This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft File: x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft (raw, json) Hash identifier: qJRDpQTcq0El9sFpI3QOLWX8ZzOEKCGYgKdPwdI8igI= Subject key identifier: 69:CC:87:0F:26:4F:4A:44:09:47:A2:72:A0:93:6E:2D:82:C4:87:CE Authority key identifier: C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2 Certificate issuer: /CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2 Certificate serial: 019B3B34B197DC6641368CDA7582E5329755 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft Manifest number: 10DA Signing time: Sat 20 Dec 2025 10:01:07 +0000 Manifest this update: Sat 20 Dec 2025 10:01:07 +0000 Manifest next update: Sun 21 Dec 2025 10:01:07 +0000 Files and hashes: 1: JqQax9sv0vRADwA78DtmjWkQLEE.roa (hash: Yj45NvtpL9PKcZ/9PbAe7wPZg60kGlm36nNetlLSWMc=) 2: QeY7vGKOe5WJwx2PdFZMhuvqcrM.roa (hash: iFsqZE7xTmoV7CGhuU56miv5nf81Wm5pGm3tJX+o8Gg=) 3: dSov7w2eyIME-dLmYE5huJUu4Yg.roa (hash: ZBbSGs3xtCwiRVVA/WAQV08kD/BTL0iXtgfJYGFBfeY=) 4: k87lgNj4qO622k5m8YD6e52HffU.roa (hash: BbwtpxmMRI/R7NUAtfqJ+9NVGBGAxn+88eOiQR6/i8w=) 5: x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl (hash: Yq12OHrm9c1dKFF65vLMLXvG7Qh6T5Yyj95XJZ6WyVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:b1:97:dc:66:41:36:8c:da:75:82:e5:32:97:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2 Validity Not Before: Dec 20 10:01:07 2025 GMT Not After : Dec 21 10:01:07 2025 GMT Subject: CN=69cc870f264f4a440947a272a0936e2d82c487ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:de:8e:b2:71:43:57:bc:d9:54:57:57:bc: 3d:2d:e1:2f:f1:09:56:ac:0b:e5:ed:a9:ae:7c:57: 55:0c:6c:af:52:d3:e0:3b:bf:d9:32:4a:ca:3f:22: 8f:f4:b0:61:41:d9:0f:2e:59:22:4f:32:1a:8f:ed: 8f:cc:9c:f6:53:5c:4e:05:99:04:ed:0f:3b:e1:23: 3f:9c:1e:38:c7:88:f7:41:5b:2c:df:2e:51:c7:59: 3c:fc:9a:e4:d9:53:18:54:7a:3f:56:42:6e:7b:05: 50:1e:c2:85:94:2a:43:d2:8d:15:b0:58:35:0b:d4: 35:bc:d5:0d:17:b7:b0:92:b5:32:3f:11:f5:4f:ba: a0:dd:26:2e:e2:f6:3a:04:57:1f:6a:5c:75:1f:cc: 73:32:1e:0b:9d:fe:35:9c:0a:1c:a6:d3:10:d9:17: 7a:65:5c:84:79:22:6b:66:13:13:50:ed:f2:87:85: 24:5f:35:08:82:a3:c6:5e:10:5e:ec:e9:f4:c7:79: e6:2d:04:ae:2e:f0:d4:53:1b:bd:f0:86:64:2e:48: ed:a6:a8:ae:ca:1e:b8:36:1a:90:b3:e9:62:e1:b1: 32:1d:40:92:e9:07:f5:40:64:64:6f:63:f5:f1:57: 94:82:10:72:55:66:f3:ba:46:27:e5:b7:1d:3b:d0: 53:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CC:87:0F:26:4F:4A:44:09:47:A2:72:A0:93:6E:2D:82:C4:87:CE X509v3 Authority Key Identifier: