This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft File: 6MC119fK9-9NNVXA2Q6V17-G5gY.mft (raw, json) Hash identifier: CWNNht6VK01HbUmvzQ7YsYEAoyvio9uOzPbPWBBoer0= Subject key identifier: 80:71:64:15:7C:BE:CD:8C:5C:3E:6F:9D:CF:D7:53:50:E4:EB:DA:76 Authority key identifier: E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06 Certificate issuer: /CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606 Certificate serial: 019B3BA285C6A9222D01FCFA7331458F4FC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft Manifest number: 0608 Signing time: Sat 20 Dec 2025 12:01:05 +0000 Manifest this update: Sat 20 Dec 2025 12:01:05 +0000 Manifest next update: Sun 21 Dec 2025 12:01:05 +0000 Files and hashes: 1: 6MC119fK9-9NNVXA2Q6V17-G5gY.crl (hash: jo73a5maTSxzAjztAhDSlSy6VhlDHiT5ZBvZ8geAlPk=) 2: zLqJ2jk1gnb1U6_xEyeO1kXar2w.roa (hash: f9xXsOCbyfrGDmPeAHiz1i2Ip8aFRkb7BmV8Krt70eA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:85:c6:a9:22:2d:01:fc:fa:73:31:45:8f:4f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606 Validity Not Before: Dec 20 12:01:05 2025 GMT Not After : Dec 21 12:01:05 2025 GMT Subject: CN=807164157cbecd8c5c3e6f9dcfd75350e4ebda76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e1:06:fd:00:f6:48:65:77:7e:ca:e0:8e:63: 05:e8:08:68:0a:11:f2:82:4b:3f:83:6d:ee:32:a2: 64:1a:2f:71:5a:e7:16:11:85:86:06:b0:9a:d1:c2: 05:a5:52:66:8b:de:3b:a5:63:f3:25:d5:31:6c:a1: ab:48:27:4c:95:7d:32:a0:33:70:db:1c:6e:b4:8f: 4d:35:4d:c0:94:da:06:f9:d9:6e:8d:4f:c6:d3:88: 84:c3:e3:bc:88:10:da:41:b9:f2:8c:e4:50:8d:13: 78:4e:f2:5b:3f:2a:e7:8b:d2:41:59:eb:15:f1:37: 1f:f9:20:43:be:89:0a:94:ab:4b:66:7b:b8:65:fb: 6d:c0:23:76:58:55:3b:df:06:8c:72:d6:9b:de:c6: dd:cf:c2:b7:7c:5b:44:54:a2:cb:21:f1:e9:1f:2a: 80:4b:23:da:37:0d:8c:04:e5:35:4c:24:13:63:ce: 78:2f:4f:e5:1e:ed:87:4c:87:b1:3f:cc:08:1d:fe: 13:de:a0:77:1f:5f:c8:3a:7d:8b:af:f5:08:a0:c1: a6:2c:02:2a:0b:23:a3:56:4f:3c:7c:6a:2a:4a:87: 14:19:48:d6:a1:e0:c0:c7:15:ad:c4:12:0c:d0:da: 1c:1d:9e:10:11:b3:3e:5e:1c:8d:9d:f9:aa:28:f1: 63:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:71:64:15:7C:BE:CD:8C:5C:3E:6F:9D:CF:D7:53:50:E4:EB:DA:76 X509v3 Authority Key Identifier: keyid:E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:66:bc:fd:4c:6a:dd:b8:9b:38:ea:49:b6:fc:60:9f:be:e4: c3:03:de:a9:38:ac:73:dd:bf:f4:b2:dd:3c:74:6b:f2:b3:97: 