This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft File: dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json) Hash identifier: 8jAMuBGknpVibfhvD3fF0BtHpUHDcYwkm5lYRbytbe8= Subject key identifier: 29:F9:13:55:41:66:7C:11:FD:CB:13:EB:77:24:EF:21:7B:1E:F2:FB Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39 Certificate issuer: /CN=765ea3400a3748c3b6c61268d492f8bf0a908239 Certificate serial: 019B71EBFBBA82CF83DBE66E7AC25376BA0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft Manifest number: 1328 Signing time: Wed 31 Dec 2025 01:00:49 +0000 Manifest this update: Wed 31 Dec 2025 01:00:49 +0000 Manifest next update: Thu 01 Jan 2026 01:00:49 +0000 Files and hashes: 1: 8mTPFQW3wW-m-Njwc5f28bH9rKw.roa (hash: ycM5ko9FIfkWlLnDoZpXM6ToY3euiLPcPeAx4DLhqfU=) 2: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: lq+tmaBMrP33EPogh+MgG5bIODgFg5YkTIHz5Ez8QVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:eb:fb:ba:82:cf:83:db:e6:6e:7a:c2:53:76:ba:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239 Validity Not Before: Dec 31 01:00:49 2025 GMT Not After : Jan 1 01:00:49 2026 GMT Subject: CN=29f9135541667c11fdcb13eb7724ef217b1ef2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:09:a2:cf:6e:84:fb:e1:47:54:9f:3a:8c:8a: 2a:e9:84:ac:74:9b:a2:e6:1a:ad:77:eb:b6:95:9f: 76:5c:99:c2:5a:9d:0f:c9:42:5c:af:92:de:86:5d: 83:29:ea:f6:da:df:8d:24:07:5f:99:df:f9:84:cf: 0e:aa:38:e1:e3:68:9f:4a:ef:93:f6:86:d0:11:80: 9c:79:74:f3:96:c1:17:89:dd:ce:d1:73:95:94:b8: e7:6c:8d:09:41:ad:fc:5a:04:5e:07:8b:35:7a:4f: 18:08:33:72:b8:44:14:fa:f1:0f:91:8a:73:1d:50: b2:50:4c:27:cb:b0:a8:91:03:b3:37:86:0c:3d:38: 42:82:5c:26:c1:61:c7:c2:4d:73:3c:69:70:5c:db: 28:31:c1:f9:bc:7b:8b:bf:ae:0e:af:02:4e:58:a7: 4e:d3:25:99:88:4a:04:e1:15:df:e4:fe:2d:1c:ed: 77:8c:c0:04:11:6e:2f:7f:b9:0e:39:ea:0d:a0:f5: 6e:e4:5e:6e:f2:fb:71:0e:04:52:5d:ec:ae:96:78: 3c:39:5b:96:5c:07:3d:9c:66:01:b0:6b:cc:6b:be: b6:42:3f:e1:db:bd:ed:44:0d:e6:80:4f:ab:bf:a3: f5:ea:ac:9e:ba:fe:52:37:69:cb:68:6d:f7:a9:ed: 3a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F9:13:55:41:66:7C:11:FD:CB:13:EB:77:24:EF:21:7B:1E:F2:FB X509v3 Authority Key Identifier: keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:17:c7:36:8b:6d:19:09:b0:77:e8:82:ec:30:57:e8:50:01: 90:9f:7d:a3:df:bf:1c:51:08:2d:a7:1e:90:ce:bd:ab:ec:12: c9:44:12:56:71:d1:03:9c:0e:12:9d:28:f4:e6:f9:aa:08:17: 26:e1:a1:ee:82:fa:2c:45:c6:5b:b6:f6:d2:a2:be:c9:7b:81: a1:a2:67:80:43:9e:cd:67:70:46:4c:8d:b4:eb:76:cc:ac:37: 20:bc:44:1b:ac:df:bd:5a:4d:3b:56:52:41:5b:a8:71:67:14: 86:4f:de:66:03:b1:d2:2c:7c:81:45:34:84:a4:6b:e2:1a:4e: 54:5b:71:94:f3:38:18:d7:28:28:ae:00:45:ae:8f:32:e1:ff: e8:24:dc:1b:9e:a8:fa:10:21:f4:27:c5:ee:42:b0:0d:66:43: 93:9c:25:e9:6c:dd:0d:bc:af:3d:73:64:e6:d4:aa:bb:b0:0a: 56:1b:17:1f:51:df:39:60:49:eb:97:0a:f0:20:7f:6a:6a:be: fd:ab:cb:33:22:fc:fd:18:e5:0d:b9:0b:7d:cf:f8:fb:d7:69: c4:82:e3:e6:60:44:89:e2:06:ba:0c:e0:db:27:bf:38:d9:b6: 6a:e4:da:b3:1a:f0:a7:f4:84:04:2f:c6:60:4b:0f:7c:d9:a4: 51:0d:40:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtx6/u6gs+D2+ZuesJTdroNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NWVhMzQwMGEzNzQ4YzNiNmM2MTI2OGQ0OTJmOGJmMGE5 MDgyMzkwHhcNMjUxMjMxMDEwMDQ5WhcNMjYwMTAxMDEwMDQ5WjAzMTEwLwYDVQQD EygyOWY5MTM1NTQxNjY3YzExZmRjYjEzZWI3NzI0ZWYyMTdiMWVmMmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAmiz26E++FHVJ86jIoq6YSsdJui 5hqtd+u2lZ92XJnCWp0PyUJcr5Lehl2DKer22t+NJAdfmd/5hM8Oqjjh42ifSu+T 9obQEYCceXTzlsEXid3O0XOVlLjnbI0JQa38WgReB4s1ek8YCDNyuEQU+vEPkYpz HVCyUEwny7CokQOzN4YMPThCglwmwWHHwk1zPGlwXNsoMcH5vHuLv64OrwJOWKdO 0yWZiEoE4RXf5P4tHO13jMAEEW4vf7kOOeoNoPVu5F5u8vtxDgRSXeyulng8OVuW XAc9nGYBsGvMa762Qj/h273tRA3mgE+rv6P16qyeuv5SN2nLaG33qe06tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCn5E1VBZnwR/csT63ck7yF7HvL7MB8GA1UdIwQY MBaAFHZeo0AKN0jDtsYSaNSS+L8KkII5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGw2alFBbzNTTU8yeGhKbzFKTDR2d3FRZ2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83NGUxNWYtZjQ4Ny00NTU5LWJmZGQt MGZjNThlNThjYWM5LzEvZGw2alFBbzNTTU8yeGhKbzFKTDR2d3FRZ2prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS83NGUxNWYtZjQ4Ny00NTU5LWJmZGQtMGZjNThlNThjYWM5 LzEvZGw2alFBbzNTTU8yeGhKbzFKTDR2d3FRZ2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBfHNott GQmwd+iC7DBX6FABkJ99o9+/HFEILacekM69q+wSyUQSVnHRA5wOEp0o9Ob5qggX JuGh7oL6LEXGW7b20qK+yXuBoaJngEOezWdwRkyNtOt2zKw3ILxEG6zfvVpNO1ZS QVuocWcUhk/eZgOx0ix8gUU0hKRr4hpOVFtxlPM4GNcoKK4ARa6PMuH/6CTcG56o +hAh9CfF7kKwDWZDk5wl6WzdDbyvPXNk5tSqu7AKVhsXH1HfOWBJ65cK8CB/amq+ /avLMyL8/RjlDbkLfc/4+9dpxILj5mBEieIGugzg2ye/ONm2auTasxrwp/SEBC/G YEsPfNmkUQ1A5g== -----END CERTIFICATE-----Generated at Wed Dec 31 09:05:48 2025 by rpki-client