This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft File: d6Hu06zg_C-KoADeaHpJvv0nkdg.mft (raw, json) Hash identifier: dFAbYaLUM7LRdS2xaAIXL7m9Ef2HXvF0eUYJbdFgdKo= Subject key identifier: FA:B4:71:D9:58:3C:CD:13:91:43:8D:04:3A:03:A4:28:BB:BC:15:C7 Authority key identifier: 77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8 Certificate issuer: /CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8 Certificate serial: 019B356957A32EEA046A22E9E4B46E1CBE78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft Manifest number: 1073 Signing time: Fri 19 Dec 2025 07:00:54 +0000 Manifest this update: Fri 19 Dec 2025 07:00:54 +0000 Manifest next update: Sat 20 Dec 2025 07:00:54 +0000 Files and hashes: 1: 1tIKgu9zIxn-X__dh7X40Ez2yro.roa (hash: I7j76og90Bzenb6NN5y/FV3ZxjjrPcp5unqi/MuouAM=) 2: d6Hu06zg_C-KoADeaHpJvv0nkdg.crl (hash: kVzZmeuJcd195PGlnGzNSIaDF0NQWAWr3px0yyjXxDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:57:a3:2e:ea:04:6a:22:e9:e4:b4:6e:1c:be:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8 Validity Not Before: Dec 19 07:00:54 2025 GMT Not After : Dec 20 07:00:54 2025 GMT Subject: CN=fab471d9583ccd1391438d043a03a428bbbc15c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:0f:79:fa:24:29:b4:e7:f5:37:8b:1a:05: 66:30:85:bc:a4:c2:44:87:45:86:0b:ac:51:e4:d6: e5:6c:39:7f:4e:0e:fa:e5:03:37:c9:30:e5:9f:b4: cf:d8:5e:aa:70:41:3e:41:a9:d0:38:3e:36:aa:8b: ef:8c:10:ca:91:9a:2f:71:d0:aa:ff:c6:d2:5e:9d: 00:ac:c4:55:7f:bc:cd:87:3b:78:23:68:16:f0:38: a6:00:3c:aa:6a:9e:18:5e:87:51:77:52:08:a9:9a: bf:bb:58:c6:50:74:fb:76:38:bc:bb:b8:11:33:5d: 9c:bb:73:07:0d:d3:99:b3:1b:cd:09:1f:d8:c5:f3: 13:ea:52:b3:b9:84:3c:b4:d3:d8:ac:43:43:42:93: 9c:af:fc:44:e4:d2:97:12:cb:64:62:a2:b6:a5:d9: e9:7d:30:a8:76:d4:45:5a:07:f9:ac:92:8f:5a:ff: 35:4a:6f:38:70:2d:5b:e6:a6:21:fc:bb:a5:dc:aa: dd:06:e6:6c:3f:17:a6:90:0c:b9:41:2b:f8:fe:93: 4a:5d:24:58:b1:93:16:be:e2:15:5a:29:90:23:f9: 02:1a:5a:11:e1:b1:64:ca:5f:98:5b:0a:d8:b0:84: 0d:f1:35:d1:1f:f1:f7:9a:c7:bb:7d:ef:c7:9a:e7: 05:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B4:71:D9:58:3C:CD:13:91:43:8D:04:3A:03:A4:28:BB:BC:15:C7 X509v3 Authority Key Identifier: keyid:77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:60:da:7d:65:9c:19:d7:56:31:ec:26:b7:b1:38:d4:57:df: 3c:3f:86:c8:d2:d2:37:74:3f:c0:1c:79:da:3c:1f:3a:ae:ab: 