This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft File: d6Hu06zg_C-KoADeaHpJvv0nkdg.mft (raw, json) Hash identifier: Sf9XLFeJqmEVL8B7kjDjnd/3swaNs+F0DIEBRksW0fc= Subject key identifier: 81:10:7D:37:1D:55:10:C7:C7:30:DB:F2:A1:06:46:F9:A1:38:ED:5B Authority key identifier: 77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8 Certificate issuer: /CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8 Certificate serial: 019B1E3C6AFAC7C60CDCEFC6C89D2EBE0510 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft Manifest number: 1067 Signing time: Sun 14 Dec 2025 19:00:34 +0000 Manifest this update: Sun 14 Dec 2025 19:00:34 +0000 Manifest next update: Mon 15 Dec 2025 19:00:34 +0000 Files and hashes: 1: 1tIKgu9zIxn-X__dh7X40Ez2yro.roa (hash: I7j76og90Bzenb6NN5y/FV3ZxjjrPcp5unqi/MuouAM=) 2: d6Hu06zg_C-KoADeaHpJvv0nkdg.crl (hash: yQG6omfAbo89skObzu7pD9T7bo15pnXpWjwfel5Ewoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 19:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3c:6a:fa:c7:c6:0c:dc:ef:c6:c8:9d:2e:be:05:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8 Validity Not Before: Dec 14 19:00:34 2025 GMT Not After : Dec 15 19:00:34 2025 GMT Subject: CN=81107d371d5510c7c730dbf2a10646f9a138ed5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c7:78:37:87:0f:9f:dd:8e:e4:b9:ca:17:17: c3:41:7c:55:24:08:aa:6e:89:f2:c0:43:dd:1f:3b: 99:f6:21:ba:1f:54:fb:c4:bc:6d:34:81:18:6c:53: 1f:f7:d5:6d:16:da:f4:b0:7c:23:7a:d1:7b:a4:63: 1f:36:cc:12:cf:b6:38:6f:e9:fa:30:d2:77:58:cb: fc:f3:3b:a2:c3:a9:10:0e:c5:01:71:df:43:ea:50: 04:a4:aa:5d:f4:c8:d0:7f:43:35:48:45:4e:c9:6a: 0c:f7:ac:2d:b5:e1:bc:5a:85:ea:58:c4:7a:a3:d5: 8a:9d:7e:72:fc:99:2a:60:d3:bb:38:05:fc:4e:73: 85:f0:a7:af:27:b2:a0:9e:ae:fa:36:65:55:0e:90: f5:2b:6e:9f:c1:b6:7d:bf:db:8f:11:05:c4:b3:dd: 58:85:12:b5:04:ec:61:4a:1a:b2:dc:3f:5a:9d:05: 92:9f:6d:ea:37:34:f6:fb:64:82:64:0e:6f:87:28: 43:7c:32:a2:29:ac:7e:39:0a:3e:17:85:27:73:ac: ac:10:4e:d2:1f:c8:22:05:fe:65:0a:03:8d:66:75: 27:20:a0:13:61:b9:89:e9:2f:cb:c7:c9:c0:20:c5: 16:0f:13:4c:75:61:36:ae:20:46:e2:b9:ae:92:df: 36:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:10:7D:37:1D:55:10:C7:C7:30:DB:F2:A1:06:46:F9:A1:38:ED:5B X509v3 Authority Key Identifier: keyid:77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:36:e2:bb:f1:38:a7:1c:73:2a:f8:44:d8:c2:38:06:44:10: ca:a6:75:bc:50:79:7b:47:e2:47:c3:1b:12:ff:f9:1f:d1:63: 