This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft File: 10L6T7KPryihjordTBDJYzfDxMU.mft (raw, json) Hash identifier: wMMuzzL8r7O3aG+kgfiZKpWF17o274fSXaVQBVynI6Y= Subject key identifier: 38:6E:10:E1:F0:E3:F6:C0:1B:9A:61:29:EE:54:B4:87:6B:0E:51:D2 Authority key identifier: D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5 Certificate issuer: /CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5 Certificate serial: 019B4BF10584D8461F22569F5771CD72D4E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft Manifest number: 178E Signing time: Tue 23 Dec 2025 16:00:45 +0000 Manifest this update: Tue 23 Dec 2025 16:00:45 +0000 Manifest next update: Wed 24 Dec 2025 16:00:45 +0000 Files and hashes: 1: 10L6T7KPryihjordTBDJYzfDxMU.crl (hash: 6jsMqN3VBmi9thD1ooCuN30ykY2m7RW6xGHANvDxLLw=) 2: DIiJmhkGPOYoFSzKU5OJGHxPZv0.roa (hash: wVFQMX+v03An5N7stfoX0LOfftlraoV2nDd1HWqmadg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:05:84:d8:46:1f:22:56:9f:57:71:cd:72:d4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5 Validity Not Before: Dec 23 16:00:45 2025 GMT Not After : Dec 24 16:00:45 2025 GMT Subject: CN=386e10e1f0e3f6c01b9a6129ee54b4876b0e51d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d3:15:09:01:f5:1c:b0:d5:9e:ad:cf:72:a9: 75:97:aa:1b:a6:94:10:09:5f:ed:03:67:c8:9e:a7: 4e:c1:18:45:db:4c:cd:b3:6b:2d:61:4f:21:40:34: 38:1d:df:23:7a:9b:3e:1a:5c:13:f4:5a:f7:db:31: ae:96:a9:d9:4c:1a:1e:c0:75:a4:c2:88:ac:e6:1f: ee:aa:46:48:00:6b:4e:2b:8f:cd:ba:be:f3:a6:8d: 92:97:c5:07:25:e0:44:f2:d8:c2:a3:23:68:73:c8: c9:cd:cc:9c:2e:85:20:16:2d:82:e8:51:20:e7:19: 98:e7:de:0e:9f:73:89:56:be:c9:fe:4d:bc:0b:ff: b1:6f:98:c8:f7:84:61:18:5c:5c:87:17:8f:23:ac: 23:5c:68:43:e0:51:79:a7:42:28:e7:a6:eb:9e:46: 7f:92:f6:b3:5f:db:73:2a:38:26:82:8d:38:ec:dc: 33:bb:18:a2:80:b4:03:23:ee:ca:8a:6a:fa:6d:46: 66:2d:04:ca:3a:2d:3f:78:bb:1c:cd:1e:5a:0e:29: 83:2f:ae:00:a5:e4:ca:05:65:89:ca:9a:77:15:2c: 04:81:4a:7c:75:9a:9d:48:ed:90:11:9a:e4:2c:6d: 64:64:8f:5e:23:5f:1b:9f:93:59:b3:5d:2b:f5:61: 0a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6E:10:E1:F0:E3:F6:C0:1B:9A:61:29:EE:54:B4:87:6B:0E:51:D2 X509v3 Authority Key Identifier: keyid:D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c1:5f:30:3e:89:52:3a:9a:28:1f:29:ff:55:ed:33:e8:e1: e5:3d:f8:3a:2f:4f:ed:c8:73:98:6a:6b:3e:5a:e9:ad:93:5c: 