This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft File: 6gYhpKcsclr8dUFej4rPdTPUIH0.mft (raw, json) Hash identifier: FR2LIDu+wad3ZTcqJBvNlsMZGXC1HLhO8cJSrLENfZw= Subject key identifier: 86:4B:18:F6:14:09:9F:D9:65:6B:2A:9A:06:96:54:12:8C:C4:C9:C1 Authority key identifier: EA:06:21:A4:A7:2C:72:5A:FC:75:41:5E:8F:8A:CF:75:33:D4:20:7D Certificate issuer: /CN=ea0621a4a72c725afc75415e8f8acf7533d4207d Certificate serial: 019B4815125BC4232A5CEF42D4E3EF9BE674 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft Manifest number: 15D9 Signing time: Mon 22 Dec 2025 22:01:39 +0000 Manifest this update: Mon 22 Dec 2025 22:01:39 +0000 Manifest next update: Tue 23 Dec 2025 22:01:39 +0000 Files and hashes: 1: 6gYhpKcsclr8dUFej4rPdTPUIH0.crl (hash: sfYpSNeKadKdawktKtjpgY7E1BJv0vlx0b+N6T0PhNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.crl rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:12:5b:c4:23:2a:5c:ef:42:d4:e3:ef:9b:e6:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea0621a4a72c725afc75415e8f8acf7533d4207d Validity Not Before: Dec 22 22:01:39 2025 GMT Not After : Dec 23 22:01:39 2025 GMT Subject: CN=864b18f614099fd9656b2a9a069654128cc4c9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0e:b9:e4:bb:aa:31:53:d2:14:59:c9:93:a0: 83:b8:da:e9:8c:d9:60:d6:48:b7:87:58:9e:b4:43: 0c:38:f7:05:ff:27:7d:22:01:fa:02:0a:6f:ed:48: a2:5b:be:91:f1:47:0c:32:aa:9f:1f:9b:64:c1:73: 09:89:a3:3a:8c:36:11:8e:2f:3b:92:17:0a:e1:6b: 8f:32:6f:9b:52:9b:90:73:a3:a8:04:0c:a9:e8:47: 09:49:8d:08:64:28:e1:68:3d:ca:40:db:80:b1:bb: 41:e8:32:73:f0:c1:f5:40:4e:2d:74:6f:d9:15:b6: 5f:7e:fd:99:52:6a:84:40:bf:1c:b8:fc:97:7f:83: 9a:8f:fc:27:e6:ad:b1:9a:f4:36:03:e9:a7:e0:bb: 18:98:02:64:07:bb:53:dc:13:82:01:71:fb:00:6f: f3:2a:df:9f:c2:1d:d2:f6:c5:b1:d6:ce:30:8c:39: 5b:2d:91:d7:11:3c:da:2a:ce:12:5f:3e:f8:de:39: bd:79:cc:2b:1e:c9:17:ec:65:73:e2:72:07:f0:af: 6f:b2:29:10:dc:b7:a4:49:50:9f:1d:88:3d:16:80: 4e:bc:20:55:7a:f4:54:44:4a:70:52:cf:e9:c1:38: 95:a4:ac:ad:96:da:3e:e6:63:a2:f7:83:3f:55:80: 0e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4B:18:F6:14:09:9F:D9:65:6B:2A:9A:06:96:54:12:8C:C4:C9:C1 X509v3 Authority Key Identifier: keyid:EA:06:21:A4:A7:2C:72:5A:FC:75:41:5E:8F:8A:CF:75:33:D4:20:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:93:96:09:e3:28:ee:26:ec:15:9a:aa:bc:0e:62:44:3a:94: 41:7d:95:58:d4:3a:43:fd:d7:a6:87:22:7a:f1:50:a7:40:22: 