This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft File: 6TjNfs8jrBxJYlRuG89eCDrSKaU.mft (raw, json) Hash identifier: M+BRCmri0chVuNLQIl0syJzswLSftxsu9JNL/b7MHCU= Subject key identifier: 22:E7:E8:A4:3E:FE:8B:DC:0F:B5:9A:42:B2:37:AC:5F:90:C8:26:FA Authority key identifier: E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5 Certificate issuer: /CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5 Certificate serial: 019B559A06F0447C849FABD311B79164C0C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft Manifest number: 1797 Signing time: Thu 25 Dec 2025 13:01:56 +0000 Manifest this update: Thu 25 Dec 2025 13:01:56 +0000 Manifest next update: Fri 26 Dec 2025 13:01:56 +0000 Files and hashes: 1: 6TjNfs8jrBxJYlRuG89eCDrSKaU.crl (hash: NKFzqOPa4Hew+S3+0jU+o+5o7+19SicnhQUE8WQS8EA=) 2: Goi94Dc_RUuC8EGWeEnJH7qqhjU.roa (hash: G+DgjuNd7tv+5EJaL+G6NuJWBrxhCutOC8EdL+rglNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:9a:06:f0:44:7c:84:9f:ab:d3:11:b7:91:64:c0:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5 Validity Not Before: Dec 25 13:01:56 2025 GMT Not After : Dec 26 13:01:56 2025 GMT Subject: CN=22e7e8a43efe8bdc0fb59a42b237ac5f90c826fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:df:24:77:24:6c:8e:72:5c:8b:58:98:c0:b8: 23:fa:f5:f3:89:ac:4b:34:9c:ee:50:51:28:61:4b: a5:6a:03:19:c5:8c:50:e3:66:3c:ce:7b:8b:c7:44: d3:28:c5:6c:c1:5e:81:ba:0e:e7:04:f6:50:93:7a: d6:78:d9:4a:fe:23:bc:81:f6:35:1f:1b:82:23:f3: 59:29:5b:a8:b4:7d:21:98:dd:7b:05:ad:db:8e:23: 97:d1:b3:ae:fe:54:a0:62:6d:dd:dd:60:79:66:7f: 0f:14:cb:7e:b4:77:23:fc:d6:ce:09:a1:62:67:2a: 5d:27:57:c6:37:33:49:aa:74:4a:15:0a:9d:b1:41: d0:10:ba:25:7e:4c:7a:ab:30:5f:aa:a9:4c:a8:5a: 2a:12:92:51:8f:88:4e:16:2b:d9:5a:ff:ee:37:00: ad:17:77:a9:8b:52:b6:e2:50:7b:60:45:bc:ba:77: 67:ce:3f:ef:f4:96:44:c1:82:b1:1f:4d:ba:ce:0e: e8:95:a6:4e:0e:8b:db:47:b0:13:d8:af:45:c6:33: 96:8e:c5:1f:53:f9:76:17:6d:3d:43:35:48:e8:05: ef:c6:23:4f:2d:0b:38:5a:38:01:0a:43:07:22:99: b0:d5:80:2e:f9:72:a3:64:02:ec:22:85:80:e3:26: 5d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E7:E8:A4:3E:FE:8B:DC:0F:B5:9A:42:B2:37:AC:5F:90:C8:26:FA X509v3 Authority Key Identifier: keyid:E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:f2:b9:bd:42:9a:dd:a7:3c:7c:bf:d1:ae:44:85:47:ba:f8: 3f:15:04:dd:6b:6d:41:fc:78:98:52:b3:2e:23:16:6c:9d:54: 