This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json) Hash identifier: 6f1iHznKDiJfWp5HPqXYQyATxLN4LXBbdUM/mlUw6FE= Subject key identifier: EF:9A:2F:41:72:BE:34:68:D1:45:42:61:A6:63:CF:BA:17:A0:09:43 Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5 Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5 Certificate serial: 019B6E0F834B6F99724FEEC3259AEA9DD78A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft Manifest number: 1012 Signing time: Tue 30 Dec 2025 07:01:08 +0000 Manifest this update: Tue 30 Dec 2025 07:01:08 +0000 Manifest next update: Wed 31 Dec 2025 07:01:08 +0000 Files and hashes: 1: StPgXcpmiy5JYaEeTseShVrOOPw.roa (hash: 2TP419yQVLSPbiDET0BATqZqoaVVJJbtbUq/1dj+vY4=) 2: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: y+cCFE8fVDTS7uN1RGVBaIAygjfUeVl/4nXCbCeLSbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:0f:83:4b:6f:99:72:4f:ee:c3:25:9a:ea:9d:d7:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5 Validity Not Before: Dec 30 07:01:08 2025 GMT Not After : Dec 31 07:01:08 2025 GMT Subject: CN=ef9a2f4172be3468d1454261a663cfba17a00943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d4:8f:1e:55:6c:c1:2d:c8:a9:82:32:bb:74: 79:24:c0:47:0d:62:64:54:35:0b:c3:0c:9e:a1:41: 27:39:ce:1b:a9:d4:f6:d1:3b:99:18:27:72:a3:a8: 18:7e:93:96:44:b0:de:37:3b:93:2a:70:6d:ee:87: 94:10:90:f7:1c:07:08:44:ee:14:f4:c2:d9:41:f1: 3a:f2:81:25:6f:e4:61:01:ed:be:fb:bf:5d:0c:80: 0a:ec:bb:b7:0a:47:66:24:5f:9b:1b:14:db:ea:90: 08:19:e5:df:0b:69:e1:7d:4c:a2:20:db:cc:1c:41: 19:6e:ce:d3:d4:af:58:98:67:29:76:cd:af:75:cd: 3e:75:7f:f5:c8:0f:fb:c9:78:ad:c6:85:17:d9:80: fb:64:6a:74:c9:ef:0d:0f:ec:9c:c5:90:bc:e8:e6: e8:c3:19:47:ad:9b:b0:44:b2:f5:f4:ae:96:5f:4b: 78:65:70:71:c1:3f:04:67:2a:df:41:19:b1:dc:f2: c3:3b:6a:c1:1a:46:54:6e:4a:d3:69:98:99:21:c4: 68:98:14:58:3e:b2:f0:f4:68:3e:87:7a:49:8d:d2: d0:69:cd:fe:3a:c0:fa:e8:ea:a4:f6:da:da:e0:43: 66:42:17:92:0c:3c:83:15:cb:5a:32:b9:cb:70:8d: b1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9A:2F:41:72:BE:34:68:D1:45:42:61:A6:63:CF:BA:17:A0:09:43 X509v3 Authority Key Identifier: keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:6c:9f:c4:b2:cc:d5:a3:66:f8:f3:ba:06:dc:9a:a2:8e:a0: 35:82:cc:31:10:e8:9c:0e:bb:89:48:ac:df:aa:a8:72:84:de: e5:48:07:9b:1d:3c:db:d5:eb:16:77:cb:bc:f5:93:13:d4:59: 32:b6:43:85:9b:4c:84:87:ab:5a:f9:05:25:67:b8:75:ac:45: 41:f8:b1:95:66:e9:a8:93:3e:80:25:d8:1b:33:d8:b6:67:dd: 25:8f:43:53:1b:9b:e6:71:ba:69:b6:b4:d7:37:8b:00:2d:6b: b2:5f:cd:3d:b0:30:e8:ff:7d:4b:bb:d4:a3:47:03:ab:a7:08: 60:8e:cc:2e:8d:5e:3f:77:ba:57:44:12:f5:c4:f8:d5:e8:c0: 46:55:f0:76:e5:ec:8b:a3:f1:c9:28:b1:ce:94:74:a6:89:60: 4f:7e:41:67:a9:05:7c:7a:ac:c9:dd:de:28:20:2a:4e:13:24: ac:e8:57:83:bb:33:16:7b:7d:6b:a3:b9:eb:4f:39:19:e2:6f: 80:b0:c0:1e:be:d9:d3:a1:f9:2c:d0:7a:9c:6e:a5:31:62:18: 5e:70:07:3e:39:95:7c:4b:e2:0d:2a:34:01:e5:09:e7:d8:8b: db:f8:e1:45:d5:b6:ef:1d:32:88:24:ed:0e:fe:0f:fb:52:65: 58:b8:42:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuD4NLb5lyT+7DJZrqndeKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YTljMzRkM2Y4NDNjZGIwMzViN2MzMGIzZTg0ZTIyNDEy NTIyYzUwHhcNMjUxMjMwMDcwMTA4WhcNMjUxMjMxMDcwMTA4WjAzMTEwLwYDVQQD EyhlZjlhMmY0MTcyYmUzNDY4ZDE0NTQyNjFhNjYzY2ZiYTE3YTAwOTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdSPHlVswS3IqYIyu3R5JMBHDWJk VDULwwyeoUEnOc4bqdT20TuZGCdyo6gYfpOWRLDeNzuTKnBt7oeUEJD3HAcIRO4U 9MLZQfE68oElb+RhAe2++79dDIAK7Lu3CkdmJF+bGxTb6pAIGeXfC2nhfUyiINvM HEEZbs7T1K9YmGcpds2vdc0+dX/1yA/7yXitxoUX2YD7ZGp0ye8ND+ycxZC86Obo wxlHrZuwRLL19K6WX0t4ZXBxwT8EZyrfQRmx3PLDO2rBGkZUbkrTaZiZIcRomBRY PrLw9Gg+h3pJjdLQac3+OsD66Oqk9tra4ENmQheSDDyDFctaMrnLcI2xDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+aL0FyvjRo0UVCYaZjz7oXoAlDMB8GA1UdIwQY MBaAFLepw00/hDzbA1t8MLPoTiJBJSLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEt M2E1NzY4MDIxNDE4LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEtM2E1NzY4MDIxNDE4 LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWyfxLLM 1aNm+PO6Btyaoo6gNYLMMRDonA67iUis36qocoTe5UgHmx0829XrFnfLvPWTE9RZ MrZDhZtMhIerWvkFJWe4daxFQfixlWbpqJM+gCXYGzPYtmfdJY9DUxub5nG6aba0 1zeLAC1rsl/NPbAw6P99S7vUo0cDq6cIYI7MLo1eP3e6V0QS9cT41ejARlXwduXs i6PxySixzpR0polgT35BZ6kFfHqsyd3eKCAqThMkrOhXg7szFnt9a6O56085GeJv gLDAHr7Z06H5LNB6nG6lMWIYXnAHPjmVfEviDSo0AeUJ59iL2/jhRdW27x0yiCTt Dv4P+1JlWLhCSg== -----END CERTIFICATE-----Generated at Tue Dec 30 10:53:54 2025 by rpki-client