This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft File: t6j-qPyoAMH8Se8thckuMjdSsO0.mft (raw, json) Hash identifier: 2XIq2JUHq8BkpY84WiHfsu8vtO1kkll80/Qh/MnsBlI= Subject key identifier: 05:E4:0F:06:01:81:CC:5F:AC:A9:E1:BC:C5:25:C3:84:CE:9C:7E:AD Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED Certificate issuer: /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed Certificate serial: 019B3BA2118B32FCA1C2282B1BC3C9E47288 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft Manifest number: 1755 Signing time: Sat 20 Dec 2025 12:00:35 +0000 Manifest this update: Sat 20 Dec 2025 12:00:35 +0000 Manifest next update: Sun 21 Dec 2025 12:00:35 +0000 Files and hashes: 1: 5TC6JtPaOArue3YcZw58kMkX_gQ.roa (hash: 8vxNN4NZRh1zE+O+pnXNTkgLjPcYvbg7k5S7vJax1zs=) 2: t6j-qPyoAMH8Se8thckuMjdSsO0.crl (hash: f/JO6AR98LveZVBKsOGN03bOUFSvEijVKgnRof/bg5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:11:8b:32:fc:a1:c2:28:2b:1b:c3:c9:e4:72:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed Validity Not Before: Dec 20 12:00:35 2025 GMT Not After : Dec 21 12:00:35 2025 GMT Subject: CN=05e40f060181cc5faca9e1bcc525c384ce9c7ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:39:ba:a8:45:63:3b:2e:9f:f1:7b:50:1a:a4: 1f:44:cc:8d:df:a1:b5:94:be:3c:f6:2b:67:f0:2f: 49:78:a3:1e:30:18:37:83:cf:69:53:09:50:67:7c: 15:3a:27:39:55:f5:6f:57:35:14:ef:4b:34:1b:a5: d5:9c:d9:7c:f1:38:f3:8f:73:c5:cc:ab:98:0e:8f: 11:10:74:d0:df:3e:1d:8b:5e:66:bc:e1:4b:6a:11: 04:95:07:23:20:6d:7c:f7:39:14:43:56:56:2a:49: 26:f7:f2:59:ed:39:19:5c:90:35:88:22:62:e7:cc: 85:8f:4d:44:3c:44:d9:37:91:32:aa:37:75:49:d7: a3:bd:71:d8:53:fe:fa:19:a4:9e:27:df:61:65:b2: 53:8b:a0:cc:a9:c2:17:c7:4c:87:78:85:a2:5d:0e: ed:51:16:46:4b:9b:6e:20:3f:bb:8c:42:c2:6f:67: ce:43:85:6f:e4:ba:a5:41:37:80:61:be:ef:60:d9: 02:7f:f8:a1:ba:b1:42:dc:a1:60:6f:c7:ce:ee:63: ca:4d:9f:5e:23:da:68:ae:d0:2d:86:d8:f3:e3:b8: 99:8d:c8:c5:b8:41:96:9d:4d:38:21:60:53:fe:93: 94:fa:06:b0:5e:b9:bc:c7:ce:5e:42:f8:bf:f3:29: b4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E4:0F:06:01:81:CC:5F:AC:A9:E1:BC:C5:25:C3:84:CE:9C:7E:AD X509v3 Authority Key Identifier: keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b5:42:90:cc:16:ae:75:b2:a3:f7:c6:42:80:8e:b7:07:14: 06:fb:8a:04:8b:44:97:c1:85:f8:a8:f7:bb:4d:01:9e:a1:c9: 1c:3d:3c:d0:01:f7:44:81:c4:1e:94:4e:4f:55:6d:0b:1b:20: dd:a9:0c:88:33:bf:d7:d7:8c:25:a4:ae:4f:3d:17:00:d0:01: 2c:ca:03:ae:28:1c:bd:15:29:f1:c6:56:be:ac:ed:1f:ef:51: 71:cf:78:71:3d:6e:fc:bf:a0:d2:ff:f4:4e:3a:62:9f:14:99: ac:99:9c:81:1e:fb:7e:d7:68:4e:f3:12:c6:93:80:97:bc:bb: ea:74:d6:88:b6:4e:0a:74:82:34:f8:e0:27:82:04:9b:11:a0: 8d:86:9c:06:67:42:23:0f:69:92:86:90:d7:f0:d2:11:ab:ed: ed:15:1a:96:ae:89:cb:6d:3b:74:e3:97:9c:8b:31:07:3d:d0: 60:16:c1:5e:f5:a2:24:dd:01:92:5d:86:0a:d1:7f:f6:8b:d0: 4d:09:3f:b3:68:ec:54:a8:03:b3:05:ff:ec:52:7e:ea:2e:d2: 9f:af:e0:89:48:e3:a1:fe:87:2c:a8:11:66:29:04:da:48:a4: 2f:36:60:76:4b:df:ce:7b:94:af:24:83:75:c0:c3:a3:68:b9: 3d:6c:dc:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ohGLMvyhwigrG8PJ5HKIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YThmZWE4ZmNhODAwYzFmYzQ5ZWYyZDg1YzkyZTMyMzc1 MmIwZWQwHhcNMjUxMjIwMTIwMDM1WhcNMjUxMjIxMTIwMDM1WjAzMTEwLwYDVQQD EygwNWU0MGYwNjAxODFjYzVmYWNhOWUxYmNjNTI1YzM4NGNlOWM3ZWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTm6qEVjOy6f8XtQGqQfRMyN36G1 lL489itn8C9JeKMeMBg3g89pUwlQZ3wVOic5VfVvVzUU70s0G6XVnNl88Tjzj3PF zKuYDo8REHTQ3z4di15mvOFLahEElQcjIG189zkUQ1ZWKkkm9/JZ7TkZXJA1iCJi 58yFj01EPETZN5Eyqjd1SdejvXHYU/76GaSeJ99hZbJTi6DMqcIXx0yHeIWiXQ7t URZGS5tuID+7jELCb2fOQ4Vv5LqlQTeAYb7vYNkCf/ihurFC3KFgb8fO7mPKTZ9e I9portAthtjz47iZjcjFuEGWnU04IWBT/pOU+gawXrm8x85eQvi/8ym0fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXkDwYBgcxfrKnhvMUlw4TOnH6tMB8GA1UdIwQY MBaAFLeo/qj8qADB/EnvLYXJLjI3UrDtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jZTE2NDMtYzA4ZC00MGY2LTk0NDQt YWY3MTRhZDUyZjI5LzEvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9jZTE2NDMtYzA4ZC00MGY2LTk0NDQtYWY3MTRhZDUyZjI5 LzEvdDZqLXFQeW9BTUg4U2U4dGhja3VNamRTc08wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILVCkMwW rnWyo/fGQoCOtwcUBvuKBItEl8GF+Kj3u00BnqHJHD080AH3RIHEHpROT1VtCxsg 3akMiDO/19eMJaSuTz0XANABLMoDrigcvRUp8cZWvqztH+9Rcc94cT1u/L+g0v/0 TjpinxSZrJmcgR77ftdoTvMSxpOAl7y76nTWiLZOCnSCNPjgJ4IEmxGgjYacBmdC Iw9pkoaQ1/DSEavt7RUalq6Jy207dOOXnIsxBz3QYBbBXvWiJN0Bkl2GCtF/9ovQ TQk/s2jsVKgDswX/7FJ+6i7Sn6/giUjjof6HLKgRZikE2kikLzZgdkvfznuUrySD dcDDo2i5PWzcLg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:51:01 2025 by rpki-client