This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft File: 6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft (raw, json) Hash identifier: x32aatvVr5Ad/8Z15U5DPqSGcXSyUzYRn8Gm+os2fOM= Subject key identifier: E4:E3:C7:BD:6E:56:3D:53:B6:AA:10:70:1F:31:85:B2:58:44:4E:A0 Authority key identifier: E8:A2:47:59:8C:C3:21:60:32:84:17:A1:B1:0D:B6:7F:DF:59:F1:0F Certificate issuer: /CN=e8a247598cc32160328417a1b10db67fdf59f10f Certificate serial: 019B41DB5B63381691BDCD782BC36EAB8CF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft Manifest number: 66 Signing time: Sun 21 Dec 2025 17:00:53 +0000 Manifest this update: Sun 21 Dec 2025 17:00:53 +0000 Manifest next update: Mon 22 Dec 2025 17:00:53 +0000 Files and hashes: 1: 6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl (hash: cxbI4i5iHYzLvJEHOGIU3fJunBenWhJ6suY6GsZDc40=) 2: AV8wo7IcGhoDNh45lsVAfOCmZyE.roa (hash: xfFdNGYBpXcUrobp7nBFSY8sabsVXKXuRVyeR5Zfluo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:5b:63:38:16:91:bd:cd:78:2b:c3:6e:ab:8c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8a247598cc32160328417a1b10db67fdf59f10f Validity Not Before: Dec 21 17:00:53 2025 GMT Not After : Dec 22 17:00:53 2025 GMT Subject: CN=e4e3c7bd6e563d53b6aa10701f3185b258444ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:33:94:52:a1:f4:11:ee:16:02:6c:b5:8a:24: 43:39:a2:6c:01:f3:b9:74:80:90:77:28:27:fd:ee: f6:aa:e2:51:9c:6a:72:b2:a5:49:63:7d:b4:44:0c: bf:82:e6:18:0a:fa:17:24:10:9d:41:c3:de:07:4f: a5:96:e2:d5:18:02:56:07:b5:e6:6c:aa:13:ca:fc: 18:d4:68:6a:d5:b4:6f:86:5e:55:78:16:2d:05:bb: 08:47:0e:31:ad:0f:d8:12:b0:75:1a:58:cc:69:48: f7:d7:c7:e9:58:f0:62:63:e9:4a:85:5e:d8:25:c3: 15:7b:70:dc:3e:52:a4:2f:3c:02:19:5e:59:40:1d: d0:fd:bd:39:53:30:a2:23:4a:3a:2a:57:97:47:ce: bf:40:ae:35:19:5e:f1:1e:3f:4f:c4:77:e9:e3:9e: 5d:15:e5:64:12:1a:b2:65:15:ae:aa:80:d6:7d:35: fc:94:0e:df:09:67:12:56:d6:e3:6b:59:81:c7:9b: 3c:8e:c2:1d:8c:09:44:7b:95:f2:35:b1:51:6c:3c: 56:d2:d9:54:64:e7:6d:66:5f:d5:3e:2e:00:ac:03: f3:92:27:a0:e2:3b:ef:13:23:de:94:7f:4d:81:35: 41:bb:02:ed:c0:0e:f8:2d:fe:19:29:c0:88:62:98: c1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E3:C7:BD:6E:56:3D:53:B6:AA:10:70:1F:31:85:B2:58:44:4E:A0 X509v3 Authority Key Identifier: keyid:E8:A2:47:59:8C:C3:21:60:32:84:17:A1:B1:0D:B6:7F:DF:59:F1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:05:54:1a:26:ab:0e:a7:f7:21:f6:0c:fa:86:6a:25:9d:b6: 