This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft File: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json) Hash identifier: LXDyj06YJ0KPv/B51lEITa2Ph5+Q7GJkeZnvwAEO2lU= Subject key identifier: 95:B2:20:82:C3:D8:48:12:FD:4E:AD:ED:E3:CF:E2:BF:F5:90:9D:81 Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c Certificate serial: 019B44389E7E2A460DB56DA751EDF9CD2E8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft Manifest number: 0889 Signing time: Mon 22 Dec 2025 04:01:59 +0000 Manifest this update: Mon 22 Dec 2025 04:01:59 +0000 Manifest next update: Tue 23 Dec 2025 04:01:59 +0000 Files and hashes: 1: casId6bSRHTNn5PL96DuG2TJvlE.roa (hash: L+JMLEBjCTLo3pT1VkKD/pB+PbvKkE5XXjy3KroLN1g=) 2: kqpQozJYbiOeF5Yf2auzSJ7PAQw.roa (hash: 1P+cwreujhRRyFPgrb8zcY4I1d2u+NU9now7YdN+EEs=) 3: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: Hwtrj2ZzU1adOzimH7ECSyMo/xpcqXIPhmw6cE2pBaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:9e:7e:2a:46:0d:b5:6d:a7:51:ed:f9:cd:2e:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c Validity Not Before: Dec 22 04:01:59 2025 GMT Not After : Dec 23 04:01:59 2025 GMT Subject: CN=95b22082c3d84812fd4eadede3cfe2bff5909d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c0:5d:cc:8a:a2:d5:13:9d:e4:db:c5:e5:dd: 5e:39:09:33:65:3f:5c:bb:4b:46:fa:d3:a9:b9:9b: 1f:ca:53:63:31:39:70:89:98:5a:7b:48:84:87:bf: 44:c7:b6:16:0b:a5:56:3e:bf:3b:e8:37:08:fc:1b: 03:50:2f:b0:9c:92:9d:f2:8c:12:f8:c0:34:97:11: ec:4a:db:b3:c5:85:a1:e6:e2:c5:cc:6f:61:a2:64: 1d:13:b0:65:8e:ca:b6:fe:c9:f7:3a:5c:39:d5:6c: e6:37:32:a5:3d:14:cc:cc:d0:9b:c2:52:3f:d4:04: 91:e0:fc:33:c1:25:23:93:a3:04:38:85:e4:3d:f9: 7d:58:dc:4f:29:6e:66:bd:39:d1:d6:3e:8a:69:89: 4b:2d:97:f7:60:f0:ff:d6:07:9d:ca:52:1b:0f:a2: 03:55:2b:28:fb:4f:f6:08:8f:aa:12:4e:41:8c:94: cd:1c:e8:12:01:e3:80:0a:f2:47:19:7c:c2:a5:7f: b1:e7:82:c7:c9:1e:5b:0e:dc:da:c5:dc:d3:0f:03: 82:a0:be:e4:f3:75:b3:4b:75:51:06:2d:92:d9:07: 05:dd:38:7c:01:f3:0d:86:47:44:bb:18:ec:9a:c5: ad:5f:06:73:30:d6:bb:75:59:31:e0:95:7c:53:b5: f5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B2:20:82:C3:D8:48:12:FD:4E:AD:ED:E3:CF:E2:BF:F5:90:9D:81 X509v3 Authority Key Identifier: keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:0b:0a:a2:99:27:86:17:60:ad:9b:3c:48:94:7d:94:17:de: f8:7e:2d:9b:c2:36:e7:a5:73:3a:fc:bd:87:77:af:12:6d:7f: 