This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft File: s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft (raw, json) Hash identifier: IDfDgMII2rzX/wdGZT08UnSK+FjpV0j2JlsJSE7DmRQ= Subject key identifier: BC:D9:BE:24:AB:27:15:1B:75:B4:39:71:29:E0:89:B6:AA:3B:7E:16 Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Certificate serial: 019B0E263938196A773BB817351DFAC3D6F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft Manifest number: 1792 Signing time: Thu 11 Dec 2025 16:02:24 +0000 Manifest this update: Thu 11 Dec 2025 16:02:24 +0000 Manifest next update: Fri 12 Dec 2025 16:02:24 +0000 Files and hashes: 1: 8G17Uj9AIXGxXZ66yfJHOLsxPo8.roa (hash: qU/6T++9LyINzVzJ8CV6sT+MweAHyZF0SIUnm5bIRYg=) 2: Hrw24NCuWIUCpkj_ixSA3ykRPr4.roa (hash: EL86DxycBZAbHkapsC+FVYde7DJDbg6IvsLrlIhK4Mg=) 3: HzkqLbs1liYqOOnORyYsONDUWCk.roa (hash: uXYRvHJ6LJgN5jTlxHsTjXJyetqQoAXwubqH0//UAWg=) 4: N8YU9P6afQ3l1ax9yLIDe6D0fIk.roa (hash: EU77Dk5F7GrtkJ85p7yvIHvzXNj6aNgdhN+Tn5j+zs0=) 5: NxaezdRi3ofV0Ea6FtmKMCg4Xno.roa (hash: OxfdQ+cdMI49CYY0Q1jeMkKHuJPcs1w/NoTD4eAZ2MA=) 6: TO40FjbIwGNQNwtqPj8kwc1ZTTA.roa (hash: CxCIaev63Gqq5Rl8++kPvXMtj4T/C8ceRG4EudeHUmA=) 7: g0-0qeR0lc1LsLxknNYR3dnvEBA.roa (hash: EXsDcqkvYGuTEAGM2nI2WIcOnpMXlYj8og8Md2Id59Q=) 8: gG0DNUP64NYeP7QJN-nJ3HYb71o.roa (hash: TdYqV2WNRnqL2XDaa0pYRnVh8SMGr720PVd0f0ZigsI=) 9: jGaeQ05R3hLIsxNTb7dpc8FaO6w.roa (hash: 4TEbxdiinYCpm4mycPqOwDmBBxQQxUxqZfGO0t4kbOg=) 10: oRsHwl0lqDdQsW8I1c5igLUyNzs.roa (hash: 8g9A+Hdue1idAErOv1qWZKgEKPMgG/A4+RlDqNfgnkI=) 11: oreGjQwv74g6OpxObQTCv-MnU1M.roa (hash: d1IJwSRdqQjA5VA/VLC7+miffsmnB8Nxer6G7ClHfMc=) 12: p2_R78qfiRDhzvxPsVGCBtVmaJE.roa (hash: AfONkYdMNZkN9Er/D4pbys1uxPQQYlJm+sdpKa5QxNI=) 13: s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl (hash: /iAO21koqXnGo2Ze00428bI3h7QTRe0qiygI3PbARZ0=) 14: wjy1-qmg6rYR0UilXbPOrktmKnc.roa (hash: OCHLZL4VOIDtWxajhki14b+EkeW6juZq6cOYKpzs8QI=) 15: xMcgE5el8x0M_rTEbVyhY3X3x1c.roa (hash: PGLJrZJLBXcLan5LC1jzJXTcMWQ+drrbyWZOiA3GgNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:39:38:19:6a:77:3b:b8:17:35:1d:fa:c3:d6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Validity Not Before: Dec 11 16:02:24 2025 GMT Not After : Dec 12 16:02:24 2025 GMT Subject: CN=bcd9be24ab27151b75b4397129e089b6aa3b7e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9c:f9:dd:f8:b3:43:df:40:1d:9d:15:a2:22: be:10:6e:34:a1:35:73:87:b6:72:4f:00:f5:3f:62: 11:ac:2f:ed:e8:c5:e1:f8:f3:3d:1c:89:a3:f1:8a: 5a:8f:75:f3:6a:12:ec:b2:af:cd:97:0c:9c:fe:f4: 10:ad:e7:8b:74:20:2a:af:f2:de:43:e3:2d:a5:0b: 38:d8:f8:66:ad:8f:97:96:f3:b0:73:81:a2:25:e9: 2b:c9:a9:83:48:9c:6f:87:3b:73:14:f3:a6:14:e9: