This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft File: j6nQXioyGuy6TsxKvsD3jqzeVbA.mft (raw, json) Hash identifier: f7JfoxAyf7ybWhe+URQcwYmM0lQptQCrb/T6Gyy6cWY= Subject key identifier: 02:23:18:F3:47:C3:92:59:A8:6B:5F:03:E5:56:C1:86:1B:90:BC:BE Authority key identifier: 8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0 Certificate issuer: /CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0 Certificate serial: 019AF80B0AF342602ED3214A24C30CF27D9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft Manifest number: 1F Signing time: Sun 07 Dec 2025 09:01:04 +0000 Manifest this update: Sun 07 Dec 2025 09:01:04 +0000 Manifest next update: Mon 08 Dec 2025 09:01:04 +0000 Files and hashes: 1: U3twjM0H57q4OKhp0S-d6jU2ZK0.roa (hash: ucLz1Rl2bM04jZf+Xxc2nzOXMHVXNvLglCQznDB9st4=) 2: d476BYeaJLqNSnr-4TzLtIvX_-4.asa (hash: DGmo0q0ksnUeOLLpbyw3uKqXcWfdPN/1LjZwfME/+Cs=) 3: j6nQXioyGuy6TsxKvsD3jqzeVbA.crl (hash: HXG75JrIBCuUcbMsruriudU059kznGFAd50nWrlNDbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:0b:0a:f3:42:60:2e:d3:21:4a:24:c3:0c:f2:7d:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0 Validity Not Before: Dec 7 09:01:04 2025 GMT Not After : Dec 8 09:01:04 2025 GMT Subject: CN=022318f347c39259a86b5f03e556c1861b90bcbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:09:af:33:29:f0:38:b4:79:94:9b:dd:1b:1c: a5:74:a6:84:0d:c2:9c:44:34:15:03:0d:9d:71:81: e0:fe:09:35:fe:b3:08:13:bf:6e:f8:ce:94:4f:4c: 47:2a:99:66:ee:3a:64:fc:1d:14:70:e0:8b:17:88: e3:60:55:41:53:b7:8a:55:97:ad:dd:2f:e2:0e:55: 39:e4:ab:4d:68:09:ad:b0:1e:07:0c:ea:4c:9c:3f: c4:4d:fb:db:80:59:88:92:ad:4c:4d:54:14:2e:7d: 18:09:ba:57:c4:85:34:a0:97:6a:75:e4:71:ad:55: f4:cb:b1:0e:95:66:9c:aa:ca:9a:4b:f0:fb:dc:fd: b7:67:b5:c4:5a:58:2a:8c:bf:ed:3b:d2:81:ca:b9: c9:f1:c5:3f:4d:f9:ab:46:47:d6:b4:07:b1:7f:2d: 41:4b:33:39:eb:d1:49:37:93:ac:3a:17:ff:61:a6: ee:1d:55:0e:0b:dd:ab:4f:6c:62:d6:80:aa:c6:30: 72:bf:75:a8:3a:d0:ea:09:36:3d:42:4b:70:9b:6c: 59:9c:92:34:80:3e:1e:9d:1c:0d:19:0c:59:1d:16: f6:26:7d:4f:d5:3b:e9:d5:e7:38:77:a0:c1:ca:22: 4e:87:48:c9:cd:85:99:f4:0c:7e:46:69:18:0b:40: 28:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:23:18:F3:47:C3:92:59:A8:6B:5F:03:E5:56:C1:86:1B:90:BC:BE X509v3 Authority Key Identifier: keyid:8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:fe:ac:9e:95:10:34:7e:b1:44:e8:a0:1c:ce:e1:97:4c:47: 