6a:8e:b7:1c:b5:28:8b:33:4b:c3:e4:a4:83:d0:06:5a:96:b6: 10:f1:15:89:77:02:7e:28:8e:bc:60:13:40:43:bc:82:5d:ae: 09:b0:bf:99:21:cd:8e:96:c9:49:fb:08:c2:c6:e4:e5:75:6f: eb:2e:67:af:a1:4e:7a:6a:91:4c:40:69:5c:63:4e:92:b9:60: f2:11:bb:be:91:0b:69:17:3e:4f:9c:28:1f:1b:53:4a:5a:a3: 93:99:6c:80:56:37:7a:7c:60:70:21:39:f4:a7:3c:e2:cd:e2: 39:45:0d:b1:2f:b9:37:22:6c:3e:45:b0:b2:36:80:52:8c:04: e4:96:b7:3d:f1:50:a6:93:96:26:d4:f7:77:ff:0e:f8:06:51: 70:cc:7e:b6:41:7d:91:34:2a:51:6d:83:e0:70:a3:7e:ef:ad: 21:b6:d5:3a:9e:80:f9:e9:7c:27:34:0a:8d:e2:ed:c5:57:00: 7d:20:0b:32:07:e4:c9:e6:b6:1f:59:94:27:6d:97:b8:c0:1d: a9:e4:81:b7:c7:c5:2e:43:c5:05:33:eb:79:44:0b:06:3e:52: 51:38:78:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFRJbxCMqXO9C1OPvm+Z0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMDYyMWE0YTcyYzcyNWFmYzc1NDE1ZThmOGFjZjc1MzNk NDIwN2QwHhcNMjUxMjIyMjIwMTM5WhcNMjUxMjIzMjIwMTM5WjAzMTEwLwYDVQQD Eyg4NjRiMThmNjE0MDk5ZmQ5NjU2YjJhOWEwNjk2NTQxMjhjYzRjOWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw655LuqMVPSFFnJk6CDuNrpjNlg 1ki3h1ietEMMOPcF/yd9IgH6Agpv7UiiW76R8UcMMqqfH5tkwXMJiaM6jDYRji87 khcK4WuPMm+bUpuQc6OoBAyp6EcJSY0IZCjhaD3KQNuAsbtB6DJz8MH1QE4tdG/Z FbZffv2ZUmqEQL8cuPyXf4Oaj/wn5q2xmvQ2A+mn4LsYmAJkB7tT3BOCAXH7AG/z Kt+fwh3S9sWx1s4wjDlbLZHXETzaKs4SXz743jm9ecwrHskX7GVz4nIH8K9vsikQ 3LekSVCfHYg9FoBOvCBVevRUREpwUs/pwTiVpKytlto+5mOi94M/VYAO+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZLGPYUCZ/ZZWsqmgaWVBKMxMnBMB8GA1UdIwQY MBaAFOoGIaSnLHJa/HVBXo+Kz3Uz1CB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmdZaHBLY3NjbHI4ZFVGZWo0clBkVFBVSUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zMTE1OGUtOWNhNi00NGUzLTk4NTMt YzM4NGQ4YmMzYmVmLzEvNmdZaHBLY3NjbHI4ZFVGZWo0clBkVFBVSUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zMTE1OGUtOWNhNi00NGUzLTk4NTMtYzM4NGQ4YmMzYmVm LzEvNmdZaHBLY3NjbHI4ZFVGZWo0clBkVFBVSUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5OWCeMo 7ibsFZqqvA5iRDqUQX2VWNQ6Q/3XpocievFQp0Aiao63HLUoizNLw+Skg9AGWpa2 EPEViXcCfiiOvGATQEO8gl2uCbC/mSHNjpbJSfsIwsbk5XVv6y5nr6FOemqRTEBp XGNOkrlg8hG7vpELaRc+T5woHxtTSlqjk5lsgFY3enxgcCE59Kc84s3iOUUNsS+5 NyJsPkWwsjaAUowE5Ja3PfFQppOWJtT3d/8O+AZRcMx+tkF9kTQqUW2D4HCjfu+t IbbVOp6A+el8JzQKjeLtxVcAfSALMgfkyea2H1mUJ22XuMAdqeSBt8fFLkPFBTPr eUQLBj5SUTh4EQ== -----END CERTIFICATE-----Generated at Tue Dec 23 00:49:24 2025 by rpki-client