This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json) Hash identifier: FZHZBKx1NBRWq8RnAXAebE6RtvDM7Xn9U4L58swxDkY= Subject key identifier: 50:BA:7F:72:2D:7D:71:EB:68:4E:D8:93:C3:E8:6D:D1:D1:3D:5C:52 Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5 Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5 Certificate serial: 019B41A4F2412599692C7F2E1F7EF972515E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft Manifest number: 0FFB Signing time: Sun 21 Dec 2025 16:01:27 +0000 Manifest this update: Sun 21 Dec 2025 16:01:27 +0000 Manifest next update: Mon 22 Dec 2025 16:01:27 +0000 Files and hashes: 1: StPgXcpmiy5JYaEeTseShVrOOPw.roa (hash: 2TP419yQVLSPbiDET0BATqZqoaVVJJbtbUq/1dj+vY4=) 2: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: VSHD0t/1GCO52+hBEbLdwCnbdgN/Tes/dXTQa6cM1gU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:f2:41:25:99:69:2c:7f:2e:1f:7e:f9:72:51:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5 Validity Not Before: Dec 21 16:01:27 2025 GMT Not After : Dec 22 16:01:27 2025 GMT Subject: CN=50ba7f722d7d71eb684ed893c3e86dd1d13d5c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c1:76:03:14:05:36:cd:a5:55:9c:12:f0:0d: da:89:eb:75:d6:fa:35:35:dd:cb:9c:f8:7c:cc:d3: fc:13:7d:b5:dd:32:6b:96:50:e1:fe:a1:39:64:d1: 3b:96:6a:c8:8e:dc:a8:9b:aa:bb:e1:c0:16:54:db: 3a:f1:bb:7a:cd:20:3e:ab:86:65:1e:5d:3f:1c:e4: 9f:35:1d:23:e4:c8:ba:6e:ed:97:b9:b8:10:f0:08: 06:5e:5a:02:92:b1:e2:19:57:06:11:56:c4:7a:34: 50:a3:fc:18:2b:5a:8b:72:5f:e7:cf:b1:73:68:42: 61:1b:e6:16:7d:5e:15:9b:eb:0c:f0:e2:44:b2:db: 70:e5:43:79:08:3e:33:d7:ce:c8:6c:6d:9d:1a:dc: 8a:72:4e:1d:5a:4b:4a:c5:30:1a:0d:a3:7e:41:e5: f2:a8:aa:b6:dd:95:6e:39:3a:ea:84:69:da:b6:5d: ed:40:86:07:4c:db:fd:9f:c6:9a:ba:f5:80:d4:28: 5d:1c:cd:a6:27:e7:82:26:8b:be:a5:67:7a:74:ca: 1b:3d:2d:d2:f2:19:c9:e0:d8:8c:16:53:1d:57:04: 82:d8:15:a8:dd:a1:c9:53:4c:8f:1b:1a:95:12:2a: 1a:bf:5a:98:bb:cc:a7:b5:6c:58:62:a4:38:f0:67: 18:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BA:7F:72:2D:7D:71:EB:68:4E:D8:93:C3:E8:6D:D1:D1:3D:5C:52 X509v3 Authority Key Identifier: keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:32:f0:ed:ab:6d:a1:7e:13:fd:7d:70:ab:57:e4:54:9b:f7: d8:de:18:6e:4a:74:91:85:d2:d8:2f:4c:d3:cc:9b:bd:f0:fb: e2:e5:33:d3:f7:33:89:ff:6b:cd:a8:1f:b8:fd:90:2b:62:65: 20:9c:e6:a2:a8:44:e9:81:92:d4:5f:86:11:49:61:5b:83:52: 6e:cf:93:f1:75:c1:23:83:b5:72:8d:25:e0:e1:ca:b7:38:54: 53:74:66:25:21:4c:a5:72:c1:0f:a7:65:4c:68:2d:56:cc:d9: c4:e6:3a:17:7a:27:06:da:c1:6a:4e:69:0a:a4:7f:76:71:fe: 78:62:81:48:f1:51:13:b6:25:60:89:2b:8b:4a:d8:05:f1:77: 02:2f:00:2f:fb:17:95:f7:b4:7a:73:73:f9:61:c4:6e:40:d0: 97:7c:17:5a:78:db:7e:b2:9c:89:ab:14:71:98:52:68:b8:96: 6e:0b:bf:4b:ba:8b:e8:73:a5:ad:fb:e4:69:0d:af:39:a6:79: 2e:91:e4:44:07:ce:c7:6f:02:17:09:6a:15:ad:f3:30:72:14: 39:57:35:81:50:c8:51:5e:37:11:70:7b:3a:ae:5e:eb:78:79: 04:a0:0d:85:5c:92:0f:72:a8:09:6d:5a:19:d9:05:c8:2b:48: 73:a9:d1:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpPJBJZlpLH8uH375clFeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YTljMzRkM2Y4NDNjZGIwMzViN2MzMGIzZTg0ZTIyNDEy NTIyYzUwHhcNMjUxMjIxMTYwMTI3WhcNMjUxMjIyMTYwMTI3WjAzMTEwLwYDVQQD Eyg1MGJhN2Y3MjJkN2Q3MWViNjg0ZWQ4OTNjM2U4NmRkMWQxM2Q1YzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48F2AxQFNs2lVZwS8A3aiet11vo1 Nd3LnPh8zNP8E3213TJrllDh/qE5ZNE7lmrIjtyom6q74cAWVNs68bt6zSA+q4Zl Hl0/HOSfNR0j5Mi6bu2XubgQ8AgGXloCkrHiGVcGEVbEejRQo/wYK1qLcl/nz7Fz aEJhG+YWfV4Vm+sM8OJEsttw5UN5CD4z187IbG2dGtyKck4dWktKxTAaDaN+QeXy qKq23ZVuOTrqhGnatl3tQIYHTNv9n8aauvWA1ChdHM2mJ+eCJou+pWd6dMobPS3S 8hnJ4NiMFlMdVwSC2BWo3aHJU0yPGxqVEioav1qYu8yntWxYYqQ48GcYLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFC6f3ItfXHraE7Yk8PobdHRPVxSMB8GA1UdIwQY MBaAFLepw00/hDzbA1t8MLPoTiJBJSLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEt M2E1NzY4MDIxNDE4LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEtM2E1NzY4MDIxNDE4 LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDLw7att oX4T/X1wq1fkVJv32N4Ybkp0kYXS2C9M08ybvfD74uUz0/czif9rzagfuP2QK2Jl IJzmoqhE6YGS1F+GEUlhW4NSbs+T8XXBI4O1co0l4OHKtzhUU3RmJSFMpXLBD6dl TGgtVszZxOY6F3onBtrBak5pCqR/dnH+eGKBSPFRE7YlYIkri0rYBfF3Ai8AL/sX lfe0enNz+WHEbkDQl3wXWnjbfrKciasUcZhSaLiWbgu/S7qL6HOlrfvkaQ2vOaZ5 LpHkRAfOx28CFwlqFa3zMHIUOVc1gVDIUV43EXB7Oq5e63h5BKANhVySD3KoCW1a GdkFyCtIc6nRnA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:28:59 2025 by rpki-client