This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft File: b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft (raw, json) Hash identifier: GE/KLwwlNmCrWYY245EHSfnKrsQN/kVwdB7ML7Q4ckQ= Subject key identifier: E5:14:FB:EF:40:A1:BB:DB:F9:38:E3:FD:74:79:F4:73:58:4B:76:C5 Authority key identifier: 6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77 Certificate issuer: /CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177 Certificate serial: 019B41A4562FA7F591B8FB418E295D8D21A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft Manifest number: 16CE Signing time: Sun 21 Dec 2025 16:00:47 +0000 Manifest this update: Sun 21 Dec 2025 16:00:47 +0000 Manifest next update: Mon 22 Dec 2025 16:00:47 +0000 Files and hashes: 1: 9eMR4FNJDVauWkWIUPQVpbQ5CXg.roa (hash: u33y8H6nVy03TdakAVCKdnmWlusbHupRimP8Gevy98g=) 2: b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl (hash: ByJIOVnjCRk/FoFnOAIsSof0G/A4O+1QXekgfFYDy0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:56:2f:a7:f5:91:b8:fb:41:8e:29:5d:8d:21:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177 Validity Not Before: Dec 21 16:00:47 2025 GMT Not After : Dec 22 16:00:47 2025 GMT Subject: CN=e514fbef40a1bbdbf938e3fd7479f473584b76c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6c:a1:f5:1f:85:f7:be:32:f5:f2:e0:ca:49: b0:01:6e:48:84:73:59:1a:0d:c4:d0:cc:1e:ac:96: bd:dc:e5:66:01:25:a1:77:ee:1d:1a:a6:1b:93:22: e3:b9:49:73:49:cf:28:e9:b6:7b:a3:78:9d:37:31: 88:33:0d:67:d7:72:14:78:a7:f0:64:ed:2b:85:80: f9:bc:68:d0:bd:2f:85:6a:74:e1:a0:97:a7:95:77: 26:eb:7c:69:9b:59:e2:70:df:ea:6b:2c:66:f9:ae: 0b:c2:9a:a6:31:63:07:c5:78:73:3c:cd:8d:f7:a5: ff:83:03:8f:a5:82:8b:f3:8e:be:21:eb:e7:9f:fb: 11:85:27:e8:6d:c0:8c:d8:c6:68:95:97:c4:6b:07: 09:45:24:f8:38:c8:73:fb:91:ea:ee:14:c4:0e:f4: c1:d2:17:24:51:37:6c:2d:80:96:e5:01:79:4c:62: 64:9e:2e:a4:4d:49:16:46:23:b4:e9:6e:64:72:99: 30:53:8f:95:5e:bd:1a:66:84:c7:1e:78:71:df:bb: 9f:41:e6:40:2d:83:c3:42:df:66:da:14:dc:70:95: 7b:8b:21:d2:cc:54:81:1d:46:0d:25:c7:ce:a8:85: 9a:25:05:8c:0b:57:9c:cc:0d:8a:08:b2:23:32:b7: f2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:14:FB:EF:40:A1:BB:DB:F9:38:E3:FD:74:79:F4:73:58:4B:76:C5 X509v3 Authority Key Identifier: keyid:6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:06:58:55:1a:77:e8:1a:85:22:d6:32:95:8e:f1:1d:49:ab: 68:ee:5d:b5:b2:f6:58:25:af:e4:af:e6:7b:ca:0d:c5:80:e5: 52:24:fa:e5:bf:27:a9:05:e3:e0:16:5e:4d:f2:63:8c:37:b3: c7:c6:77:ba:0c:0a:01:ad:fc:ba:f9:0a:5d:2f:c3:26:f3:79: eb:27:ad:a3:eb:e7:41:fe:5a:4a:81:58:f1:eb:9a:52:10:86: 0e:1d:8b:51:bf:20:8f:5b:3d:8e:e7:9f:a7:df:36:e7:57:2e: af:01:78:df:0e:c8:de:9c:ef:b4:80:9e:26:7c:a0:38:3a:25: 2a:4a:9c:3c:08:20:5a:ae:c0:e1:c5:6c:bf:aa:02:75:fe:ac: 29:0f:6f:71:88:47:37:84:a2:ab:ab:0d:46:0b:48:53:8e:b0: 49:74:d0:8d:8f:8b:d1:d4:28:31:e0:a3:98:95:04:32:7d:ee: 98:38:7f:f3:2f:22:1e:14:c0:4b:47:9a:58:41:47:69:05:6b: dc:28:8b:c2:08:44:54:ba:33:3b:6b:9b:4f:e4:25:dc:ac:e0: dc:da:27:2c:99:e8:9a:44:3c:d0:a6:4f:8a:51:c5:7c:e7:ff: 5f:76:48:20:b6:c7:c5:fd:a9:f8:36:05:21:47:2f:24:54:27: f5:b6:25:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpFYvp/WRuPtBjildjSGmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYTQ4ZTk2MTk3NDI2ZTRjNWVlYjQyM2UwZmQ5YzJlOTUy YzQxNzcwHhcNMjUxMjIxMTYwMDQ3WhcNMjUxMjIyMTYwMDQ3WjAzMTEwLwYDVQQD EyhlNTE0ZmJlZjQwYTFiYmRiZjkzOGUzZmQ3NDc5ZjQ3MzU4NGI3NmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2yh9R+F974y9fLgykmwAW5IhHNZ Gg3E0MwerJa93OVmASWhd+4dGqYbkyLjuUlzSc8o6bZ7o3idNzGIMw1n13IUeKfw ZO0rhYD5vGjQvS+FanThoJenlXcm63xpm1nicN/qayxm+a4LwpqmMWMHxXhzPM2N 96X/gwOPpYKL846+Ievnn/sRhSfobcCM2MZolZfEawcJRST4OMhz+5Hq7hTEDvTB 0hckUTdsLYCW5QF5TGJkni6kTUkWRiO06W5kcpkwU4+VXr0aZoTHHnhx37ufQeZA LYPDQt9m2hTccJV7iyHSzFSBHUYNJcfOqIWaJQWMC1eczA2KCLIjMrfyWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUU++9Aobvb+Tjj/XR59HNYS3bFMB8GA1UdIwQY MBaAFG+kjpYZdCbkxe60I+D9nC6VLEF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZTT2xobDBKdVRGN3JRajRQMmNMcFVzUVhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84YzViYzctNTVmYS00MDQ0LTg4ZGEt NjgxODVmZGI5MDAzLzEvYjZTT2xobDBKdVRGN3JRajRQMmNMcFVzUVhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC84YzViYzctNTVmYS00MDQ0LTg4ZGEtNjgxODVmZGI5MDAz LzEvYjZTT2xobDBKdVRGN3JRajRQMmNMcFVzUVhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwZYVRp3 6BqFItYylY7xHUmraO5dtbL2WCWv5K/me8oNxYDlUiT65b8nqQXj4BZeTfJjjDez x8Z3ugwKAa38uvkKXS/DJvN56yeto+vnQf5aSoFY8euaUhCGDh2LUb8gj1s9juef p98251curwF43w7I3pzvtICeJnygODolKkqcPAggWq7A4cVsv6oCdf6sKQ9vcYhH N4Siq6sNRgtIU46wSXTQjY+L0dQoMeCjmJUEMn3umDh/8y8iHhTAS0eaWEFHaQVr 3CiLwghEVLozO2ubT+Ql3Kzg3NonLJnomkQ80KZPilHFfOf/X3ZIILbHxf2p+DYF IUcvJFQn9bYlWg== -----END CERTIFICATE-----Generated at Mon Dec 22 01:43:52 2025 by rpki-client