This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft File: p6dweK84e0jXCBDrFgTfCt4Rj9o.mft (raw, json) Hash identifier: A4fzCqcK2+90psRv79g8FrbuQZcEtTDBbiXkySufE/4= Subject key identifier: 1C:F0:DC:FA:57:AB:32:7B:9F:34:F9:C4:87:3B:70:3C:22:D1:67:28 Authority key identifier: A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA Certificate issuer: /CN=a7a77078af387b48d70810eb1604df0ade118fda Certificate serial: 019AF6F8770915CB51CE03A66D1988E8FD9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft Manifest number: 13A4 Signing time: Sun 07 Dec 2025 04:01:09 +0000 Manifest this update: Sun 07 Dec 2025 04:01:09 +0000 Manifest next update: Mon 08 Dec 2025 04:01:09 +0000 Files and hashes: 1: 9xMeWe1NRlriC37gII2JZoSHiUQ.roa (hash: v9S3o8GCSV8SJhwMOSoO5rVmagcl/wlT4/BQbEi4mBI=) 2: p6dweK84e0jXCBDrFgTfCt4Rj9o.crl (hash: HM0c5pEwqVUuuj6cyyr2Wf31YhIqQp33vZrfZCOV1Q4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 04:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:77:09:15:cb:51:ce:03:a6:6d:19:88:e8:fd:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a77078af387b48d70810eb1604df0ade118fda Validity Not Before: Dec 7 04:01:09 2025 GMT Not After : Dec 8 04:01:09 2025 GMT Subject: CN=1cf0dcfa57ab327b9f34f9c4873b703c22d16728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:df:f8:80:a4:a7:28:58:49:9a:26:04:98:92: 6f:c9:0e:ef:bb:44:e2:b9:01:9b:f5:25:41:ab:93: ab:7c:38:d0:bf:c4:d2:1a:05:c3:81:99:cb:8d:7e: 48:e0:06:22:57:4e:da:80:2f:45:b3:33:c1:b2:88: 56:a3:91:12:d7:8b:b2:5f:0c:30:71:b7:dd:71:82: 3d:77:53:74:1b:b7:6b:4e:80:ce:cd:a0:17:1d:0e: 46:d4:7b:e5:91:44:8a:f2:d2:b1:99:fb:51:d5:d1: 56:13:d1:70:a8:a4:6a:22:76:d7:e0:50:73:03:03: 46:fd:eb:96:37:e8:8d:55:66:c7:cf:2e:50:4f:b7: de:cb:4b:7c:dc:50:b1:1e:69:9d:e7:23:f6:b3:d5: 78:73:04:66:c1:be:d4:66:e7:be:f1:a5:6b:ae:96: 6c:d8:94:17:16:96:5b:f7:0e:6b:2f:89:7d:cd:34: 22:21:b9:07:5d:3c:aa:b2:e9:d6:09:ce:2f:70:12: 49:a1:68:b5:e6:1c:dc:e8:a1:3a:94:22:53:a2:72: 9d:a8:39:91:12:7a:fd:4e:07:28:2f:4b:40:52:06: 69:d1:65:30:ae:04:0b:dd:c6:67:c9:7d:af:b0:1c: 9f:ba:2c:de:d0:06:1e:88:8f:47:e5:e5:d9:5a:d6: 9c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F0:DC:FA:57:AB:32:7B:9F:34:F9:C4:87:3B:70:3C:22:D1:67:28 X509v3 Authority Key Identifier: keyid:A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ef:f6:86:c3:19:18:96:e7:e8:dc:11:4d:2c:20:96:86:2a: 