This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft File: 6BB04ygiyL7zp9yzEoCCW9J1Rck.mft (raw, json) Hash identifier: PwXwFBK+H9NcbzHtQc2FhOA9J5Ha14x8X7n419lUKm8= Subject key identifier: EC:6B:70:BA:39:97:27:D5:E1:76:9E:66:80:CE:3F:93:88:71:16:4F Authority key identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9 Certificate issuer: /CN=e81074e32822c8bef3a7dcb31280825bd27545c9 Certificate serial: 019B3EDA07E0AC8388F09B1D22FD6D12417E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft Manifest number: 1302 Signing time: Sun 21 Dec 2025 03:00:34 +0000 Manifest this update: Sun 21 Dec 2025 03:00:34 +0000 Manifest next update: Mon 22 Dec 2025 03:00:34 +0000 Files and hashes: 1: 6BB04ygiyL7zp9yzEoCCW9J1Rck.crl (hash: TJdXmCRB8pQw0s29On96YiTEMPB4F+Of+z8t9Qpy3o8=) 2: gcAJhnp75nn3OhwbSa9nzzcRaUI.roa (hash: Jgj60UlrGxuOFPZBlyVAd9Y49+PH7LywBsHvYG3mNks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:07:e0:ac:83:88:f0:9b:1d:22:fd:6d:12:41:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e81074e32822c8bef3a7dcb31280825bd27545c9 Validity Not Before: Dec 21 03:00:34 2025 GMT Not After : Dec 22 03:00:34 2025 GMT Subject: CN=ec6b70ba399727d5e1769e6680ce3f938871164f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:88:13:80:69:84:e0:73:98:3c:1d:fd:c2:30: ab:c3:36:82:45:9c:2e:ad:08:3e:32:d2:1a:f2:2c: a5:c9:cc:57:34:9b:8d:f3:e4:d3:e7:5f:cd:62:c4: e2:d6:76:37:51:43:74:6b:05:3c:eb:fd:b2:80:e6: af:33:e6:23:34:cd:f7:77:84:d7:fd:b1:f1:3d:54: 65:dc:02:81:d8:af:5b:e5:e4:18:4a:f4:81:c7:e3: f3:1e:cb:e3:6a:5e:2e:a9:2a:5e:3e:14:a6:b3:a3: 08:80:00:fb:63:ed:8e:e5:5b:99:de:6b:3d:f2:2b: 62:fe:6f:1a:22:96:9d:33:35:61:2a:63:6b:73:f8: 49:23:56:98:2e:1c:10:0f:52:f8:a3:c4:0e:46:6b: e5:d8:c6:3a:8c:0f:06:1b:06:5c:1b:44:1d:4c:71: ab:49:77:01:b4:07:7f:8b:94:43:6b:59:8b:66:97: e5:73:5a:3f:2b:ec:71:78:dc:b0:a6:ad:86:da:39: 3d:ce:93:48:cd:30:4f:74:15:27:aa:2b:d4:84:10: e3:67:e6:4d:46:83:8c:53:84:53:37:cd:07:40:e7: 03:b9:e4:b6:bd:54:22:a1:98:c5:24:08:3a:56:11: c2:cb:9e:14:1d:dc:c5:db:25:6d:4d:ac:6f:9e:b6: 41:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6B:70:BA:39:97:27:D5:E1:76:9E:66:80:CE:3F:93:88:71:16:4F X509v3 Authority Key Identifier: keyid:E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:9f:7c:12:35:8e:15:95:96:ab:d3:03:ce:48:cc:a2:2a:ca: 71:cf:4f:b0:1a:b0:90:49:85:f6:17:44:21:1c:7b:da:46:13: