This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft File: 6TjNfs8jrBxJYlRuG89eCDrSKaU.mft (raw, json) Hash identifier: Red1KZU95xuU20PkdJL12+VyGifDdt+9MeqTE1cFmpw= Subject key identifier: 8F:07:39:36:76:6E:47:B5:12:4B:B7:DB:FD:21:FD:ED:27:2D:DE:77 Authority key identifier: E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5 Certificate issuer: /CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5 Certificate serial: 019B3C7F0D80BC7AC1B1B43BB88CD6A54F6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 16:01:58 +0000 Manifest this update: Sat 20 Dec 2025 16:01:58 +0000 Manifest next update: Sun 21 Dec 2025 16:01:58 +0000 Files and hashes: 1: 6TjNfs8jrBxJYlRuG89eCDrSKaU.crl (hash: f1N60epVD4ZPDFG/l3VPupCA5D6sxCw45KzrFBH1a9Q=) 2: Goi94Dc_RUuC8EGWeEnJH7qqhjU.roa (hash: G+DgjuNd7tv+5EJaL+G6NuJWBrxhCutOC8EdL+rglNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:0d:80:bc:7a:c1:b1:b4:3b:b8:8c:d6:a5:4f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5 Validity Not Before: Dec 20 16:01:58 2025 GMT Not After : Dec 21 16:01:58 2025 GMT Subject: CN=8f073936766e47b5124bb7dbfd21fded272dde77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:03:29:a0:b2:cc:f8:70:d4:a7:91:eb:fc: b6:0f:4a:c8:34:5b:0a:e2:b8:bc:64:96:10:ae:83: 7c:9d:d4:9f:a3:8d:c1:9e:8b:6c:da:30:ce:f7:d2: 55:44:bc:7b:c7:c7:45:a1:1e:ce:c1:ba:aa:6f:16: 0f:5d:9c:6b:a0:f7:ed:dd:b1:30:d6:61:2e:37:88: aa:dc:ed:86:22:00:f5:b6:38:b4:10:95:83:4d:dd: 0c:61:b1:1c:f2:ba:32:ce:54:8e:93:22:45:7c:b3: b2:06:39:f2:4e:48:69:49:bb:f1:1a:38:51:d3:05: 35:dd:ad:00:28:52:28:52:50:a1:e6:23:3b:88:d0: cd:58:cd:97:02:37:e9:34:96:38:91:bf:06:09:d3: 39:3f:bc:4b:10:7d:fd:4a:ee:09:20:c2:3d:59:d3: 41:de:9c:99:b2:f9:8c:cf:3b:f1:8e:08:ad:ca:4e: 7f:72:61:a5:18:74:b3:78:10:de:3e:57:e9:98:c8: 51:ce:58:e9:a0:07:bb:23:a6:5e:47:90:20:ba:61: aa:49:b2:90:47:c1:cf:16:11:3d:b2:7b:95:d0:aa: b7:81:fb:b9:5b:90:72:32:a5:2a:38:8b:eb:0f:6b: 98:87:67:59:3e:51:d0:8d:99:25:83:06:b5:85:78: 9b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:07:39:36:76:6E:47:B5:12:4B:B7:DB:FD:21:FD:ED:27:2D:DE:77 X509v3 Authority Key Identifier: keyid:E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:7a:74:d2:8c:e0:64:9e:7f:0f:61:95:b8:83:08:57:2f:0d: 4e:0b:35:a9:12:df:ca:28:d8:c9:0a:8a:3e:b6:de:cb:de:d0: ed:57:14:39:ec:8d:d9:de:21:23:5b:5d:88:be:4f:1d:fb:d5: 