38:72:a3:59:b8:d7:20:32:ea:12:d6:30:e0:87:69:b7:0b:43: 19:06:7c:80:74:2a:b1:5c:57:75:ec:bf:61:28:e3:b6:cb:4e: f4:fc:1e:39:14:86:55:ab:71:2d:67:34:12:37:ea:62:47:7d: c9:ab:2d:12:cc:48:66:3d:2f:6d:05:d7:95:62:28:31:7d:a2: d7:71:81:e1:48:21:ed:2b:97:a9:f3:dd:bd:8d:3d:3c:e5:72: 66:80:92:72:02:20:31:60:5a:e5:9b:55:5b:59:03:d6:f3:a4: c1:d1:82:0a:e1:60:23:f2:51:13:a5:94:94:e9:c4:d1:27:e6: 49:b6:59:cb:e7:0f:23:94:6c:ff:74:8c:68:7a:c6:d2:af:11: 19:c5:4e:40:ac:95:8e:44:96:86:20:e5:03:ef:49:7a:79:20: 39:ec:9c:52:a2:37:de:5d:cd:11:40:d1:fc:0a:fb:6c:8d:8d: 1c:fd:f0:0a:2e:ca:c1:de:6a:4a:00:73:cd:37:28:54:c6:15: 1c:bb:43:f5:9b:62:b7:08:0f:f8:65:1a:f4:b6:cd:e2:ec:48: ee:54:94:a5:2e:d6:f1:18:bd:04:12:51:6c:89:71:79:9a:d0: 2a:48:82:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+HcJFctRzgOmbRmI6P2aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YTc3MDc4YWYzODdiNDhkNzA4MTBlYjE2MDRkZjBhZGUx MThmZGEwHhcNMjUxMjA3MDQwMTA5WhcNMjUxMjA4MDQwMTA5WjAzMTEwLwYDVQQD EygxY2YwZGNmYTU3YWIzMjdiOWYzNGY5YzQ4NzNiNzAzYzIyZDE2NzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN/4gKSnKFhJmiYEmJJvyQ7vu0Ti uQGb9SVBq5OrfDjQv8TSGgXDgZnLjX5I4AYiV07agC9FszPBsohWo5ES14uyXwww cbfdcYI9d1N0G7drToDOzaAXHQ5G1HvlkUSK8tKxmftR1dFWE9FwqKRqInbX4FBz AwNG/euWN+iNVWbHzy5QT7fey0t83FCxHmmd5yP2s9V4cwRmwb7UZue+8aVrrpZs 2JQXFpZb9w5rL4l9zTQiIbkHXTyqsunWCc4vcBJJoWi15hzc6KE6lCJTonKdqDmR Enr9TgcoL0tAUgZp0WUwrgQL3cZnyX2vsByfuize0AYeiI9H5eXZWtac8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzw3PpXqzJ7nzT5xIc7cDwi0WcoMB8GA1UdIwQY MBaAFKencHivOHtI1wgQ6xYE3wreEY/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDZkd2VLODRlMGpYQ0JEckZnVGZDdDRSajlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wMjFmNmItNmZkMC00MzY1LTkyZjct NGRlNDdiODA0NDBhLzEvcDZkd2VLODRlMGpYQ0JEckZnVGZDdDRSajlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8wMjFmNmItNmZkMC00MzY1LTkyZjctNGRlNDdiODA0NDBh LzEvcDZkd2VLODRlMGpYQ0JEckZnVGZDdDRSajlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMu/2hsMZ GJbn6NwRTSwgloYqOHKjWbjXIDLqEtYw4IdptwtDGQZ8gHQqsVxXdey/YSjjtstO 9PweORSGVatxLWc0EjfqYkd9yastEsxIZj0vbQXXlWIoMX2i13GB4Ugh7SuXqfPd vY09POVyZoCScgIgMWBa5ZtVW1kD1vOkwdGCCuFgI/JRE6WUlOnE0SfmSbZZy+cP I5Rs/3SMaHrG0q8RGcVOQKyVjkSWhiDlA+9JenkgOeycUqI33l3NEUDR/Ar7bI2N HP3wCi7Kwd5qSgBzzTcoVMYVHLtD9ZtitwgP+GUa9LbN4uxI7lSUpS7W8Ri9BBJR bIlxeZrQKkiCOQ== -----END CERTIFICATE-----Generated at Sun Dec 7 14:04:09 2025 by rpki-client