15:0a:47:dc:5a:ef:e7:7c:c2:66:79:5d:70:99:5b:4a:67:fa: 65:6e:6a:8a:a1:25:c6:42:d1:7d:88:b3:b5:7b:b3:88:57:2f: 38:56:4f:1d:20:9a:82:9b:a6:31:a0:bb:b1:fa:ba:38:7a:d3: 1f:7b:46:39:d7:d7:aa:23:b8:bd:6a:ab:1c:d9:d3:cd:da:3e: 39:2a:49:67:ac:82:55:70:4d:89:c3:e2:87:83:15:75:e3:ea: c3:2f:f2:99:8d:9c:90:7f:5e:dd:46:6c:32:71:b1:44:34:a4: cb:7e:ca:1a:68:d0:53:dc:0e:54:00:37:91:9f:c4:bb:88:84: 27:59:87:1b:49:bd:62:66:46:53:53:40:e8:50:5b:d8:b8:75: 27:af:5c:cb:9c:58:79:a9:92:cd:40:97:f3:34:15:9c:72:e2: 61:ab:77:3a:83:5c:e6:82:37:7f:8e:24:0d:a9:35:3b:68:7c: 9d:fd:5e:20:e8:88:3c:a8:27:50:29:d2:6d:9d:63:19:9c:98: b8:a1:cf:f2:2d:50:1c:f6:19:60:43:47:4b:93:8f:79:3c:81: 92:d9:43:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ooXGqSItAfz6czFFj0/GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YzBiNWQ3ZDdjYWY3ZWY0ZDM1NTVjMGQ5MGU5NWQ3YmY4 NmU2MDYwHhcNMjUxMjIwMTIwMTA1WhcNMjUxMjIxMTIwMTA1WjAzMTEwLwYDVQQD Eyg4MDcxNjQxNTdjYmVjZDhjNWMzZTZmOWRjZmQ3NTM1MGU0ZWJkYTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eEG/QD2SGV3fsrgjmMF6AhoChHy gks/g23uMqJkGi9xWucWEYWGBrCa0cIFpVJmi947pWPzJdUxbKGrSCdMlX0yoDNw 2xxutI9NNU3AlNoG+dlujU/G04iEw+O8iBDaQbnyjORQjRN4TvJbPyrni9JBWesV 8Tcf+SBDvokKlKtLZnu4ZfttwCN2WFU73waMctab3sbdz8K3fFtEVKLLIfHpHyqA SyPaNw2MBOU1TCQTY854L0/lHu2HTIexP8wIHf4T3qB3H1/IOn2Lr/UIoMGmLAIq CyOjVk88fGoqSocUGUjWoeDAxxWtxBIM0NocHZ4QEbM+XhyNnfmqKPFjRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBxZBV8vs2MXD5vnc/XU1Dk69p2MB8GA1UdIwQY MBaAFOjAtdfXyvfvTTVVwNkOlde/huYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk1DMTE5Zks5LTlOTlZYQTJRNlYxNy1HNWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jNDczMWMtYThmZS00YTBiLTk5MWEt MzU4MjBmNTFjNTc4LzEvNk1DMTE5Zks5LTlOTlZYQTJRNlYxNy1HNWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9jNDczMWMtYThmZS00YTBiLTk5MWEtMzU4MjBmNTFjNTc4 LzEvNk1DMTE5Zks5LTlOTlZYQTJRNlYxNy1HNWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2a8/Uxq 3bibOOpJtvxgn77kwwPeqTisc92/9LLdPHRr8rOXFQpH3Frv53zCZnldcJlbSmf6 ZW5qiqElxkLRfYiztXuziFcvOFZPHSCagpumMaC7sfq6OHrTH3tGOdfXqiO4vWqr HNnTzdo+OSpJZ6yCVXBNicPih4MVdePqwy/ymY2ckH9e3UZsMnGxRDSky37KGmjQ U9wOVAA3kZ/Eu4iEJ1mHG0m9YmZGU1NA6FBb2Lh1J69cy5xYeamSzUCX8zQVnHLi Yat3OoNc5oI3f44kDak1O2h8nf1eIOiIPKgnUCnSbZ1jGZyYuKHP8i1QHPYZYENH S5OPeTyBktlDLQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:48:44 2025 by rpki-client