08:05:41:35:3d:7a:72:7e:ac:c9:58:91:7e:13:a1:3b:b1:2c: 19:5a:44:1c:3b:5f:2d:5e:32:68:24:97:18:dc:6c:5b:e1:8f: 65:5c:ac:82:20:58:b8:b7:2b:f7:ee:6e:77:4e:3e:30:d8:0b: 37:b9:34:6b:45:87:c0:b2:5b:70:36:e7:4c:3d:41:c5:36:4c: 11:fe:60:c3:54:45:d8:6c:6b:94:df:61:56:0a:8e:f9:09:b9: ab:f0:3d:f7:6d:f7:93:a4:d3:69:18:ad:a1:d6:c1:b0:f9:fd: df:0a:ff:80:c4:0c:d1:cb:2c:36:68:f9:64:e4:af:7a:ef:01: c9:89:9b:42:a6:14:f8:9b:bb:6b:82:fd:0a:97:b4:03:32:b6: e0:e1:bf:ef:02:8e:60:22:32:3a:eb:07:3b:36:3b:94:64:fc: 7c:dc:22:8b:0e:85:01:83:15:8f:64:59:b3:e5:e8:06:ee:6c: 36:18:4b:4b:8d:47:07:07:c2:84:1f:aa:ec:a5:cb:03:5b:27: 03:95:2e:15:08:8f:bf:bb:80:c7:9b:39:12:53:ee:c1:ca:8f: f7:0a:d9:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmgbwRHyEn6vTEbeRZMDFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MzhjZDdlY2YyM2FjMWM0OTYyNTQ2ZTFiY2Y1ZTA4M2Fk MjI5YTUwHhcNMjUxMjI1MTMwMTU2WhcNMjUxMjI2MTMwMTU2WjAzMTEwLwYDVQQD EygyMmU3ZThhNDNlZmU4YmRjMGZiNTlhNDJiMjM3YWM1ZjkwYzgyNmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn98kdyRsjnJci1iYwLgj+vXziaxL NJzuUFEoYUulagMZxYxQ42Y8znuLx0TTKMVswV6Bug7nBPZQk3rWeNlK/iO8gfY1 HxuCI/NZKVuotH0hmN17Ba3bjiOX0bOu/lSgYm3d3WB5Zn8PFMt+tHcj/NbOCaFi ZypdJ1fGNzNJqnRKFQqdsUHQELolfkx6qzBfqqlMqFoqEpJRj4hOFivZWv/uNwCt F3epi1K24lB7YEW8undnzj/v9JZEwYKxH026zg7olaZODovbR7AT2K9FxjOWjsUf U/l2F209QzVI6AXvxiNPLQs4WjgBCkMHIpmw1YAu+XKjZALsIoWA4yZdkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLn6KQ+/ovcD7WaQrI3rF+QyCb6MB8GA1UdIwQY MBaAFOk4zX7PI6wcSWJUbhvPXgg60imlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlRqTmZzOGpyQnhKWWxSdUc4OWVDRHJTS2FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83NjFiZjUtMDM3ZS00ODA3LTg4YzAt ZmVlZTg2YzZiNjAwLzEvNlRqTmZzOGpyQnhKWWxSdUc4OWVDRHJTS2FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi83NjFiZjUtMDM3ZS00ODA3LTg4YzAtZmVlZTg2YzZiNjAw LzEvNlRqTmZzOGpyQnhKWWxSdUc4OWVDRHJTS2FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvK5vUKa 3ac8fL/RrkSFR7r4PxUE3WttQfx4mFKzLiMWbJ1UCAVBNT16cn6syViRfhOhO7Es GVpEHDtfLV4yaCSXGNxsW+GPZVysgiBYuLcr9+5ud04+MNgLN7k0a0WHwLJbcDbn TD1BxTZMEf5gw1RF2GxrlN9hVgqO+Qm5q/A99233k6TTaRitodbBsPn93wr/gMQM 0cssNmj5ZOSveu8ByYmbQqYU+Ju7a4L9Cpe0AzK24OG/7wKOYCIyOusHOzY7lGT8 fNwiiw6FAYMVj2RZs+XoBu5sNhhLS41HBwfChB+q7KXLA1snA5UuFQiPv7uAx5s5 ElPuwcqP9wrZnA== -----END CERTIFICATE-----Generated at Thu Dec 25 19:43:10 2025 by rpki-client