This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft File: s6dYkEx1hW41haRDOuXsV_7xo8c.mft (raw, json) Hash identifier: NaerUH12AqwUawf62rl3a42huTRJ+DsLvt31Hty+TBA= Subject key identifier: 7A:6A:4A:5B:D1:9A:CF:04:24:A3:88:DC:6A:CD:68:2D:AF:DA:B9:98 Authority key identifier: B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7 Certificate issuer: /CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7 Certificate serial: 019B51F3494E8F1AC149467471E8942E0949 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 20:00:56 +0000 Manifest this update: Wed 24 Dec 2025 20:00:56 +0000 Manifest next update: Thu 25 Dec 2025 20:00:56 +0000 Files and hashes: 1: mD7Z7YeNOfK8jp-WeYlQt4uS5Qk.roa (hash: foJEvw+8/1mri1uVePD4Fo8lgGoj9wOcsREdvsruLoI=) 2: s6dYkEx1hW41haRDOuXsV_7xo8c.crl (hash: zDdFfzaHX+49t3mnMPboI3cSjF5kjtmUjWx0O8k+aH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:49:4e:8f:1a:c1:49:46:74:71:e8:94:2e:09:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7 Validity Not Before: Dec 24 20:00:56 2025 GMT Not After : Dec 25 20:00:56 2025 GMT Subject: CN=7a6a4a5bd19acf0424a388dc6acd682dafdab998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:7c:b2:99:04:60:bf:25:70:ba:1f:b2:d4: 54:0c:1d:6f:a0:f3:c9:84:38:d0:89:00:5a:5e:22: 6e:61:bc:a0:b0:ff:50:c9:a1:d5:96:c4:d7:3a:c6: 55:5b:b5:09:22:49:83:34:92:32:78:a0:2f:af:e5: 3d:ad:b1:31:47:af:45:33:ae:04:da:c6:21:0c:e6: 77:a7:14:bf:3d:f5:85:23:fa:64:6d:f6:b8:7e:cd: b0:8b:61:4c:ad:67:40:d5:2c:9e:e3:6a:eb:80:59: 33:40:8a:8d:a1:99:7c:44:6c:6b:50:41:60:6d:39: f5:c4:f7:b8:93:37:c0:9e:a4:2f:fd:38:62:51:5f: 36:03:aa:a8:30:5e:c2:c2:92:39:ba:cd:e2:ee:70: 0b:38:a0:d7:44:62:95:c1:89:48:a2:dd:68:f8:cb: a2:b8:70:9e:6a:10:02:76:d4:09:9a:b1:3b:2d:99: 5d:34:de:67:25:a0:c5:9d:8a:3f:32:92:93:26:c2: c8:21:e0:05:2d:0d:72:57:76:1e:af:30:9b:50:d2: 53:6e:6d:8a:43:16:70:87:03:ef:b0:d2:c7:63:77: 56:7f:b4:c4:3b:bc:40:c1:e9:df:10:e0:99:7d:8f: 90:6e:3a:ad:85:5e:25:83:35:a2:ce:8b:3d:ff:3d: bc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6A:4A:5B:D1:9A:CF:04:24:A3:88:DC:6A:CD:68:2D:AF:DA:B9:98 X509v3 Authority Key Identifier: keyid:B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:f1:7f:5e:01:e4:ea:da:d0:f9:b0:4a:6b:61:61:35:b5:39: 7e:1f:93:d3:9a:83:23:6b:ce:54:09:f3:97:77:83:be:aa:67: c3:c6:e1:96:3f:7b:7d:31:0f:3f:00:7e:af:2a:0e:8b:13:d8: 