This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft File: t6XbvIM8xastSukpfi6rl18cGX0.mft (raw, json) Hash identifier: RUt6s7+a6L/Budvo4Y6AKCFLrUKK7ztgNZWaHR0k9c0= Subject key identifier: 3D:03:C0:F9:D0:B8:B3:90:AD:7F:0D:FB:78:87:68:A6:F6:B9:C1:1C Authority key identifier: B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D Certificate issuer: /CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d Certificate serial: 019B5A1AC3ADDF7A6178417ACD71A6E0B13B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft Manifest number: 082D Signing time: Fri 26 Dec 2025 10:01:01 +0000 Manifest this update: Fri 26 Dec 2025 10:01:01 +0000 Manifest next update: Sat 27 Dec 2025 10:01:01 +0000 Files and hashes: 1: pKIlg5YmNEiNHDYBMKXqIV0XhFU.roa (hash: 516yZ2viMH4DtygFn77E9hucmTi9jK0KgNTpnz+3JZI=) 2: t6XbvIM8xastSukpfi6rl18cGX0.crl (hash: gnS/5E3LETd+1EpPe9D2xE+ixfJaP0lBAE+PrFexYgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:c3:ad:df:7a:61:78:41:7a:cd:71:a6:e0:b1:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d Validity Not Before: Dec 26 10:01:01 2025 GMT Not After : Dec 27 10:01:01 2025 GMT Subject: CN=3d03c0f9d0b8b390ad7f0dfb788768a6f6b9c11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:17:fd:2b:3d:85:cc:a6:5d:5f:21:d3:82:17: 10:1f:6f:f0:f2:d1:9e:82:74:5a:d4:57:02:9e:0a: 1a:72:90:ca:13:7f:58:26:08:62:d6:4b:47:13:2c: ad:47:d9:15:1e:47:24:12:2a:c9:af:9d:98:f8:f0: 6c:43:a2:b0:92:f1:c2:d2:a5:33:22:fc:f7:bb:ef: 90:48:52:5c:1c:50:50:c0:a1:55:5a:29:aa:b8:9a: 37:c8:d6:05:f5:1f:e0:e6:07:f1:12:8e:dc:14:97: 40:0f:a7:6b:f7:90:db:6f:ee:42:80:e3:71:d5:f2: d9:4d:20:05:93:fc:a1:9d:3f:10:d7:1a:3c:d6:65: f5:58:d3:b5:9f:6c:28:09:78:6b:82:c8:52:df:2a: 05:e4:b3:3a:41:d4:6e:d9:32:b6:91:23:58:1f:a0: 30:8d:a1:a4:83:05:10:7b:5a:74:73:50:90:16:55: 65:6a:22:56:c1:47:f9:af:66:06:1c:a0:4f:fd:33: 77:16:7b:1e:29:48:a5:cc:7c:fb:34:1c:a1:9e:c2: 8d:97:50:13:88:ee:6b:a4:a0:4e:8d:f6:40:d0:aa: e5:9f:b0:25:3b:ae:2e:73:cb:c8:3f:67:1e:d8:e6: f0:8b:d0:dd:cd:be:85:6a:db:6b:d0:84:47:3e:3c: 51:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:03:C0:F9:D0:B8:B3:90:AD:7F:0D:FB:78:87:68:A6:F6:B9:C1:1C X509v3 Authority Key Identifier: keyid:B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:a6:7d:06:08:bc:e1:08:89:e0:4d:68:41:e8:72:d5:81:09: 0e:54:90:07:14:88:58:2c:cf:c1:7e:f7:8c:55:41:76:8c:35: 