This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json) Hash identifier: T9d2CsburyUHhD95QIpvO+yPSROkrcXXMF2A4/CwcZE= Subject key identifier: 0C:57:BF:41:64:B0:D2:CD:57:3D:D9:88:5A:40:F8:47:B5:13:1A:67 Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2 Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2 Certificate serial: 019B4C28052DC0DCB192BBD0D76333C0CC8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft Manifest number: 0381 Signing time: Tue 23 Dec 2025 17:00:49 +0000 Manifest this update: Tue 23 Dec 2025 17:00:49 +0000 Manifest next update: Wed 24 Dec 2025 17:00:49 +0000 Files and hashes: 1: EiOlPx07xu7VkFJ-Fp9Fuqy8TzU.roa (hash: YTkNQ57L/BsF8+52AnZs1f7V2wA4xa87/fYc1vwFoig=) 2: GU1YI3vRymC8okEmp-zZRparjfs.roa (hash: q/QbAyjmOhWo1JcjW3JwZIKUXCaSn/iJ6pmWpIOWSpI=) 3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: IueFtLSwSIFgevJ5gsz5ZIWMIh9xrdA8A4kPUhUqjZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:28:05:2d:c0:dc:b1:92:bb:d0:d7:63:33:c0:cc:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2 Validity Not Before: Dec 23 17:00:49 2025 GMT Not After : Dec 24 17:00:49 2025 GMT Subject: CN=0c57bf4164b0d2cd573dd9885a40f847b5131a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:70:17:d5:ba:17:66:96:2c:1d:03:94:a0:a0: 68:74:a6:3e:e1:48:12:7a:c5:21:12:1f:c9:e2:5a: c7:e6:0f:ba:20:07:c4:4b:ac:8b:d7:2a:0a:0d:c5: 30:da:ef:95:5a:bd:5c:57:23:a8:5a:72:be:c8:c5: 2f:1c:73:5a:41:3a:18:7e:3f:45:d3:af:ae:12:e8: 32:07:73:18:23:b1:76:a3:69:0d:2e:07:78:e7:eb: 99:5c:cf:6f:fb:f4:58:e1:d4:a3:2a:25:0a:49:e2: 2a:be:b3:f4:d3:fc:f5:5b:d3:18:54:6e:c9:a2:6d: cf:ff:28:57:56:b7:df:6d:0a:a0:f1:e8:5d:60:ff: 7e:16:2a:b0:b6:56:fa:e2:ab:64:25:2f:a1:44:48: 9b:62:6f:0e:93:c8:f1:ae:e6:68:02:38:3d:52:5f: 98:7e:06:36:0a:16:e4:49:d7:98:7d:48:44:28:34: 12:0a:5e:5c:7c:55:fe:31:bb:1e:15:96:fc:18:3d: 84:20:48:32:b5:6b:4e:ae:c5:d6:dd:39:6f:e7:0a: 41:be:08:34:7a:12:fc:09:89:5c:ed:a5:22:b7:58: 7c:63:a9:44:83:31:d0:8e:69:3f:9e:a1:c1:ee:f0: 47:1c:f2:f2:a3:3d:1b:a0:c8:c2:00:9c:7f:bd:49: f9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:57:BF:41:64:B0:D2:CD:57:3D:D9:88:5A:40:F8:47:B5:13:1A:67 X509v3 Authority Key Identifier: keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:43:14:a1:66:7e:f7:9c:f0:0b:70:87:2f:3c:ab:f2:47:bd: 4c:5d:06:71:1f:0e:23:71:2a:99:74:90:c3:6b:da:b0:cc:6e: d0:9c:65:f4:c1:f7:fe:74:c5:05:d7:15:67:98:19:28:f8:60: 02:a3:5b:40:19:97:d3:80:81:1d:b5:10:04:05:81:1a:dc:53: b5:8f:95:63:4f:21:1c:d1:b9:eb:a2:65:af:a5:10:c1:c9:2a: 50:f4:a9:75:d8:be:47:79:77:ee:e3:53:94:b1:da:f5:80:f6: be:1b:fb:e2:dd:59:c7:e8:b0:48:4e:72:b5:7a:f3:05:9e:56: 8c:29:92:83:80:c4:79:84:82:46:6e:e3:b1:2d:1a:df:35:8e: 86:e0:4d:99:7f:02:6c:d9:26:ca:60:3d:17:c7:52:19:08:8c: 7e:4b:c5:9a:77:6f:1c:b7:80:7e:12:f8:72:be:bd:2f:6e:b6: 58:93:f4:a6:fd:b7:11:19:0a:b7:bb:83:50:6b:43:41:5d:4d: 88:75:4d:ff:2d:e3:fa:a5:cd:1b:ba:ff:33:8f:52:e0:98:43: 79:9e:0f:0c:14:ee:28:f4:17:53:6d:0b:9b:04:34:d2:ab:13: 60:b7:86:4b:62:4f:35:df:0f:18:70:44:3c:5e:83:c8:dd:d9: 61:8c:0a:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMKAUtwNyxkrvQ12MzwMyOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmYWM2OGY5MTIwNWM0NGU3MzAzMzZlNjAwYjYzMzRmOGM4 MWU4YzIwHhcNMjUxMjIzMTcwMDQ5WhcNMjUxMjI0MTcwMDQ5WjAzMTEwLwYDVQQD EygwYzU3YmY0MTY0YjBkMmNkNTczZGQ5ODg1YTQwZjg0N2I1MTMxYTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXAX1boXZpYsHQOUoKBodKY+4UgS esUhEh/J4lrH5g+6IAfES6yL1yoKDcUw2u+VWr1cVyOoWnK+yMUvHHNaQToYfj9F 06+uEugyB3MYI7F2o2kNLgd45+uZXM9v+/RY4dSjKiUKSeIqvrP00/z1W9MYVG7J om3P/yhXVrffbQqg8ehdYP9+Fiqwtlb64qtkJS+hREibYm8Ok8jxruZoAjg9Ul+Y fgY2ChbkSdeYfUhEKDQSCl5cfFX+MbseFZb8GD2EIEgytWtOrsXW3Tlv5wpBvgg0 ehL8CYlc7aUit1h8Y6lEgzHQjmk/nqHB7vBHHPLyoz0boMjCAJx/vUn5rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxXv0FksNLNVz3ZiFpA+Ee1ExpnMB8GA1UdIwQY MBaAFD+saPkSBcROcwM25gC2M0+MgejCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lM2U0MGYtMTUwNS00MmU5LTk2ZjEt ZmVhNzRlODEwNTFhLzEvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9lM2U0MGYtMTUwNS00MmU5LTk2ZjEtZmVhNzRlODEwNTFh LzEvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkMUoWZ+ 95zwC3CHLzyr8ke9TF0GcR8OI3EqmXSQw2vasMxu0Jxl9MH3/nTFBdcVZ5gZKPhg AqNbQBmX04CBHbUQBAWBGtxTtY+VY08hHNG566Jlr6UQwckqUPSpddi+R3l37uNT lLHa9YD2vhv74t1Zx+iwSE5ytXrzBZ5WjCmSg4DEeYSCRm7jsS0a3zWOhuBNmX8C bNkmymA9F8dSGQiMfkvFmndvHLeAfhL4cr69L262WJP0pv23ERkKt7uDUGtDQV1N iHVN/y3j+qXNG7r/M49S4JhDeZ4PDBTuKPQXU20LmwQ00qsTYLeGS2JPNd8PGHBE PF6DyN3ZYYwKtw== -----END CERTIFICATE-----Generated at Tue Dec 23 22:06:45 2025 by rpki-client