This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft File: t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft (raw, json) Hash identifier: JCpY8cPP6FfYgLATcIJhn+mI758zLvwSwZGYf0CKIeI= Subject key identifier: B4:C1:2E:D5:1E:A3:07:58:CB:51:E1:5B:56:F0:BB:BA:45:3D:FB:08 Authority key identifier: B7:AA:4D:4E:CC:BB:0A:AB:7A:66:27:3B:79:CB:BE:B8:BC:41:8E:78 Certificate issuer: /CN=b7aa4d4eccbb0aab7a66273b79cbbeb8bc418e78 Certificate serial: 019B5A1AC8AC6DD8FBD6C208A5622AD1E135 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6pNTsy7Cqt6Zic7ecu-uLxBjng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft Manifest number: 8B Signing time: Fri 26 Dec 2025 10:01:03 +0000 Manifest this update: Fri 26 Dec 2025 10:01:03 +0000 Manifest next update: Sat 27 Dec 2025 10:01:03 +0000 Files and hashes: 1: t6pNTsy7Cqt6Zic7ecu-uLxBjng.crl (hash: a17tam/B5Fc2ycceFVmj9WSr/6CGeZ6QBdiB0rNk+4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.crl rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft rsync://rpki.ripe.net/repository/DEFAULT/t6pNTsy7Cqt6Zic7ecu-uLxBjng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:c8:ac:6d:d8:fb:d6:c2:08:a5:62:2a:d1:e1:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7aa4d4eccbb0aab7a66273b79cbbeb8bc418e78 Validity Not Before: Dec 26 10:01:03 2025 GMT Not After : Dec 27 10:01:03 2025 GMT Subject: CN=b4c12ed51ea30758cb51e15b56f0bbba453dfb08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2b:2f:39:4c:bf:cc:02:93:c1:13:06:27:79: f1:7f:53:47:59:2e:4f:79:57:25:d3:8e:b0:42:1b: 43:67:9b:2b:99:2c:0d:5d:d0:b3:88:ad:b2:75:9a: 1f:35:99:de:46:a4:48:7d:fb:56:91:9b:78:a6:4e: 74:5c:d0:c0:3f:5a:a3:dc:32:12:a4:1f:34:fa:db: 9a:8a:87:21:01:b4:5e:0d:c0:8f:e9:be:9c:62:7b: 41:b7:c5:d8:99:5c:83:45:4e:f7:4b:bd:6a:7c:bb: 8f:8d:92:4e:c4:27:a9:81:9a:27:46:3e:6b:c1:61: c8:13:3f:28:e0:56:c2:d7:b0:cb:ed:e1:3a:34:f9: 96:a7:d8:2d:01:67:ac:1f:59:2c:33:79:0f:ed:d0: 2f:35:cc:02:0b:b3:29:f9:78:0b:b0:bd:f7:a1:72: c1:21:d0:c8:bf:81:4b:c9:3c:7a:94:a2:7f:fb:94: 04:f1:4b:e1:4e:df:8e:cb:4f:1b:a6:13:8f:93:f1: d2:45:40:5a:f1:4e:86:51:62:c1:c7:c5:3d:71:d4: f8:25:f4:77:aa:3c:60:f6:b6:9a:92:98:2d:d3:e8: 32:ab:52:34:64:c7:5d:9b:e9:33:13:ef:38:c0:f2: 12:4a:de:a8:7a:17:05:c1:ff:2c:79:b1:ad:3d:ac: be:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C1:2E:D5:1E:A3:07:58:CB:51:E1:5B:56:F0:BB:BA:45:3D:FB:08 X509v3 Authority Key Identifier: keyid:B7:AA:4D:4E:CC:BB:0A:AB:7A:66:27:3B:79:CB:BE:B8:BC:41:8E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6pNTsy7Cqt6Zic7ecu-uLxBjng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f5de9e-1885-4c49-b297-b28bd24cbdb3/1/t6pNTsy7Cqt6Zic7ecu-uLxBjng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:98:4a:85:2c:38:66:bd:8e:da:eb:25:67:d0:b9:5f:b5:1a: 