This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft File: 6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft (raw, json) Hash identifier: TPRdCt0TYK4hPoN1s6Jnmh/Dedk+O3Lebljsu0wFaHQ= Subject key identifier: CD:B3:D6:11:90:D7:B1:59:7F:CC:1E:26:AB:D7:E1:69:22:34:1B:D2 Authority key identifier: E8:69:7E:EB:84:67:3D:81:C3:B7:C0:71:66:D9:6C:AC:16:45:F8:33 Certificate issuer: /CN=e8697eeb84673d81c3b7c07166d96cac1645f833 Certificate serial: 019B6B4571B380B7FEB099E47535C4B9943A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft Manifest number: 02C6 Signing time: Mon 29 Dec 2025 18:01:11 +0000 Manifest this update: Mon 29 Dec 2025 18:01:11 +0000 Manifest next update: Tue 30 Dec 2025 18:01:11 +0000 Files and hashes: 1: 6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl (hash: lRf6uLcx54HuM9a4Pos4CWI35MC2Ww+I8k92xZR+D5Q=) 2: gPEIYB37Zc_OzakKWk3m7XL2shI.roa (hash: ogeQ+ihI5RkgX54TXQ3mk3J6Yi4w+GDOualWoIRTMes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 18:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:45:71:b3:80:b7:fe:b0:99:e4:75:35:c4:b9:94:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8697eeb84673d81c3b7c07166d96cac1645f833 Validity Not Before: Dec 29 18:01:11 2025 GMT Not After : Dec 30 18:01:11 2025 GMT Subject: CN=cdb3d61190d7b1597fcc1e26abd7e16922341bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c9:1c:6b:5a:9a:93:dc:10:23:8e:6b:e1:23: 51:a2:bf:5a:eb:82:bb:85:4e:2f:cf:84:28:98:79: f9:84:38:a2:e7:12:07:76:e3:a4:6d:9e:93:d8:ab: 85:35:9e:0a:96:cb:83:7f:bd:3b:13:c0:7a:29:22: ac:04:e5:da:d6:cb:1b:e1:79:8d:82:50:b5:f6:ed: ec:46:1f:97:1a:a6:93:ad:85:0e:d6:d3:a6:88:75: f9:cb:0a:85:35:b5:7f:94:dc:76:6c:fe:8f:81:c0: ba:92:21:24:af:f4:21:d3:b7:0f:ab:52:80:f3:d9: f3:31:b3:bb:cf:ef:ed:11:40:e8:6b:ff:85:76:70: bb:72:95:04:0a:0a:06:80:14:84:21:cd:41:fa:5f: c8:33:b5:fe:ed:b1:6c:d1:9c:aa:32:a4:ae:04:c3: bb:21:cc:9a:ae:67:07:9e:71:b0:a2:9c:43:e8:28: 11:b7:d3:58:ea:14:13:12:84:8d:bf:98:d3:7b:b7: e2:fd:e4:35:af:59:ae:e3:c4:f7:ec:80:72:26:84: 63:74:28:80:ff:bb:a9:5b:66:bb:c9:e5:39:15:21: 3c:02:50:ae:d7:6d:40:4b:89:63:99:6d:ff:15:c6: 42:bd:f5:d4:a8:f3:82:a5:81:68:a7:1c:6e:4f:7f: f4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B3:D6:11:90:D7:B1:59:7F:CC:1E:26:AB:D7:E1:69:22:34:1B:D2 X509v3 Authority Key Identifier: keyid:E8:69:7E:EB:84:67:3D:81:C3:B7:C0:71:66:D9:6C:AC:16:45:F8:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:22:cd:c5:16:61:d9:cc:c8:8d:68:bb:5d:91:37:2f:e5:9c: 