This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft File: 6g92KC31MgmljAMC50-Kl8o6_wU.mft (raw, json) Hash identifier: 3aNH++XzZP4R03cP2E3JrhBkB+vZPoSRFA3uUdKd3dk= Subject key identifier: 3C:C7:10:FD:B6:C3:E2:3D:87:21:BE:98:2A:DB:CC:8A:76:A0:B4:C9 Authority key identifier: EA:0F:76:28:2D:F5:32:09:A5:8C:03:02:E7:4F:8A:97:CA:3A:FF:05 Certificate issuer: /CN=ea0f76282df53209a58c0302e74f8a97ca3aff05 Certificate serial: 019B747FC944FF7F3658497A67E4C9E80668 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft Manifest number: 14A9 Signing time: Wed 31 Dec 2025 13:01:30 +0000 Manifest this update: Wed 31 Dec 2025 13:01:30 +0000 Manifest next update: Thu 01 Jan 2026 13:01:30 +0000 Files and hashes: 1: 1-8bpJP4ldVymn01b0Lydy-jjhME.roa (hash: 0hHPnyQchhVyljrO2jyFNJVSYpCf6WjQrLOAi1ffRPU=) 2: 6g92KC31MgmljAMC50-Kl8o6_wU.crl (hash: Mvi2u20wclZ7w3u78tvVU/Ud3yGwYCCt/vDbI8EdHmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.crl rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 13:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:7f:c9:44:ff:7f:36:58:49:7a:67:e4:c9:e8:06:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea0f76282df53209a58c0302e74f8a97ca3aff05 Validity Not Before: Dec 31 13:01:30 2025 GMT Not After : Jan 1 13:01:30 2026 GMT Subject: CN=3cc710fdb6c3e23d8721be982adbcc8a76a0b4c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4b:6d:5b:7f:36:15:21:fa:da:be:1a:32:3e: d6:15:56:0b:86:22:7f:ec:d2:43:50:31:df:ec:1b: ee:21:d6:c7:3e:45:01:36:3a:06:ad:14:17:f0:76: 75:59:f3:93:48:90:41:11:93:6a:7c:7c:26:61:75: 7e:0d:0e:27:8e:5e:6a:bf:0e:b1:08:72:53:d4:e5: da:c5:a6:b3:d2:4b:d9:e4:60:64:2d:49:2d:d9:62: c2:72:d6:80:9c:58:4e:45:a4:f2:bc:4c:17:a0:ff: 72:aa:72:18:21:6a:5e:73:52:a0:7e:da:10:6e:44: b8:b5:b1:ca:96:70:0d:f0:e9:f6:3f:07:00:31:18: 64:1c:e6:49:88:29:7d:52:50:60:75:a1:0e:0e:d9: 76:3e:75:c8:c0:78:6f:75:93:60:0d:3b:5d:1c:f6: b3:c0:fe:77:46:dc:f9:36:66:46:a0:26:06:89:13: 6f:a7:d7:d1:f0:8d:8f:17:9a:43:94:94:6f:f7:9c: 93:b4:e4:4c:c8:d2:5a:27:eb:04:d7:33:35:bc:d6: 94:30:a4:0b:fb:94:10:93:57:82:5f:dd:cc:8b:5a: 49:9b:81:e2:4d:f9:f0:86:96:d0:1c:0e:af:87:d5: 0a:d7:87:ee:c6:2a:33:ab:64:17:e4:05:d5:70:07: de:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C7:10:FD:B6:C3:E2:3D:87:21:BE:98:2A:DB:CC:8A:76:A0:B4:C9 X509v3 Authority Key Identifier: keyid:EA:0F:76:28:2D:F5:32:09:A5:8C:03:02:E7:4F:8A:97:CA:3A:FF:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e2:90:4f:2b:a4:62:c4:ad:00:46:ab:af:5d:1c:6e:86:ab: c8:c9:9c:d7:6a:5d:c0:21:82:10:db:11:a7:61:f8:f4:7a:70: 22:b4:a1:f9:73:de:70:6a:e6:09:65:6f:ff:a7:5a:64:d9:4a: 2b:78:b3:57:42:05:d5:12:df:89:2f:f9:26:4d:8d:fb:e2:0f: 08:cd:01:f0:ef:c8:e3:eb:09:5a:cc:6f:5f:f2:dc:48:1c:a7: 48:18:71:22:c1:aa:60:0b:be:22:c1:13:e4:23:a4:be:ce:fa: 9f:09:b9:40:30:bb:16:7a:7d:60:70:c3:dd:5f:55:c5:97:42: 74:6a:9d:22:95:db:7a:5e:f2:19:fc:01:b5:6b:2b:c6:fb:94: d0:2c:39:5e:6b:9a:3f:46:38:e3:28:08:74:f2:66:77:5d:f8: de:09:ce:1f:63:a4:57:be:4a:49:62:d7:c4:79:2b:09:d1:0b: 5a:e8:fc:d2:9c:04:ec:27:c8:e5:79:85:c2:77:14:98:4d:77: 6a:9b:50:36:be:38:ea:c1:da:6e:aa:67:14:55:83:0c:f5:1b: fd:90:d4:ad:15:ce:e1:8b:9f:9a:ad:cf:ff:12:68:2a:6a:d1: fd:1a:37:9a:55:1c:e7:a0:1e:ea:85:d5:d0:22:80:69:f0:be: aa:e2:91:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0f8lE/382WEl6Z+TJ6AZoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMGY3NjI4MmRmNTMyMDlhNThjMDMwMmU3NGY4YTk3Y2Ez YWZmMDUwHhcNMjUxMjMxMTMwMTMwWhcNMjYwMTAxMTMwMTMwWjAzMTEwLwYDVQQD EygzY2M3MTBmZGI2YzNlMjNkODcyMWJlOTgyYWRiY2M4YTc2YTBiNGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUttW382FSH62r4aMj7WFVYLhiJ/ 7NJDUDHf7BvuIdbHPkUBNjoGrRQX8HZ1WfOTSJBBEZNqfHwmYXV+DQ4njl5qvw6x CHJT1OXaxaaz0kvZ5GBkLUkt2WLCctaAnFhORaTyvEwXoP9yqnIYIWpec1KgftoQ bkS4tbHKlnAN8On2PwcAMRhkHOZJiCl9UlBgdaEODtl2PnXIwHhvdZNgDTtdHPaz wP53Rtz5NmZGoCYGiRNvp9fR8I2PF5pDlJRv95yTtORMyNJaJ+sE1zM1vNaUMKQL +5QQk1eCX93Mi1pJm4HiTfnwhpbQHA6vh9UK14fuxiozq2QX5AXVcAfe0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzHEP22w+I9hyG+mCrbzIp2oLTJMB8GA1UdIwQY MBaAFOoPdigt9TIJpYwDAudPipfKOv8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmc5MktDMzFNZ21sakFNQzUwLUtsOG82X3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lN2ZhNTUtNTkyNS00YmE5LWFkMzgt YmU3YzgxOTQ4MzI0LzEvNmc5MktDMzFNZ21sakFNQzUwLUtsOG82X3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lN2ZhNTUtNTkyNS00YmE5LWFkMzgtYmU3YzgxOTQ4MzI0 LzEvNmc5MktDMzFNZ21sakFNQzUwLUtsOG82X3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOKQTyuk YsStAEarr10cboaryMmc12pdwCGCENsRp2H49HpwIrSh+XPecGrmCWVv/6daZNlK K3izV0IF1RLfiS/5Jk2N++IPCM0B8O/I4+sJWsxvX/LcSBynSBhxIsGqYAu+IsET 5COkvs76nwm5QDC7Fnp9YHDD3V9VxZdCdGqdIpXbel7yGfwBtWsrxvuU0Cw5Xmua P0Y44ygIdPJmd1343gnOH2OkV75KSWLXxHkrCdELWuj80pwE7CfI5XmFwncUmE13 aptQNr446sHabqpnFFWDDPUb/ZDUrRXO4Yufmq3P/xJoKmrR/Ro3mlUc56Ae6oXV 0CKAafC+quKRKg== -----END CERTIFICATE-----Generated at Wed Dec 31 19:34:25 2025 by rpki-client