This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft File: 6ySQqKEzr8STmogtt1JsFfiS6Mg.mft (raw, json) Hash identifier: SFwWprn/xK8EhYvBiRW1QuIyQCc+zTNWdwOaFgzD/Qo= Subject key identifier: DB:06:21:42:2E:7C:A7:E1:FD:34:E8:91:DC:F0:62:AE:EA:C1:4C:E3 Authority key identifier: EB:24:90:A8:A1:33:AF:C4:93:9A:88:2D:B7:52:6C:15:F8:92:E8:C8 Certificate issuer: /CN=eb2490a8a133afc4939a882db7526c15f892e8c8 Certificate serial: 019B62793BB0A77733882D47DBAF64680599 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft Manifest number: 179D Signing time: Sun 28 Dec 2025 01:01:10 +0000 Manifest this update: Sun 28 Dec 2025 01:01:10 +0000 Manifest next update: Mon 29 Dec 2025 01:01:10 +0000 Files and hashes: 1: 6ySQqKEzr8STmogtt1JsFfiS6Mg.crl (hash: GuK90+ZPwYjH0VJbnvRhj9LUXjwOJgX+rOVxhPWWMn0=) 2: dp2EkQj5_zKrlsEr5C_rrbMhRyA.roa (hash: mX2VEnqBHs2wq24qAd7nrxxeH5xEJp3U/9aLReWzccA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:79:3b:b0:a7:77:33:88:2d:47:db:af:64:68:05:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb2490a8a133afc4939a882db7526c15f892e8c8 Validity Not Before: Dec 28 01:01:10 2025 GMT Not After : Dec 29 01:01:10 2025 GMT Subject: CN=db0621422e7ca7e1fd34e891dcf062aeeac14ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:96:01:23:9a:4c:ad:b0:3f:8c:87:10:0c: c5:e3:db:bd:24:45:7b:fc:d6:98:74:00:05:3b:c0: bb:d8:0a:7f:9d:b1:1b:07:f4:e0:eb:e0:3c:57:81: e3:e5:39:69:77:59:17:7e:4d:79:cf:ea:9c:ed:46: 1e:a7:a5:1e:6c:0e:04:c2:83:71:84:9a:f3:fd:5c: 3e:ea:79:8a:95:da:c3:5f:d6:6e:d7:00:cf:82:cb: bf:87:71:a0:92:7c:00:6e:5b:c2:8b:3a:26:d2:1c: 3b:22:97:c0:f4:cf:89:da:01:8f:b4:0e:c7:17:b8: 9c:41:b6:1e:bc:3b:d0:80:27:06:62:e0:8f:1f:94: 13:29:68:31:cf:d2:88:96:ee:ea:3f:b8:9c:2d:84: cf:7f:9b:90:cb:68:9b:a0:cc:45:fc:b6:df:a9:04: 39:a7:2d:4c:aa:f6:b1:cd:7e:73:c4:60:84:79:d8: b5:db:55:2f:dd:b8:49:bd:bb:ec:0c:d1:be:84:00: 25:c7:52:77:9b:5a:c8:2c:c4:fb:6a:ea:2d:32:d8: 10:fc:d7:d0:41:c3:77:cf:70:bf:d7:87:2a:24:e7: c9:ee:7e:2b:f1:46:06:10:14:19:f6:da:1e:06:fe: f0:3c:ac:a8:6c:78:5c:20:10:36:5d:d1:c3:ee:c5: 3f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:06:21:42:2E:7C:A7:E1:FD:34:E8:91:DC:F0:62:AE:EA:C1:4C:E3 X509v3 Authority Key Identifier: keyid:EB:24:90:A8:A1:33:AF:C4:93:9A:88:2D:B7:52:6C:15:F8:92:E8:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f8:91:62:6f:2e:76:a2:02:8a:24:1e:cb:dd:40:dc:26:06: f4:cc:a3:f2:34:a9:d8:da:9f:64:a4:e9:3a:79:f2:90:7a:8b: 95:b5:24:7d:75:2e:37:4a:6f:31:97:42:1e:be:06:d5:be:a5: 34:07:7d:43:98:42:3b:ad:27:7b:7a:7c:a5:a7:cd:6c:7c:92: 66:c8:5f:31:6a:fa:d2:67:1d:c3:13:21:e3:a8:64:89:e9:27: df:8d:0f:b7:d6:e4:a7:bb:f5:85:b5:9a:6f:c5:53:8d:96:55: 07:a9:5c:b8:46:3b:c4:a5:7b:05:a9:91:ae:64:bc:8b:5d:3e: 7d:c0:5a:7f:bb:f5:b0:f6:7a:dc:87:12:b5:93:0e:af:29:f4: 7c:e8:e5:d8:63:bb:53:01:68:1c:10:a7:2f:57:08:16:7f:a3: 61:64:59:8d:ee:d2:34:6a:a3:f4:1c:75:08:1b:2e:9d:34:9d: 85:bc:65:25:4c:85:a5:be:31:57:7d:a1:84:46:76:a6:77:a0: d0:77:91:b9:f8:69:1d:a8:37:17:e7:b7:59:39:d3:bb:6e:f2: a4:db:8e:c3:5a:1d:0b:63:09:9b:68:05:bf:3f:dc:bf:9b:6f: 67:c9:f7:27:2d:9a:7d:5c:5e:bb:53:9c:11:2c:e4:3e:7e:ce: 51:d3:96:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtieTuwp3cziC1H269kaAWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMjQ5MGE4YTEzM2FmYzQ5MzlhODgyZGI3NTI2YzE1Zjg5 MmU4YzgwHhcNMjUxMjI4MDEwMTEwWhcNMjUxMjI5MDEwMTEwWjAzMTEwLwYDVQQD EyhkYjA2MjE0MjJlN2NhN2UxZmQzNGU4OTFkY2YwNjJhZWVhYzE0Y2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslyWASOaTK2wP4yHEAzF49u9JEV7 /NaYdAAFO8C72Ap/nbEbB/Tg6+A8V4Hj5Tlpd1kXfk15z+qc7UYep6UebA4EwoNx hJrz/Vw+6nmKldrDX9Zu1wDPgsu/h3GgknwAblvCizom0hw7IpfA9M+J2gGPtA7H F7icQbYevDvQgCcGYuCPH5QTKWgxz9KIlu7qP7icLYTPf5uQy2iboMxF/LbfqQQ5 py1MqvaxzX5zxGCEedi121Uv3bhJvbvsDNG+hAAlx1J3m1rILMT7auotMtgQ/NfQ QcN3z3C/14cqJOfJ7n4r8UYGEBQZ9toeBv7wPKyobHhcIBA2XdHD7sU/fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsGIUIufKfh/TTokdzwYq7qwUzjMB8GA1UdIwQY MBaAFOskkKihM6/Ek5qILbdSbBX4kujIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnlTUXFLRXpyOFNUbW9ndHQxSnNGZmlTNk1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83NDU5MmUtYWE4MC00MDBiLWI0Nzkt MzljNTUwZjBhNGU0LzEvNnlTUXFLRXpyOFNUbW9ndHQxSnNGZmlTNk1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83NDU5MmUtYWE4MC00MDBiLWI0NzktMzljNTUwZjBhNGU0 LzEvNnlTUXFLRXpyOFNUbW9ndHQxSnNGZmlTNk1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQviRYm8u dqICiiQey91A3CYG9Myj8jSp2NqfZKTpOnnykHqLlbUkfXUuN0pvMZdCHr4G1b6l NAd9Q5hCO60ne3p8pafNbHySZshfMWr60mcdwxMh46hkiekn340Pt9bkp7v1hbWa b8VTjZZVB6lcuEY7xKV7BamRrmS8i10+fcBaf7v1sPZ63IcStZMOryn0fOjl2GO7 UwFoHBCnL1cIFn+jYWRZje7SNGqj9Bx1CBsunTSdhbxlJUyFpb4xV32hhEZ2pneg 0HeRufhpHag3F+e3WTnTu27ypNuOw1odC2MJm2gFvz/cv5tvZ8n3Jy2afVxeu1Oc ESzkPn7OUdOWbQ== -----END CERTIFICATE-----Generated at Sun Dec 28 07:29:40 2025 by rpki-client