9d:42:87:42:71:63:a8:89:15:b0:67:c9:a1:fa:17:d2:fc:a5: 24:96:d2:52:17:dc:3b:95:71:be:6c:00:37:6d:2f:90:6f:85: 12:38:5b:71:42:ac:3e:df:f5:1f:ab:10:43:f1:54:05:b7:ca: 0e:79:b5:cb:39:39:5d:24:8e:62:fa:05:06:4c:b1:e5:70:66: 22:b3:7e:54:ac:29:55:98:be:09:f0:63:dd:28:21:0b:7c:eb: b5:2d:02:9e:b4:cf:4b:cf:4b:f4:65:34:c0:60:25:b3:b8:08: 49:12:d4:9f:6f:5b:87:50:d1:94:47:ca:a9:81:0d:15:cf:21: 47:4a:bd:f9:f8:dc:05:de:22:e3:78:b6:7f:82:9c:62:3e:3d: 93:c0:18:19:5f:f5:07:1e:da:db:d4:89:9c:71:98:1c:80:c6: bf:e0:59:ce:f6:73:4c:cb:12:b3:92:8f:68:a4:eb:74:d5:21: 13:be:11:34:bb:b5:09:98:10:f6:1e:52:cb:db:a5:23:c0:75: bd:80:54:0e:9a:c7:3c:9a:93:37:6e:eb:09:0c:fe:95:bf:9d: 7d:84:d9:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGsOt33pheEF6zXGm4LE7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YTVkYmJjODMzY2M1YWIyZDRhZTkyOTdlMmVhYjk3NWYx YzE5N2QwHhcNMjUxMjI2MTAwMTAxWhcNMjUxMjI3MTAwMTAxWjAzMTEwLwYDVQQD EygzZDAzYzBmOWQwYjhiMzkwYWQ3ZjBkZmI3ODg3NjhhNmY2YjljMTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBf9Kz2FzKZdXyHTghcQH2/w8tGe gnRa1FcCngoacpDKE39YJghi1ktHEyytR9kVHkckEirJr52Y+PBsQ6KwkvHC0qUz Ivz3u++QSFJcHFBQwKFVWimquJo3yNYF9R/g5gfxEo7cFJdAD6dr95Dbb+5CgONx 1fLZTSAFk/yhnT8Q1xo81mX1WNO1n2woCXhrgshS3yoF5LM6QdRu2TK2kSNYH6Aw jaGkgwUQe1p0c1CQFlVlaiJWwUf5r2YGHKBP/TN3FnseKUilzHz7NByhnsKNl1AT iO5rpKBOjfZA0Krln7AlO64uc8vIP2ce2Obwi9Ddzb6Fattr0IRHPjxRlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0DwPnQuLOQrX8N+3iHaKb2ucEcMB8GA1UdIwQY MBaAFLel27yDPMWrLUrpKX4uq5dfHBl9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZYYnZJTTh4YXN0U3VrcGZpNnJsMThjR1gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80MjlmZjktMDI2NS00NzZmLTkwMzUt NDE5MmEzNTdlYWI3LzEvdDZYYnZJTTh4YXN0U3VrcGZpNnJsMThjR1gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80MjlmZjktMDI2NS00NzZmLTkwMzUtNDE5MmEzNTdlYWI3 LzEvdDZYYnZJTTh4YXN0U3VrcGZpNnJsMThjR1gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqZ9Bgi8 4QiJ4E1oQehy1YEJDlSQBxSIWCzPwX73jFVBdow1nUKHQnFjqIkVsGfJofoX0vyl JJbSUhfcO5VxvmwAN20vkG+FEjhbcUKsPt/1H6sQQ/FUBbfKDnm1yzk5XSSOYvoF Bkyx5XBmIrN+VKwpVZi+CfBj3SghC3zrtS0CnrTPS89L9GU0wGAls7gISRLUn29b h1DRlEfKqYENFc8hR0q9+fjcBd4i43i2f4KcYj49k8AYGV/1Bx7a29SJnHGYHIDG v+BZzvZzTMsSs5KPaKTrdNUhE74RNLu1CZgQ9h5Sy9ulI8B1vYBUDprHPJqTN27r CQz+lb+dfYTZsQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:30 2025 by rpki-client