:e9:31:12:ac:32: 4a:9d:a8:6c:68:42:af:d2:4f:fb:32:40:7c:c1:27: a8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E5:8A:82:96:E2:8A:E2:38:FD:48:E3:20:FC:24:68:A2:5B:EB:DD X509v3 Authority Key Identifier: keyid:D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:2a:e0:e5:c1:d0:85:56:8a:aa:c1:d4:1a:a3:34:2f:9f:a1: 24:b6:fb:35:9f:46:68:04:27:46:f1:2f:13:20:27:7f:9c:1d: ae:95:78:21:11:06:64:ee:2d:8e:15:25:2b:11:f9:44:7b:35: 03:2d:64:c0:e4:6f:ce:41:59:34:18:f3:09:2c:15:35:e9:cf: 54:64:47:da:e4:68:21:00:a3:f5:40:7d:19:25:84:a2:cf:86: a9:3a:5d:a8:1f:a6:85:c9:88:41:40:ab:d0:c9:6d:e9:1e:af: 04:dc:82:0e:93:b7:c9:c8:1e:fa:50:f1:a8:45:cd:05:63:e9: 0a:8e:54:35:ca:2f:06:03:b3:f9:da:c6:6b:9a:76:3a:49:75: 09:4f:6b:1a:6c:3c:5e:9f:90:e4:95:3e:21:8f:a2:f3:04:b3: 17:65:c0:e9:aa:71:b3:85:d9:af:49:26:09:6c:ad:4b:f2:dd: 3c:d0:fc:0b:0a:40:22:2c:8c:66:b4:7b:a3:65:9d:1c:34:36: 65:ae:83:c8:3d:00:b8:0b:f5:d6:22:0b:0c:c0:18:cb:c2:1d: 29:49:ae:07:77:86:df:2a:52:b4:5c:8b:b1:da:54:1d:4a:40: 8b:a3:44:58:99:dc:83:a7:63:22:7e:df:6b:97:5e:05:ba:93: c9:dc:06:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHVYGBh1ADvRpJZdsIPhpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDJmYTRmYjI4ZmFmMjhhMThlOGFkZDRjMTBjOTYzMzdj M2M0YzUwHhcNMjUxMjA2MTAwMjU3WhcNMjUxMjA3MTAwMjU3WjAzMTEwLwYDVQQD EygwMGU1OGE4Mjk2ZTI4YWUyMzhmZDQ4ZTMyMGZjMjQ2OGEyNWJlYmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Qi6Pf69cGPGN/KVnp0Ca1p72ky/ koAyrNS2Ueb+KFEMnqNGl4RDBYSoaBq3yxV+tsypS30uLczoLXlc0JQeRwCSbA7S rP89JPjJ6MJWCOPhoKhO9nQ6bVaZenHCIOYRPPZJ+5VafH04OjgI1HhjaRv/P0yt l1iMUYTo4y6cgfRreLPs+RGppERROgOUUbMS3JnbByPhDmi8CIKf2dfjJ0CnPhGY 5Mkw+nU7ch0jGnrNGYSgG3FJAZ6nA9N4FjFcib/5EEcPdUb7gbNP9CnN+HtHgCzZ /WO/bCykk74Ox260HDnvzLUlVWHE6TESrDJKnahsaEKv0k/7MkB8wSeopwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADlioKW4oriOP1I4yD8JGiiW+vdMB8GA1UdIwQY MBaAFNdC+k+yj68ooY6K3UwQyWM3w8TFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBMNlQ3S1ByeWloam9yZFRCREpZemZEeE1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83MDNiZDYtMWIyZi00MDgzLWIxZTct N2E1ZjYwMTg5YzUxLzEvMTBMNlQ3S1ByeWloam9yZFRCREpZemZEeE1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83MDNiZDYtMWIyZi00MDgzLWIxZTctN2E1ZjYwMTg5YzUx LzEvMTBMNlQ3S1ByeWloam9yZFRCREpZemZEeE1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQirg5cHQ hVaKqsHUGqM0L5+hJLb7NZ9GaAQnRvEvEyAnf5wdrpV4IREGZO4tjhUlKxH5RHs1 Ay1kwORvzkFZNBjzCSwVNenPVGRH2uRoIQCj9UB9GSWEos+GqTpdqB+mhcmIQUCr 0Mlt6R6vBNyCDpO3ycge+lDxqEXNBWPpCo5UNcovBgOz+drGa5p2Okl1CU9rGmw8 Xp+Q5JU+IY+i8wSzF2XA6apxs4XZr0kmCWytS/LdPND8CwpAIiyMZrR7o2WdHDQ2 Za6DyD0AuAv11iILDMAYy8IdKUmuB3eG3ypStFyLsdpUHUpAi6NEWJncg6djIn7f a5deBbqTydwGkw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:16:30 2025 by rpki-client