This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft File: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft (raw, json) Hash identifier: WcTK42DwYQx6IdtzflyU8vabUWHwrYcPfSzZ8YFLhkg= Subject key identifier: 65:1F:0F:14:CA:24:9B:AA:D2:2D:65:DB:3A:71:27:9E:BA:C5:43:9E Authority key identifier: E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72 Certificate issuer: /CN=e8d672fa60aee4c273a11507f49b584dc552c472 Certificate serial: 019B755B51CFDC5C2D9F673BA488ADC13B7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft Manifest number: 06EE Signing time: Wed 31 Dec 2025 17:01:17 +0000 Manifest this update: Wed 31 Dec 2025 17:01:17 +0000 Manifest next update: Thu 01 Jan 2026 17:01:17 +0000 Files and hashes: 1: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl (hash: vyK0oA74a6qUGDhFrysfFQUPhb/03Dh7UwksPyoM+ng=) 2: CRKNGf_xuZYF0kNapyVmFyPmlEw.roa (hash: No5hma8g70yPMrFd8Y5GeYsaZ5JGY9aPRg048GjHko8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:5b:51:cf:dc:5c:2d:9f:67:3b:a4:88:ad:c1:3b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8d672fa60aee4c273a11507f49b584dc552c472 Validity Not Before: Dec 31 17:01:17 2025 GMT Not After : Jan 1 17:01:17 2026 GMT Subject: CN=651f0f14ca249baad22d65db3a71279ebac5439e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f3:17:3c:90:33:79:4e:cc:9f:30:b5:1f:d7: dd:92:f3:3c:b1:9b:1b:f6:32:68:34:c9:76:7b:23: d2:e8:49:b9:46:e9:19:a9:6c:50:fa:b3:bf:4f:7b: 5c:73:52:af:2e:12:18:fc:ec:e0:f3:71:f9:b6:de: 0b:dc:e3:09:16:1b:32:54:b6:7d:30:92:cf:54:c6: f8:8d:a0:5f:fb:f9:cb:fe:11:1d:34:c3:26:f9:56: c9:a1:9e:93:95:8d:1e:35:82:c6:82:d0:8d:99:c8: 83:ff:28:8a:cf:e9:31:af:f7:7a:7c:26:c3:aa:9c: ba:fc:c6:0b:ce:a5:ed:04:e9:11:71:13:83:df:8c: a0:67:0f:87:5a:c0:76:de:41:c5:cd:53:8d:c9:01: 40:61:2a:4c:96:9d:74:f4:aa:55:99:7c:00:cd:5e: 28:1d:19:4b:d5:56:d6:10:98:39:74:58:40:71:68: a8:96:1b:9f:d7:39:35:b5:bb:a8:93:14:47:ea:59: 14:c0:03:3a:6c:70:84:33:73:e9:f0:86:f8:b8:d8: 4f:c1:b8:6a:7e:54:98:29:91:b0:17:af:9d:56:57: 95:b8:9a:2b:4e:fc:a0:9e:55:d9:33:de:01:2c:9e: 3a:ec:ee:71:70:7e:0c:63:81:a1:8f:ce:a4:3a:9a: 79:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1F:0F:14:CA:24:9B:AA:D2:2D:65:DB:3A:71:27:9E:BA:C5:43:9E X509v3 Authority Key Identifier: keyid:E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:04:a1:f9:32:e0:d5:3f:7f:4c:8a:8f:93:9c:19:a1:a2:77: 