This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft File: 10L6T7KPryihjordTBDJYzfDxMU.mft (raw, json) Hash identifier: aqtNlsEBpThsMGnjTAfMRnsEFge/NeXw5tI87uyr6PA= Subject key identifier: 25:83:26:6E:73:09:52:27:F6:5A:6D:26:56:C1:DA:58:AE:CE:95:1E Authority key identifier: D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5 Certificate issuer: /CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5 Certificate serial: 019B32D6EA201A726E08D5652C15A386FBC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 19:01:43 +0000 Manifest this update: Thu 18 Dec 2025 19:01:43 +0000 Manifest next update: Fri 19 Dec 2025 19:01:43 +0000 Files and hashes: 1: 10L6T7KPryihjordTBDJYzfDxMU.crl (hash: mmJUbpVnGNawW/sLII/SvviZelNpSeCMPSRYmb3O788=) 2: DIiJmhkGPOYoFSzKU5OJGHxPZv0.roa (hash: wVFQMX+v03An5N7stfoX0LOfftlraoV2nDd1HWqmadg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:ea:20:1a:72:6e:08:d5:65:2c:15:a3:86:fb:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5 Validity Not Before: Dec 18 19:01:43 2025 GMT Not After : Dec 19 19:01:43 2025 GMT Subject: CN=2583266e73095227f65a6d2656c1da58aece951e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:39:25:4d:05:59:1d:d7:c2:57:de:86:03:d6: ba:da:88:40:3b:76:20:2c:ee:5e:75:07:be:35:6e: 9e:6d:64:11:b5:90:5a:b3:c4:ea:43:84:0a:35:bf: 49:58:ac:fe:0f:a6:cc:45:31:78:0f:4a:35:dd:67: 98:40:8a:e1:44:90:f4:6f:7f:3f:16:7b:71:c0:bf: e7:0f:ba:2a:e1:55:5e:5e:d4:75:ad:d6:54:bb:10: 3d:6b:b7:ba:bc:98:84:c5:dd:53:b2:12:b4:e4:dc: cf:42:9e:54:b4:45:68:78:2f:39:8a:24:2a:35:37: 2c:f5:56:70:3a:ae:ff:d8:65:5d:a5:9a:74:da:bc: d4:e6:b9:b5:4d:01:de:f9:66:8d:a2:d4:17:4a:55: 13:df:90:69:f8:5d:ed:50:53:91:3d:c9:2e:bf:73: 63:8c:39:3d:e3:29:cc:95:6f:d4:39:12:bd:1b:c1: c7:54:80:d1:42:02:94:36:d9:70:e1:9f:8e:77:93: ba:62:b7:6c:87:0d:8c:23:17:91:63:8e:f3:bc:55: 7c:04:01:f2:ff:9b:35:64:25:d0:fa:c0:29:58:c4: b2:86:bb:da:9f:ee:80:4c:ad:02:7b:75:85:8c:ea: 9f:c0:d1:38:16:91:17:32:05:50:25:55:22:a2:ea: a1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:83:26:6E:73:09:52:27:F6:5A:6D:26:56:C1:DA:58:AE:CE:95:1E X509v3 Authority Key Identifier: keyid:D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:6f:44:03:b8:b5:c0:38:eb:dd:e8:12:31:62:73:0c:a6:f7: 7a:df:b9:d0:0e:64:e2:89:7a:b8:d3:b1:9d:1a:53:96:57:af: 6d:74:e8:8f:6b:66:3e:49:fb:28:fa:ba:b5:ec:a4:ab:66:72: 11:b7:a6:ef:e1:d6:47:70:c9:4f:1b:3e:9c:b4:a7:cd:e9:7e: f3:0d:d0:0b:7c:6d:c3:72:0b:91:be:d7:a7:1c:4e:7f:8a:74: 8f:71:af:f1:25:43:72:ee:fe:8b:3f:56:6b:56:c2:17:b9:75: 92:02:e4:0c:97:47:84:a0:60:4b:16:6d:d9:76:54:77:6a:fa: 22:a7:46:68:42:cd:1a:e4:2d:15:7a:c2:6a:57:35:a9:3b:c8: 4d:0f:7a:78:c8:b7:03:c3:5f:96:0b:d7:67:58:7e:63:17:16: fc:a3:e4:e1:13:1e:47:ee:c0:d6:f1:09:79:b1:2a:95:6c:06: 4b:0b:fa:5a:ab:68:01:5c:0a:6a:25:6b:3e:96:9d:66:3f:37: 39:cd:0c:86:28:fb:03:30:c1:82:a9:ab:d0:46:8a:40:d2:07: 5d:fb:58:13:d1:ca:20:92:9b:be:28:b8:93:b7:20:e3:12:5b: 7e:8a:70:97:ff:7b:cf:eb:da:27:f7:9b:b4:f9:8b:3a:b2:48: 45:ee:38:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1uogGnJuCNVlLBWjhvvHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDJmYTRmYjI4ZmFmMjhhMThlOGFkZDRjMTBjOTYzMzdj M2M0YzUwHhcNMjUxMjE4MTkwMTQzWhcNMjUxMjE5MTkwMTQzWjAzMTEwLwYDVQQD EygyNTgzMjY2ZTczMDk1MjI3ZjY1YTZkMjY1NmMxZGE1OGFlY2U5NTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDklTQVZHdfCV96GA9a62ohAO3Yg LO5edQe+NW6ebWQRtZBas8TqQ4QKNb9JWKz+D6bMRTF4D0o13WeYQIrhRJD0b38/ FntxwL/nD7oq4VVeXtR1rdZUuxA9a7e6vJiExd1TshK05NzPQp5UtEVoeC85iiQq NTcs9VZwOq7/2GVdpZp02rzU5rm1TQHe+WaNotQXSlUT35Bp+F3tUFORPckuv3Nj jDk94ynMlW/UORK9G8HHVIDRQgKUNtlw4Z+Od5O6Yrdshw2MIxeRY47zvFV8BAHy /5s1ZCXQ+sApWMSyhrvan+6ATK0Ce3WFjOqfwNE4FpEXMgVQJVUiouqh+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWDJm5zCVIn9lptJlbB2liuzpUeMB8GA1UdIwQY MBaAFNdC+k+yj68ooY6K3UwQyWM3w8TFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBMNlQ3S1ByeWloam9yZFRCREpZemZEeE1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83MDNiZDYtMWIyZi00MDgzLWIxZTct N2E1ZjYwMTg5YzUxLzEvMTBMNlQ3S1ByeWloam9yZFRCREpZemZEeE1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83MDNiZDYtMWIyZi00MDgzLWIxZTctN2E1ZjYwMTg5YzUx LzEvMTBMNlQ3S1ByeWloam9yZFRCREpZemZEeE1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArG9EA7i1 wDjr3egSMWJzDKb3et+50A5k4ol6uNOxnRpTllevbXToj2tmPkn7KPq6teykq2Zy Ebem7+HWR3DJTxs+nLSnzel+8w3QC3xtw3ILkb7XpxxOf4p0j3Gv8SVDcu7+iz9W a1bCF7l1kgLkDJdHhKBgSxZt2XZUd2r6IqdGaELNGuQtFXrCalc1qTvITQ96eMi3 A8NflgvXZ1h+YxcW/KPk4RMeR+7A1vEJebEqlWwGSwv6WqtoAVwKaiVrPpadZj83 Oc0Mhij7AzDBgqmr0EaKQNIHXftYE9HKIJKbvii4k7cg4xJbfopwl/97z+vaJ/eb tPmLOrJIRe44wA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:02:24 2025 by rpki-client