This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft File: P6xJAcwjvke_qfEqYET6Y0USIQc.mft (raw, json) Hash identifier: MRzXI8cc1Q/eQoe4SZxAxUy5iqEKSI901l+NLOtvhCg= Subject key identifier: F2:A0:E4:CF:9C:9E:2E:C1:38:C9:98:CD:C2:9F:3E:B2:0F:5E:DF:E6 Authority key identifier: 3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07 Certificate issuer: /CN=3fac4901cc23be47bfa9f12a6044fa6345122107 Certificate serial: 019B69C4569E7F46D63F9E324E1CFA7B30FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft Manifest number: 06DD Signing time: Mon 29 Dec 2025 11:00:33 +0000 Manifest this update: Mon 29 Dec 2025 11:00:33 +0000 Manifest next update: Tue 30 Dec 2025 11:00:33 +0000 Files and hashes: 1: I2T3vW_f2hKmlZWnd51x-GtOD7M.roa (hash: oNoWZuXx4HX98BE5ZXv2y66gUnUeaQrrJOmk84paoXM=) 2: P6xJAcwjvke_qfEqYET6Y0USIQc.crl (hash: DqrwWAwp/zhUrfbG0VXEiUuCteO+0MY4b41OdN3VVNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 11:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:c4:56:9e:7f:46:d6:3f:9e:32:4e:1c:fa:7b:30:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fac4901cc23be47bfa9f12a6044fa6345122107 Validity Not Before: Dec 29 11:00:33 2025 GMT Not After : Dec 30 11:00:33 2025 GMT Subject: CN=f2a0e4cf9c9e2ec138c998cdc29f3eb20f5edfe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:44:4e:16:5d:38:82:05:c8:c2:aa:52:6a:34: e2:51:98:7a:d6:d9:60:93:5b:df:0c:94:89:e8:59: 1b:a2:92:17:d6:d1:71:7e:31:92:d6:0b:cf:e6:cd: b5:59:d1:21:b3:ab:c3:87:94:2f:5e:1b:f0:d0:02: 61:85:f3:1d:7d:f6:cb:5f:bf:60:61:58:2f:d5:b3: 60:19:60:8f:5c:20:7e:88:69:b2:69:49:77:60:6a: 72:7d:a4:28:42:b8:82:19:e7:c5:61:66:0b:6a:f9: 91:cf:4b:58:07:0c:f4:e0:ce:91:6f:e2:05:9f:a4: c8:13:23:02:14:35:f7:d3:d0:dd:be:74:40:5b:72: 59:83:9d:39:cc:86:a8:10:df:c9:ad:9a:6e:8d:96: ba:d1:4f:fa:a8:42:d1:72:d4:dc:42:3b:2a:41:ce: 96:97:d0:4e:0f:18:b6:6b:00:a4:ed:9e:0d:b3:ce: 1f:17:69:6c:79:0c:6b:c1:bf:6c:82:50:0a:20:e9: 32:a8:3e:52:02:58:62:33:1e:fa:ff:ff:88:5d:c4: e4:e9:19:29:3b:12:3f:c7:6d:18:27:9c:16:5d:21: 83:76:4d:3a:ca:65:4f:60:ae:83:71:60:6d:04:7c: 2e:16:71:a5:ec:88:0e:06:5d:14:3c:03:1d:d8:4c: f9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A0:E4:CF:9C:9E:2E:C1:38:C9:98:CD:C2:9F:3E:B2:0F:5E:DF:E6 X509v3 Authority Key Identifier: keyid:3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:78:d2:f7:5e:0f:2b:4e:2a:77:70:ad:94:f1:fa:64:15:6d: fb:59:c5:52:11:ca:67:74:e3:d0:a3:d3:49:cc:00:32:72:6c: e9:03:e3:40:54:20:5f:6c:da:79:fb:ff:48:b2:cc:d4:47:bf: 9a:f7:de:e1:1d:82:47:e8:ec:54:10:a7:7b:84:81:ed:53:ed: 4e:8a:f4:c8:f8:78:3a:65:3d:39:b2:fc:57:32:9a:e3:39:38: 86:2c:8c:f8:ef:0f:1a:e4:45:93:26:59:19:a5:a3:12:a0:e9: 71:eb:3f:f8:de:cc:c9:07:17:30:8f:8b:53:13:c3:83:f3:8b: 82:f1:16:e1:a2:c2:cd:6a:19:84:c1:b5:0c:f5:9b:7b:49:c9: 60:09:ea:78:ae:98:68:0b:1f:b0:b7:bd:62:52:2e:29:65:b5: ae:d5:83:c0:a5:ac:c1:5c:42:a2:52:46:a2:6f:7b:3c:e2:b8: e3:1f:2c:a3:e7:0a:fd:9d:05:cc:09:d3:42:0c:4a:43:87:66: 5a:5c:47:c9:b8:1f:93:f4:8e:0b:17:5d:ef:12:03:5f:28:e3: 41:7f:1b:11:d2:03:4d:c9:20:3c:6b:66:48:2b:b9:0a:e6:12: 13:1f:de:b7:3c:72:06:8c:0a:eb:df:5c:64:07:ef:ae:c4:fe: 58:ed:40:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpxFaef0bWP54yThz6ezD9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmYWM0OTAxY2MyM2JlNDdiZmE5ZjEyYTYwNDRmYTYzNDUx MjIxMDcwHhcNMjUxMjI5MTEwMDMzWhcNMjUxMjMwMTEwMDMzWjAzMTEwLwYDVQQD EyhmMmEwZTRjZjljOWUyZWMxMzhjOTk4Y2RjMjlmM2ViMjBmNWVkZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30ROFl04ggXIwqpSajTiUZh61tlg k1vfDJSJ6FkbopIX1tFxfjGS1gvP5s21WdEhs6vDh5QvXhvw0AJhhfMdffbLX79g YVgv1bNgGWCPXCB+iGmyaUl3YGpyfaQoQriCGefFYWYLavmRz0tYBwz04M6Rb+IF n6TIEyMCFDX309DdvnRAW3JZg505zIaoEN/JrZpujZa60U/6qELRctTcQjsqQc6W l9BODxi2awCk7Z4Ns84fF2lseQxrwb9sglAKIOkyqD5SAlhiMx76//+IXcTk6Rkp OxI/x20YJ5wWXSGDdk06ymVPYK6DcWBtBHwuFnGl7IgOBl0UPAMd2Ez5jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKg5M+cni7BOMmYzcKfPrIPXt/mMB8GA1UdIwQY MBaAFD+sSQHMI75Hv6nxKmBE+mNFEiEHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wZmZkOTUtOThlNi00Mjc5LTk4N2Yt NzNhNjM0MTU1ZWU5LzEvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wZmZkOTUtOThlNi00Mjc5LTk4N2YtNzNhNjM0MTU1ZWU5 LzEvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu3jS914P K04qd3CtlPH6ZBVt+1nFUhHKZ3Tj0KPTScwAMnJs6QPjQFQgX2zaefv/SLLM1Ee/ mvfe4R2CR+jsVBCne4SB7VPtTor0yPh4OmU9ObL8VzKa4zk4hiyM+O8PGuRFkyZZ GaWjEqDpces/+N7MyQcXMI+LUxPDg/OLgvEW4aLCzWoZhMG1DPWbe0nJYAnqeK6Y aAsfsLe9YlIuKWW1rtWDwKWswVxColJGom97POK44x8so+cK/Z0FzAnTQgxKQ4dm WlxHybgfk/SOCxdd7xIDXyjjQX8bEdIDTckgPGtmSCu5CuYSEx/etzxyBowK699c ZAfvrsT+WO1A4A== -----END CERTIFICATE-----Generated at Mon Dec 29 16:29:32 2025 by rpki-client