This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft File: mT6BRnbzLyZHccetdnpN-H08Y-I.mft (raw, json) Hash identifier: zUcgGWPnECJOZyMgQB07r+P5AD49NBVsb4eCGhKMbGw= Subject key identifier: 3B:DE:41:71:5C:26:5A:C3:19:64:09:F1:DD:B1:71:71:DC:48:60:43 Authority key identifier: 99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2 Certificate issuer: /CN=993e814676f32f264771c7ad767a4df87d3c63e2 Certificate serial: 019B3F7F4A8253D759D180760CEAE2CC20FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft Manifest number: 1A Signing time: Sun 21 Dec 2025 06:01:05 +0000 Manifest this update: Sun 21 Dec 2025 06:01:05 +0000 Manifest next update: Mon 22 Dec 2025 06:01:05 +0000 Files and hashes: 1: Ei-xeQIJ_CUuo9COS_FddR1cYpg.roa (hash: 0JD3XKJ3f1eW5d7eZqTtuTXgAEoVYtq+QEjuvwgC7t0=) 2: kw3KvvgPTUTV0V309H9CvDuEBIQ.roa (hash: 4ftZLUJ9xcgzwuUMgO3uFG9wTcVNdec0m6eUXJ7nQsI=) 3: mT6BRnbzLyZHccetdnpN-H08Y-I.crl (hash: xFniZIhJt0Tp392BnQk/ljnYlWSdhjgpBj6iwXtJaF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:4a:82:53:d7:59:d1:80:76:0c:ea:e2:cc:20:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993e814676f32f264771c7ad767a4df87d3c63e2 Validity Not Before: Dec 21 06:01:05 2025 GMT Not After : Dec 22 06:01:05 2025 GMT Subject: CN=3bde41715c265ac3196409f1ddb17171dc486043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:de:14:3f:71:25:88:a5:d9:a2:f1:98:27:41: b8:82:51:8b:e9:17:cf:c3:c6:bb:78:78:e2:98:20: 17:92:0d:88:ea:fd:d7:bd:62:50:b0:28:a2:e5:9f: 39:a9:75:cf:a5:19:44:a8:48:f9:ef:e8:62:88:66: 65:c9:ad:6b:9b:62:a2:6a:25:f1:f8:b1:77:0e:b6: 25:af:41:cd:88:d5:d2:4e:a6:74:32:e4:9b:97:e8: 12:be:d5:ff:6a:a3:86:7e:d2:b2:91:4c:59:0e:42: 51:14:08:60:11:fc:c9:d7:6b:cb:4a:6b:21:8a:a8: bc:9d:84:e8:79:fa:ec:fc:fd:81:3e:14:43:dd:9b: 53:a1:ab:47:13:9b:0f:8a:03:ef:23:3f:f0:75:05: a5:37:f8:a4:4a:37:9b:0b:e1:e3:c4:c6:66:99:48: 9e:82:ac:3e:5a:d3:07:06:6d:82:40:15:10:bf:3d: 8f:6c:d1:78:5b:64:57:0b:c0:b0:3f:06:64:16:ad: ec:bf:6a:b1:84:af:4e:29:ca:e1:4d:e5:74:1d:c2: 4e:4f:a7:ee:be:f2:f6:fb:26:c2:7b:29:db:01:d0: 11:f1:89:f3:98:7c:b4:71:bf:65:cd:21:11:ef:ca: d7:6c:ee:10:9e:31:0e:33:a4:76:e6:44:f1:8b:43: b1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DE:41:71:5C:26:5A:C3:19:64:09:F1:DD:B1:71:71:DC:48:60:43 X509v3 Authority Key Identifier: keyid:99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:8f:f0:af:92:62:43:4d:55:ca:d9:a4:0e:2d:90:22:c0:65: d9:45:b3:00:6d:33:51:61:4e:66:91:7a:74:39:39:b6:ec:4f: 7a:ef:d9:06:92:9c:89:07:50:9d:ae:7c:43:4d:e1:da:e6:55: ae:99:f5:58:e0:f5:b2:7d:19:42:8d:82:dd:3e:e2:7f:f3:d7: d1:24:ec:47:6a:e1:c6:08:44:06:14:42:fa:e1:17:64:b2:cb: d6:ba:02:28:50:a8:96:e4:b8:81:98:09:65:b5:c6:4b:9c:eb: 85:61:0d:69:f5:82:ea:c0:7a:8e:05:72:d2:ea:ca:74:7a:57: 1a:db:a1:70:e7:85:33:c5:e6:4d:82:23:e8:4f:f7:e2:4d:4e: d7:85:48:8f:9d:93:84:c0:89:79:3e:3e:3b:aa:b5:73:b3:24: d6:8d:a2:f5:28:1c:3e:e8:f0:d8:3e:ac:11:ef:09:0a:8b:d9: 37:4c:0f:8b:bd:bf:82:54:31:f5:ab:2f:4b:b8:a0:b9:ae:96: a7:7c:b7:68:c4:cc:12:7d:d6:59:f4:68:54:6a:7b:5d:47:66: 40:3b:a4:aa:c2:b4:c5:99:6e:f3:ad:2d:cb:8d:ce:c6:de:21: 19:41:9a:69:f3:03:c5:38:ae:88:7e:57:9e:26:45:0d:cf:01: b0:54:e9:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f0qCU9dZ0YB2DOrizCD9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5M2U4MTQ2NzZmMzJmMjY0NzcxYzdhZDc2N2E0ZGY4N2Qz YzYzZTIwHhcNMjUxMjIxMDYwMTA1WhcNMjUxMjIyMDYwMTA1WjAzMTEwLwYDVQQD EygzYmRlNDE3MTVjMjY1YWMzMTk2NDA5ZjFkZGIxNzE3MWRjNDg2MDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp94UP3EliKXZovGYJ0G4glGL6RfP w8a7eHjimCAXkg2I6v3XvWJQsCii5Z85qXXPpRlEqEj57+hiiGZlya1rm2KiaiXx +LF3DrYlr0HNiNXSTqZ0MuSbl+gSvtX/aqOGftKykUxZDkJRFAhgEfzJ12vLSmsh iqi8nYToefrs/P2BPhRD3ZtToatHE5sPigPvIz/wdQWlN/ikSjebC+HjxMZmmUie gqw+WtMHBm2CQBUQvz2PbNF4W2RXC8CwPwZkFq3sv2qxhK9OKcrhTeV0HcJOT6fu vvL2+ybCeynbAdAR8YnzmHy0cb9lzSER78rXbO4QnjEOM6R25kTxi0OxOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDveQXFcJlrDGWQJ8d2xcXHcSGBDMB8GA1UdIwQY MBaAFJk+gUZ28y8mR3HHrXZ6Tfh9PGPiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVQ2QlJuYnpMeVpIY2NldGRucE4tSDA4WS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMzIxZjUtZDYxMS00MjE4LWFmMWYt NDhjYjBmY2I5MGMzLzEvbVQ2QlJuYnpMeVpIY2NldGRucE4tSDA4WS1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMzIxZjUtZDYxMS00MjE4LWFmMWYtNDhjYjBmY2I5MGMz LzEvbVQ2QlJuYnpMeVpIY2NldGRucE4tSDA4WS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHY/wr5Ji Q01VytmkDi2QIsBl2UWzAG0zUWFOZpF6dDk5tuxPeu/ZBpKciQdQna58Q03h2uZV rpn1WOD1sn0ZQo2C3T7if/PX0STsR2rhxghEBhRC+uEXZLLL1roCKFColuS4gZgJ ZbXGS5zrhWENafWC6sB6jgVy0urKdHpXGtuhcOeFM8XmTYIj6E/34k1O14VIj52T hMCJeT4+O6q1c7Mk1o2i9SgcPujw2D6sEe8JCovZN0wPi72/glQx9asvS7igua6W p3y3aMTMEn3WWfRoVGp7XUdmQDukqsK0xZlu860ty43Oxt4hGUGaafMDxTiuiH5X niZFDc8BsFTpyg== -----END CERTIFICATE-----Generated at Sun Dec 21 14:35:29 2025 by rpki-client