87:27:58:f9:96:69:51:be:7f:0a:a3:81:5c:71:33:c1:1c:b6: 6d:1d:ec:6c:b4:fd:ad:6a:8b:55:91:64:21:18:b2:b0:b4:e3: 84:a5:ea:9f:d2:3b:6f:16:87:5e:6c:0b:db:2d:0f:12:f4:fd: 14:13:bb:51:4f:67:73:7a:e4:14:31:e9:1b:5e:b2:bd:15:38: d3:da:8c:8f:97:3f:55:b6:fe:85:fe:12:a0:9b:9d:4c:8c:84: b3:69:0c:0f:54:da:4d:c5:25:90:5f:97:ae:7f:e0:28:e2:bc: e7:aa:4c:ba:5e:0c:f4:62:f2:f8:c7:38:b6:34:a5:fa:71:0c: 92:83:2c:49:ef:44:38:81:1c:6f:a7:2c:32:3e:b8:6c:98:d6: 15:68:e0:df:6b:aa:95:1a:ba:d7:b0:83:51:99:9c:d1:2d:0b: 3d:01:2c:56:ba:f7:e1:49:e6:45:e0:b7:ff:fc:a6:2a:85:d7: 9d:89:c9:4b:55:c0:72:85:2f:f6:26:08:fb:78:43:9e:a1:9a: 3c:d8:25:6f:13:9a:74:a3:ec:f1:bc:e9:62:98:60:37:d6:26: 4a:01:5d:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aVejLuoEaiLp5LRuHL54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YTFlZWQzYWNlMGZjMmY4YWEwMDBkZTY4N2E0OWJlZmQy NzkxZDgwHhcNMjUxMjE5MDcwMDU0WhcNMjUxMjIwMDcwMDU0WjAzMTEwLwYDVQQD EyhmYWI0NzFkOTU4M2NjZDEzOTE0MzhkMDQzYTAzYTQyOGJiYmMxNWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9kPefokKbTn9TeLGgVmMIW8pMJE h0WGC6xR5NblbDl/Tg765QM3yTDln7TP2F6qcEE+QanQOD42qovvjBDKkZovcdCq /8bSXp0ArMRVf7zNhzt4I2gW8DimADyqap4YXodRd1IIqZq/u1jGUHT7dji8u7gR M12cu3MHDdOZsxvNCR/YxfMT6lKzuYQ8tNPYrENDQpOcr/xE5NKXEstkYqK2pdnp fTCodtRFWgf5rJKPWv81Sm84cC1b5qYh/Lul3KrdBuZsPxemkAy5QSv4/pNKXSRY sZMWvuIVWimQI/kCGloR4bFkyl+YWwrYsIQN8TXRH/H3mse7fe/HmucFIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPq0cdlYPM0TkUONBDoDpCi7vBXHMB8GA1UdIwQY MBaAFHeh7tOs4PwviqAA3mh6Sb79J5HYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDZIdTA2emdfQy1Lb0FEZWFIcEp2djBua2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80ZjNlMTEtZmQwZi00ZTcxLTkzNjkt MjIwNGVlMjE3MjgwLzEvZDZIdTA2emdfQy1Lb0FEZWFIcEp2djBua2RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80ZjNlMTEtZmQwZi00ZTcxLTkzNjktMjIwNGVlMjE3Mjgw LzEvZDZIdTA2emdfQy1Lb0FEZWFIcEp2djBua2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGDafWWc GddWMewmt7E41FffPD+GyNLSN3Q/wBx52jwfOq6rhydY+ZZpUb5/CqOBXHEzwRy2 bR3sbLT9rWqLVZFkIRiysLTjhKXqn9I7bxaHXmwL2y0PEvT9FBO7UU9nc3rkFDHp G16yvRU409qMj5c/Vbb+hf4SoJudTIyEs2kMD1TaTcUlkF+Xrn/gKOK856pMul4M 9GLy+Mc4tjSl+nEMkoMsSe9EOIEcb6csMj64bJjWFWjg32uqlRq617CDUZmc0S0L PQEsVrr34UnmReC3//ymKoXXnYnJS1XAcoUv9iYI+3hDnqGaPNglbxOadKPs8bzp YphgN9YmSgFd3Q== -----END CERTIFICATE-----Generated at Fri Dec 19 14:32:32 2025 by rpki-client