2f:e8:7d:e4:8b:b7:f8:4d:6a:df:fe:81:32:7e:e1:6e:9e:3f: 12:13:16:c6:ec:6d:c4:c8:01:b8:28:f0:e2:57:ce:6c:fa:c9: 2d:a2:40:ae:75:85:ec:1e:8a:5c:ef:0e:9f:5a:e9:be:96:4a: 95:6c:68:b8:29:20:9b:73:c0:9f:1a:e5:0e:b4:ed:c9:8a:00: d4:3c:55:80:22:2f:0d:ba:35:c3:00:8b:a6:60:76:97:14:cc: b0:81:95:7a:96:04:fe:7a:dd:6e:52:18:10:d0:0d:a6:66:99: 59:aa:ab:1b:38:7a:32:27:8d:a2:08:6f:8a:96:8d:4d:bf:f6: 00:79:b7:8d:69:43:25:9a:f8:f1:db:cc:3a:6d:bb:eb:fd:18: e1:61:e3:a6:bb:79:3d:a2:43:66:6b:44:19:15:e7:2d:bd:cc: 40:8d:49:b6:d0:07:8e:f4:4c:10:76:1c:e5:da:c7:0b:d7:73: 8a:ad:62:58:90:fc:d0:7e:2d:01:70:da:72:24:71:89:7c:e1: 85:21:cf:e1:76:4c:a3:ce:9a:d0:f5:8a:63:00:d2:bc:9b:53: aa:82:2c:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8QWE2EYfIlafV3HNctTnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDJmYTRmYjI4ZmFmMjhhMThlOGFkZDRjMTBjOTYzMzdj M2M0YzUwHhcNMjUxMjIzMTYwMDQ1WhcNMjUxMjI0MTYwMDQ1WjAzMTEwLwYDVQQD EygzODZlMTBlMWYwZTNmNmMwMWI5YTYxMjllZTU0YjQ4NzZiMGU1MWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztMVCQH1HLDVnq3Pcql1l6obppQQ CV/tA2fInqdOwRhF20zNs2stYU8hQDQ4Hd8jeps+GlwT9Fr32zGulqnZTBoewHWk wois5h/uqkZIAGtOK4/Nur7zpo2Sl8UHJeBE8tjCoyNoc8jJzcycLoUgFi2C6FEg 5xmY594On3OJVr7J/k28C/+xb5jI94RhGFxchxePI6wjXGhD4FF5p0Io56brnkZ/ kvazX9tzKjgmgo047NwzuxiigLQDI+7Kimr6bUZmLQTKOi0/eLsczR5aDimDL64A peTKBWWJypp3FSwEgUp8dZqdSO2QEZrkLG1kZI9eI18bn5NZs10r9WEKOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhuEOHw4/bAG5phKe5UtIdrDlHSMB8GA1UdIwQY MBaAFNdC+k+yj68ooY6K3UwQyWM3w8TFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBMNlQ3S1ByeWloam9yZFRCREpZemZEeE1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83MDNiZDYtMWIyZi00MDgzLWIxZTct N2E1ZjYwMTg5YzUxLzEvMTBMNlQ3S1ByeWloam9yZFRCREpZemZEeE1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83MDNiZDYtMWIyZi00MDgzLWIxZTctN2E1ZjYwMTg5YzUx LzEvMTBMNlQ3S1ByeWloam9yZFRCREpZemZEeE1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8FfMD6J UjqaKB8p/1XtM+jh5T34Oi9P7chzmGprPlrprZNcL+h95Iu3+E1q3/6BMn7hbp4/ EhMWxuxtxMgBuCjw4lfObPrJLaJArnWF7B6KXO8On1rpvpZKlWxouCkgm3PAnxrl DrTtyYoA1DxVgCIvDbo1wwCLpmB2lxTMsIGVepYE/nrdblIYENANpmaZWaqrGzh6 MieNoghvipaNTb/2AHm3jWlDJZr48dvMOm276/0Y4WHjprt5PaJDZmtEGRXnLb3M QI1JttAHjvRMEHYc5drHC9dziq1iWJD80H4tAXDaciRxiXzhhSHP4XZMo86a0PWK YwDSvJtTqoIsMA== -----END CERTIFICATE-----Generated at Tue Dec 23 22:24:48 2025 by rpki-client