d4:a9:d9:0f:4f:b2:44:33:3d:c9:1a:1c:4e:e3:b7: cc:ca:30:7b:55:e9:c0:0e:65:85:cb:31:e9:f0:f5: ec:38:43:2c:39:15:88:9a:05:5b:4e:1a:67:45:27: e5:61:b1:3f:f0:36:7f:8f:31:a9:b5:66:a5:29:41: 94:0f:4c:c2:d7:f4:55:01:84:f4:d4:07:7a:a9:06: 64:19:28:c6:4e:f3:4a:0a:d6:31:7c:3b:2c:7d:f4: f7:d9:f1:92:e6:f3:ac:11:b1:75:a0:c6:2d:9b:06: 82:07:9a:1c:32:87:14:2e:64:ef:dd:b4:9c:37:41: 68:26:c3:6f:00:cf:2d:66:98:c7:d7:95:dc:6b:54: b1:44:8b:02:9c:54:ce:71:db:fa:ce:f5:94:56:28: 0b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D9:BE:24:AB:27:15:1B:75:B4:39:71:29:E0:89:B6:AA:3B:7E:16 X509v3 Authority Key Identifier: keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:1a:a2:96:d1:6d:4f:31:1b:3b:3f:dc:e1:f4:bf:92:c8:8d: 35:d7:46:7d:27:02:f4:2c:6f:fc:d6:87:69:c2:18:dc:8e:89: a8:2a:e4:f0:38:5c:5b:96:d0:72:fa:ea:c3:be:67:eb:1f:5e: 2b:ea:cc:1c:8e:14:b1:9b:59:40:c9:c1:6c:b2:02:ee:ed:c6: e0:fd:b5:a3:d9:f6:69:e0:15:5a:2a:84:af:5f:02:d1:ce:e5: f8:ae:c7:81:47:2d:76:0f:b5:b0:7f:f2:54:c0:6a:a3:fb:f7: 9b:f3:f9:f2:ed:53:70:45:89:bc:91:c9:07:c8:0b:2f:06:c0: 46:b4:53:51:74:3e:17:92:3b:d0:26:a2:91:62:84:33:31:12: 0b:6a:8b:02:15:cf:b3:a9:28:e6:3a:35:b6:b1:ce:2a:22:01: e2:4e:d5:88:f9:a1:72:e7:a2:d2:90:3e:25:42:89:10:26:5f: fd:9c:99:b8:63:b5:e3:e6:64:58:83:6f:95:4c:2b:1a:9a:37: b1:7b:ad:15:7d:7f:19:f2:89:ef:0c:9f:59:12:12:c6:0b:67: 1b:b5:d8:81:a3:55:8f:16:78:60:9a:e4:0f:93:87:de:6c:d7: c2:da:b2:bc:a7:25:f0:6c:22:f5:b1:99:0e:37:42:20:f0:c4: e7:75:89:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJjk4GWp3O7gXNR36w9bwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3 NTE1ZDIwHhcNMjUxMjExMTYwMjI0WhcNMjUxMjEyMTYwMjI0WjAzMTEwLwYDVQQD EyhiY2Q5YmUyNGFiMjcxNTFiNzViNDM5NzEyOWUwODliNmFhM2I3ZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypz53fizQ99AHZ0VoiK+EG40oTVz h7ZyTwD1P2IRrC/t6MXh+PM9HImj8Ypaj3XzahLssq/Nlwyc/vQQreeLdCAqr/Le Q+MtpQs42PhmrY+XlvOwc4GiJekryamDSJxvhztzFPOmFOnUqdkPT7JEMz3JGhxO 47fMyjB7VenADmWFyzHp8PXsOEMsORWImgVbThpnRSflYbE/8DZ/jzGptWalKUGU D0zC1/RVAYT01Ad6qQZkGSjGTvNKCtYxfDssffT32fGS5vOsEbF1oMYtmwaCB5oc MocULmTv3bScN0FoJsNvAM8tZpjH15Xca1SxRIsCnFTOcdv6zvWUVigLdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzZviSrJxUbdbQ5cSngibaqO34WMB8GA1UdIwQY MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhqiltFt TzEbOz/c4fS/ksiNNddGfScC9Cxv/NaHacIY3I6JqCrk8DhcW5bQcvrqw75n6x9e K+rMHI4UsZtZQMnBbLIC7u3G4P21o9n2aeAVWiqEr18C0c7l+K7HgUctdg+1sH/y VMBqo/v3m/P58u1TcEWJvJHJB8gLLwbARrRTUXQ+F5I70CaikWKEMzESC2qLAhXP s6ko5jo1trHOKiIB4k7ViPmhcuei0pA+JUKJECZf/ZyZuGO14+ZkWINvlUwrGpo3 sXutFX1/GfKJ7wyfWRISxgtnG7XYgaNVjxZ4YJrkD5OH3mzXwtqyvKcl8Gwi9bGZ DjdCIPDE53WJDA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:11:32 2025 by rpki-client