6b:94:70:dc:3e:50:95:12:07:1d:15:74:5d:84:fb:6b:7e:d6: 41:66:31:70:ec:71:04:46:56:32:a3:6f:8c:2b:b8:15:51:9a: c4:48:55:cd:10:71:48:52:72:7b:07:1f:ca:4f:8e:fa:30:99: e5:d1:91:36:36:2d:3b:77:73:b1:49:b0:12:72:3c:fa:92:07: 5e:cf:04:c7:e8:0b:d6:a6:3d:82:ef:b6:f9:b4:78:11:73:11: f2:3b:19:ec:ba:2b:6a:ac:e4:d7:9e:17:45:b6:d1:6b:a2:3c: 8a:ce:ae:d8:5d:9e:bd:50:86:32:2f:ce:e3:94:14:41:92:38: c0:a4:ee:59:66:18:a1:d4:f8:f8:59:68:2b:91:4e:b3:bd:7d: b2:ce:da:a5:70:94:6f:c3:63:c5:71:6d:0d:c3:16:c5:2b:91: 69:c3:98:af:3d:8a:8e:01:4d:60:65:cc:3d:7f:c4:ff:a3:3a: 2f:fc:22:2a:4b:a0:f5:44:ec:8b:9b:23:0a:c3:cc:51:2f:dd: b8:f5:c8:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fw2AvHrBsbQ7uIzWpU9tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MzhjZDdlY2YyM2FjMWM0OTYyNTQ2ZTFiY2Y1ZTA4M2Fk MjI5YTUwHhcNMjUxMjIwMTYwMTU4WhcNMjUxMjIxMTYwMTU4WjAzMTEwLwYDVQQD Eyg4ZjA3MzkzNjc2NmU0N2I1MTI0YmI3ZGJmZDIxZmRlZDI3MmRkZTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKADKaCyzPhw1KeR6/y2D0rINFsK 4ri8ZJYQroN8ndSfo43Bnots2jDO99JVRLx7x8dFoR7OwbqqbxYPXZxroPft3bEw 1mEuN4iq3O2GIgD1tji0EJWDTd0MYbEc8royzlSOkyJFfLOyBjnyTkhpSbvxGjhR 0wU13a0AKFIoUlCh5iM7iNDNWM2XAjfpNJY4kb8GCdM5P7xLEH39Su4JIMI9WdNB 3pyZsvmMzzvxjgityk5/cmGlGHSzeBDePlfpmMhRzljpoAe7I6ZeR5AgumGqSbKQ R8HPFhE9snuV0Kq3gfu5W5ByMqUqOIvrD2uYh2dZPlHQjZklgwa1hXibGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8HOTZ2bke1Eku32/0h/e0nLd53MB8GA1UdIwQY MBaAFOk4zX7PI6wcSWJUbhvPXgg60imlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlRqTmZzOGpyQnhKWWxSdUc4OWVDRHJTS2FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83NjFiZjUtMDM3ZS00ODA3LTg4YzAt ZmVlZTg2YzZiNjAwLzEvNlRqTmZzOGpyQnhKWWxSdUc4OWVDRHJTS2FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi83NjFiZjUtMDM3ZS00ODA3LTg4YzAtZmVlZTg2YzZiNjAw LzEvNlRqTmZzOGpyQnhKWWxSdUc4OWVDRHJTS2FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXp00ozg ZJ5/D2GVuIMIVy8NTgs1qRLfyijYyQqKPrbey97Q7VcUOeyN2d4hI1tdiL5PHfvV a5Rw3D5QlRIHHRV0XYT7a37WQWYxcOxxBEZWMqNvjCu4FVGaxEhVzRBxSFJyewcf yk+O+jCZ5dGRNjYtO3dzsUmwEnI8+pIHXs8Ex+gL1qY9gu+2+bR4EXMR8jsZ7Lor aqzk154XRbbRa6I8is6u2F2evVCGMi/O45QUQZI4wKTuWWYYodT4+FloK5FOs719 ss7apXCUb8NjxXFtDcMWxSuRacOYrz2KjgFNYGXMPX/E/6M6L/wiKkug9UTsi5sj CsPMUS/duPXIEQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:08 2025 by rpki-client