This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft File: 6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft (raw, json) Hash identifier: 32HIr7HnuaiAHlQRtk9A1yOMafwc+Zp/9N8MEd851iQ= Subject key identifier: 3F:8C:AD:04:09:44:D8:D0:BD:BB:1A:21:8D:CF:79:CD:D8:14:1D:A2 Authority key identifier: EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C Certificate issuer: /CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c Certificate serial: 019B3F48C634ED684932798F1AE5A977553D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft Manifest number: 1798 Signing time: Sun 21 Dec 2025 05:01:32 +0000 Manifest this update: Sun 21 Dec 2025 05:01:32 +0000 Manifest next update: Mon 22 Dec 2025 05:01:32 +0000 Files and hashes: 1: 6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl (hash: lwrmYRZNK6RHfedSB0/tpLFLbPUmr/2Qi7gCKHgo/fY=) 2: NhCn1a0Le8G6D2sVi_l-BvVs8Q0.roa (hash: r1ZHnBqkDB4ZKDNF3hfVKil60HJx5YWEfmJ30XUmtD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:c6:34:ed:68:49:32:79:8f:1a:e5:a9:77:55:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c Validity Not Before: Dec 21 05:01:32 2025 GMT Not After : Dec 22 05:01:32 2025 GMT Subject: CN=3f8cad040944d8d0bdbb1a218dcf79cdd8141da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:ba:57:9a:95:09:80:66:69:50:53:dc:10: 88:5e:21:50:24:c0:ce:13:65:84:ec:01:34:1f:5c: f0:9f:2f:74:74:a1:c8:49:ee:f7:b5:ef:77:3f:45: 48:d9:b8:c8:20:87:24:94:fd:08:58:9d:52:bb:b6: 24:35:5d:36:01:e3:5b:a8:47:0b:75:f3:0f:a3:28: 7b:38:5f:b7:ef:67:2a:de:2a:ef:e6:67:0a:05:ca: 99:ff:e1:63:3d:c9:81:23:0f:e4:b9:8a:62:9f:12: 44:34:1b:6d:20:89:4b:20:22:fd:46:32:0a:28:0d: 17:ee:b4:ee:42:89:b7:7f:a0:25:ae:81:dd:dd:28: 08:31:b6:e0:ba:44:0e:56:cf:03:46:a4:bf:b0:d8: 7b:7f:61:d5:37:06:fa:0a:11:7a:dd:99:51:21:1e: 05:ad:9d:02:1e:a9:2a:b3:1e:a8:ef:99:5c:4c:a7: 71:e6:e2:30:ca:db:b6:b3:cb:8d:fd:d2:bf:1f:b2: b5:a7:d5:61:23:38:2b:9e:6e:f5:83:e0:c2:56:a3: 2d:de:68:59:55:d5:6a:55:66:be:9d:78:e2:d5:07: fc:e8:a3:0b:69:b3:34:dd:1e:fa:45:1d:83:05:77: 55:d2:70:80:6c:85:db:49:17:9e:c9:40:e3:0c:a1: 8c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8C:AD:04:09:44:D8:D0:BD:BB:1A:21:8D:CF:79:CD:D8:14:1D:A2 X509v3 Authority Key Identifier: keyid:EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:e3:93:d3:09:10:c2:fd:43:78:ae:70:f4:9f:eb:20:69:16: 2f:19:fe:53:e0:2d:21:0b:c2:41:a3:84:3b:35:09:58:ea:10: 