This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft File: P6xJAcwjvke_qfEqYET6Y0USIQc.mft (raw, json) Hash identifier: yVJihoYbuMwzxWSC0eayRflniW8fTbp0d3MtZTR378s= Subject key identifier: 36:21:D1:B3:F3:E8:1D:00:AA:94:59:E3:10:44:61:D9:06:7F:12:17 Authority key identifier: 3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07 Certificate issuer: /CN=3fac4901cc23be47bfa9f12a6044fa6345122107 Certificate serial: 019B736C366EAFA9CA2303D944503F752D2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft Manifest number: 06E2 Signing time: Wed 31 Dec 2025 08:00:30 +0000 Manifest this update: Wed 31 Dec 2025 08:00:30 +0000 Manifest next update: Thu 01 Jan 2026 08:00:30 +0000 Files and hashes: 1: I2T3vW_f2hKmlZWnd51x-GtOD7M.roa (hash: oNoWZuXx4HX98BE5ZXv2y66gUnUeaQrrJOmk84paoXM=) 2: P6xJAcwjvke_qfEqYET6Y0USIQc.crl (hash: ZrVsWgGxuQB/SoVqRW6HjBQDr367fiQsPjICekJtj70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 08:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:6c:36:6e:af:a9:ca:23:03:d9:44:50:3f:75:2d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fac4901cc23be47bfa9f12a6044fa6345122107 Validity Not Before: Dec 31 08:00:30 2025 GMT Not After : Jan 1 08:00:30 2026 GMT Subject: CN=3621d1b3f3e81d00aa9459e3104461d9067f1217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6a:f4:8c:fc:0c:4a:b3:55:39:82:a8:2b:77: 67:87:59:c4:fa:b2:d7:54:b3:ab:2f:28:ab:07:bb: 1e:90:f1:cc:5d:49:ee:24:8d:7d:a6:b8:52:38:c5: 30:d8:2b:b6:fa:72:e2:fa:77:73:60:da:df:98:2a: 39:6e:79:ab:48:b1:33:b0:b6:7a:d5:9f:c8:4a:ff: 8c:12:e8:f8:9e:f7:99:24:73:63:5e:0b:14:57:d0: 8e:60:05:cf:82:6c:bb:46:0d:0f:bf:17:f1:80:5e: 0c:d5:53:ac:84:79:0b:27:31:bc:3f:14:59:44:c2: 30:8f:99:70:83:61:b6:3f:bb:87:7a:4e:cd:00:d6: ce:90:b4:3a:8a:ec:f0:f9:08:a9:7b:9f:46:7d:20: b1:60:cf:2d:50:97:b7:a4:58:62:86:0e:a1:80:3f: 0f:39:5e:8b:d5:35:f6:0b:ac:50:54:fc:c6:d6:9a: b2:1a:bf:62:32:05:22:0e:a8:ad:e1:49:1d:a7:65: e8:c9:09:ad:8e:bb:bc:e4:9a:d4:33:b6:89:78:ab: 45:3b:3c:76:73:f2:12:7f:f3:37:c1:ca:b1:95:de: cd:89:59:f3:28:5a:47:ff:69:c1:dc:c9:24:28:4e: b0:36:53:57:a0:16:b3:24:e2:ef:65:ee:4c:b6:59: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:21:D1:B3:F3:E8:1D:00:AA:94:59:E3:10:44:61:D9:06:7F:12:17 X509v3 Authority Key Identifier: keyid:3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:53:79:44:98:11:14:4c:4b:81:87:b2:da:57:9c:34:f4:95: 01:2d:fd:fc:15:95:49:35:b3:c8:5e:ef:19:62:c8:bc:0d:f7: 87:e5:ad:ba:d6:b2:19:4f:e3:ba:5b:07:a6:51:d6:dd:60:84: 37:59:8a:f5:e8:86:3d:be:a5:06:87:0e:1a:d5:d2:7a:14:32: 75:ec:4b:c0:51:bb:15:e4:c8:e9:a3:da:1d:45:8d:67:3a:66: 2d:4a:14:e3:48:3d:3d:f1:dc:1f:c8:95:bc:c2:51:23:4d:e8: 77:c8:f5:2f:f3:49:d2:b3:4f:e7:93:12:40:85:c1:8e:a4:87: c6:78:54:a2:3c:e5:d7:fc:1e:90:55:dc:16:ba:7d:70:ec:c8: 15:fd:f6:0b:4a:99:f4:52:bf:1f:4d:0c:33:35:1f:57:96:d1: a2:60:95:0f:bb:5f:b3:83:f8:60:9f:76:2f:6b:1c:88:2a:89: 72:ff:a9:ed:ce:1e:3f:64:09:6e:18:19:32:be:d3:5c:f8:b5: 6a:8d:42:11:26:17:21:4c:cd:d2:ea:ec:92:56:f2:42:35:30: 67:48:3c:30:96:71:20:fd:14:01:3f:33:26:37:64:96:e5:c3: 2b:61:15:73:64:58:f5:fb:a6:15:fc:16:f7:80:81:0f:74:58: 1c:9b:95:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzbDZur6nKIwPZRFA/dS0rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmYWM0OTAxY2MyM2JlNDdiZmE5ZjEyYTYwNDRmYTYzNDUx MjIxMDcwHhcNMjUxMjMxMDgwMDMwWhcNMjYwMTAxMDgwMDMwWjAzMTEwLwYDVQQD EygzNjIxZDFiM2YzZTgxZDAwYWE5NDU5ZTMxMDQ0NjFkOTA2N2YxMjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGr0jPwMSrNVOYKoK3dnh1nE+rLX VLOrLyirB7sekPHMXUnuJI19prhSOMUw2Cu2+nLi+ndzYNrfmCo5bnmrSLEzsLZ6 1Z/ISv+MEuj4nveZJHNjXgsUV9COYAXPgmy7Rg0PvxfxgF4M1VOshHkLJzG8PxRZ RMIwj5lwg2G2P7uHek7NANbOkLQ6iuzw+Qipe59GfSCxYM8tUJe3pFhihg6hgD8P OV6L1TX2C6xQVPzG1pqyGr9iMgUiDqit4Ukdp2XoyQmtjru85JrUM7aJeKtFOzx2 c/ISf/M3wcqxld7NiVnzKFpH/2nB3MkkKE6wNlNXoBazJOLvZe5MtlnAlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYh0bPz6B0AqpRZ4xBEYdkGfxIXMB8GA1UdIwQY MBaAFD+sSQHMI75Hv6nxKmBE+mNFEiEHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wZmZkOTUtOThlNi00Mjc5LTk4N2Yt NzNhNjM0MTU1ZWU5LzEvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wZmZkOTUtOThlNi00Mjc5LTk4N2YtNzNhNjM0MTU1ZWU5 LzEvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFN5RJgR FExLgYey2lecNPSVAS39/BWVSTWzyF7vGWLIvA33h+WtutayGU/julsHplHW3WCE N1mK9eiGPb6lBocOGtXSehQydexLwFG7FeTI6aPaHUWNZzpmLUoU40g9PfHcH8iV vMJRI03od8j1L/NJ0rNP55MSQIXBjqSHxnhUojzl1/wekFXcFrp9cOzIFf32C0qZ 9FK/H00MMzUfV5bRomCVD7tfs4P4YJ92L2sciCqJcv+p7c4eP2QJbhgZMr7TXPi1 ao1CESYXIUzN0ursklbyQjUwZ0g8MJZxIP0UAT8zJjdkluXDK2EVc2RY9fumFfwW 94CBD3RYHJuV2g== -----END CERTIFICATE-----Generated at Wed Dec 31 10:29:12 2025 by rpki-client