35:d9:97:ca:01:23:ba:25:d2:8d:14:da:2f:02:55:15:c8:8e: b8:3c:40:9b:f2:b7:d8:9a:73:8b:46:13:ac:44:cc:07:23:57: b3:1a:1c:03:59:cf:f9:0d:ac:a4:3b:29:1a:d8:54:47:ec:e3: 46:47:84:44:d2:d6:42:0e:6a:26:59:cd:04:b3:e1:6f:99:d3: f6:dc:70:3f:5a:f7:5b:b1:e8:dd:71:fd:ff:0e:fa:7a:63:79: 28:49:02:84:1c:15:8e:6e:e6:f5:8c:72:49:a2:76:0e:e7:6b: be:6f:68:48:08:97:b4:e4:23:1f:cf:fd:b0:bb:59:5b:e5:92: b6:f1:22:6b:bf:89:79:2b:00:4f:78:2b:de:ee:ab:11:40:46: 68:0d:d2:fb:a6:60:e1:af:dd:bb:eb:ed:8a:0b:ae:0b:bb:0c: b4:1d:a9:94:e8:3f:80:e4:7b:57:6b:89:c8:7d:5a:8c:dc:ce: 9b:e8:f2:04:50:51:6d:31:a1:6c:0d:47:c2:ae:32:a4:08:64: ca:37:5f:9a:b0:ef:65:ea:1e:dc:9b:d8:fa:89:c5:d0:bf:e5: 6f:d1:e1:49:be:c0:ad:b6:52:a8:4d:fb:06:5b:9e:5e:7d:35: e8:4c:2f:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrRXGzgLf+sJnkdTXEuZQ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Njk3ZWViODQ2NzNkODFjM2I3YzA3MTY2ZDk2Y2FjMTY0 NWY4MzMwHhcNMjUxMjI5MTgwMTExWhcNMjUxMjMwMTgwMTExWjAzMTEwLwYDVQQD EyhjZGIzZDYxMTkwZDdiMTU5N2ZjYzFlMjZhYmQ3ZTE2OTIyMzQxYmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2skca1qak9wQI45r4SNRor9a64K7 hU4vz4QomHn5hDii5xIHduOkbZ6T2KuFNZ4KlsuDf707E8B6KSKsBOXa1ssb4XmN glC19u3sRh+XGqaTrYUO1tOmiHX5ywqFNbV/lNx2bP6PgcC6kiEkr/Qh07cPq1KA 89nzMbO7z+/tEUDoa/+FdnC7cpUECgoGgBSEIc1B+l/IM7X+7bFs0ZyqMqSuBMO7 IcyarmcHnnGwopxD6CgRt9NY6hQTEoSNv5jTe7fi/eQ1r1mu48T37IByJoRjdCiA /7upW2a7yeU5FSE8AlCu121AS4ljmW3/FcZCvfXUqPOCpYFopxxuT3/0oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2z1hGQ17FZf8weJqvX4WkiNBvSMB8GA1UdIwQY MBaAFOhpfuuEZz2Bw7fAcWbZbKwWRfgzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkdsLTY0Um5QWUhEdDhCeFp0bHNyQlpGLURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84YmZhYjMtMDY3MS00NzVlLTgyMDMt OTM3Mzc2ZWIyM2RhLzEvNkdsLTY0Um5QWUhEdDhCeFp0bHNyQlpGLURNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy84YmZhYjMtMDY3MS00NzVlLTgyMDMtOTM3Mzc2ZWIyM2Rh LzEvNkdsLTY0Um5QWUhEdDhCeFp0bHNyQlpGLURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyLNxRZh 2czIjWi7XZE3L+WcNdmXygEjuiXSjRTaLwJVFciOuDxAm/K32Jpzi0YTrETMByNX sxocA1nP+Q2spDspGthUR+zjRkeERNLWQg5qJlnNBLPhb5nT9txwP1r3W7Ho3XH9 /w76emN5KEkChBwVjm7m9YxySaJ2Dudrvm9oSAiXtOQjH8/9sLtZW+WStvEia7+J eSsAT3gr3u6rEUBGaA3S+6Zg4a/du+vtiguuC7sMtB2plOg/gOR7V2uJyH1ajNzO m+jyBFBRbTGhbA1Hwq4ypAhkyjdfmrDvZeoe3JvY+onF0L/lb9HhSb7ArbZSqE37 BlueXn016EwvOA== -----END CERTIFICATE-----Generated at Tue Dec 30 01:31:53 2025 by rpki-client