This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft File: s6RxSmlcY88unErephcYJ9hm4pg.mft (raw, json) Hash identifier: SUihuU5+ALVfFlp8kx3ax7k/w6yBYmc5ziOXboYGfaY= Subject key identifier: 7E:46:D3:58:23:EB:F4:27:19:1C:65:0F:7A:43:E9:4A:FA:59:E7:5A Authority key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98 Certificate issuer: /CN=b3a4714a695c63cf2e9c4adea6171827d866e298 Certificate serial: 019B3DC752196D8B80BFE1D7F8B139B0B6CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft Manifest number: 14F4 Signing time: Sat 20 Dec 2025 22:00:31 +0000 Manifest this update: Sat 20 Dec 2025 22:00:31 +0000 Manifest next update: Sun 21 Dec 2025 22:00:31 +0000 Files and hashes: 1: UIgf9ajrQrDmAPpLPV90kRuj32I.roa (hash: AlX36a6BnwjhKrdVjNHSqwcRq3yixFLnOubI+UNJ9cQ=) 2: cBeaN8r92MWoqfdvhQH_ewA_rkk.roa (hash: yNYMjmHLoWXkkp0dQFYuWRyyRjSNzH1ulJxUwxp290s=) 3: s6RxSmlcY88unErephcYJ9hm4pg.crl (hash: HDYqSpqT4a6GGqyyT7FsOXdmIqkrmnHGrPLsYVkaIS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:52:19:6d:8b:80:bf:e1:d7:f8:b1:39:b0:b6:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a4714a695c63cf2e9c4adea6171827d866e298 Validity Not Before: Dec 20 22:00:31 2025 GMT Not After : Dec 21 22:00:31 2025 GMT Subject: CN=7e46d35823ebf427191c650f7a43e94afa59e75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:97:24:a4:2e:67:9e:70:ef:b6:10:1f:68:2c: 6f:18:6d:53:57:a2:e1:8f:a3:a9:21:e9:b4:35:a6: e7:b9:20:22:d4:6d:7b:18:7e:07:6a:80:65:35:7e: 6f:49:de:16:a6:a6:19:d9:be:2e:88:12:5b:9f:eb: ef:76:20:8a:d9:32:6c:49:38:a9:8d:86:09:94:64: 16:7f:3c:50:23:16:fb:bf:65:23:a0:29:09:58:a9: 31:c6:80:0e:4a:83:fc:51:9e:6c:c8:82:90:77:db: c4:66:8a:d1:bb:2f:73:17:6d:0d:40:d9:be:8e:52: 1f:90:b1:72:ea:c6:40:32:14:f7:f1:6f:19:8b:73: ba:4b:5b:2e:14:76:5f:c3:f6:ee:37:55:ec:a8:98: fe:07:87:0e:e3:df:e9:a9:c0:60:16:03:95:48:19: 1f:80:85:23:3a:70:1c:87:ef:2d:dd:cf:a3:cb:57: 59:6d:cb:d9:90:c3:ce:5d:38:16:f7:e6:71:0c:1a: 79:29:0b:9d:3f:94:46:2f:a8:84:f4:69:8d:f5:44: 87:62:eb:6d:09:f8:c3:54:8a:61:c4:7e:3f:a4:60: e3:8c:32:a2:50:a2:87:6a:77:bd:71:9f:13:29:25: 57:02:a5:04:01:55:a9:2d:2a:ca:9a:bf:87:13:5f: a4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:46:D3:58:23:EB:F4:27:19:1C:65:0F:7A:43:E9:4A:FA:59:E7:5A X509v3 Authority Key Identifier: keyid:B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:7e:64:b3:4c:44:13:1b:51:2a:30:6f:94:3c:07:f5:96:8d: bf:83:9c:d2:4f:92:34:35:9c:04:7c:4d:db:37:04:eb:b9:36: 0b:d2:c2:63:08:b8:f2:d2:d6:15:61:cb:9c:31:64:16:ed:84: ce:5f:15:af:ba:bf:b8:5e:da:8e:75:c4:1b:3d:48:f3:36:95: 0e:bb:33:e2:db:10:b2:aa:87:28:93:d4:a7:8a:3c:0b:08:2f: 91:c5:4d:8d:f4:be:3d:ff:c7:b6:67:26:90:3f:3d:41:dc:56: 4a:8f:3b:c9:8f:1a:4b:af:c2:54:5f:e0:c2:f0:df:0e:29:2b: ec:34:cd:d2:a8:18:3e:fc:ec:29:f9:a9:7d:35:0b:28:7b:a7: 54:00:d7:70:8c:94:46:87:29:9a:c2:f2:a4:75:44:c1:8d:fb: d8:73:f9:dc:b2:be:4f:af:5c:89:77:13:89:3f:6a:04:22:22: 94:36:d2:69:c3:25:e0:45:07:58:a4:d1:63:e2:18:d9:94:98: 86:67:98:6e:64:83:fc:1b:c2:d0:56:3a:de:f4:2d:fc:da:78: e0:84:dc:b4:b8:ef:71:81:ff:3b:cf:75:6b:a5:b3:77:40:12: 44:f1:89:05:89:00:fe:67:92:32:c7:46:c1:71:fc:64:fe:36: 5d:4f:26:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x1IZbYuAv+HX+LE5sLbKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTQ3MTRhNjk1YzYzY2YyZTljNGFkZWE2MTcxODI3ZDg2 NmUyOTgwHhcNMjUxMjIwMjIwMDMxWhcNMjUxMjIxMjIwMDMxWjAzMTEwLwYDVQQD Eyg3ZTQ2ZDM1ODIzZWJmNDI3MTkxYzY1MGY3YTQzZTk0YWZhNTllNzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZckpC5nnnDvthAfaCxvGG1TV6Lh j6OpIem0NabnuSAi1G17GH4HaoBlNX5vSd4WpqYZ2b4uiBJbn+vvdiCK2TJsSTip jYYJlGQWfzxQIxb7v2UjoCkJWKkxxoAOSoP8UZ5syIKQd9vEZorRuy9zF20NQNm+ jlIfkLFy6sZAMhT38W8Zi3O6S1suFHZfw/buN1XsqJj+B4cO49/pqcBgFgOVSBkf gIUjOnAch+8t3c+jy1dZbcvZkMPOXTgW9+ZxDBp5KQudP5RGL6iE9GmN9USHYutt CfjDVIphxH4/pGDjjDKiUKKHane9cZ8TKSVXAqUEAVWpLSrKmr+HE1+kNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5G01gj6/QnGRxlD3pD6Ur6WedaMB8GA1UdIwQY MBaAFLOkcUppXGPPLpxK3qYXGCfYZuKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZSeFNtbGNZODh1bkVyZXBoY1lKOWhtNHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85YTcyZTAtZmI5Yy00ZTcyLWFmMzQt ZGM0OGNlY2QxNTQ1LzEvczZSeFNtbGNZODh1bkVyZXBoY1lKOWhtNHBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85YTcyZTAtZmI5Yy00ZTcyLWFmMzQtZGM0OGNlY2QxNTQ1 LzEvczZSeFNtbGNZODh1bkVyZXBoY1lKOWhtNHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKH5ks0xE ExtRKjBvlDwH9ZaNv4Oc0k+SNDWcBHxN2zcE67k2C9LCYwi48tLWFWHLnDFkFu2E zl8Vr7q/uF7ajnXEGz1I8zaVDrsz4tsQsqqHKJPUp4o8CwgvkcVNjfS+Pf/Htmcm kD89QdxWSo87yY8aS6/CVF/gwvDfDikr7DTN0qgYPvzsKfmpfTULKHunVADXcIyU RocpmsLypHVEwY372HP53LK+T69ciXcTiT9qBCIilDbSacMl4EUHWKTRY+IY2ZSY hmeYbmSD/BvC0FY63vQt/Np44ITctLjvcYH/O891a6Wzd0ASRPGJBYkA/meSMsdG wXH8ZP42XU8mTw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:55:45 2025 by rpki-client