18:4e:40:1a:36:a4:20:0a:e3:8c:5f:95:63:5b:29:1c:a0:2f: 38:fc:68:30:01:10:10:33:9d:9f:33:32:58:c6:ef:42:03:bc: 40:90:1b:3b:a3:f6:b7:06:70:9d:2d:19:7d:ea:13:e3:13:ee: 37:25:77:e4:61:39:e1:c3:de:51:36:c2:63:a4:75:2b:a2:65: 37:f6:c0:71:21:b4:10:7e:e2:81:1a:50:41:3b:d9:5c:a8:64: d0:dd:68:fd:6e:11:90:cd:02:ef:e5:59:e7:45:66:33:b0:26: a1:3a:b0:39:4f:17:16:49:e1:26:d5:29:99:dc:b7:c4:99:50: 90:9c:f3:9c:1f:50:45:1d:a3:e7:9c:d3:21:48:63:6b:82:0a: 14:eb:d9:8e:ca:07:03:f8:65:00:ff:6c:00:e6:1f:62:86:91: 1f:11:6c:b5:4f:fb:a3:bc:be:e0:30:0e:f6:a6:82:0c:10:10: d8:ab:c6:45:13:6e:ad:b9:62:60:4f:34:93:c9:0f:39:9a:50: cf:ed:dc:6c:36:e7:39:e0:62:0e:08:81:1c:be:e6:57:32:dd: 0e:d4:e9:bc:31:31:dd:e4:7e:d4:a2:46:04:35:b5:6e:26:5b: b8:6c:77:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGsisbdj71sIIpWIq0eE1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YWE0ZDRlY2NiYjBhYWI3YTY2MjczYjc5Y2JiZWI4YmM0 MThlNzgwHhcNMjUxMjI2MTAwMTAzWhcNMjUxMjI3MTAwMTAzWjAzMTEwLwYDVQQD EyhiNGMxMmVkNTFlYTMwNzU4Y2I1MWUxNWI1NmYwYmJiYTQ1M2RmYjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ysvOUy/zAKTwRMGJ3nxf1NHWS5P eVcl046wQhtDZ5srmSwNXdCziK2ydZofNZneRqRIfftWkZt4pk50XNDAP1qj3DIS pB80+tuaiochAbReDcCP6b6cYntBt8XYmVyDRU73S71qfLuPjZJOxCepgZonRj5r wWHIEz8o4FbC17DL7eE6NPmWp9gtAWesH1ksM3kP7dAvNcwCC7Mp+XgLsL33oXLB IdDIv4FLyTx6lKJ/+5QE8UvhTt+Oy08bphOPk/HSRUBa8U6GUWLBx8U9cdT4JfR3 qjxg9raakpgt0+gyq1I0ZMddm+kzE+84wPISSt6oehcFwf8sebGtPay+SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTBLtUeowdYy1HhW1bwu7pFPfsIMB8GA1UdIwQY MBaAFLeqTU7MuwqremYnO3nLvri8QY54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZwTlRzeTdDcXQ2WmljN2VjdS11THhCam5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9mNWRlOWUtMTg4NS00YzQ5LWIyOTct YjI4YmQyNGNiZGIzLzEvdDZwTlRzeTdDcXQ2WmljN2VjdS11THhCam5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9mNWRlOWUtMTg4NS00YzQ5LWIyOTctYjI4YmQyNGNiZGIz LzEvdDZwTlRzeTdDcXQ2WmljN2VjdS11THhCam5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOphKhSw4 Zr2O2uslZ9C5X7UaGE5AGjakIArjjF+VY1spHKAvOPxoMAEQEDOdnzMyWMbvQgO8 QJAbO6P2twZwnS0ZfeoT4xPuNyV35GE54cPeUTbCY6R1K6JlN/bAcSG0EH7igRpQ QTvZXKhk0N1o/W4RkM0C7+VZ50VmM7AmoTqwOU8XFknhJtUpmdy3xJlQkJzznB9Q RR2j55zTIUhja4IKFOvZjsoHA/hlAP9sAOYfYoaRHxFstU/7o7y+4DAO9qaCDBAQ 2KvGRRNurbliYE80k8kPOZpQz+3cbDbnOeBiDgiBHL7mVzLdDtTpvDEx3eR+1KJG BDW1biZbuGx3Cw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:16 2025 by rpki-client