This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft File: h6Tl13JcWGiqvqAluDjcwjPG_8k.mft (raw, json) Hash identifier: SMsVkIckBX6/skM9OcfdBjZADM+MB+RwWp71SaqjM0c= Subject key identifier: A0:B7:A9:FC:90:01:73:FF:D5:7A:65:AB:C8:6E:46:C1:51:72:4C:DC Authority key identifier: 87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9 Certificate issuer: /CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9 Certificate serial: 019B47A6AF7A1A17B6D91BA30540FA1A1E19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft Manifest number: 14C4 Signing time: Mon 22 Dec 2025 20:01:04 +0000 Manifest this update: Mon 22 Dec 2025 20:01:04 +0000 Manifest next update: Tue 23 Dec 2025 20:01:04 +0000 Files and hashes: 1: 326zxIS7flVicYpYeyjZhIJPEQc.roa (hash: 7OXoJx4K7+k1nQ/ABjRnbXIbMj5YXCBVmfp1DpVjQws=) 2: h6Tl13JcWGiqvqAluDjcwjPG_8k.crl (hash: Iw0BuULL4AEeqDfLX5Zrsus+7pOVQ5NSNjvjQ/hJg74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:af:7a:1a:17:b6:d9:1b:a3:05:40:fa:1a:1e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9 Validity Not Before: Dec 22 20:01:04 2025 GMT Not After : Dec 23 20:01:04 2025 GMT Subject: CN=a0b7a9fc900173ffd57a65abc86e46c151724cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:85:08:9f:ee:ae:1e:85:4f:cd:7a:3e:35:bb: 16:1b:8f:3b:af:c1:78:b3:46:f2:37:a1:02:a9:3b: 13:be:50:2e:65:e3:30:44:24:d4:28:30:58:57:5a: 3c:e4:18:9a:f8:7a:c8:b0:03:d5:20:b2:ed:3a:47: 5f:5b:9e:13:70:51:dc:d1:8b:6d:51:ff:6f:3f:9c: 1a:41:a3:be:fa:6d:6f:17:55:dd:90:35:f0:19:7a: c5:ae:2f:1b:91:5a:47:41:77:e0:a7:d1:60:4e:24: 0a:4c:25:2a:bd:2d:94:d1:94:e2:ef:a5:12:74:18: d6:c7:d3:8a:64:90:4b:d5:09:39:2b:04:be:ca:12: 9c:ef:a2:b3:01:b6:54:bc:ba:5f:41:bb:5b:3c:d6: 37:6b:b8:1a:22:a5:76:2d:3e:75:e9:35:a6:6a:df: 2f:b0:43:32:9c:10:1b:a4:07:55:fa:8f:2d:78:5f: fb:79:a4:ab:4b:13:e1:1f:e4:8f:da:40:76:d4:a3: 94:d9:bd:c6:b4:7e:77:fa:64:79:19:db:5d:18:fc: a9:d1:5e:78:8a:7e:10:e1:b3:a3:bb:4e:05:e7:a4: ee:2b:9e:53:fe:04:97:6b:01:4c:b8:30:92:81:87: b8:fc:40:fc:dd:5b:d6:1f:73:54:a8:5f:40:2e:61: c0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B7:A9:FC:90:01:73:FF:D5:7A:65:AB:C8:6E:46:C1:51:72:4C:DC X509v3 Authority Key Identifier: keyid:87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:f8:69:3a:d1:e8:5b:ea:c2:62:ef:4a:39:2b:3d:63:17:92: 09:bf:45:10:c9:3d:f5:ec:77:8c:2f:94:ab:ec:c0:eb:f1:86: 