This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json) Hash identifier: MERadodTVLu4YGLC6qCJTtvui9UflbmpYDVWqCDkcZg= Subject key identifier: 41:1C:A4:9C:6B:8A:14:3C:93:CD:A3:E4:BB:76:9B:77:7D:B4:D3:33 Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5 Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5 Certificate serial: 019B495E4D3AF690E3F395A2374C84BF8CD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft Manifest number: 0FFF Signing time: Tue 23 Dec 2025 04:01:15 +0000 Manifest this update: Tue 23 Dec 2025 04:01:15 +0000 Manifest next update: Wed 24 Dec 2025 04:01:15 +0000 Files and hashes: 1: StPgXcpmiy5JYaEeTseShVrOOPw.roa (hash: 2TP419yQVLSPbiDET0BATqZqoaVVJJbtbUq/1dj+vY4=) 2: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: qk6uH5gyfhmW3DGwLFj4CXuB4dOZMN0yZiWR9Xz/Blk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:4d:3a:f6:90:e3:f3:95:a2:37:4c:84:bf:8c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5 Validity Not Before: Dec 23 04:01:15 2025 GMT Not After : Dec 24 04:01:15 2025 GMT Subject: CN=411ca49c6b8a143c93cda3e4bb769b777db4d333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e2:c0:5d:c8:cc:11:c4:bc:d0:55:62:3d:40: 2c:fb:19:70:7a:05:be:f2:7b:99:e5:e2:ac:97:c9: fc:bd:41:c5:b0:4b:33:6b:23:de:c7:f2:ba:47:c0: 88:83:4f:d2:81:f0:37:e6:2f:a2:e1:bb:24:53:40: 59:54:16:37:02:c1:03:35:e8:79:9d:6b:e8:f8:73: 74:3a:86:62:7e:44:fc:e1:da:fd:23:56:56:d2:d7: 5e:dd:01:00:e4:63:ab:83:fc:07:60:af:0e:7f:89: 3e:c3:20:57:cf:db:a5:15:c0:1d:dc:67:c8:79:1a: ee:30:b1:15:28:ce:60:df:d7:fa:f5:da:71:fe:83: 66:30:f4:53:97:97:c8:80:80:33:04:99:60:5b:4f: 3c:a2:75:c4:86:53:26:6e:72:d3:7d:1b:0c:c6:ed: 98:68:01:42:cc:1a:18:42:8b:90:c7:10:2b:55:2c: 96:07:e6:39:c7:2d:73:a6:d4:0c:1f:3a:55:35:7f: 49:aa:af:e1:16:f7:36:cc:7a:c2:66:4d:65:f9:3e: 33:aa:18:2f:81:9b:e9:2b:df:c5:c8:6c:f4:b1:f3: 91:c4:8d:ea:1d:67:23:96:d9:cd:39:c9:e2:ac:e5: 48:2a:08:d4:19:84:73:b0:83:c6:7c:e6:09:07:50: a3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1C:A4:9C:6B:8A:14:3C:93:CD:A3:E4:BB:76:9B:77:7D:B4:D3:33 X509v3 Authority Key Identifier: keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:59:89:08:0c:a3:95:94:fe:60:13:2b:c3:ee:b1:07:b3:ef: 33:61:b3:e8:0e:ef:59:c0:44:e4:18:a1:4f:17:65:2e:55:8a: f4:b3:69:c9:b7:eb:0f:3e:7a:64:fe:d4:a0:35:b5:36:b1:d5: 1b:10:ff:f2:aa:fc:34:11:3d:21:27:04:b6:02:91:29:c9:32: 3e:8f:58:ac:30:91:7f:16:3a:f0:bd:b3:7c:a1:00:d2:86:75: e8:74:aa:a9:b6:d7:b2:e7:3d:df:4f:60:db:d5:ec:c4:b3:f2: 59:4e:73:0c:93:45:8d:1f:d9:1e:75:90:ff:6e:30:89:b2:20: 14:cc:87:34:b0:cb:d1:49:4e:03:94:90:e3:53:23:ee:25:ea: 6f:8f:46:89:d5:25:8b:21:81:02:31:9d:32:ba:2a:45:81:de: 28:a6:0b:4d:ef:8d:c3:de:e3:54:c9:ce:5a:1d:bf:4e:4c:13: f6:7d:75:c3:cd:f8:57:5a:98:cf:76:96:f4:a0:3d:8c:42:fc: 44:21:d4:67:9d:cc:51:f1:6a:e0:bf:37:81:2f:6c:ef:13:5b: ad:38:7d:b1:71:3a:fd:24:10:29:0a:3e:fe:9d:0e:99:e7:48: 15:68:39:e1:6d:8f:4b:c3:63:5f:bf:66:d0:f8:43:ad:30:d6: 11:e4:be:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXk069pDj85WiN0yEv4zTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YTljMzRkM2Y4NDNjZGIwMzViN2MzMGIzZTg0ZTIyNDEy NTIyYzUwHhcNMjUxMjIzMDQwMTE1WhcNMjUxMjI0MDQwMTE1WjAzMTEwLwYDVQQD Eyg0MTFjYTQ5YzZiOGExNDNjOTNjZGEzZTRiYjc2OWI3NzdkYjRkMzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeLAXcjMEcS80FViPUAs+xlwegW+ 8nuZ5eKsl8n8vUHFsEszayPex/K6R8CIg0/SgfA35i+i4bskU0BZVBY3AsEDNeh5 nWvo+HN0OoZifkT84dr9I1ZW0tde3QEA5GOrg/wHYK8Of4k+wyBXz9ulFcAd3GfI eRruMLEVKM5g39f69dpx/oNmMPRTl5fIgIAzBJlgW088onXEhlMmbnLTfRsMxu2Y aAFCzBoYQouQxxArVSyWB+Y5xy1zptQMHzpVNX9Jqq/hFvc2zHrCZk1l+T4zqhgv gZvpK9/FyGz0sfORxI3qHWcjltnNOcnirOVIKgjUGYRzsIPGfOYJB1CjrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEcpJxrihQ8k82j5Lt2m3d9tNMzMB8GA1UdIwQY MBaAFLepw00/hDzbA1t8MLPoTiJBJSLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEt M2E1NzY4MDIxNDE4LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEtM2E1NzY4MDIxNDE4 LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFmJCAyj lZT+YBMrw+6xB7PvM2Gz6A7vWcBE5BihTxdlLlWK9LNpybfrDz56ZP7UoDW1NrHV GxD/8qr8NBE9IScEtgKRKckyPo9YrDCRfxY68L2zfKEA0oZ16HSqqbbXsuc9309g 29XsxLPyWU5zDJNFjR/ZHnWQ/24wibIgFMyHNLDL0UlOA5SQ41Mj7iXqb49GidUl iyGBAjGdMroqRYHeKKYLTe+Nw97jVMnOWh2/TkwT9n11w834V1qYz3aW9KA9jEL8 RCHUZ53MUfFq4L83gS9s7xNbrTh9sXE6/SQQKQo+/p0OmedIFWg54W2PS8NjX79m 0PhDrTDWEeS+xA== -----END CERTIFICATE-----Generated at Tue Dec 23 11:07:24 2025 by rpki-client