This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft File: P6xJAcwjvke_qfEqYET6Y0USIQc.mft (raw, json) Hash identifier: A6jTFSUSe+HxIQArommRoSmPl3swHUEi+CEksksfp2w= Subject key identifier: 79:98:C4:7D:FB:3E:BE:76:06:D9:45:55:D0:22:2A:C9:AD:9E:F1:DD Authority key identifier: 3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07 Certificate issuer: /CN=3fac4901cc23be47bfa9f12a6044fa6345122107 Certificate serial: 019B5A515DD99EB9E4B705387A13EAF0A3AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft Manifest number: 06D5 Signing time: Fri 26 Dec 2025 11:00:40 +0000 Manifest this update: Fri 26 Dec 2025 11:00:40 +0000 Manifest next update: Sat 27 Dec 2025 11:00:40 +0000 Files and hashes: 1: I2T3vW_f2hKmlZWnd51x-GtOD7M.roa (hash: oNoWZuXx4HX98BE5ZXv2y66gUnUeaQrrJOmk84paoXM=) 2: P6xJAcwjvke_qfEqYET6Y0USIQc.crl (hash: ZLDEz4AJaCfgF6REajDe0KXFKHJU7CgX23PTHHvc7cs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:5d:d9:9e:b9:e4:b7:05:38:7a:13:ea:f0:a3:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fac4901cc23be47bfa9f12a6044fa6345122107 Validity Not Before: Dec 26 11:00:40 2025 GMT Not After : Dec 27 11:00:40 2025 GMT Subject: CN=7998c47dfb3ebe7606d94555d0222ac9ad9ef1dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:af:d6:18:be:51:d4:b7:67:2b:52:b7:3e:d7: 30:b8:a9:86:e6:70:fb:72:20:55:0d:80:56:5c:d3: dc:a9:78:9b:a2:f5:60:61:75:4d:22:c8:d7:cb:fb: 8b:fc:94:63:68:c9:97:54:bb:96:d8:fe:0a:db:67: bb:a8:42:27:ae:ec:b2:5e:a7:40:d0:17:b6:05:49: 87:11:88:39:2b:11:e7:03:b4:ef:51:79:b0:fc:d6: 49:56:60:a0:f7:05:99:f8:a7:eb:05:e9:d7:dc:11: f4:a8:05:46:13:e5:9a:3c:25:75:94:9c:ee:1e:e8: f4:fa:c7:2b:76:97:a8:e4:e1:5d:d7:9d:3f:66:e6: f7:fe:b2:07:3e:d0:f4:21:6a:3f:04:64:0f:5f:97: 0a:66:77:5b:6c:5c:f5:44:68:7f:31:cd:75:83:50: fc:07:fc:54:6a:c3:e7:d2:5a:33:88:04:f5:9b:2c: 44:d0:07:b3:83:a3:08:56:40:11:2a:9c:7b:35:27: ee:04:90:be:bf:84:9e:7f:34:8d:60:1e:4e:f0:a2: 53:2d:e1:0b:8e:46:7c:65:10:e3:92:76:6e:48:c3: 55:00:0c:f7:0e:05:81:3d:28:83:bd:66:9e:38:a9: dd:ba:ae:41:25:9c:1f:c1:cf:3a:b0:07:8a:8b:73: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:98:C4:7D:FB:3E:BE:76:06:D9:45:55:D0:22:2A:C9:AD:9E:F1:DD X509v3 Authority Key Identifier: keyid:3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:32:ac:f7:c7:03:eb:00:47:ed:f6:91:43:30:72:d8:c8:b3: 