This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft File: t6XbvIM8xastSukpfi6rl18cGX0.mft (raw, json) Hash identifier: Jrr7h917rhKobhrAeubIU2z+PFdqNb84LYAaANT5pYc= Subject key identifier: 76:81:AC:A2:F2:7F:C1:E8:A0:4D:30:38:1C:10:29:4E:09:6E:B6:39 Authority key identifier: B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D Certificate issuer: /CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d Certificate serial: 019B37582F77540067DEC96239F7F602EC64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft Manifest number: 081B Signing time: Fri 19 Dec 2025 16:01:24 +0000 Manifest this update: Fri 19 Dec 2025 16:01:24 +0000 Manifest next update: Sat 20 Dec 2025 16:01:24 +0000 Files and hashes: 1: pKIlg5YmNEiNHDYBMKXqIV0XhFU.roa (hash: 516yZ2viMH4DtygFn77E9hucmTi9jK0KgNTpnz+3JZI=) 2: t6XbvIM8xastSukpfi6rl18cGX0.crl (hash: vliez7c+4pkL0tD6ie4h+R+eHe+dAc4c20IDC6el6BA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:58:2f:77:54:00:67:de:c9:62:39:f7:f6:02:ec:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d Validity Not Before: Dec 19 16:01:24 2025 GMT Not After : Dec 20 16:01:24 2025 GMT Subject: CN=7681aca2f27fc1e8a04d30381c10294e096eb639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:33:0e:8f:d2:9a:cb:c1:0f:8b:e2:d4:a3:e4: 02:68:16:3e:42:19:cd:3c:6b:fc:e3:35:69:06:9f: 3b:eb:a6:fc:b2:03:16:5d:f0:b1:d7:4f:20:a9:0e: 08:3f:f9:da:16:79:53:34:1c:84:bd:6e:4e:20:52: 7b:62:f2:9d:4e:3a:20:c5:91:e2:ea:e6:e5:ff:b4: 3a:59:58:e5:21:83:b0:6a:66:2b:cb:69:dc:1d:5b: cc:24:bc:ed:c4:4d:1a:a1:7f:69:50:88:10:43:81: 70:a2:ca:78:7a:1e:ee:2d:7d:80:00:6d:86:42:49: 61:96:d9:4c:d4:74:fb:ac:8a:d6:42:6a:3e:1e:a3: e9:92:24:23:e2:d9:c0:eb:7f:e6:3c:7e:1d:f5:f3: 6b:aa:21:03:6a:fa:4d:72:0b:17:51:79:7d:4f:bc: 0a:f2:ea:3b:97:e9:be:29:ba:df:b7:42:63:83:af: d2:e9:db:4d:f1:88:2e:b8:89:c3:61:5a:36:62:96: 3f:6a:90:00:fc:b5:6e:23:02:1d:f2:88:f7:c9:e0: 35:96:15:1b:aa:56:66:3e:55:9e:fe:1b:f2:09:dc: de:d0:43:51:45:50:d5:95:96:5d:c5:ed:ab:71:44: 4f:5f:04:5e:0a:27:23:53:b1:04:f2:e9:be:f7:87: 64:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:81:AC:A2:F2:7F:C1:E8:A0:4D:30:38:1C:10:29:4E:09:6E:B6:39 X509v3 Authority Key Identifier: keyid:B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:b2:f8:00:19:88:a1:1d:e8:04:3b:ca:87:38:dc:2b:77:ba: 52:bd:6a:1e:99:b7:86:4f:b0:cd:b5:8a:00:b1:63:f1:a5:9f: