This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft File: P6xpra8ADdd6SwAYd8JYoh0f9qA.mft (raw, json) Hash identifier: hwaHxedfwkP/EnXVA438NRAjG2H31KZYflib1ZWnskQ= Subject key identifier: 63:0D:CB:A5:1C:26:AB:5C:D2:4C:1D:E0:25:2E:17:D1:53:F9:2C:09 Authority key identifier: 3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0 Certificate issuer: /CN=3fac69adaf000dd77a4b001877c258a21d1ff6a0 Certificate serial: 019B42B79D9BDD6238614FC3194E41C250DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft Manifest number: 1088 Signing time: Sun 21 Dec 2025 21:01:28 +0000 Manifest this update: Sun 21 Dec 2025 21:01:28 +0000 Manifest next update: Mon 22 Dec 2025 21:01:28 +0000 Files and hashes: 1: P6xpra8ADdd6SwAYd8JYoh0f9qA.crl (hash: o4YTNhEtHjmwbFpWFloR1AFwgF5w2/c2ntgnc5WgolI=) 2: pGti5NOwKPTLx4Ly3hXPkfnIdHY.roa (hash: hGj1ei60T0pZizrlmStFTjFUv40NzLgMUG+0J0UuEdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:9d:9b:dd:62:38:61:4f:c3:19:4e:41:c2:50:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fac69adaf000dd77a4b001877c258a21d1ff6a0 Validity Not Before: Dec 21 21:01:28 2025 GMT Not After : Dec 22 21:01:28 2025 GMT Subject: CN=630dcba51c26ab5cd24c1de0252e17d153f92c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:96:2b:75:06:c9:9c:a7:fb:c0:f0:00:24:d6: 9b:9d:7d:c9:f1:6a:7f:37:3a:e5:ce:f5:ba:13:0e: 90:1f:e8:26:05:31:e1:a9:e6:7d:a7:c8:08:26:6a: 05:e8:9a:47:77:86:19:44:d9:93:e6:fe:b1:8c:1e: 68:4a:44:8e:6d:8e:c6:c7:33:26:27:a5:40:ff:c6: 3c:bb:69:94:a5:f4:97:42:a0:de:64:9a:a6:f4:90: 0a:c9:a3:c2:a5:8f:76:67:80:ce:ff:37:1b:77:df: 4b:20:c3:e8:43:2a:e3:b2:30:60:af:c3:35:af:02: 37:3c:e0:4c:a1:04:ee:66:75:5d:70:23:61:37:5b: 31:e9:c3:2c:c6:bb:50:7e:cf:b3:32:76:b7:d6:5a: 55:77:a4:dd:28:b3:43:79:17:1b:01:dc:74:09:95: 08:c3:55:5a:60:a2:61:26:d1:cc:fd:b3:ab:9e:42: 19:14:2d:67:7c:f5:2b:4f:8e:0d:ea:ef:45:1d:32: 95:36:97:5c:3f:3d:e1:d3:5e:68:f1:f5:e8:8e:78: da:61:e4:0c:e6:df:73:e9:cf:05:44:f2:b3:cd:23: 95:5e:dd:c5:74:00:f3:7d:59:f3:49:55:00:01:27: d4:7c:2b:c2:12:9e:0e:14:f3:a5:08:e3:42:6b:c7: 23:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0D:CB:A5:1C:26:AB:5C:D2:4C:1D:E0:25:2E:17:D1:53:F9:2C:09 X509v3 Authority Key Identifier: keyid:3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1b:ff:e2:07:bb:69:55:38:aa:33:f8:46:36:01:e0:8e:86: 9d:40:46:80:12:4d:72:ae:34:d5:c1:82:1c:0a:32:aa:ea:9f: c4:6d:f2:7b:82:2b:9d:22:cd:e2:42:63:cf:ed:f2:3d:2d:24: 51:2e:9b:d7:1a:26:a1:ad:b1:1e:34:c2:a5:d6:aa:1c:84:9e: 79:ef:96:a7:cc:35:9a:03:99:0f:a7:bc:46:2b:04:11:8e:d9: 22:df:f8:1e:d1:85:c2:c7:41:7b:04:66:0b:a4:c5:1b:32:f0: 9b:c3:9b:70:65:9e:60:19:9b:5f:ab:9f:41:02:cb:ce:ef:9b: b5:03:d0:55:e4:b2:01:85:9a:58:53:fb:80:a9:2f:50:67:f5: 69:62:ef:c5:e4:c3:eb:67:67:f1:04:1d:bd:29:14:9d:eb:c7: f4:68:e1:13:bb:fa:e5:2b:2d:6d:c9:62:27:65:98:89:3a:b6: bb:53:28:e2:e3:bf:ad:70:78:23:fa:9e:16:26:86:f2:6e:1e: 70:bf:e6:5e:98:07:d6:25:bd:aa:b1:3a:a7:04:31:50:ae:68: e1:31:22:c0:7a:b9:dc:e4:05:42:02:92:95:5a:49:44:37:6c: c8:7f:f5:8d:7b:a8:10:0f:5b:c2:e7:3f:20:97:1e:23:12:b6: fb:86:42:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt52b3WI4YU/DGU5BwlDeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmYWM2OWFkYWYwMDBkZDc3YTRiMDAxODc3YzI1OGEyMWQx ZmY2YTAwHhcNMjUxMjIxMjEwMTI4WhcNMjUxMjIyMjEwMTI4WjAzMTEwLwYDVQQD Eyg2MzBkY2JhNTFjMjZhYjVjZDI0YzFkZTAyNTJlMTdkMTUzZjkyYzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pYrdQbJnKf7wPAAJNabnX3J8Wp/ NzrlzvW6Ew6QH+gmBTHhqeZ9p8gIJmoF6JpHd4YZRNmT5v6xjB5oSkSObY7GxzMm J6VA/8Y8u2mUpfSXQqDeZJqm9JAKyaPCpY92Z4DO/zcbd99LIMPoQyrjsjBgr8M1 rwI3POBMoQTuZnVdcCNhN1sx6cMsxrtQfs+zMna31lpVd6TdKLNDeRcbAdx0CZUI w1VaYKJhJtHM/bOrnkIZFC1nfPUrT44N6u9FHTKVNpdcPz3h015o8fXojnjaYeQM 5t9z6c8FRPKzzSOVXt3FdADzfVnzSVUAASfUfCvCEp4OFPOlCONCa8cjNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMNy6UcJqtc0kwd4CUuF9FT+SwJMB8GA1UdIwQY MBaAFD+saa2vAA3XeksAGHfCWKIdH/agMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDZ4cHJhOEFEZGQ2U3dBWWQ4SllvaDBmOXFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kNTAzZmQtOWQ0Yi00NTYzLTljZGYt YjZlMGYzZTk1Y2FkLzEvUDZ4cHJhOEFEZGQ2U3dBWWQ4SllvaDBmOXFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kNTAzZmQtOWQ0Yi00NTYzLTljZGYtYjZlMGYzZTk1Y2Fk LzEvUDZ4cHJhOEFEZGQ2U3dBWWQ4SllvaDBmOXFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxv/4ge7 aVU4qjP4RjYB4I6GnUBGgBJNcq401cGCHAoyquqfxG3ye4IrnSLN4kJjz+3yPS0k US6b1xomoa2xHjTCpdaqHISeee+Wp8w1mgOZD6e8RisEEY7ZIt/4HtGFwsdBewRm C6TFGzLwm8ObcGWeYBmbX6ufQQLLzu+btQPQVeSyAYWaWFP7gKkvUGf1aWLvxeTD 62dn8QQdvSkUnevH9GjhE7v65SstbcliJ2WYiTq2u1Mo4uO/rXB4I/qeFiaG8m4e cL/mXpgH1iW9qrE6pwQxUK5o4TEiwHq53OQFQgKSlVpJRDdsyH/1jXuoEA9bwuc/ IJceIxK2+4ZCSA== -----END CERTIFICATE-----Generated at Sun Dec 21 23:12:50 2025 by rpki-client