This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft File: t6j-qPyoAMH8Se8thckuMjdSsO0.mft (raw, json) Hash identifier: jGc8TtbDbt6s34Hj1ddKd2ZEWbWGdVN2YGZgeudQdIQ= Subject key identifier: E2:F7:7B:80:74:E2:0C:D7:03:51:F6:EA:91:D8:9D:B0:C4:4C:2E:87 Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED Certificate issuer: /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed Certificate serial: 019B5A8894DD2F95D359FA16B3B12829DC5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft Manifest number: 1765 Signing time: Fri 26 Dec 2025 12:00:58 +0000 Manifest this update: Fri 26 Dec 2025 12:00:58 +0000 Manifest next update: Sat 27 Dec 2025 12:00:58 +0000 Files and hashes: 1: 5TC6JtPaOArue3YcZw58kMkX_gQ.roa (hash: 8vxNN4NZRh1zE+O+pnXNTkgLjPcYvbg7k5S7vJax1zs=) 2: t6j-qPyoAMH8Se8thckuMjdSsO0.crl (hash: gbrjCLzj2NJApPilYc+AnzMv1KcoUpAbkfeQ4V0tx+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:94:dd:2f:95:d3:59:fa:16:b3:b1:28:29:dc:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed Validity Not Before: Dec 26 12:00:58 2025 GMT Not After : Dec 27 12:00:58 2025 GMT Subject: CN=e2f77b8074e20cd70351f6ea91d89db0c44c2e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ae:7c:60:e9:85:eb:bb:31:86:d1:2c:00:2a: 6a:ef:bc:5a:46:76:8e:fa:67:c9:bc:35:a9:a5:c9: 33:ec:6c:73:be:e5:22:30:74:15:da:72:d1:4f:26: 13:34:96:74:6c:25:f3:8c:cf:7f:ee:5e:87:00:98: eb:2d:e1:9b:b8:95:76:ce:97:97:01:42:8a:37:e8: 8c:10:49:7f:d9:2c:84:cb:25:3d:52:cd:a6:f9:8d: 18:a6:72:b2:85:a6:35:5d:ec:72:51:c4:a7:5c:07: bb:4b:81:b4:2e:6a:a4:98:b7:aa:ae:29:79:34:54: 40:2d:0d:f5:c5:99:84:f4:af:65:2c:24:e1:af:47: 9b:b5:a1:36:55:ae:01:93:f7:65:55:da:d1:25:3b: c1:5f:73:17:a1:0e:ae:cd:a2:d0:89:eb:41:8b:67: ef:6e:20:6c:31:42:24:05:30:59:ce:32:00:f7:9e: 35:9e:33:b0:89:ba:3b:10:cf:54:81:97:c5:9b:1b: 92:b8:fc:15:bd:f1:40:6b:7c:f1:4c:f1:74:c5:3c: 51:98:da:2f:7b:22:15:63:dd:e8:26:65:d5:58:73: 11:9f:74:25:ad:f3:61:85:fe:d9:3a:5f:22:7c:1f: 73:64:0f:d4:14:75:ed:32:eb:08:61:7e:11:b3:f6: d5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F7:7B:80:74:E2:0C:D7:03:51:F6:EA:91:D8:9D:B0:C4:4C:2E:87 X509v3 Authority Key Identifier: keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:12:e5:1e:ef:fb:15:e9:4a:7f:7e:ec:c4:f5:6a:2b:44:a2: 77:fe:ea:f3:97:24:e9:12:9a:ed:74:ff:56:da:12:e3:11:24: 79:d9:34:32:cc:c6:74:20:91:ab:a7:ea:6b:92:5a:58:b6:d1: 8d:36:7d:de:b0:c8:2b:fa:65:d0:74:74:83:0d:8f:d3:97:7c: b5:e9:4f:2f:26:02:8d:78:cc:73:61:d6:43:e2:06:37:69:ac: 68:9a:a7:4d:16:b2:2a:b0:a8:da:59:c8:79:58:5f:ad:2d:94: 4e:84:6e:03:f4:de:f6:01:0f:9c:70:1e:3e:9f:79:09:bf:d2: 86:97:52:e1:e8:4b:8f:3c:b1:97:e9:61:2f:39:06:11:98:12: 2d:53:d2:cb:dc:88:25:92:9d:85:87:00:3c:1b:7e:77:47:56: b7:63:83:f8:88:6f:81:e7:d6:ba:ed:80:74:72:66:7f:a1:c8: 6e:15:4e:80:08:44:17:a5:a4:d1:da:be:a5:18:76:ca:00:d2: ce:a3:c7:44:40:4b:40:5b:c2:58:d8:fa:ff:fd:28:51:1f:ff: 5d:6a:d4:43:b8:b2:4e:9b:7e:05:90:22:69:ca:d4:1b:5f:5c: 85:66:76:18:f2:9d:16:3e:8d:b6:d8:75:b1:e5:a0:ad:af:0d: 86:41:7b:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiJTdL5XTWfoWs7EoKdxcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YThmZWE4ZmNhODAwYzFmYzQ5ZWYyZDg1YzkyZTMyMzc1 MmIwZWQwHhcNMjUxMjI2MTIwMDU4WhcNMjUxMjI3MTIwMDU4WjAzMTEwLwYDVQQD EyhlMmY3N2I4MDc0ZTIwY2Q3MDM1MWY2ZWE5MWQ4OWRiMGM0NGMyZTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw658YOmF67sxhtEsACpq77xaRnaO +mfJvDWppckz7GxzvuUiMHQV2nLRTyYTNJZ0bCXzjM9/7l6HAJjrLeGbuJV2zpeX AUKKN+iMEEl/2SyEyyU9Us2m+Y0YpnKyhaY1XexyUcSnXAe7S4G0LmqkmLeqril5 NFRALQ31xZmE9K9lLCThr0ebtaE2Va4Bk/dlVdrRJTvBX3MXoQ6uzaLQietBi2fv biBsMUIkBTBZzjIA9541njOwibo7EM9UgZfFmxuSuPwVvfFAa3zxTPF0xTxRmNov eyIVY93oJmXVWHMRn3QlrfNhhf7ZOl8ifB9zZA/UFHXtMusIYX4Rs/bVgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOL3e4B04gzXA1H26pHYnbDETC6HMB8GA1UdIwQY MBaAFLeo/qj8qADB/EnvLYXJLjI3UrDtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jZTE2NDMtYzA4ZC00MGY2LTk0NDQt YWY3MTRhZDUyZjI5LzEvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9jZTE2NDMtYzA4ZC00MGY2LTk0NDQtYWY3MTRhZDUyZjI5 LzEvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhLlHu/7 FelKf37sxPVqK0Sid/7q85ck6RKa7XT/VtoS4xEkedk0MszGdCCRq6fqa5JaWLbR jTZ93rDIK/pl0HR0gw2P05d8telPLyYCjXjMc2HWQ+IGN2msaJqnTRayKrCo2lnI eVhfrS2UToRuA/Te9gEPnHAePp95Cb/ShpdS4ehLjzyxl+lhLzkGEZgSLVPSy9yI JZKdhYcAPBt+d0dWt2OD+IhvgefWuu2AdHJmf6HIbhVOgAhEF6Wk0dq+pRh2ygDS zqPHREBLQFvCWNj6//0oUR//XWrUQ7iyTpt+BZAiacrUG19chWZ2GPKdFj6Ntth1 seWgra8NhkF73A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:49 2025 by rpki-client