This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft File: fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json) Hash identifier: smeSC7k7K3RocCxetrqS0Gg0fkBSYiONyaXYwxZ937s= Subject key identifier: 1D:28:BE:BE:9F:5D:82:F2:A5:4F:E2:20:A6:68:37:49:22:91:8F:4C Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9 Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9 Certificate serial: 019B6D3356837077444775A5114D18E185FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft Manifest number: 0592 Signing time: Tue 30 Dec 2025 03:00:39 +0000 Manifest this update: Tue 30 Dec 2025 03:00:39 +0000 Manifest next update: Wed 31 Dec 2025 03:00:39 +0000 Files and hashes: 1: ahfN64_p8VtI62YroQrVTvBrIO0.roa (hash: sZaDoXjnbfKoPFXFsVFkCxokaAJgn9I/0mc/e5HXWnI=) 2: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: QBCaZYdFM6EYVyXdf+hRc5tE+gHcNHtVwERHqKf9T/0=) 3: o9U5Dfyd-pSAin_ZdTXibSOZdr8.roa (hash: mqF6uwOJbIfnUqauX0VbeIR/n/OPtHF+diV/fjZGJJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:56:83:70:77:44:47:75:a5:11:4d:18:e1:85:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9 Validity Not Before: Dec 30 03:00:39 2025 GMT Not After : Dec 31 03:00:39 2025 GMT Subject: CN=1d28bebe9f5d82f2a54fe220a668374922918f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:41:25:f4:42:07:bd:18:d6:0e:0d:22:a7: ac:4f:d0:45:5f:62:0b:10:ae:69:67:06:26:da:c6: 1a:ee:bc:84:38:f4:73:53:cf:40:91:87:3a:61:71: 85:c1:19:33:45:5c:a8:1b:f1:8b:e3:83:af:d8:5d: 0f:01:7e:34:de:b7:2f:da:92:53:a9:f2:47:55:ca: 7b:a0:48:54:d7:5e:3b:31:23:53:86:ab:5e:21:ba: fb:f6:ae:02:70:25:34:13:af:38:40:e6:4d:b1:67: 3d:f6:e1:ed:d5:0d:b5:e6:31:55:af:29:b4:c9:80: 9f:7d:2b:8e:87:87:fe:3b:37:0a:27:7c:50:56:08: b3:3b:4d:32:39:5a:d8:6f:5d:c7:95:c9:79:f1:ac: 14:90:65:bf:60:e3:83:42:c9:e7:eb:19:c8:c1:97: b0:a6:b6:4d:24:2f:d8:a1:54:3d:ad:6d:82:f9:74: 73:80:92:14:0e:9e:48:33:19:d3:22:79:95:a7:31: ee:57:80:bd:68:27:0d:5e:a4:75:90:02:88:2b:f5: 20:b4:e6:b2:55:da:bb:d7:05:da:92:b1:7b:59:8b: 2b:22:0d:62:7a:79:91:6c:f7:98:15:44:19:32:57: d6:26:af:e4:c5:13:a4:8b:80:4e:79:ab:64:f9:77: d8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:28:BE:BE:9F:5D:82:F2:A5:4F:E2:20:A6:68:37:49:22:91:8F:4C X509v3 Authority Key Identifier: keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:9b:72:16:da:56:b2:88:8a:f1:7e:84:f5:25:6e:fa:5c:b1: c2:f3:b3:82:3d:44:b7:cd:b6:df:38:61:59:6a:30:d3:f5:e0: 4c:be:c9:cb:5a:a2:4a:0b:68:6c:c2:52:50:cb:f6:8a:ae:3a: 48:5f:e5:b6:57:df:9f:63:6b:4d:71:78:38:30:69:79:fc:3f: a3:8d:c7:3d:38:3f:ae:93:3c:ce:b6:af:78:5e:04:7e:a2:a3: fa:95:19:14:ac:51:93:45:46:fc:fa:5f:2f:5c:dc:d9:49:b8: 9f:59:72:14:31:4c:93:1e:0c:f0:2c:12:87:ab:0f:ca:99:21: 7f:a4:0b:28:e6:e7:09:fd:ed:ac:09:d1:3d:d3:6e:da:6b:0e: 06:73:d9:1d:e5:ac:fd:02:56:45:2f:8c:c5:67:02:34:ff:5c: 51:a3:05:d0:34:26:22:47:a8:94:ef:05:17:77:3d:55:99:82: 66:a2:19:54:6f:3b:b0:f2:9f:9e:12:7d:cb:f2:0f:02:a6:bb: 48:91:3f:36:86:a9:d5:ef:9d:7e:b9:06:61:39:2b:f7:b6:aa: 1c:c7:ee:71:99:79:21:3f:a5:f7:86:05:66:c6:b1:55:a6:67: 0f:21:7d:a7:43:04:bd:3d:bc:07:cb:5f:f1:7a:2f:f0:42:e0: 42:a5:3a:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttM1aDcHdER3WlEU0Y4YX7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMmVhM2VjYWQ1YTQwMmI4ZmU1YTJhNjEzOGFmNjZhYWMy NTdmZjkwHhcNMjUxMjMwMDMwMDM5WhcNMjUxMjMxMDMwMDM5WjAzMTEwLwYDVQQD EygxZDI4YmViZTlmNWQ4MmYyYTU0ZmUyMjBhNjY4Mzc0OTIyOTE4ZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF5BJfRCB70Y1g4NIqesT9BFX2IL EK5pZwYm2sYa7ryEOPRzU89AkYc6YXGFwRkzRVyoG/GL44Ov2F0PAX403rcv2pJT qfJHVcp7oEhU1147MSNThqteIbr79q4CcCU0E684QOZNsWc99uHt1Q215jFVrym0 yYCffSuOh4f+OzcKJ3xQVgizO00yOVrYb13Hlcl58awUkGW/YOODQsnn6xnIwZew prZNJC/YoVQ9rW2C+XRzgJIUDp5IMxnTInmVpzHuV4C9aCcNXqR1kAKIK/UgtOay Vdq71wXakrF7WYsrIg1ienmRbPeYFUQZMlfWJq/kxROki4BOeatk+XfYmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0ovr6fXYLypU/iIKZoN0kikY9MMB8GA1UdIwQY MBaAFH0uo+ytWkArj+WiphOK9mqsJX/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80NDc2NzctOTk3Mi00ZGY4LWI1MDgt YjkxYjkyZDRkODAxLzEvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy80NDc2NzctOTk3Mi00ZGY4LWI1MDgtYjkxYjkyZDRkODAx LzEvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZtyFtpW soiK8X6E9SVu+lyxwvOzgj1Et8223zhhWWow0/XgTL7Jy1qiSgtobMJSUMv2iq46 SF/ltlffn2NrTXF4ODBpefw/o43HPTg/rpM8zraveF4EfqKj+pUZFKxRk0VG/Ppf L1zc2Um4n1lyFDFMkx4M8CwSh6sPypkhf6QLKObnCf3trAnRPdNu2msOBnPZHeWs /QJWRS+MxWcCNP9cUaMF0DQmIkeolO8FF3c9VZmCZqIZVG87sPKfnhJ9y/IPAqa7 SJE/Noap1e+dfrkGYTkr97aqHMfucZl5IT+l94YFZsaxVaZnDyF9p0MEvT28B8tf 8Xov8ELgQqU6dA== -----END CERTIFICATE-----Generated at Tue Dec 30 04:38:07 2025 by rpki-client