This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft File: tm6nNZIhwbd9bMAG97ZwapqQgpk.mft (raw, json) Hash identifier: sMluvdRVcTZtEdNCOEJIeV85c7/fGiRpfl+qCf1g+98= Subject key identifier: E3:1A:3D:88:AD:F5:83:5E:1B:3E:58:3B:E6:A5:8F:C3:B3:FD:D3:92 Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99 Certificate issuer: /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299 Certificate serial: 019B3B6BC77E62E9923D5AFA462B82936611 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft Manifest number: 1797 Signing time: Sat 20 Dec 2025 11:01:17 +0000 Manifest this update: Sat 20 Dec 2025 11:01:17 +0000 Manifest next update: Sun 21 Dec 2025 11:01:17 +0000 Files and hashes: 1: 040TsSTaomXmk-0H6b35Y5nsohA.roa (hash: ywLoOOPj8BHlaIbmhxcOt0xmd8oXL/QshjksxdsZgto=) 2: tm6nNZIhwbd9bMAG97ZwapqQgpk.crl (hash: BpauwOBtpHX28inSl+zT28JFTTKuPOVtJDfMpm40lgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:c7:7e:62:e9:92:3d:5a:fa:46:2b:82:93:66:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299 Validity Not Before: Dec 20 11:01:17 2025 GMT Not After : Dec 21 11:01:17 2025 GMT Subject: CN=e31a3d88adf5835e1b3e583be6a58fc3b3fdd392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6d:10:7d:8f:cc:ec:ec:b4:03:f9:a6:4f:5c: 2d:16:f6:4e:ff:14:29:e0:c3:c5:c5:56:6a:d9:2c: e2:32:33:f8:87:99:91:09:f0:d0:63:37:25:5b:b8: ef:d1:c7:bf:cc:10:8a:c9:3e:95:16:4d:dd:43:b5: a9:00:58:9d:87:8b:50:6c:04:11:15:b3:ac:d0:be: e4:69:48:d6:6e:5e:07:94:04:8c:c4:ab:01:45:3a: df:fe:e6:b5:80:a4:c2:0e:53:38:e5:7a:eb:2f:5c: 91:f7:35:5b:45:f8:b2:60:b1:19:8c:74:ec:10:b2: 95:c7:fd:8d:ba:ea:e8:c9:cd:94:bb:85:96:1f:2f: 42:a0:23:c3:4a:10:fb:17:54:fe:55:ef:b2:81:71: 26:11:0e:55:66:1e:2d:0f:d4:7c:7c:30:55:fe:8c: b1:7a:64:07:cd:f8:ef:7e:5e:de:8d:9b:6b:d7:a7: 5c:3e:8b:5d:a6:33:b6:a1:ad:62:4d:3c:65:ae:99: 73:37:a7:69:c1:c3:4d:85:db:47:3d:28:b6:54:59: 66:7b:cb:4c:9b:11:e4:07:10:1c:1b:69:ef:d6:05: ac:16:d5:23:a3:f2:be:97:a6:2b:dc:69:8c:3a:17: 93:94:28:02:3d:31:b3:57:50:d2:06:ca:83:99:73: 6f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1A:3D:88:AD:F5:83:5E:1B:3E:58:3B:E6:A5:8F:C3:B3:FD:D3:92 X509v3 Authority Key Identifier: keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:84:f2:44:04:4f:df:66:6a:1e:3d:38:61:db:e1:66:6a:3c: 1f:21:da:d7:6b:72:61:80:50:7c:58:7b:1b:87:3a:88:ea:c0: 