This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json) Hash identifier: NnY4FZcTEDfrHRgk43r2qxnAtUXEDTHKq6jnPFV2ulw= Subject key identifier: 3D:CB:32:37:42:7F:3E:EA:3D:F4:61:FF:E4:14:C3:F7:66:E5:D5:CC Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5 Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5 Certificate serial: 019B360EBAAD31E78CABE8741D9E3FDC1747 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft Manifest number: 0FF5 Signing time: Fri 19 Dec 2025 10:01:33 +0000 Manifest this update: Fri 19 Dec 2025 10:01:33 +0000 Manifest next update: Sat 20 Dec 2025 10:01:33 +0000 Files and hashes: 1: StPgXcpmiy5JYaEeTseShVrOOPw.roa (hash: 2TP419yQVLSPbiDET0BATqZqoaVVJJbtbUq/1dj+vY4=) 2: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: fzbUc5C1qyrp1/LJ8T/o3MjJWECRuBRZMQ5v9YYVPFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:ba:ad:31:e7:8c:ab:e8:74:1d:9e:3f:dc:17:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5 Validity Not Before: Dec 19 10:01:33 2025 GMT Not After : Dec 20 10:01:33 2025 GMT Subject: CN=3dcb3237427f3eea3df461ffe414c3f766e5d5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:49:7a:59:0b:d9:bb:90:df:29:a0:e5:2a:82: b9:72:8b:74:19:0c:10:07:ff:03:3f:8b:c3:9f:67: 32:59:36:06:db:c9:7e:21:d8:e7:34:1b:77:98:c9: 11:e0:38:de:f1:64:b9:6e:22:4a:f8:22:f3:b2:de: 05:f0:2c:7b:bc:79:51:32:d0:55:0f:70:2e:71:40: 16:3a:9c:ee:f3:6e:89:e2:17:51:f0:f1:32:fc:dd: 43:fe:37:9b:72:60:b9:ef:9d:3f:24:e7:11:6e:e3: 77:76:fd:3a:bd:32:33:f9:77:f9:d7:01:ab:94:cb: 1d:78:3a:7f:f9:a7:72:21:cf:da:7f:57:99:fa:24: a2:69:44:c7:5a:4c:99:7c:d2:4a:27:0a:16:0b:f6: 04:cb:00:c7:8e:e5:72:0f:98:7c:4b:1f:1f:83:04: 7e:1c:7d:c4:89:cb:6a:8f:3e:f0:ff:48:fb:77:3e: 83:64:e8:f6:d0:1c:02:4c:be:ec:0a:b8:aa:04:9a: 77:39:f8:e1:73:e3:70:1a:0e:61:f1:c8:3c:eb:3f: cf:bb:c1:26:d2:f8:cd:73:f6:f6:09:4b:e0:8f:0b: 0b:5b:32:f5:ed:d6:3c:9f:73:ca:b7:0b:db:09:a1: e6:7c:b1:0c:4e:8a:f6:da:27:3b:a6:63:17:79:02: 09:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CB:32:37:42:7F:3E:EA:3D:F4:61:FF:E4:14:C3:F7:66:E5:D5:CC X509v3 Authority Key Identifier: keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ad:c1:97:35:c2:db:25:93:6f:65:e4:4e:25:8e:8c:85:40: a7:bb:c4:a8:1f:b3:41:0e:68:28:11:13:59:11:73:f5:62:15: 07:6e:0e:dc:33:d2:39:8c:f3:82:d6:f6:bd:20:18:45:61:e2: 86:bf:60:ab:9b:85:aa:94:ad:53:44:f7:d6:f0:dc:66:41:67: 3c:da:22:e1:c9:4d:76:f4:a0:d8:c9:c9:39:7a:9d:9b:b2:a3: 25:30:f1:68:c0:e9:d3:3c:cb:34:cc:5a:dd:04:e2:00:ab:36: 44:0b:75:02:01:21:64:db:9e:07:5e:bc:96:01:73:c3:6d:c1: 9b:63:6c:57:93:57:ec:a8:7f:3f:67:85:7e:db:91:c0:e0:dc: a3:1a:f1:33:81:f7:9f:b0:6c:c2:79:34:17:6d:f7:dc:f5:f9: e6:49:1a:fa:d3:b9:79:86:63:17:da:88:02:1a:4c:75:4b:fa: 69:14:0e:9c:34:ad:d9:81:5d:d3:13:e3:32:4d:a2:db:26:45: a7:21:59:1b:f5:50:3f:f5:75:95:93:a2:bf:6d:bf:3d:6c:6a: b7:c7:76:a8:c4:38:8c:3b:c5:96:87:59:01:b6:29:2d:0f:bc: 88:31:a2:3d:ea:2f:8a:47:10:74:45:63:f1:f5:55:68:a7:4d: d9:80:b8:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DrqtMeeMq+h0HZ4/3BdHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YTljMzRkM2Y4NDNjZGIwMzViN2MzMGIzZTg0ZTIyNDEy NTIyYzUwHhcNMjUxMjE5MTAwMTMzWhcNMjUxMjIwMTAwMTMzWjAzMTEwLwYDVQQD EygzZGNiMzIzNzQyN2YzZWVhM2RmNDYxZmZlNDE0YzNmNzY2ZTVkNWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0l6WQvZu5DfKaDlKoK5cot0GQwQ B/8DP4vDn2cyWTYG28l+IdjnNBt3mMkR4Dje8WS5biJK+CLzst4F8Cx7vHlRMtBV D3AucUAWOpzu826J4hdR8PEy/N1D/jebcmC5750/JOcRbuN3dv06vTIz+Xf51wGr lMsdeDp/+adyIc/af1eZ+iSiaUTHWkyZfNJKJwoWC/YEywDHjuVyD5h8Sx8fgwR+ HH3Eictqjz7w/0j7dz6DZOj20BwCTL7sCriqBJp3Ofjhc+NwGg5h8cg86z/Pu8Em 0vjNc/b2CUvgjwsLWzL17dY8n3PKtwvbCaHmfLEMTor22ic7pmMXeQIJsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3LMjdCfz7qPfRh/+QUw/dm5dXMMB8GA1UdIwQY MBaAFLepw00/hDzbA1t8MLPoTiJBJSLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEt M2E1NzY4MDIxNDE4LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEtM2E1NzY4MDIxNDE4 LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcq3BlzXC 2yWTb2XkTiWOjIVAp7vEqB+zQQ5oKBETWRFz9WIVB24O3DPSOYzzgtb2vSAYRWHi hr9gq5uFqpStU0T31vDcZkFnPNoi4clNdvSg2MnJOXqdm7KjJTDxaMDp0zzLNMxa 3QTiAKs2RAt1AgEhZNueB168lgFzw23Bm2NsV5NX7Kh/P2eFftuRwODcoxrxM4H3 n7Bswnk0F2333PX55kka+tO5eYZjF9qIAhpMdUv6aRQOnDSt2YFd0xPjMk2i2yZF pyFZG/VQP/V1lZOiv22/PWxqt8d2qMQ4jDvFlodZAbYpLQ+8iDGiPeovikcQdEVj 8fVVaKdN2YC4Kg== -----END CERTIFICATE-----Generated at Fri Dec 19 17:59:38 2025 by rpki-client