keyid:C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:a7:d1:40:ec:b8:7a:65:5a:3f:5b:a3:fb:e5:61:e9:b2:00: 1f:34:45:84:20:dc:e9:43:87:d8:43:1b:2c:c4:42:86:33:92: b9:87:25:de:19:c3:95:31:ef:19:07:1a:da:a3:cd:4c:ab:d8: df:a3:6f:91:2f:e5:a9:61:a6:54:a8:c7:97:c4:c5:99:e2:b3: 77:c3:ba:70:f4:91:46:49:df:2d:bc:1d:c6:e8:a9:31:9a:7f: f5:db:07:d6:86:ac:8f:8c:8a:6a:4d:23:57:02:c0:30:89:d7: 8e:a0:ae:ac:b9:fb:67:4a:f4:2a:37:48:a6:92:62:29:b2:d6: 43:6e:e7:cd:91:d0:ba:f6:34:a4:22:45:44:63:44:89:85:51: 29:ea:94:75:4e:62:8b:f9:92:58:e4:76:6a:9c:29:4a:9e:d9: 86:03:42:c8:58:1b:64:8f:a7:7e:0d:d3:bd:97:6a:23:c8:ee: 81:de:e8:ed:7d:d9:24:2d:f3:56:67:98:ae:9a:d0:2c:4e:b0: 23:d8:98:b9:a6:40:db:59:ed:2c:a7:38:6f:25:15:3a:e7:f0: 60:ca:a1:3a:25:1a:de:c5:ef:ec:9f:51:f6:15:c2:74:1e:ba: 94:49:29:be:1d:ed:b7:24:a9:e1:2b:61:c7:4d:7a:42:41:21: 72:e3:f2:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NLGX3GZBNozadYLlMpdVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YTJlNGViOWZkM2NjZDFiYTQ0YTM2MmY3NmY5ODliN2I0 NGQ1ZjIwHhcNMjUxMjIwMTAwMTA3WhcNMjUxMjIxMTAwMTA3WjAzMTEwLwYDVQQD Eyg2OWNjODcwZjI2NGY0YTQ0MDk0N2EyNzJhMDkzNmUyZDgyYzQ4N2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy/ejrJxQ1e82VRXV7w9LeEv8QlW rAvl7amufFdVDGyvUtPgO7/ZMkrKPyKP9LBhQdkPLlkiTzIaj+2PzJz2U1xOBZkE 7Q874SM/nB44x4j3QVss3y5Rx1k8/Jrk2VMYVHo/VkJuewVQHsKFlCpD0o0VsFg1 C9Q1vNUNF7ewkrUyPxH1T7qg3SYu4vY6BFcfalx1H8xzMh4Lnf41nAocptMQ2Rd6 ZVyEeSJrZhMTUO3yh4UkXzUIgqPGXhBe7On0x3nmLQSuLvDUUxu98IZkLkjtpqiu yh64NhqQs+li4bEyHUCS6Qf1QGRkb2P18VeUghByVWbzukYn5bcdO9BT+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnMhw8mT0pECUeicqCTbi2CxIfOMB8GA1UdIwQY MBaAFMei5Ouf08zRukSjYvdvmJt7RNXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDZMazY1X1R6Tkc2UktOaTkyLVltM3RFMWZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wZTQ5NzYtZTc1MC00NTY4LTg1ODMt ZGU2ZWY3Yzk1NTI2LzEveDZMazY1X1R6Tkc2UktOaTkyLVltM3RFMWZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wZTQ5NzYtZTc1MC00NTY4LTg1ODMtZGU2ZWY3Yzk1NTI2 LzEveDZMazY1X1R6Tkc2UktOaTkyLVltM3RFMWZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEKfRQOy4 emVaP1uj++Vh6bIAHzRFhCDc6UOH2EMbLMRChjOSuYcl3hnDlTHvGQca2qPNTKvY 36NvkS/lqWGmVKjHl8TFmeKzd8O6cPSRRknfLbwdxuipMZp/9dsH1oasj4yKak0j VwLAMInXjqCurLn7Z0r0KjdIppJiKbLWQ27nzZHQuvY0pCJFRGNEiYVRKeqUdU5i i/mSWOR2apwpSp7ZhgNCyFgbZI+nfg3TvZdqI8jugd7o7X3ZJC3zVmeYrprQLE6w I9iYuaZA21ntLKc4byUVOufwYMqhOiUa3sXv7J9R9hXCdB66lEkpvh3ttySp4Sth x016QkEhcuPyjw== -----END CERTIFICATE-----Generated at Sat Dec 20 15:30:10 2025 by rpki-client