This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft File: t6XbvIM8xastSukpfi6rl18cGX0.mft (raw, json) Hash identifier: H+HGNBPLVVoxzYaQQY5T/MFb6JPH7hG5v0p1+BqmOYg= Subject key identifier: 86:BD:79:E0:88:99:39:39:F8:07:DC:D9:F2:6E:B0:64:70:BE:D9:93 Authority key identifier: B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D Certificate issuer: /CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d Certificate serial: 019B5072F4E74FF6F22115BA57347539B9AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft Manifest number: 0828 Signing time: Wed 24 Dec 2025 13:01:09 +0000 Manifest this update: Wed 24 Dec 2025 13:01:09 +0000 Manifest next update: Thu 25 Dec 2025 13:01:09 +0000 Files and hashes: 1: pKIlg5YmNEiNHDYBMKXqIV0XhFU.roa (hash: 516yZ2viMH4DtygFn77E9hucmTi9jK0KgNTpnz+3JZI=) 2: t6XbvIM8xastSukpfi6rl18cGX0.crl (hash: ycxo/379NTkvMGitgLfEJ1+SLdxGbb23B8ebgkQCn1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:f4:e7:4f:f6:f2:21:15:ba:57:34:75:39:b9:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d Validity Not Before: Dec 24 13:01:09 2025 GMT Not After : Dec 25 13:01:09 2025 GMT Subject: CN=86bd79e088993939f807dcd9f26eb06470bed993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:33:88:ff:71:8d:84:71:6c:56:98:cb:d5:06: 35:55:35:b3:c8:cb:32:b3:d5:4c:bc:a9:f5:ef:76: 2a:16:e9:e6:2e:85:23:32:d0:84:0a:e1:8c:7c:51: b9:e1:b2:3b:1f:90:ec:60:5f:4c:09:51:26:e7:c3: 7f:3d:93:d4:26:86:45:46:2e:85:cb:5c:1d:74:51: 2f:a2:df:29:fa:4e:ed:c0:f4:69:2d:ac:c6:27:20: 1d:70:ee:f3:9b:96:90:08:e7:34:28:90:f5:f9:02: cf:1f:80:a6:e4:11:87:5b:62:e5:56:92:cc:13:f3: 79:6e:bf:ea:ac:d3:75:c8:a6:ee:14:9a:5d:d7:54: 32:78:9c:a4:27:97:ab:c9:0f:64:8b:03:af:91:77: 79:71:0a:4b:76:75:67:10:b8:28:1d:d6:29:f5:46: 44:82:65:c1:d8:a0:d4:8e:a3:d1:62:63:5a:d0:72: 99:1d:90:d8:36:4d:f3:0f:3a:4d:0e:87:15:16:94: 89:78:70:05:c1:91:29:44:85:37:4c:94:93:51:37: 6f:e2:59:19:2c:47:3e:ad:17:02:20:11:79:63:ef: f7:6e:10:3a:51:08:f5:f6:5a:03:5e:95:2a:30:be: bf:fc:6b:7c:9f:92:e4:93:64:7f:9e:4f:ea:f3:87: 92:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BD:79:E0:88:99:39:39:F8:07:DC:D9:F2:6E:B0:64:70:BE:D9:93 X509v3 Authority Key Identifier: keyid:B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:76:5e:b1:2c:ce:8a:34:95:be:33:3d:9c:08:25:8b:4d:c6: 1c:3b:85:fc:27:aa:28:dd:da:05:9c:7d:5a:1c:cc:cf:77:52: b0:ef:54:bb:a8:53:8d:18:04:e5:38:f8:fa:02:27:20:15:e5: cb:b9:19:b8:f1:e0:5e:b8:5a:e9:3c:2f:e6:28:17:79:e4:4b: f6:f3:b6:b5:e9:3c:ed:71:73:89:fb:5c:b2:fd:a8:8c:cc:f4: 8d:f7:6f:14:43:71:33:c2:1b:cf:b9:45:0a:36:5c:42:7b:76: c5:39:9e:e7:93:22:4c:34:88:50:09:2a:43:b1:87:46:48:a7: 41:6a:b7:f8:df:a9:58:7a:3a:0b:9f:23:d4:f6:c7:9b:33:53: 75:3f:ca:a4:50:51:6b:6e:13:ee:67:f8:2a:20:4d:89:f4:2b: 1f:49:02:b8:1c:7a:b9:ac:6b:b3:b0:fd:d6:c3:dd:80:e5:1b: 9d:45:c2:a3:33:19:27:68:b9:52:60:db:df:37:81:93:97:08: 54:6d:ab:bd:2f:64:18:25:df:de:ad:c9:93:61:b0:12:4c:43: 2d:3e:ad:e3:88:2b:63:63:be:34:9c:7a:ba:e2:47:02:be:f6: 50:a9:69:6f:40:db:e8:b9:8f:a1:fd:2c:bb:b5:31:1c:ed:bf: 74:c8:2c:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcvTnT/byIRW6VzR1ObmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YTVkYmJjODMzY2M1YWIyZDRhZTkyOTdlMmVhYjk3NWYx YzE5N2QwHhcNMjUxMjI0MTMwMTA5WhcNMjUxMjI1MTMwMTA5WjAzMTEwLwYDVQQD Eyg4NmJkNzllMDg4OTkzOTM5ZjgwN2RjZDlmMjZlYjA2NDcwYmVkOTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTOI/3GNhHFsVpjL1QY1VTWzyMsy s9VMvKn173YqFunmLoUjMtCECuGMfFG54bI7H5DsYF9MCVEm58N/PZPUJoZFRi6F y1wddFEvot8p+k7twPRpLazGJyAdcO7zm5aQCOc0KJD1+QLPH4Cm5BGHW2LlVpLM E/N5br/qrNN1yKbuFJpd11QyeJykJ5eryQ9kiwOvkXd5cQpLdnVnELgoHdYp9UZE gmXB2KDUjqPRYmNa0HKZHZDYNk3zDzpNDocVFpSJeHAFwZEpRIU3TJSTUTdv4lkZ LEc+rRcCIBF5Y+/3bhA6UQj19loDXpUqML6//Gt8n5Lkk2R/nk/q84eSyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIa9eeCImTk5+Afc2fJusGRwvtmTMB8GA1UdIwQY MBaAFLel27yDPMWrLUrpKX4uq5dfHBl9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZYYnZJTTh4YXN0U3VrcGZpNnJsMThjR1gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80MjlmZjktMDI2NS00NzZmLTkwMzUt NDE5MmEzNTdlYWI3LzEvdDZYYnZJTTh4YXN0U3VrcGZpNnJsMThjR1gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80MjlmZjktMDI2NS00NzZmLTkwMzUtNDE5MmEzNTdlYWI3 LzEvdDZYYnZJTTh4YXN0U3VrcGZpNnJsMThjR1gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHZesSzO ijSVvjM9nAgli03GHDuF/CeqKN3aBZx9WhzMz3dSsO9Uu6hTjRgE5Tj4+gInIBXl y7kZuPHgXrha6Twv5igXeeRL9vO2tek87XFziftcsv2ojMz0jfdvFENxM8Ibz7lF CjZcQnt2xTme55MiTDSIUAkqQ7GHRkinQWq3+N+pWHo6C58j1PbHmzNTdT/KpFBR a24T7mf4KiBNifQrH0kCuBx6uaxrs7D91sPdgOUbnUXCozMZJ2i5UmDb3zeBk5cI VG2rvS9kGCXf3q3Jk2GwEkxDLT6t44grY2O+NJx6uuJHAr72UKlpb0Db6LmPof0s u7UxHO2/dMgslQ== -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:22 2025 by rpki-client