fa:cf:64:68:a2:85:7d:4f:02:b7:ea:07:11:d9:08:15:5a:b1: 7c:ba:6c:f8:3e:de:49:59:cf:5a:e8:95:70:1a:32:3a:03:30: 71:5f:1f:3c:0c:2f:f1:7e:2e:c4:20:66:78:b4:43:89:21:41: 02:bb:16:d3:32:94:a9:e3:0c:ba:4b:44:b3:b1:da:b8:29:36: 66:71:af:bc:80:52:3e:73:b8:c5:6f:51:12:83:f1:e3:df:be: 1a:19:96:62:7f:eb:fc:b2:b9:b8:90:b0:cd:e2:55:94:c6:82: ba:c4:da:69:74:6e:22:4f:e6:b8:70:ec:d6:b8:26:07:9f:33: b8:93:f5:46:85:3c:5a:ba:aa:50:99:9e:f9:ab:c1:e0:e7:a9: 5a:b7:61:f0:a5:d0:7a:d4:8f:9f:5c:b9:64:ac:64:7a:9c:e7: 4e:5e:70:62:62:f1:5b:58:67:1e:e9:8b:03:d8:74:69:1b:00: 04:f0:ed:ae:54:2e:ff:9f:3c:f3:b8:be:8e:2d:7e:90:53:26: 52:8b:91:55:3f:e3:54:05:ee:81:1a:fa:c7:02:44:2a:66:a8: 46:de:c7:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2gfgrIOI8JsdIv1tEkF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MTA3NGUzMjgyMmM4YmVmM2E3ZGNiMzEyODA4MjViZDI3 NTQ1YzkwHhcNMjUxMjIxMDMwMDM0WhcNMjUxMjIyMDMwMDM0WjAzMTEwLwYDVQQD EyhlYzZiNzBiYTM5OTcyN2Q1ZTE3NjllNjY4MGNlM2Y5Mzg4NzExNjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYgTgGmE4HOYPB39wjCrwzaCRZwu rQg+MtIa8iylycxXNJuN8+TT51/NYsTi1nY3UUN0awU86/2ygOavM+YjNM33d4TX /bHxPVRl3AKB2K9b5eQYSvSBx+PzHsvjal4uqSpePhSms6MIgAD7Y+2O5VuZ3ms9 8iti/m8aIpadMzVhKmNrc/hJI1aYLhwQD1L4o8QORmvl2MY6jA8GGwZcG0QdTHGr SXcBtAd/i5RDa1mLZpflc1o/K+xxeNywpq2G2jk9zpNIzTBPdBUnqivUhBDjZ+ZN RoOMU4RTN80HQOcDueS2vVQioZjFJAg6VhHCy54UHdzF2yVtTaxvnrZBiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxrcLo5lyfV4XaeZoDOP5OIcRZPMB8GA1UdIwQY MBaAFOgQdOMoIsi+86fcsxKAglvSdUXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkJCMDR5Z2l5TDd6cDl5ekVvQ0NXOUoxUmNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NzRkMjctZjJhYy00ODk3LTk2ZjQt M2U0ZTg0ZjM1Y2QwLzEvNkJCMDR5Z2l5TDd6cDl5ekVvQ0NXOUoxUmNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC84NzRkMjctZjJhYy00ODk3LTk2ZjQtM2U0ZTg0ZjM1Y2Qw LzEvNkJCMDR5Z2l5TDd6cDl5ekVvQ0NXOUoxUmNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZ98EjWO FZWWq9MDzkjMoirKcc9PsBqwkEmF9hdEIRx72kYT+s9kaKKFfU8Ct+oHEdkIFVqx fLps+D7eSVnPWuiVcBoyOgMwcV8fPAwv8X4uxCBmeLRDiSFBArsW0zKUqeMMuktE s7HauCk2ZnGvvIBSPnO4xW9REoPx49++GhmWYn/r/LK5uJCwzeJVlMaCusTaaXRu Ik/muHDs1rgmB58zuJP1RoU8WrqqUJme+avB4OepWrdh8KXQetSPn1y5ZKxkepzn Tl5wYmLxW1hnHumLA9h0aRsABPDtrlQu/58887i+ji1+kFMmUouRVT/jVAXugRr6 xwJEKmaoRt7HDg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:34:11 2025 by rpki-client