9e:40:68:13:23:8c:30:68:55:51:a3:2b:d5:7c:91:35:a7:32: f2:12:0f:a6:4c:e2:76:2b:33:b4:aa:80:1e:96:c6:05:8f:49: 48:5a:ed:19:84:77:17:f2:1a:0e:63:2e:21:7d:6d:ce:24:55: 5f:3d:49:de:cf:dd:04:b6:cc:07:b1:3a:3d:46:c5:22:10:4a: c8:88:b3:c2:be:ea:57:23:c6:fe:6f:5f:41:8a:bc:28:c7:99: 02:f4:d1:69:40:1e:d4:2f:82:86:a4:23:44:1a:e7:e1:77:9b: d9:0b:a1:d7:0c:41:5a:66:c3:ef:81:82:47:e6:bc:c2:81:b6: 35:ed:bc:d1:cd:ec:2b:d6:8c:8b:a6:8a:18:2c:c7:70:d8:91: 91:8c:e2:30:08:03:f8:64:a4:b1:8d:88:c1:ef:ff:78:d4:24: a1:c7:4c:e9:87:bd:f8:21:8b:b0:85:fd:9f:59:3f:68:54:40: 33:5a:fa:a2:02:2c:d1:6e:61:68:21:15:95:37:ad:83:0f:d4: 84:4e:c1:70:cf:27:fd:fe:31:aa:ab:df:2c:04:5a:9e:5f:cc: 43:43:a8:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a8d+YumSPVr6RiuCk2YRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NmVhNzM1OTIyMWMxYjc3ZDZjYzAwNmY3YjY3MDZhOWE5 MDgyOTkwHhcNMjUxMjIwMTEwMTE3WhcNMjUxMjIxMTEwMTE3WjAzMTEwLwYDVQQD EyhlMzFhM2Q4OGFkZjU4MzVlMWIzZTU4M2JlNmE1OGZjM2IzZmRkMzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm0QfY/M7Oy0A/mmT1wtFvZO/xQp 4MPFxVZq2SziMjP4h5mRCfDQYzclW7jv0ce/zBCKyT6VFk3dQ7WpAFidh4tQbAQR FbOs0L7kaUjWbl4HlASMxKsBRTrf/ua1gKTCDlM45XrrL1yR9zVbRfiyYLEZjHTs ELKVx/2Nuuroyc2Uu4WWHy9CoCPDShD7F1T+Ve+ygXEmEQ5VZh4tD9R8fDBV/oyx emQHzfjvfl7ejZtr16dcPotdpjO2oa1iTTxlrplzN6dpwcNNhdtHPSi2VFlme8tM mxHkBxAcG2nv1gWsFtUjo/K+l6Yr3GmMOheTlCgCPTGzV1DSBsqDmXNvMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMaPYit9YNeGz5YO+alj8Oz/dOSMB8GA1UdIwQY MBaAFLZupzWSIcG3fWzABve2cGqakIKZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG02bk5aSWh3YmQ5Yk1BRzk3WndhcHFRZ3BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mODdhMmUtNDZiMS00YTY2LWE5MGMt Njk5ODM1YzkyYmZlLzEvdG02bk5aSWh3YmQ5Yk1BRzk3WndhcHFRZ3BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9mODdhMmUtNDZiMS00YTY2LWE5MGMtNjk5ODM1YzkyYmZl LzEvdG02bk5aSWh3YmQ5Yk1BRzk3WndhcHFRZ3BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApoTyRARP 32ZqHj04YdvhZmo8HyHa12tyYYBQfFh7G4c6iOrAnkBoEyOMMGhVUaMr1XyRNacy 8hIPpkzidisztKqAHpbGBY9JSFrtGYR3F/IaDmMuIX1tziRVXz1J3s/dBLbMB7E6 PUbFIhBKyIizwr7qVyPG/m9fQYq8KMeZAvTRaUAe1C+ChqQjRBrn4Xeb2Quh1wxB WmbD74GCR+a8woG2Ne280c3sK9aMi6aKGCzHcNiRkYziMAgD+GSksY2Iwe//eNQk ocdM6Ye9+CGLsIX9n1k/aFRAM1r6ogIs0W5haCEVlTetgw/UhE7BcM8n/f4xqqvf LARanl/MQ0OoKg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:41:06 2025 by rpki-client