This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json) Hash identifier: mulHwJCdS/tUfl7xFpY+l7LtKgsCiU6XXlpr+KA1Qy0= Subject key identifier: 43:7D:5A:53:D5:41:AF:FF:ED:3D:D2:0F:AE:B0:F4:4D:3F:71:CD:AE Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33 Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533 Certificate serial: 019B4DE13B41C44CF56F5EB0590CB9F7AF30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 01:02:44 +0000 Manifest this update: Wed 24 Dec 2025 01:02:44 +0000 Manifest next update: Thu 25 Dec 2025 01:02:44 +0000 Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: cs3XAi55KRwy9cgL6eXKPruXfM2UxX6slvhFvm6L6L8=) 2: r6T3XlH0NydhUiVntY08YEEt0HY.roa (hash: j+28xx5Rq8KrtlCf807KmCTOzzUVWhkp01bXOIcVWSo=) 3: wPTagVR3pNusa3J3LbaZykmYrdM.roa (hash: k0uAisbBEgTj7/x2tEyMYhIzPLODPGtJvKxV+pOGuVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e1:3b:41:c4:4c:f5:6f:5e:b0:59:0c:b9:f7:af:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533 Validity Not Before: Dec 24 01:02:44 2025 GMT Not After : Dec 25 01:02:44 2025 GMT Subject: CN=437d5a53d541afffed3dd20faeb0f44d3f71cdae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:d1:d3:22:cb:6e:17:07:cd:7d:fb:b4:16: 43:85:5c:3a:56:f0:93:1c:a8:89:0a:70:cc:46:f8: b7:be:9b:64:9c:95:e5:41:02:4e:5a:f4:0a:90:f6: 8f:d4:4f:1f:a0:60:1e:c4:b1:19:f2:a2:7f:45:ca: b6:0f:55:38:fb:05:de:0b:b3:00:c9:7f:df:c0:5d: 1c:64:0c:f6:d6:49:a7:96:cb:0b:45:d7:e8:ec:34: 22:72:bc:10:15:1f:34:bf:72:d0:1c:c0:eb:dc:3b: 17:40:fa:6f:3a:c1:25:bf:e7:67:14:e6:db:40:3c: b0:16:b0:fc:1e:a8:90:6c:37:fa:04:e0:b3:7c:e6: eb:97:ee:99:93:d9:0b:f0:02:ab:05:8c:6f:9b:2b: be:36:e2:88:d2:ba:a2:4a:f3:02:9f:f7:81:f1:52: c3:f1:51:cc:83:26:b1:79:85:f4:2f:cb:64:46:8c: 37:61:7c:8d:ae:f0:7f:fa:90:37:35:49:72:96:3a: ce:cc:ff:f1:29:69:89:4a:17:c2:ac:75:36:d6:91: b8:19:1d:d6:91:02:26:0a:b5:9c:84:4c:dd:47:c9: cf:3d:0e:83:53:fe:ed:90:90:99:5e:56:78:ef:59: c7:8e:41:8f:f1:e8:9c:c9:6d:28:1f:2d:d9:3f:48: bc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7D:5A:53:D5:41:AF:FF:ED:3D:D2:0F:AE:B0:F4:4D:3F:71:CD:AE X509v3 Authority Key Identifier: keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:cf:1b:a2:cf:3a:42:7e:84:b2:a3:60:e4:21:f8:ef:47:b8: 64:86:fd:d2:28:8b:e6:74:41:30:4b:af:7c:9c:3b:56:a7:de: 8d:7a:d3:be:e2:3d:2b:e9:0e:59:f3:f3:d2:5e:90:68:dd:24: 03:a7:51:26:b3:8f:dd:c0:4f:4b:a0:49:11:c4:0d:83:c1:69: 79:84:cf:71:03:43:45:3d:eb:dc:2b:0f:6c:d9:7e:54:10:35: 5f:fc:f1:30:a6:2a:8c:35:9e:ff:2a:49:56:96:6d:d9:1d:3a: 82:9d:17:82:8e:8b:58:e8:33:89:b3:22:2c:51:4f:be:8e:cd: da:c6:8b:6d:85:6e:e3:41:43:2d:6e:ce:91:26:cf:23:a5:d9: ec:3e:0d:db:14:2a:e2:d0:57:b8:4e:c6:56:0a:18:87:e7:5e: 34:d2:26:b0:d0:a3:0a:59:be:b0:07:96:f8:27:99:c9:20:4c: fe:d9:96:92:47:9b:3f:2c:c1:72:b0:ef:a3:b3:73:fa:65:0a: 9c:48:0d:a4:46:c2:62:e8:54:94:6e:f0:7b:ae:8f:8e:06:83: 3c:3a:7d:3a:bf:18:4f:f6:e8:ef:8f:ac:65:9a:65:a4:47:ae: d0:4f:63:bb:e0:b5:d6:83:b7:4c:24:0c:4e:25:40:58:c7:48: ee:6a:26:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4TtBxEz1b16wWQy5968wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzU5MmYxZWI0MWQ2Yzg5M2NkMGRkNzJiNjNmYzM0ZWU1 NTM1MzMwHhcNMjUxMjI0MDEwMjQ0WhcNMjUxMjI1MDEwMjQ0WjAzMTEwLwYDVQQD Eyg0MzdkNWE1M2Q1NDFhZmZmZWQzZGQyMGZhZWIwZjQ0ZDNmNzFjZGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT/R0yLLbhcHzX37tBZDhVw6VvCT HKiJCnDMRvi3vptknJXlQQJOWvQKkPaP1E8foGAexLEZ8qJ/Rcq2D1U4+wXeC7MA yX/fwF0cZAz21kmnlssLRdfo7DQicrwQFR80v3LQHMDr3DsXQPpvOsElv+dnFObb QDywFrD8HqiQbDf6BOCzfObrl+6Zk9kL8AKrBYxvmyu+NuKI0rqiSvMCn/eB8VLD 8VHMgyaxeYX0L8tkRow3YXyNrvB/+pA3NUlyljrOzP/xKWmJShfCrHU21pG4GR3W kQImCrWchEzdR8nPPQ6DU/7tkJCZXlZ471nHjkGP8eicyW0oHy3ZP0i8IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEN9WlPVQa//7T3SD66w9E0/cc2uMB8GA1UdIwQY MBaAFOl1kvHrQdbIk80N1ytj/DTuVTUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80MjIxN2UtZWFkMC00NmJlLThhZDAt MDVmOTBhZDI0ZjNlLzEvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80MjIxN2UtZWFkMC00NmJlLThhZDAtMDVmOTBhZDI0ZjNl LzEvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOc8bos86 Qn6EsqNg5CH470e4ZIb90iiL5nRBMEuvfJw7VqfejXrTvuI9K+kOWfPz0l6QaN0k A6dRJrOP3cBPS6BJEcQNg8FpeYTPcQNDRT3r3CsPbNl+VBA1X/zxMKYqjDWe/ypJ VpZt2R06gp0Xgo6LWOgzibMiLFFPvo7N2saLbYVu40FDLW7OkSbPI6XZ7D4N2xQq 4tBXuE7GVgoYh+deNNImsNCjClm+sAeW+CeZySBM/tmWkkebPyzBcrDvo7Nz+mUK nEgNpEbCYuhUlG7we66PjgaDPDp9Or8YT/bo74+sZZplpEeu0E9ju+C11oO3TCQM TiVAWMdI7momvg== -----END CERTIFICATE-----Generated at Wed Dec 24 10:30:51 2025 by rpki-client