45:92:f4:1d:a3:f0:72:20:b1:5d:d5:85:16:9a:78:ad:a3:a3: b5:27:8d:fe:cd:ff:d7:66:26:a2:30:70:08:cf:67:d4:99:33: 30:2f:c4:59:1a:72:74:24:ac:98:fe:52:76:c1:7c:b6:b3:c6: d5:95:3b:a9:99:37:0d:31:3b:85:9c:be:07:e6:80:5f:c7:8f: a3:2f:bf:81:54:a8:d8:d6:30:ef:b8:c9:5a:34:b3:61:14:82: e5:51:07:fd:11:e5:d4:9c:4b:9f:c4:6b:98:3e:96:c4:40:a0: fb:60:dc:16:69:b5:32:3c:49:75:22:43:0f:73:b2:2f:8b:02: e9:7d:4f:1b:58:75:7a:27:84:30:ca:b0:ae:da:08:11:a3:e6: 7a:c9:16:f9:63:f5:67:bd:4e:89:5d:c0:c5:06:76:b8:15:ac: 49:08:36:1a:87:4e:48:7e:87:42:1d:ae:74:0f:d3:26:fb:cb: 1b:cf:c0:7a:5e:f6:51:e2:2b:06:33:a5:8d:7c:00:93:e5:81: b9:74:0a:41:fa:ee:54:5a:3c:72:6e:11:13:75:d8:3e:43:d5: 4c:5f:5b:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpq96Ghe22RujBUD6Gh4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YTRlNWQ3NzI1YzU4NjhhYWJlYTAyNWI4MzhkY2MyMzNj NmZmYzkwHhcNMjUxMjIyMjAwMTA0WhcNMjUxMjIzMjAwMTA0WjAzMTEwLwYDVQQD EyhhMGI3YTlmYzkwMDE3M2ZmZDU3YTY1YWJjODZlNDZjMTUxNzI0Y2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4UIn+6uHoVPzXo+NbsWG487r8F4 s0byN6ECqTsTvlAuZeMwRCTUKDBYV1o85Bia+HrIsAPVILLtOkdfW54TcFHc0Ytt Uf9vP5waQaO++m1vF1XdkDXwGXrFri8bkVpHQXfgp9FgTiQKTCUqvS2U0ZTi76US dBjWx9OKZJBL1Qk5KwS+yhKc76KzAbZUvLpfQbtbPNY3a7gaIqV2LT516TWmat8v sEMynBAbpAdV+o8teF/7eaSrSxPhH+SP2kB21KOU2b3GtH53+mR5GdtdGPyp0V54 in4Q4bOju04F56TuK55T/gSXawFMuDCSgYe4/ED83VvWH3NUqF9ALmHAMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKC3qfyQAXP/1Xplq8huRsFRckzcMB8GA1UdIwQY MBaAFIek5ddyXFhoqr6gJbg43MIzxv/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDZUbDEzSmNXR2lxdnFBbHVEamN3alBHXzhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My82NTU1YzMtMDU0Ni00ZWVmLTg2NDgt NTA2YTIxNTk1Y2I4LzEvaDZUbDEzSmNXR2lxdnFBbHVEamN3alBHXzhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My82NTU1YzMtMDU0Ni00ZWVmLTg2NDgtNTA2YTIxNTk1Y2I4 LzEvaDZUbDEzSmNXR2lxdnFBbHVEamN3alBHXzhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/hpOtHo W+rCYu9KOSs9YxeSCb9FEMk99ex3jC+Uq+zA6/GGRZL0HaPwciCxXdWFFpp4raOj tSeN/s3/12YmojBwCM9n1JkzMC/EWRpydCSsmP5SdsF8trPG1ZU7qZk3DTE7hZy+ B+aAX8ePoy+/gVSo2NYw77jJWjSzYRSC5VEH/RHl1JxLn8RrmD6WxECg+2DcFmm1 MjxJdSJDD3OyL4sC6X1PG1h1eieEMMqwrtoIEaPmeskW+WP1Z71OiV3AxQZ2uBWs SQg2GodOSH6HQh2udA/TJvvLG8/Ael72UeIrBjOljXwAk+WBuXQKQfruVFo8cm4R E3XYPkPVTF9bBQ== -----END CERTIFICATE-----Generated at Tue Dec 23 03:19:56 2025 by rpki-client