This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json) Hash identifier: +FW2HDVBoHGK+ZQZ6GMEa9bkfQhCGErheuADDvC+bMg= Subject key identifier: 1E:E9:DD:30:F3:22:1D:93:05:DD:B5:36:59:31:8E:76:F0:A9:55:99 Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66 Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866 Certificate serial: 019B3E6C93828699AAAF46ADACEB542F3CA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 01:01:01 +0000 Manifest this update: Sun 21 Dec 2025 01:01:01 +0000 Manifest next update: Mon 22 Dec 2025 01:01:01 +0000 Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: AJa6Kh+jCZ/1VgWy9EmDgBGKWutpLQULaVRzbeUyKdQ=) 2: EdM8mT-itEKC9G8RLMrDLsNcS3o.roa (hash: aC1rODFSDGloRhxUO+L4zBSj1xyAZL+tlsZ8+nVllOY=) 3: LKntu7OdIVDRUeVXjemgx5JdRkc.roa (hash: kna/rCNXXypoDbewR/02DlClr5ejgsrzdo1XT3WKJ6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:93:82:86:99:aa:af:46:ad:ac:eb:54:2f:3c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866 Validity Not Before: Dec 21 01:01:01 2025 GMT Not After : Dec 22 01:01:01 2025 GMT Subject: CN=1ee9dd30f3221d9305ddb53659318e76f0a95599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:67:f1:b3:f1:2a:ec:d5:62:64:41:d8:92:63: 87:11:df:fe:ed:5e:c6:c8:4a:6f:4d:57:fe:c5:55: 40:e1:98:9e:15:7e:49:f2:54:ef:48:82:da:3d:b8: 9d:8f:f8:17:35:12:b3:74:b1:37:94:af:43:cb:27: b2:7c:1f:a6:69:2f:2c:40:a3:c8:bb:2a:56:ff:b7: 00:41:6f:88:1d:04:b6:87:a3:60:27:c5:02:b4:ad: 25:b7:82:da:57:55:68:a7:16:ac:ac:30:78:a5:ca: 2f:6f:cb:19:67:42:38:25:62:c5:f9:a4:d4:dd:38: cd:ed:51:48:83:b0:a2:1c:6e:eb:bc:6e:b9:66:5a: 4d:d6:52:d2:3d:83:8a:7a:3b:bf:ff:b5:71:0c:63: 89:fe:2f:76:95:ea:af:3c:75:ea:ea:9a:2f:0e:da: 2c:6d:07:03:be:88:64:16:f8:6c:69:3e:f5:88:b8: 51:46:44:1e:90:ac:c2:5a:98:e0:29:51:27:04:49: 7a:03:42:05:84:9e:80:46:a9:da:fd:ca:a2:b4:83: 22:ed:68:1a:97:bb:31:b3:f6:cf:f6:50:2d:c1:a3: 5c:f8:72:ce:24:68:0a:35:d9:b3:de:a6:f2:6d:e0: b6:73:13:cd:4f:0c:98:a2:f8:ad:cd:fe:2e:bd:93: 0f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E9:DD:30:F3:22:1D:93:05:DD:B5:36:59:31:8E:76:F0:A9:55:99 X509v3 Authority Key Identifier: keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:55:cd:b7:c7:f0:22:cc:fd:ea:c3:a0:50:6b:ac:53:9a:15: 7c:30:af:b8:4d:59:af:3f:79:e8:28:55:fa:f4:2b:43:97:f8: 66:43:f4:3e:df:59:93:d3:aa:c9:ce:09:7d:2f:04:0b:b4:89: 70:c3:d4:58:3e:7b:25:03:16:71:8e:7a:31:dc:5f:70:2a:87: 10:97:23:fa:c2:c0:fb:67:7d:7a:b4:d8:de:21:44:e7:f6:67: 83:25:bd:f3:24:4f:26:48:ac:b6:bb:2f:46:4f:bc:af:c0:70: 96:19:6a:65:4c:5a:b1:50:45:4b:79:25:09:17:11:3f:d4:f0: d5:57:3e:a5:02:98:bf:a5:1f:a2:af:66:0f:10:f4:8d:a0:61: 1a:11:0a:26:c8:0f:97:e4:18:53:9c:97:21:31:62:d8:5b:ff: 2d:af:1e:3d:13:1f:4d:68:79:16:eb:ee:56:8b:d1:64:1e:42: 6b:69:72:d9:1f:31:99:43:b4:98:63:8e:74:e7:ee:23:d6:9f: 51:65:a1:5e:c6:ba:57:c2:cc:81:65:1d:5b:96:c7:cb:6f:61: 39:da:41:13:f0:ca:06:e9:3e:5e:67:27:a9:10:b8:78:68:7d: 0c:ff:af:d4:5a:b1:c2:79:8a:8b:a8:56:ac:4a:9e:4e:10:07: f5:b8:a1:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bJOChpmqr0atrOtULzypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMGYwOGQ0ZWUxZjk0Zjk4NDQ5M2I0NjdiZDhhY2EyYWRm YTI4NjYwHhcNMjUxMjIxMDEwMTAxWhcNMjUxMjIyMDEwMTAxWjAzMTEwLwYDVQQD EygxZWU5ZGQzMGYzMjIxZDkzMDVkZGI1MzY1OTMxOGU3NmYwYTk1NTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mfxs/Eq7NViZEHYkmOHEd/+7V7G yEpvTVf+xVVA4ZieFX5J8lTvSILaPbidj/gXNRKzdLE3lK9DyyeyfB+maS8sQKPI uypW/7cAQW+IHQS2h6NgJ8UCtK0lt4LaV1VopxasrDB4pcovb8sZZ0I4JWLF+aTU 3TjN7VFIg7CiHG7rvG65ZlpN1lLSPYOKeju//7VxDGOJ/i92leqvPHXq6povDtos bQcDvohkFvhsaT71iLhRRkQekKzCWpjgKVEnBEl6A0IFhJ6ARqna/cqitIMi7Wga l7sxs/bP9lAtwaNc+HLOJGgKNdmz3qbybeC2cxPNTwyYovitzf4uvZMPewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7p3TDzIh2TBd21NlkxjnbwqVWZMB8GA1UdIwQY MBaAFOoPCNTuH5T5hEk7RnvYrKKt+ihmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUt MmVmYjQ2MWZkNDEzLzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUtMmVmYjQ2MWZkNDEz LzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlXNt8fw Isz96sOgUGusU5oVfDCvuE1Zrz956ChV+vQrQ5f4ZkP0Pt9Zk9Oqyc4JfS8EC7SJ cMPUWD57JQMWcY56MdxfcCqHEJcj+sLA+2d9erTY3iFE5/ZngyW98yRPJkistrsv Rk+8r8BwlhlqZUxasVBFS3klCRcRP9Tw1Vc+pQKYv6Ufoq9mDxD0jaBhGhEKJsgP l+QYU5yXITFi2Fv/La8ePRMfTWh5FuvuVovRZB5Ca2ly2R8xmUO0mGOOdOfuI9af UWWhXsa6V8LMgWUdW5bHy29hOdpBE/DKBuk+XmcnqRC4eGh9DP+v1FqxwnmKi6hW rEqeThAH9bihyg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:19:59 2025 by rpki-client