67:19:cb:fe:4e:cf:0f:ec:9b:f4:b3:d3:ea:52:39:9e:f3:9f: 45:bf:7f:24:76:4a:21:5a:30:aa:db:3a:89:ec:6e:7f:ad:19: 09:37:62:f7:ea:81:08:63:a8:e5:ff:30:ab:88:bc:a5:a8:96: 3a:0b:80:8f:c5:9b:30:d7:52:19:23:c2:3a:ce:9e:d5:48:95: f0:73:de:d4:65:1b:40:01:d3:3b:c6:84:62:37:90:14:ad:12: a3:9f:f7:ee:f8:ee:d3:06:89:cf:65:b6:0d:5f:eb:63:c2:fa: 1b:27:2a:0a:4c:60:8d:2b:b7:c5:23:25:dd:dc:e8:e4:5a:33: fa:af:68:1e:80:78:35:0a:84:28:86:94:2e:53:f1:b6:3c:b2: 65:7a:4c:e5:84:16:cd:78:fc:cc:06:1a:f8:10:41:77:27:02: 83:a9:a6:0f:cf:2d:42:bf:1c:39:b5:c4:b9:67:3c:a3:61:21: d0:3a:43:c7:59:79:d7:4f:96:57:34:e8:f3:30:3a:8a:7b:d4: 0e:97:f3:33:8d:01:f9:f5:27:40:dd:e1:36:6a:54:c1:fe:d2: f1:b3:53:c5:ed:be:91:b4:bd:e7:78:fd:2d:60:5b:4f:c2:c9: 4b:a2:4b:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1W1HP3Fwtn2c7pIitwTt9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZDY3MmZhNjBhZWU0YzI3M2ExMTUwN2Y0OWI1ODRkYzU1 MmM0NzIwHhcNMjUxMjMxMTcwMTE3WhcNMjYwMTAxMTcwMTE3WjAzMTEwLwYDVQQD Eyg2NTFmMGYxNGNhMjQ5YmFhZDIyZDY1ZGIzYTcxMjc5ZWJhYzU0MzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPMXPJAzeU7MnzC1H9fdkvM8sZsb 9jJoNMl2eyPS6Em5RukZqWxQ+rO/T3tcc1KvLhIY/Ozg83H5tt4L3OMJFhsyVLZ9 MJLPVMb4jaBf+/nL/hEdNMMm+VbJoZ6TlY0eNYLGgtCNmciD/yiKz+kxr/d6fCbD qpy6/MYLzqXtBOkRcROD34ygZw+HWsB23kHFzVONyQFAYSpMlp109KpVmXwAzV4o HRlL1VbWEJg5dFhAcWiolhuf1zk1tbuokxRH6lkUwAM6bHCEM3Pp8Ib4uNhPwbhq flSYKZGwF6+dVleVuJorTvygnlXZM94BLJ467O5xcH4MY4Ghj86kOpp5xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUfDxTKJJuq0i1l2zpxJ566xUOeMB8GA1UdIwQY MBaAFOjWcvpgruTCc6EVB/SbWE3FUsRyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk5aeS1tQ3U1TUp6b1JVSDlKdFlUY1ZTeEhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNDE2MGQtNzcyYi00NTY3LWE1NGUt NzUxYWM2ODA3YjA0LzEvNk5aeS1tQ3U1TUp6b1JVSDlKdFlUY1ZTeEhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jNDE2MGQtNzcyYi00NTY3LWE1NGUtNzUxYWM2ODA3YjA0 LzEvNk5aeS1tQ3U1TUp6b1JVSDlKdFlUY1ZTeEhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2wSh+TLg 1T9/TIqPk5wZoaJ3ZxnL/k7PD+yb9LPT6lI5nvOfRb9/JHZKIVowqts6iexuf60Z CTdi9+qBCGOo5f8wq4i8paiWOguAj8WbMNdSGSPCOs6e1UiV8HPe1GUbQAHTO8aE YjeQFK0So5/37vju0waJz2W2DV/rY8L6GycqCkxgjSu3xSMl3dzo5Foz+q9oHoB4 NQqEKIaULlPxtjyyZXpM5YQWzXj8zAYa+BBBdycCg6mmD88tQr8cObXEuWc8o2Eh 0DpDx1l510+WVzTo8zA6invUDpfzM40B+fUnQN3hNmpUwf7S8bNTxe2+kbS953j9 LWBbT8LJS6JLcw== -----END CERTIFICATE-----Generated at Wed Dec 31 19:37:21 2025 by rpki-client