This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft File: 6WTScFqbJv1IKpwQ6Sbq572kHps.mft (raw, json) Hash identifier: PLFujOXoPoAVQeHkfGMwS8qjHAIXEsxxHRmImYwMbR8= Subject key identifier: 44:E0:D6:CD:5F:42:0B:C4:78:5A:64:D3:15:49:24:C3:9F:85:8F:4F Authority key identifier: E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B Certificate issuer: /CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b Certificate serial: 019B3644FA73D4895D24008BB2BE78F0CD01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft Manifest number: 0E8E Signing time: Fri 19 Dec 2025 11:00:48 +0000 Manifest this update: Fri 19 Dec 2025 11:00:48 +0000 Manifest next update: Sat 20 Dec 2025 11:00:48 +0000 Files and hashes: 1: 6WTScFqbJv1IKpwQ6Sbq572kHps.crl (hash: tTuXe2w8z6XKV3r5hZD8XX+Q7PQLFhwOmif/l9Int8o=) 2: qE5CKR1beI5QzGXctw8hwUZF3kQ.roa (hash: GJQ9ToPtMxv6IDjV2YJ/S2be8eseM+f65LcvwP6vzp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.crl rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:44:fa:73:d4:89:5d:24:00:8b:b2:be:78:f0:cd:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b Validity Not Before: Dec 19 11:00:48 2025 GMT Not After : Dec 20 11:00:48 2025 GMT Subject: CN=44e0d6cd5f420bc4785a64d3154924c39f858f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b1:38:87:dc:36:a8:37:c1:8e:39:14:71:b9: 43:3a:49:be:03:f2:65:7d:0e:2c:4a:60:44:17:f7: ae:08:30:c4:99:34:b9:0e:f0:1b:fa:86:57:c5:60: 6e:aa:01:25:87:b2:6f:f0:18:7f:fe:6d:51:92:8a: c9:5c:87:00:d1:c0:fe:36:e8:63:a2:e5:55:9b:df: bd:d6:5f:b9:97:77:6c:9b:c5:41:6e:d3:82:4b:38: 07:6a:56:0f:ed:c9:2b:aa:8f:db:a1:b2:5b:7b:f2: 6a:34:b6:93:bd:a0:9a:d5:cd:0d:6f:de:c6:e1:88: 43:e9:45:a1:17:4a:72:2d:b6:65:c9:b3:4a:8a:5e: 09:32:79:50:f1:23:73:5c:86:0f:0d:68:ca:b7:b6: f2:62:2e:19:3f:b2:97:a1:79:e8:39:6f:35:2a:74: 47:47:fd:4e:76:65:60:88:39:1d:b9:9e:1c:fb:5d: e7:10:e1:dd:e3:e2:c8:4f:0e:34:da:23:2d:92:f0: 5d:9e:17:79:ce:b3:56:11:45:88:e8:b9:88:b7:6e: 6c:7d:75:2f:bf:60:a8:fd:8c:47:27:9f:e4:87:71: 7d:11:71:ec:0e:3a:fa:0e:8c:8e:e6:77:90:7c:58: 89:18:c0:d5:b9:17:88:6f:c1:8d:d7:a3:75:13:c1: d1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E0:D6:CD:5F:42:0B:C4:78:5A:64:D3:15:49:24:C3:9F:85:8F:4F X509v3 Authority Key Identifier: keyid:E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:03:1e:57:33:74:d3:6d:7f:57:9d:05:f2:20:b5:83:68:32: 41:a7:89:4a:20:c8:7b:fa:0d:a8:a8:fe:e6:7a:3f:2c:a4:83: fa:80:2b:a1:a9:3f:03:fa:db:92:1b:19:39:d9:5b:72:aa:14: 2e:16:e1:40:9c:72:c5:ae:be:dc:24:16:bb:56:34:59:b6:11: d6:32:be:7f:49:29:8c:98:bd:50:62:fc:b8:c4:09:fb:21:e2: 9b:f2:bd:aa:d8:2b:00:be:5e:8d:90:0c:61:0b:99:a7:76:77: dd:a9:43:f5:e7:2f:87:51:d9:49:e7:41:a6:07:a8:99:13:8e: 47:2c:d1:d3:73:aa:be:ba:64:74:d5:73:bd:42:9a:95:8f:ad: a3:95:f0:1a:5b:47:97:33:5a:26:48:26:ca:30:a9:f0:11:2a: b8:d8:9c:c9:1f:59:2d:df:3d:c7:db:c4:a1:f8:b0:c2:5c:43: 7a:43:bd:54:cc:4e:07:6d:d7:35:49:06:45:64:a1:46:46:07: ae:f1:34:66:13:94:d0:a0:d5:7f:67:49:bc:28:f0:c0:5b:7d: 28:04:b8:a7:cb:31:e9:d6:50:93:76:3a:01:31:40:61:cc:30: fb:51:de:6c:e7:ef:0b:f0:c6:ec:fe:38:31:47:f3:70:da:8f: 5f:13:60:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RPpz1IldJACLsr548M0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NjRkMjcwNWE5YjI2ZmQ0ODJhOWMxMGU5MjZlYWU3YmRh NDFlOWIwHhcNMjUxMjE5MTEwMDQ4WhcNMjUxMjIwMTEwMDQ4WjAzMTEwLwYDVQQD Eyg0NGUwZDZjZDVmNDIwYmM0Nzg1YTY0ZDMxNTQ5MjRjMzlmODU4ZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7E4h9w2qDfBjjkUcblDOkm+A/Jl fQ4sSmBEF/euCDDEmTS5DvAb+oZXxWBuqgElh7Jv8Bh//m1RkorJXIcA0cD+Nuhj ouVVm9+91l+5l3dsm8VBbtOCSzgHalYP7ckrqo/bobJbe/JqNLaTvaCa1c0Nb97G 4YhD6UWhF0pyLbZlybNKil4JMnlQ8SNzXIYPDWjKt7byYi4ZP7KXoXnoOW81KnRH R/1OdmVgiDkduZ4c+13nEOHd4+LITw402iMtkvBdnhd5zrNWEUWI6LmIt25sfXUv v2Co/YxHJ5/kh3F9EXHsDjr6DoyO5neQfFiJGMDVuReIb8GN16N1E8HRfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETg1s1fQgvEeFpk0xVJJMOfhY9PMB8GA1UdIwQY MBaAFOlk0nBamyb9SCqcEOkm6ue9pB6bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNldUU2NGcWJKdjFJS3B3UTZTYnE1NzJrSHBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hNjYzNmQtY2M1My00Y2VlLTg0Y2Mt ZjRlMzYxZTRkYTJkLzEvNldUU2NGcWJKdjFJS3B3UTZTYnE1NzJrSHBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9hNjYzNmQtY2M1My00Y2VlLTg0Y2MtZjRlMzYxZTRkYTJk LzEvNldUU2NGcWJKdjFJS3B3UTZTYnE1NzJrSHBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAMeVzN0 021/V50F8iC1g2gyQaeJSiDIe/oNqKj+5no/LKSD+oAroak/A/rbkhsZOdlbcqoU LhbhQJxyxa6+3CQWu1Y0WbYR1jK+f0kpjJi9UGL8uMQJ+yHim/K9qtgrAL5ejZAM YQuZp3Z33alD9ecvh1HZSedBpgeomROORyzR03OqvrpkdNVzvUKalY+to5XwGltH lzNaJkgmyjCp8BEquNicyR9ZLd89x9vEofiwwlxDekO9VMxOB23XNUkGRWShRkYH rvE0ZhOU0KDVf2dJvCjwwFt9KAS4p8sx6dZQk3Y6ATFAYcww+1HebOfvC/DG7P44 MUfzcNqPXxNg9A== -----END CERTIFICATE-----Generated at Fri Dec 19 14:30:24 2025 by rpki-client