50:18:1f:ed:c7:31:17:47:85:17:d6:97:af:45:2e:d2:9c:d4: 79:d2:0d:64:13:1d:07:fb:2d:b5:1e:dd:74:0d:97:ea:ea:14: 1c:d3:b6:0d:6c:c3:80:2a:b2:b6:47:94:e8:a7:2e:25:c0:a5: f1:e3:21:20:2f:6b:fd:f1:7e:76:4e:db:47:fa:5b:2e:6d:d4: 22:e9:ae:3e:82:db:6b:e2:aa:97:c5:67:23:97:15:88:f7:75: c8:8a:25:d2:8a:2c:c7:b2:d2:a3:8a:34:47:bd:a4:38:43:fb: f4:d9:d2:21:52:9f:c1:5b:e8:21:f5:c3:61:de:69:fa:b5:1a: 1d:e6:fc:46:e1:34:ff:54:af:f5:9d:e1:2f:a9:b8:06:25:ed: de:5c:4f:5a:f6:86:03:b6:9b:23:d6:21:05:c2:98:68:f3:bb: 35:16:d0:e8:04:bd:f8:db:f6:90:f1:6e:11:35:bc:c6:72:20: a2:9f:02:2d:94:0c:2b:be:a6:92:ed:16:e3:b6:5d:10:f4:75: 78:28:fc:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR80lOjxrBSUZ0ceiULglJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTc1ODkwNGM3NTg1NmUzNTg1YTQ0MzNhZTVlYzU3ZmVm MWEzYzcwHhcNMjUxMjI0MjAwMDU2WhcNMjUxMjI1MjAwMDU2WjAzMTEwLwYDVQQD Eyg3YTZhNGE1YmQxOWFjZjA0MjRhMzg4ZGM2YWNkNjgyZGFmZGFiOTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2N8spkEYL8lcLofstRUDB1voPPJ hDjQiQBaXiJuYbygsP9QyaHVlsTXOsZVW7UJIkmDNJIyeKAvr+U9rbExR69FM64E 2sYhDOZ3pxS/PfWFI/pkbfa4fs2wi2FMrWdA1Sye42rrgFkzQIqNoZl8RGxrUEFg bTn1xPe4kzfAnqQv/ThiUV82A6qoMF7CwpI5us3i7nALOKDXRGKVwYlIot1o+Mui uHCeahACdtQJmrE7LZldNN5nJaDFnYo/MpKTJsLIIeAFLQ1yV3YerzCbUNJTbm2K QxZwhwPvsNLHY3dWf7TEO7xAwenfEOCZfY+QbjqthV4lgzWizos9/z28dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpqSlvRms8EJKOI3GrNaC2v2rmYMB8GA1UdIwQY MBaAFLOnWJBMdYVuNYWkQzrl7Ff+8aPHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZkWWtFeDFoVzQxaGFSRE91WHNWXzd4bzhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xNDljMDEtODQwZC00NWY2LTgyM2Yt ZTJmMGUxYzI2MTA1LzEvczZkWWtFeDFoVzQxaGFSRE91WHNWXzd4bzhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8xNDljMDEtODQwZC00NWY2LTgyM2YtZTJmMGUxYzI2MTA1 LzEvczZkWWtFeDFoVzQxaGFSRE91WHNWXzd4bzhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfF/XgHk 6trQ+bBKa2FhNbU5fh+T05qDI2vOVAnzl3eDvqpnw8bhlj97fTEPPwB+ryoOixPY UBgf7ccxF0eFF9aXr0Uu0pzUedINZBMdB/sttR7ddA2X6uoUHNO2DWzDgCqytkeU 6KcuJcCl8eMhIC9r/fF+dk7bR/pbLm3UIumuPoLba+Kql8VnI5cViPd1yIol0oos x7LSo4o0R72kOEP79NnSIVKfwVvoIfXDYd5p+rUaHeb8RuE0/1Sv9Z3hL6m4BiXt 3lxPWvaGA7abI9YhBcKYaPO7NRbQ6AS9+Nv2kPFuETW8xnIgop8CLZQMK76mku0W 47ZdEPR1eCj8Yw== -----END CERTIFICATE-----Generated at Thu Dec 25 04:31:25 2025 by rpki-client