86:79:8c:0c:05:89:f4:46:f3:00:20:3f:ab:9f:db:ac:9d:fe: 72:6f:15:c5:59:e8:28:8b:2d:bf:c5:3b:3f:26:79:4b:4c:5a: aa:cf:a7:56:46:97:47:10:7c:da:15:5e:58:9a:77:dc:58:2b: 91:fd:2e:c8:22:95:bb:be:dc:0d:19:43:df:4d:e5:44:d1:97: d5:9c:fc:c8:44:d9:10:78:3e:c9:b8:c2:bd:f9:5f:a8:f2:e6: 26:a3:0d:d3:1d:ee:f1:df:47:9e:c8:a1:89:be:4e:1c:72:63: 27:f3:f6:3b:54:5b:1f:56:25:f2:cc:93:6f:51:9f:bb:9f:21: 85:f4:49:27:84:8c:fa:0a:a6:d6:eb:35:2a:97:da:bc:f3:c2: be:5b:fa:e0:5e:68:d2:bc:d4:80:06:94:00:18:70:a1:9d:76: c8:ff:a6:c3:23:0d:e5:d0:85:b6:6b:91:71:3a:da:f8:25:53: b5:eb:c9:13:a9:30:26:1e:f6:92:14:20:1c:b4:f5:2d:86:73: bc:33:4c:52:bb:b6:12:fa:8b:27:07:cc:6a:a8:24:1e:ce:09: dd:ca:7c:9b:c9:60:72:ee:19:a2:6d:b0:56:aa:5c:f0:fc:40: b6:d9:9f:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4CwrzQmAu0yFKJMMM8n2cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYTlkMDVlMmEzMjFhZWNiYTRlY2M0YWJlYzBmNzhlYWNk ZTU1YjAwHhcNMjUxMjA3MDkwMTA0WhcNMjUxMjA4MDkwMTA0WjAzMTEwLwYDVQQD EygwMjIzMThmMzQ3YzM5MjU5YTg2YjVmMDNlNTU2YzE4NjFiOTBiY2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQmvMynwOLR5lJvdGxyldKaEDcKc RDQVAw2dcYHg/gk1/rMIE79u+M6UT0xHKplm7jpk/B0UcOCLF4jjYFVBU7eKVZet 3S/iDlU55KtNaAmtsB4HDOpMnD/ETfvbgFmIkq1MTVQULn0YCbpXxIU0oJdqdeRx rVX0y7EOlWacqsqaS/D73P23Z7XEWlgqjL/tO9KByrnJ8cU/TfmrRkfWtAexfy1B SzM569FJN5OsOhf/YabuHVUOC92rT2xi1oCqxjByv3WoOtDqCTY9Qktwm2xZnJI0 gD4enRwNGQxZHRb2Jn1P1Tvp1ec4d6DByiJOh0jJzYWZ9Ax+RmkYC0AoOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIjGPNHw5JZqGtfA+VWwYYbkLy+MB8GA1UdIwQY MBaAFI+p0F4qMhrsuk7MSr7A946s3lWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajZuUVhpb3lHdXk2VHN4S3ZzRDNqcXplVmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zYWJkYzctMTZhMi00NDRiLTljZWYt ODNmYmQ4NjY2OTk0LzEvajZuUVhpb3lHdXk2VHN4S3ZzRDNqcXplVmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zYWJkYzctMTZhMi00NDRiLTljZWYtODNmYmQ4NjY2OTk0 LzEvajZuUVhpb3lHdXk2VHN4S3ZzRDNqcXplVmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYf6snpUQ NH6xROigHM7hl0xHhnmMDAWJ9EbzACA/q5/brJ3+cm8VxVnoKIstv8U7PyZ5S0xa qs+nVkaXRxB82hVeWJp33Fgrkf0uyCKVu77cDRlD303lRNGX1Zz8yETZEHg+ybjC vflfqPLmJqMN0x3u8d9Hnsihib5OHHJjJ/P2O1RbH1Yl8syTb1Gfu58hhfRJJ4SM +gqm1us1KpfavPPCvlv64F5o0rzUgAaUABhwoZ12yP+mwyMN5dCFtmuRcTra+CVT tevJE6kwJh72khQgHLT1LYZzvDNMUru2EvqLJwfMaqgkHs4J3cp8m8lgcu4Zom2w Vqpc8PxAttmfVQ== -----END CERTIFICATE-----Generated at Sun Dec 7 17:13:44 2025 by rpki-client