d5:a5:e5:60:b4:9a:8a:52:ac:56:10:8f:7b:c0:71:c3:a4:b4: 40:16:ef:7d:86:7f:26:98:68:15:8a:11:41:ce:d1:e1:69:e2: fb:5a:4d:ea:c6:f4:ab:d6:b3:4e:31:a9:d0:5b:30:30:f2:f1: 32:1a:2a:6d:e4:39:3c:0b:2a:f3:3e:72:57:69:78:0e:b9:7a: 6c:7e:66:f0:7a:38:bf:f9:63:86:0a:6c:c6:2c:3f:ac:49:9d: 60:a0:85:ca:6a:e4:ca:1d:4d:f7:b6:f1:bb:c5:b9:95:6e:fe: f0:59:15:37:c0:89:0f:4a:05:e3:ec:04:b6:32:23:fc:8c:f4: 77:d2:99:a0:2d:65:bc:89:fe:70:9b:96:7c:6b:62:26:2a:57: cf:86:df:02:20:e3:15:35:19:78:7f:03:03:a3:45:bc:ea:e1: e7:0c:22:c5:dc:1e:84:82:2e:4f:e1:04:9c:7a:cd:0c:e1:c5: 3d:07:c6:45:88:87:71:15:24:34:06:1d:63:d5:a0:a6:89:42: 26:56:c1:ce:d6:6a:c7:b9:ce:c9:a6:57:1e:52:44:c3:0d:68: 76:3a:1f:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3WC93VABn3sliOff2AuxkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YTVkYmJjODMzY2M1YWIyZDRhZTkyOTdlMmVhYjk3NWYx YzE5N2QwHhcNMjUxMjE5MTYwMTI0WhcNMjUxMjIwMTYwMTI0WjAzMTEwLwYDVQQD Eyg3NjgxYWNhMmYyN2ZjMWU4YTA0ZDMwMzgxYzEwMjk0ZTA5NmViNjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TMOj9Kay8EPi+LUo+QCaBY+QhnN PGv84zVpBp8766b8sgMWXfCx108gqQ4IP/naFnlTNByEvW5OIFJ7YvKdTjogxZHi 6ubl/7Q6WVjlIYOwamYry2ncHVvMJLztxE0aoX9pUIgQQ4Fwosp4eh7uLX2AAG2G QklhltlM1HT7rIrWQmo+HqPpkiQj4tnA63/mPH4d9fNrqiEDavpNcgsXUXl9T7wK 8uo7l+m+Kbrft0Jjg6/S6dtN8YguuInDYVo2YpY/apAA/LVuIwId8oj3yeA1lhUb qlZmPlWe/hvyCdze0ENRRVDVlZZdxe2rcURPXwReCicjU7EE8um+94dktQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaBrKLyf8HooE0wOBwQKU4JbrY5MB8GA1UdIwQY MBaAFLel27yDPMWrLUrpKX4uq5dfHBl9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZYYnZJTTh4YXN0U3VrcGZpNnJsMThjR1gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80MjlmZjktMDI2NS00NzZmLTkwMzUt NDE5MmEzNTdlYWI3LzEvdDZYYnZJTTh4YXN0U3VrcGZpNnJsMThjR1gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80MjlmZjktMDI2NS00NzZmLTkwMzUtNDE5MmEzNTdlYWI3 LzEvdDZYYnZJTTh4YXN0U3VrcGZpNnJsMThjR1gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALL4ABmI oR3oBDvKhzjcK3e6Ur1qHpm3hk+wzbWKALFj8aWf1aXlYLSailKsVhCPe8Bxw6S0 QBbvfYZ/JphoFYoRQc7R4Wni+1pN6sb0q9azTjGp0FswMPLxMhoqbeQ5PAsq8z5y V2l4Drl6bH5m8Ho4v/ljhgpsxiw/rEmdYKCFymrkyh1N97bxu8W5lW7+8FkVN8CJ D0oF4+wEtjIj/Iz0d9KZoC1lvIn+cJuWfGtiJipXz4bfAiDjFTUZeH8DA6NFvOrh 5wwixdwehIIuT+EEnHrNDOHFPQfGRYiHcRUkNAYdY9WgpolCJlbBztZqx7nOyaZX HlJEww1odjofOg== -----END CERTIFICATE-----Generated at Sat Dec 20 00:58:52 2025 by rpki-client