This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft File: c6G3ZmRxfipNLlzyveO5cxkH-MI.mft (raw, json) Hash identifier: 6wh2Gx85xkosT35gaXbjm58aoWZrfZV7KsfpI9iYhLo= Subject key identifier: 34:2D:86:71:A1:06:2B:1F:91:2A:A8:25:0C:83:81:6B:D8:A2:95:1C Authority key identifier: 73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2 Certificate issuer: /CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2 Certificate serial: 019B5D89D1C026996D44DA0CEABDDEA5BBB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft Manifest number: 1799 Signing time: Sat 27 Dec 2025 02:01:11 +0000 Manifest this update: Sat 27 Dec 2025 02:01:11 +0000 Manifest next update: Sun 28 Dec 2025 02:01:11 +0000 Files and hashes: 1: F9Es2mSBeEPcByc2eF_egK6MKLM.roa (hash: Eg2cQe6ayySWIx0OqzxZdVZLUVHyOu5zCl7u6iMfiyU=) 2: c6G3ZmRxfipNLlzyveO5cxkH-MI.crl (hash: hHdhUqqt3rpdT/4Pt9Mysh2Mdoon6MGGW8XrTQiJIgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:d1:c0:26:99:6d:44:da:0c:ea:bd:de:a5:bb:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2 Validity Not Before: Dec 27 02:01:11 2025 GMT Not After : Dec 28 02:01:11 2025 GMT Subject: CN=342d8671a1062b1f912aa8250c83816bd8a2951c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9e:d7:d9:a2:36:7a:bd:63:4f:74:18:aa:a5: dc:fa:26:2d:e6:9f:82:5e:53:c7:ba:cd:f0:af:7c: 17:e8:f2:cd:a8:b2:9d:9e:b4:7f:37:46:f0:d4:f8: 8e:69:e5:9f:fb:78:f2:bf:6c:17:0b:4c:b7:62:86: 57:03:30:ed:99:d3:11:6e:22:5c:86:73:a9:90:22: d7:1b:f7:f4:42:4a:74:72:1e:eb:c8:b6:27:9d:5d: 26:b1:4e:5d:4a:c5:b0:72:0a:89:cf:4e:07:64:d6: a3:e5:92:6e:68:41:62:a7:0d:46:28:90:05:c2:66: 70:81:ac:85:b3:96:b3:90:25:99:bf:32:c2:14:d3: bf:64:9f:36:c6:f0:42:8e:6d:31:d8:f9:05:be:10: 9f:d0:10:11:47:6a:80:7d:21:be:41:e1:59:8c:72: e6:a1:16:c3:77:b2:78:ac:bc:5f:83:9f:9c:21:97: f7:a3:3f:06:0e:7d:2f:db:82:f2:50:43:99:9c:65: f5:6a:7b:50:ad:3b:9e:59:89:1b:ef:9c:fd:f8:89: 73:80:86:3e:ed:de:d6:97:18:63:61:fb:d9:68:ac: 74:c8:e6:d3:18:1c:9c:b9:e9:f6:1e:79:14:50:fc: e4:be:1f:a5:04:03:29:b7:ce:99:05:89:0a:6a:9c: a0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2D:86:71:A1:06:2B:1F:91:2A:A8:25:0C:83:81:6B:D8:A2:95:1C X509v3 Authority Key Identifier: keyid:73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d2:25:a2:8b:2e:83:c9:99:41:93:d2:fa:a6:1c:35:42:a0: bc:78:ff:1d:b7:5d:8d:5f:10:8e:15:84:26:7a:26:e0:08:71: 4f:c4:bf:f9:93:bb:7b:c3:f6:a3:a0:bc:56:c1:40:15:41:b8: 4f:75:21:e1:f7:85:68:d3:ee:fd:d4:0d:28:73:2a:59:47:34: 9f:59:f2:cc:7f:26:a1:be:0f:9e:a2:66:07:26:96:4d:c2:9d: 37:5b:ad:2b:d4:69:ef:e0:89:70:6b:1c:f1:c5:59:d8:0e:ca: 77:26:26:8b:d2:f4:4f:4e:af:5e:e5:20:3c:b5:80:b2:4a:55: f7:a4:2e:83:3b:e5:26:06:86:99:08:cc:9b:15:7e:a1:a8:87: 99:8a:21:ac:a9:16:af:f3:e4:c6:15:6e:e8:db:93:e8:86:05: 7f:66:ef:58:16:76:e0:0c:7a:b6:23:b7:a8:d6:b5:12:43:0f: 24:30:24:86:ee:80:f9:b2:72:53:9b:29:56:f9:53:7e:fd:56: e0:4e:1c:f2:1b:4c:e4:94:e6:dd:9d:0b:2b:9c:27:97:09:4e: 73:61:78:3b:5e:5d:27:03:48:be:f1:9d:10:f6:3a:2e:72:ee: 3d:92:b0:1f:24:fa:d2:c1:40:8a:dc:50:58:2c:8f:a5:e2:65: c0:e5:6c:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdidHAJpltRNoM6r3epbu3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYTFiNzY2NjQ3MTdlMmE0ZDJlNWNmMmJkZTNiOTczMTkw N2Y4YzIwHhcNMjUxMjI3MDIwMTExWhcNMjUxMjI4MDIwMTExWjAzMTEwLwYDVQQD EygzNDJkODY3MWExMDYyYjFmOTEyYWE4MjUwYzgzODE2YmQ4YTI5NTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ7X2aI2er1jT3QYqqXc+iYt5p+C XlPHus3wr3wX6PLNqLKdnrR/N0bw1PiOaeWf+3jyv2wXC0y3YoZXAzDtmdMRbiJc hnOpkCLXG/f0Qkp0ch7ryLYnnV0msU5dSsWwcgqJz04HZNaj5ZJuaEFipw1GKJAF wmZwgayFs5azkCWZvzLCFNO/ZJ82xvBCjm0x2PkFvhCf0BARR2qAfSG+QeFZjHLm oRbDd7J4rLxfg5+cIZf3oz8GDn0v24LyUEOZnGX1antQrTueWYkb75z9+IlzgIY+ 7d7WlxhjYfvZaKx0yObTGBycuen2HnkUUPzkvh+lBAMpt86ZBYkKapyg7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQthnGhBisfkSqoJQyDgWvYopUcMB8GA1UdIwQY MBaAFHOht2ZkcX4qTS5c8r3juXMZB/jCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zZDI0MTUtODEzMy00MGEwLTlkOGMt YTYzMTlhYjE3OWJmLzEvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8zZDI0MTUtODEzMy00MGEwLTlkOGMtYTYzMTlhYjE3OWJm LzEvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtIloosu g8mZQZPS+qYcNUKgvHj/HbddjV8QjhWEJnom4AhxT8S/+ZO7e8P2o6C8VsFAFUG4 T3Uh4feFaNPu/dQNKHMqWUc0n1nyzH8mob4PnqJmByaWTcKdN1utK9Rp7+CJcGsc 8cVZ2A7KdyYmi9L0T06vXuUgPLWAskpV96QugzvlJgaGmQjMmxV+oaiHmYohrKkW r/PkxhVu6NuT6IYFf2bvWBZ24Ax6tiO3qNa1EkMPJDAkhu6A+bJyU5spVvlTfv1W 4E4c8htM5JTm3Z0LK5wnlwlOc2F4O15dJwNIvvGdEPY6LnLuPZKwHyT60sFAitxQ WCyPpeJlwOVsTA== -----END CERTIFICATE-----Generated at Sat Dec 27 04:09:08 2025 by rpki-client