99:3c:0a:85:53:1b:57:99:e0:5e:2c:27:d8:d9:22:4b:4f:46: 65:6d:09:17:d7:67:10:90:4e:c1:1e:d9:9b:b9:8c:19:b4:ed: 3b:46:4d:e8:2e:df:b1:db:43:63:84:85:c9:83:b4:eb:2e:ea: 1f:c1:5f:ec:64:19:ac:46:43:c1:f9:58:87:30:db:b9:8f:aa: 4f:37:7c:f9:02:0a:cb:b6:62:aa:ae:57:37:08:86:b6:ef:85: f4:47:22:ea:1a:e7:14:d9:e4:15:e3:f8:02:30:9d:3b:ab:3f: 12:62:db:29:02:00:a9:43:f0:20:65:9e:f3:1a:2f:27:89:4e: 46:54:5f:a7:76:73:63:c6:92:f4:53:35:65:c6:84:0c:98:2f: 07:8e:74:fd:ef:38:cc:47:91:d9:4b:3e:e7:09:56:07:94:1d: 8c:44:d7:d3:e1:ed:ea:ac:f9:90:da:ca:88:32:92:7e:f6:91: 1b:d9:20:03:d3:a3:1b:8d:aa:f6:c1:b7:53:9a:c2:33:1d:76: 52:d7:3c:67:a4:e8:40:5e:20:82:60:c7:ff:c6:1c:de:e4:a2: d8:74:90:46:9b:7a:eb:50:e0:28:19:f8:ee:30:b7:2e:c2:a9: 7c:73:09:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUV3ZnrnktwU4ehPq8KOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmYWM0OTAxY2MyM2JlNDdiZmE5ZjEyYTYwNDRmYTYzNDUx MjIxMDcwHhcNMjUxMjI2MTEwMDQwWhcNMjUxMjI3MTEwMDQwWjAzMTEwLwYDVQQD Eyg3OTk4YzQ3ZGZiM2ViZTc2MDZkOTQ1NTVkMDIyMmFjOWFkOWVmMWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK/WGL5R1LdnK1K3PtcwuKmG5nD7 ciBVDYBWXNPcqXibovVgYXVNIsjXy/uL/JRjaMmXVLuW2P4K22e7qEInruyyXqdA 0Be2BUmHEYg5KxHnA7TvUXmw/NZJVmCg9wWZ+KfrBenX3BH0qAVGE+WaPCV1lJzu Huj0+scrdpeo5OFd150/Zub3/rIHPtD0IWo/BGQPX5cKZndbbFz1RGh/Mc11g1D8 B/xUasPn0loziAT1myxE0Aezg6MIVkARKpx7NSfuBJC+v4SefzSNYB5O8KJTLeEL jkZ8ZRDjknZuSMNVAAz3DgWBPSiDvWaeOKnduq5BJZwfwc86sAeKi3Nd1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmYxH37Pr52BtlFVdAiKsmtnvHdMB8GA1UdIwQY MBaAFD+sSQHMI75Hv6nxKmBE+mNFEiEHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wZmZkOTUtOThlNi00Mjc5LTk4N2Yt NzNhNjM0MTU1ZWU5LzEvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wZmZkOTUtOThlNi00Mjc5LTk4N2YtNzNhNjM0MTU1ZWU5 LzEvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzKs98cD 6wBH7faRQzBy2MizmTwKhVMbV5ngXiwn2NkiS09GZW0JF9dnEJBOwR7Zm7mMGbTt O0ZN6C7fsdtDY4SFyYO06y7qH8Ff7GQZrEZDwflYhzDbuY+qTzd8+QIKy7Ziqq5X NwiGtu+F9Eci6hrnFNnkFeP4AjCdO6s/EmLbKQIAqUPwIGWe8xovJ4lORlRfp3Zz Y8aS9FM1ZcaEDJgvB450/e84zEeR2Us+5wlWB5QdjETX0+Ht6qz5kNrKiDKSfvaR G9kgA9OjG42q9sG3U5rCMx12Utc8Z6ToQF4ggmDH/8Yc3uSi2HSQRpt661DgKBn4 7jC3LsKpfHMJvQ== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:43 2025 by rpki-client