47:04:66:33:c7:56:73:f9:2c:91:0a:44:9d:75:bf:b6:85:fc: c7:34:ac:b1:50:97:78:04:4a:d7:26:ce:17:d0:d8:03:50:87: b9:42:c8:6f:95:34:8c:dc:95:7b:0c:10:c1:d2:07:66:94:2a: bc:7b:f3:3c:56:b0:36:fb:09:df:5d:b8:46:7d:77:d6:c9:36: 54:88:17:fb:7b:b0:cf:52:2c:21:5a:47:29:b1:87:1c:eb:66: 89:4d:86:c1:5c:78:99:cb:77:5b:df:06:34:0d:10:33:4b:de: e8:1c:28:fa:cf:93:56:a0:8c:de:ea:b3:ca:9d:16:d9:6a:7c: f4:19:7d:a9:2e:73:d5:a7:b5:c5:f3:76:9b:cb:fe:1d:25:6e: 60:34:0c:28:06:6b:b8:14:c5:d4:54:16:7d:84:fc:4d:4f:20: 41:29:2b:86:c6:7b:3d:f4:1d:38:61:5a:d0:a5:3f:c9:69:ce: ee:71:b8:56:49:86:12:8b:b2:24:c8:4a:f1:70:d4:a6:f5:6b: 47:4d:53:eb:2b:44:3a:61:de:09:6d:58:f5:ec:7b:fb:44:55: ed:dd:5f:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SMY07WhJMnmPGuWpd1U9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMjJmNGZiOTU1ZDc5ZjA5M2Q3ZTg3YjE4MmMzNDQwYWM0 YmUwNmMwHhcNMjUxMjIxMDUwMTMyWhcNMjUxMjIyMDUwMTMyWjAzMTEwLwYDVQQD EygzZjhjYWQwNDA5NDRkOGQwYmRiYjFhMjE4ZGNmNzljZGQ4MTQxZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBy6V5qVCYBmaVBT3BCIXiFQJMDO E2WE7AE0H1zwny90dKHISe73te93P0VI2bjIIIcklP0IWJ1Su7YkNV02AeNbqEcL dfMPoyh7OF+372cq3irv5mcKBcqZ/+FjPcmBIw/kuYpinxJENBttIIlLICL9RjIK KA0X7rTuQom3f6AlroHd3SgIMbbgukQOVs8DRqS/sNh7f2HVNwb6ChF63ZlRIR4F rZ0CHqkqsx6o75lcTKdx5uIwytu2s8uN/dK/H7K1p9VhIzgrnm71g+DCVqMt3mhZ VdVqVWa+nXji1Qf86KMLabM03R76RR2DBXdV0nCAbIXbSReeyUDjDKGMHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+MrQQJRNjQvbsaIY3Pec3YFB2iMB8GA1UdIwQY MBaAFOoi9PuVXXnwk9foexgsNECsS+BsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmlMMC01VmRlZkNUMS1oN0dDdzBRS3hMNEd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9mYzgwMzctMmI3Yy00MWZjLTlkYmYt OTNkMWZiNzJkMzgzLzEvNmlMMC01VmRlZkNUMS1oN0dDdzBRS3hMNEd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9mYzgwMzctMmI3Yy00MWZjLTlkYmYtOTNkMWZiNzJkMzgz LzEvNmlMMC01VmRlZkNUMS1oN0dDdzBRS3hMNEd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+OT0wkQ wv1DeK5w9J/rIGkWLxn+U+AtIQvCQaOEOzUJWOoQRwRmM8dWc/kskQpEnXW/toX8 xzSssVCXeARK1ybOF9DYA1CHuULIb5U0jNyVewwQwdIHZpQqvHvzPFawNvsJ3124 Rn131sk2VIgX+3uwz1IsIVpHKbGHHOtmiU2GwVx4mct3W98GNA0QM0ve6Bwo+s+T VqCM3uqzyp0W2Wp89Bl9qS5z1ae1xfN2m8v+HSVuYDQMKAZruBTF1FQWfYT8TU8g QSkrhsZ7PfQdOGFa0KU/yWnO7nG4VkmGEouyJMhK8XDUpvVrR01T6ytEOmHeCW1Y 9ex7+0RV7d1f4g== -----END CERTIFICATE-----Generated at Sun Dec 21 13:52:15 2025 by rpki-client