7b:30:01:aa:90:a6:f5:ce:27:71:44:69:45:95:e5:84:22:a3: 69:bf:eb:d1:fc:71:13:eb:bb:ff:24:50:8b:6e:4e:c8:76:e4: 39:fb:27:bc:ed:d3:d1:29:f7:ef:17:b0:6d:49:2d:65:64:b4: f0:1a:16:4c:d3:d8:f9:4f:9c:fa:b6:77:ca:31:83:36:c5:51: fe:a8:92:fe:0c:26:1e:3a:1e:36:6d:df:f9:7a:73:62:dd:3f: a1:a8:8a:d5:1c:94:bc:06:df:d3:95:35:cb:e7:5a:f7:13:33: 2e:4a:8d:14:c9:f8:27:7a:72:ae:e1:72:b2:fc:d7:d5:aa:f8: c6:74:a9:9c:ec:3b:7f:01:c5:f4:0c:81:01:86:6f:36:0b:44: 03:5d:e0:8d:6b:05:03:3d:28:05:5f:e2:5a:42:23:fb:33:9c: e4:13:61:6c:b6:45:f3:2c:ab:81:cd:30:2a:e2:a4:73:a9:08: 9a:ab:5a:17:f6:bf:20:0e:db:68:44:e7:d4:eb:82:ea:c5:c3: 5b:d1:bc:26:2a:00:fb:02:25:75:7a:84:a4:0f:10:65:20:fb: 73:3f:13:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePGr6x8YM3O/GyJ0uvgUQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YTFlZWQzYWNlMGZjMmY4YWEwMDBkZTY4N2E0OWJlZmQy NzkxZDgwHhcNMjUxMjE0MTkwMDM0WhcNMjUxMjE1MTkwMDM0WjAzMTEwLwYDVQQD Eyg4MTEwN2QzNzFkNTUxMGM3YzczMGRiZjJhMTA2NDZmOWExMzhlZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMd4N4cPn92O5LnKFxfDQXxVJAiq bonywEPdHzuZ9iG6H1T7xLxtNIEYbFMf99VtFtr0sHwjetF7pGMfNswSz7Y4b+n6 MNJ3WMv88zuiw6kQDsUBcd9D6lAEpKpd9MjQf0M1SEVOyWoM96wtteG8WoXqWMR6 o9WKnX5y/JkqYNO7OAX8TnOF8KevJ7Kgnq76NmVVDpD1K26fwbZ9v9uPEQXEs91Y hRK1BOxhShqy3D9anQWSn23qNzT2+2SCZA5vhyhDfDKiKax+OQo+F4Unc6ysEE7S H8giBf5lCgONZnUnIKATYbmJ6S/Lx8nAIMUWDxNMdWE2riBG4rmukt826wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEQfTcdVRDHxzDb8qEGRvmhOO1bMB8GA1UdIwQY MBaAFHeh7tOs4PwviqAA3mh6Sb79J5HYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDZIdTA2emdfQy1Lb0FEZWFIcEp2djBua2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80ZjNlMTEtZmQwZi00ZTcxLTkzNjkt MjIwNGVlMjE3MjgwLzEvZDZIdTA2emdfQy1Lb0FEZWFIcEp2djBua2RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80ZjNlMTEtZmQwZi00ZTcxLTkzNjktMjIwNGVlMjE3Mjgw LzEvZDZIdTA2emdfQy1Lb0FEZWFIcEp2djBua2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczbiu/E4 pxxzKvhE2MI4BkQQyqZ1vFB5e0fiR8MbEv/5H9FjezABqpCm9c4ncURpRZXlhCKj ab/r0fxxE+u7/yRQi25OyHbkOfsnvO3T0Sn37xewbUktZWS08BoWTNPY+U+c+rZ3 yjGDNsVR/qiS/gwmHjoeNm3f+XpzYt0/oaiK1RyUvAbf05U1y+da9xMzLkqNFMn4 J3pyruFysvzX1ar4xnSpnOw7fwHF9AyBAYZvNgtEA13gjWsFAz0oBV/iWkIj+zOc 5BNhbLZF8yyrgc0wKuKkc6kImqtaF/a/IA7baETn1OuC6sXDW9G8JioA+wIldXqE pA8QZSD7cz8Tew== -----END CERTIFICATE-----Generated at Mon Dec 15 04:56:02 2025 by rpki-client