32:e2:22:2d:95:11:30:7d:84:c5:1e:96:de:b1:d7:29:76:80: c9:f8:1a:8d:b2:21:05:a9:e3:8c:fb:ce:27:57:d6:36:6d:29: 6e:d7:5c:3f:fb:93:ef:c9:dc:2e:35:d0:38:57:71:1f:b0:6a: 59:e8:e4:67:17:9e:b6:ac:7c:27:6b:b8:6f:6c:58:7e:f0:a4: 56:0c:ca:b0:8f:84:c8:18:88:90:2a:72:2b:61:b5:b4:a5:9d: d7:0c:87:f1:1e:ff:74:9b:a5:24:de:7c:87:94:23:15:1b:90: 4e:03:cb:af:90:5a:f5:82:c8:38:d4:97:7c:6e:f2:8c:35:42: 0e:19:a1:0e:45:df:81:93:96:d2:f2:a8:84:2d:88:3d:2d:e7: 65:20:c9:d6:f5:fb:04:31:d4:da:7a:61:b0:13:c1:28:b9:ac: 87:dc:2e:05:ef:bc:d5:2e:1c:11:07:dc:07:07:a2:aa:17:04: 89:1d:a6:4b:6b:7a:d6:95:1e:80:04:2e:c3:c5:47:5a:94:a0: 03:16:08:9c:0e:18:04:78:70:dc:77:7a:63:79:23:48:81:ea: 14:9e:01:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOJ5+KkYNtW2nUe35zS6NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YTUzOGFhYzMzNzc4NDYwZTE5NzAxYWFiNTk1MmM3YWEy NWYwNWMwHhcNMjUxMjIyMDQwMTU5WhcNMjUxMjIzMDQwMTU5WjAzMTEwLwYDVQQD Eyg5NWIyMjA4MmMzZDg0ODEyZmQ0ZWFkZWRlM2NmZTJiZmY1OTA5ZDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8BdzIqi1ROd5NvF5d1eOQkzZT9c u0tG+tOpuZsfylNjMTlwiZhae0iEh79Ex7YWC6VWPr876DcI/BsDUC+wnJKd8owS +MA0lxHsStuzxYWh5uLFzG9homQdE7Bljsq2/sn3Olw51WzmNzKlPRTMzNCbwlI/ 1ASR4PwzwSUjk6MEOIXkPfl9WNxPKW5mvTnR1j6KaYlLLZf3YPD/1gedylIbD6ID VSso+0/2CI+qEk5BjJTNHOgSAeOACvJHGXzCpX+x54LHyR5bDtzaxdzTDwOCoL7k 83WzS3VRBi2S2QcF3Th8AfMNhkdEuxjsmsWtXwZzMNa7dVkx4JV8U7X1twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWyIILD2EgS/U6t7ePP4r/1kJ2BMB8GA1UdIwQY MBaAFKelOKrDN3hGDhlwGqtZUseqJfBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDZVNHFzTTNlRVlPR1hBYXExbFN4Nm9sOEZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hODMzMzctNmUxNi00Y2Q5LTkyMWEt ODdiMDEwZWE2MjM1LzEvcDZVNHFzTTNlRVlPR1hBYXExbFN4Nm9sOEZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hODMzMzctNmUxNi00Y2Q5LTkyMWEtODdiMDEwZWE2MjM1 LzEvcDZVNHFzTTNlRVlPR1hBYXExbFN4Nm9sOEZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwsKopkn hhdgrZs8SJR9lBfe+H4tm8I256VzOvy9h3evEm1/MuIiLZURMH2ExR6W3rHXKXaA yfgajbIhBanjjPvOJ1fWNm0pbtdcP/uT78ncLjXQOFdxH7BqWejkZxeetqx8J2u4 b2xYfvCkVgzKsI+EyBiIkCpyK2G1tKWd1wyH8R7/dJulJN58h5QjFRuQTgPLr5Ba 9YLIONSXfG7yjDVCDhmhDkXfgZOW0vKohC2IPS3nZSDJ1vX7BDHU2nphsBPBKLms h9wuBe+81S4cEQfcBweiqhcEiR2mS2t61pUegAQuw8VHWpSgAxYInA4YBHhw3Hd6 Y3kjSIHqFJ4BsQ== -----END CERTIFICATE-----Generated at Mon Dec 22 10:17:58 2025 by rpki-client