This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft File: R6guVXeaHqTvmWf4IdXMBbe9mek.mft (raw, json) Hash identifier: 7fCDnoyteJP7DGf5+rMNVzVperVLLNzY0D8+wGvjHRg= Subject key identifier: 25:50:75:BE:8C:64:EB:54:20:C9:C2:78:13:94:90:56:22:61:7D:FB Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9 Certificate issuer: /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9 Certificate serial: 019B3C1071D2FA61C151E7D132477BBDC8B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 14:01:09 +0000 Manifest this update: Sat 20 Dec 2025 14:01:09 +0000 Manifest next update: Sun 21 Dec 2025 14:01:09 +0000 Files and hashes: 1: CFUwFBzQtfgbafFzZOyLhQjWkGM.roa (hash: 97CGeBu3yLbE5oYRJj25Ylb6GhnLEinlvUvhqt045H4=) 2: R6guVXeaHqTvmWf4IdXMBbe9mek.crl (hash: 8RljmCpW5PqSiaU3m8+DH6pulQ4rpr0UL9+CM4XEJjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:71:d2:fa:61:c1:51:e7:d1:32:47:7b:bd:c8:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9 Validity Not Before: Dec 20 14:01:09 2025 GMT Not After : Dec 21 14:01:09 2025 GMT Subject: CN=255075be8c64eb5420c9c2781394905622617dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:bb:31:67:66:0f:b2:d2:4c:95:96:31:aa:0c: 69:d1:de:c5:6f:38:27:da:b3:ab:b8:fe:4a:76:59: 50:6d:92:26:d0:c9:10:39:96:7a:57:49:87:d5:95: aa:d9:e0:80:a1:55:d2:fd:31:1e:7f:cb:75:b0:73: 0f:28:c4:ca:5a:39:c9:ac:32:88:ca:ee:2f:da:71: f0:da:86:a8:c8:07:44:c9:87:ba:fc:12:47:42:d8: 43:7d:91:94:39:cc:f0:45:e1:65:2b:0e:21:2e:15: 89:11:a0:bf:1a:24:a3:6e:5d:52:14:ef:6e:7c:f0: 1b:ed:e6:26:7d:6e:9c:65:48:8c:94:eb:12:74:91: 52:78:43:6f:43:6b:6d:37:87:c4:99:4e:6f:5f:03: ec:dd:8b:22:ad:7b:54:49:c7:22:82:31:6c:57:98: 68:8e:91:aa:53:c8:9f:9b:49:a5:57:02:f8:fa:af: e6:72:20:de:16:13:f4:04:a8:25:22:e9:ae:5b:02: d1:a6:a4:90:08:f5:4e:e0:93:06:e9:da:b7:ef:f5: 8a:8e:2d:30:61:58:45:e0:f1:86:ac:6b:ec:c7:1c: a7:8a:c8:61:3e:9b:d6:4e:40:c2:7e:1d:29:41:9a: a4:15:d1:00:76:d4:b3:fa:08:ec:b6:c5:2a:1a:dd: 71:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:50:75:BE:8C:64:EB:54:20:C9:C2:78:13:94:90:56:22:61:7D:FB X509v3 Authority Key Identifier: keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b4:b3:83:19:70:b4:de:14:c0:aa:12:59:87:1b:42:a7:7b: 83:f8:b1:ae:37:08:6b:f9:93:d0:00:fe:99:37:12:ba:24:4f: d5:d4:13:27:97:cb:bb:75:a1:d8:a9:73:f9:07:dd:6a:ec:20: 55:c6:40:4c:f1:51:e4:66:19:3c:1c:ae:0f:33:ca:c7:10:08: 78:73:92:68:21:13:e1:a0:8b:47:1b:9f:7b:b9:43:1b:f1:4a: 5c:f0:31:28:8c:41:ec:a4:ee:a2:a7:58:a4:50:b2:44:03:47: f8:cd:87:0f:23:51:c7:c4:0d:02:ef:c9:7f:3e:1f:33:07:40: 97:4f:ee:ed:d6:81:9d:a0:b1:1b:ff:c7:c1:2c:ca:26:ae:1f: 7f:71:79:14:8d:7a:b2:92:e8:c0:43:e9:d8:9d:89:30:d0:1d: 9e:65:4d:aa:5e:b6:df:ad:8c:41:bf:f6:de:7d:a8:74:00:f4: 98:c3:33:bd:95:fd:5a:04:7f:7f:f5:b2:97:9a:2a:20:92:5e: 78:59:73:28:49:47:15:32:19:e5:21:76:5b:a0:f4:f2:b4:28: 30:34:30:9b:22:f5:22:41:96:f1:f6:c6:70:13:c4:85:e1:2b: 90:e9:42:6a:8a:8f:57:c6:d6:d6:d3:d0:0f:b0:d6:76:6a:35: ad:b0:c2:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EHHS+mHBUefRMkd7vcixMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3YTgyZTU1Nzc5YTFlYTRlZjk5NjdmODIxZDVjYzA1Yjdi ZDk5ZTkwHhcNMjUxMjIwMTQwMTA5WhcNMjUxMjIxMTQwMTA5WjAzMTEwLwYDVQQD EygyNTUwNzViZThjNjRlYjU0MjBjOWMyNzgxMzk0OTA1NjIyNjE3ZGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rsxZ2YPstJMlZYxqgxp0d7Fbzgn 2rOruP5KdllQbZIm0MkQOZZ6V0mH1ZWq2eCAoVXS/TEef8t1sHMPKMTKWjnJrDKI yu4v2nHw2oaoyAdEyYe6/BJHQthDfZGUOczwReFlKw4hLhWJEaC/GiSjbl1SFO9u fPAb7eYmfW6cZUiMlOsSdJFSeENvQ2ttN4fEmU5vXwPs3YsirXtUSccigjFsV5ho jpGqU8ifm0mlVwL4+q/mciDeFhP0BKglIumuWwLRpqSQCPVO4JMG6dq37/WKji0w YVhF4PGGrGvsxxynishhPpvWTkDCfh0pQZqkFdEAdtSz+gjstsUqGt1xBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVQdb6MZOtUIMnCeBOUkFYiYX37MB8GA1UdIwQY MBaAFEeoLlV3mh6k75ln+CHVzAW3vZnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81OWFmYWItZTBhOC00MmQwLTg3M2It NjAwNWMwMTExZjFlLzEvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS81OWFmYWItZTBhOC00MmQwLTg3M2ItNjAwNWMwMTExZjFl LzEvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7Szgxlw tN4UwKoSWYcbQqd7g/ixrjcIa/mT0AD+mTcSuiRP1dQTJ5fLu3Wh2Klz+Qfdauwg VcZATPFR5GYZPByuDzPKxxAIeHOSaCET4aCLRxufe7lDG/FKXPAxKIxB7KTuoqdY pFCyRANH+M2HDyNRx8QNAu/Jfz4fMwdAl0/u7daBnaCxG//HwSzKJq4ff3F5FI16 spLowEPp2J2JMNAdnmVNql62362MQb/23n2odAD0mMMzvZX9WgR/f/Wyl5oqIJJe eFlzKElHFTIZ5SF2W6D08rQoMDQwmyL1IkGW8fbGcBPEheErkOlCaoqPV8bW1tPQ D7DWdmo1rbDCig== -----END CERTIFICATE-----Generated at Sat Dec 20 16:16:21 2025 by rpki-client