50:33:5f:f4:da:d0:cb:e1:df:95:3e:20:a4:da:32:72:4b:43: 7b:29:a9:9e:85:11:a4:40:8c:a7:99:98:34:c4:f9:57:ac:7e: 37:36:58:70:44:89:c8:26:72:cd:ad:b5:9b:22:54:a1:ce:5e: b7:96:cd:53:c9:2b:01:b7:88:51:77:cf:1c:a3:a0:ea:57:e3: 0a:3a:6c:45:aa:74:3c:98:62:3d:6a:97:c3:01:78:27:89:f4: ca:39:8e:40:cb:82:bf:b1:07:82:6f:ae:b4:6b:1d:81:2f:27: de:b4:8e:e6:fb:39:ef:9c:91:f8:3f:14:47:92:ff:b3:4e:4d: cf:0a:e4:41:1b:75:4b:f4:fd:fa:e0:8a:8c:09:7b:3b:16:44: f4:0c:5f:d3:8a:f4:14:79:87:8f:65:28:f4:ad:28:30:73:9f: 3e:ab:5a:2d:05:97:3c:a4:27:50:98:a5:24:51:15:53:84:48: e9:61:8e:d8:33:7f:be:62:01:d6:1c:60:94:0b:96:f3:31:66: d7:11:4a:9a:dd:4b:7f:70:e9:2f:be:f4:5f:32:74:4d:b9:8d: 47:6f:7e:97:d6:82:6d:17:28:85:09:fc:1a:3d:b7:66:d2:e3: d3:aa:d0:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB21tjOBaRvc14K8Nuq4z0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YTI0NzU5OGNjMzIxNjAzMjg0MTdhMWIxMGRiNjdmZGY1 OWYxMGYwHhcNMjUxMjIxMTcwMDUzWhcNMjUxMjIyMTcwMDUzWjAzMTEwLwYDVQQD EyhlNGUzYzdiZDZlNTYzZDUzYjZhYTEwNzAxZjMxODViMjU4NDQ0ZWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjOUUqH0Ee4WAmy1iiRDOaJsAfO5 dICQdygn/e72quJRnGpysqVJY320RAy/guYYCvoXJBCdQcPeB0+lluLVGAJWB7Xm bKoTyvwY1Ghq1bRvhl5VeBYtBbsIRw4xrQ/YErB1GljMaUj318fpWPBiY+lKhV7Y JcMVe3DcPlKkLzwCGV5ZQB3Q/b05UzCiI0o6KleXR86/QK41GV7xHj9PxHfp455d FeVkEhqyZRWuqoDWfTX8lA7fCWcSVtbja1mBx5s8jsIdjAlEe5XyNbFRbDxW0tlU ZOdtZl/VPi4ArAPzkieg4jvvEyPelH9NgTVBuwLtwA74Lf4ZKcCIYpjBTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTjx71uVj1TtqoQcB8xhbJYRE6gMB8GA1UdIwQY MBaAFOiiR1mMwyFgMoQXobENtn/fWfEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNktKSFdZekRJV0F5aEJlaHNRMjJmOTlaOFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lYmM1N2QtNWMzZS00YmFkLWI3MGQt ODE5NjgwZGI0MzU4LzEvNktKSFdZekRJV0F5aEJlaHNRMjJmOTlaOFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lYmM1N2QtNWMzZS00YmFkLWI3MGQtODE5NjgwZGI0MzU4 LzEvNktKSFdZekRJV0F5aEJlaHNRMjJmOTlaOFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQVUGiar Dqf3IfYM+oZqJZ22UDNf9NrQy+HflT4gpNoycktDeympnoURpECMp5mYNMT5V6x+ NzZYcESJyCZyza21myJUoc5et5bNU8krAbeIUXfPHKOg6lfjCjpsRap0PJhiPWqX wwF4J4n0yjmOQMuCv7EHgm+utGsdgS8n3rSO5vs575yR+D8UR5L/s05NzwrkQRt1 S/T9+uCKjAl7OxZE9Axf04r0FHmHj2Uo9K0oMHOfPqtaLQWXPKQnUJilJFEVU4RI 6WGO2DN/vmIB1hxglAuW8zFm1xFKmt1Lf3DpL770XzJ0TbmNR29+l9aCbRcohQn8 Gj23ZtLj06rQUg== -----END CERTIFICATE-----Generated at Sun Dec 21 20:31:02 2025 by rpki-client