This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft File: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft (raw, json) Hash identifier: SodraSlagwOHi/bSn3HA/Aq2BwiHSEmzSezudK1kWxw= Subject key identifier: EF:F8:5B:68:2B:F7:E0:21:64:4A:24:D0:47:7D:37:3C:E0:B9:7D:B6 Authority key identifier: E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72 Certificate issuer: /CN=e8d672fa60aee4c273a11507f49b584dc552c472 Certificate serial: 019B3D5A2DC2C4BE23F911D3001F123A282E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft Manifest number: 06D1 Signing time: Sat 20 Dec 2025 20:01:18 +0000 Manifest this update: Sat 20 Dec 2025 20:01:18 +0000 Manifest next update: Sun 21 Dec 2025 20:01:18 +0000 Files and hashes: 1: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl (hash: hyhPmvmsZmFja9vrUzDioDVGsKIWbrxki1Ke/h75W3c=) 2: CRKNGf_xuZYF0kNapyVmFyPmlEw.roa (hash: No5hma8g70yPMrFd8Y5GeYsaZ5JGY9aPRg048GjHko8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:2d:c2:c4:be:23:f9:11:d3:00:1f:12:3a:28:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8d672fa60aee4c273a11507f49b584dc552c472 Validity Not Before: Dec 20 20:01:18 2025 GMT Not After : Dec 21 20:01:18 2025 GMT Subject: CN=eff85b682bf7e021644a24d0477d373ce0b97db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a8:9a:25:1a:3a:ee:46:e6:16:8b:3b:f2:1d: 0b:42:43:92:c9:36:a5:44:ea:90:fe:5b:e9:93:6c: 8f:57:0e:b0:01:8b:93:5a:6d:1b:78:3c:ea:50:65: bb:74:69:8e:9c:87:b6:19:83:51:69:39:56:32:ac: 80:64:a3:00:42:74:77:a7:00:7a:5c:51:fd:50:1e: 20:ea:db:89:86:b8:16:0f:02:57:45:a2:59:36:d4: 9d:aa:d1:af:7a:83:4c:f6:bc:ce:15:1b:70:82:e6: 24:c9:76:54:22:4e:1f:4f:2d:4b:3b:5d:ff:10:4c: f0:d9:ce:d6:4c:ca:34:7f:3b:a9:2a:80:92:18:d5: b1:c4:e3:9c:4f:1c:e7:ef:91:86:54:7b:ce:ef:64: 48:27:d4:79:1f:60:c9:d0:74:c9:81:87:32:df:d5: a6:c3:64:01:83:74:37:9a:6f:0a:ea:16:c8:82:9d: 60:ee:38:cd:c2:cd:4b:68:8b:f2:18:63:d9:3e:d9: a8:de:3a:11:08:07:67:5b:75:ed:99:f0:40:4e:72: f7:7f:96:a4:30:f4:21:68:b6:53:29:73:0b:d8:66: 4c:e8:d0:c7:7b:0e:24:9e:e3:81:8d:55:ca:fd:07: b4:24:83:37:70:ae:90:3b:84:6c:b5:14:3f:fb:45: ef:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F8:5B:68:2B:F7:E0:21:64:4A:24:D0:47:7D:37:3C:E0:B9:7D:B6 X509v3 Authority Key Identifier: keyid:E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:25:4f:38:b4:af:1d:4b:6b:aa:f5:17:77:32:0c:b2:69:a1: 72:b4:fd:24:71:26:1a:cf:09:90:ad:21:ba:e9:aa:2a:50:20: 54:08:d3:52:14:22:3a:70:ed:de:18:1f:df:ed:ec:23:27:cf: 52:a3:58:b8:83:9d:20:9c:13:b2:0a:cb:45:46:a8:af:39:67: 28:a6:9a:5a:83:e8:c0:5e:f3:6b:f0:5b:9b:89:33:41:37:56: 26:4e:5c:2d:03:d4:12:b1:e1:4e:e4:b3:e9:d5:50:75:f4:1e: 73:56:bc:b7:2e:83:19:2a:c0:df:b0:d2:f3:6a:5e:14:4d:ca: 27:80:33:b0:bd:d6:0c:52:c5:ac:1d:86:ba:b8:d4:05:f1:a6: 28:2f:48:c1:99:66:40:4e:0b:e6:8f:36:e0:09:8b:72:7c:dd: 77:1d:a2:8f:2d:e3:54:90:c6:6a:89:05:fd:3f:b6:8f:11:5d: e0:a2:4b:5b:e1:64:9f:ac:42:c9:92:03:14:11:0a:98:92:ea: f9:8c:c5:c9:4e:68:ac:fe:08:48:b4:2a:6e:73:5c:ba:ba:b6: 49:74:08:6e:5b:19:c1:ca:06:cd:ac:c9:df:3b:af:87:33:62: 8e:d6:10:d7:4e:d9:98:eb:d8:28:25:92:60:47:aa:dd:d7:93: 52:f0:30:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wi3CxL4j+RHTAB8SOiguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZDY3MmZhNjBhZWU0YzI3M2ExMTUwN2Y0OWI1ODRkYzU1 MmM0NzIwHhcNMjUxMjIwMjAwMTE4WhcNMjUxMjIxMjAwMTE4WjAzMTEwLwYDVQQD EyhlZmY4NWI2ODJiZjdlMDIxNjQ0YTI0ZDA0NzdkMzczY2UwYjk3ZGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqiaJRo67kbmFos78h0LQkOSyTal ROqQ/lvpk2yPVw6wAYuTWm0beDzqUGW7dGmOnIe2GYNRaTlWMqyAZKMAQnR3pwB6 XFH9UB4g6tuJhrgWDwJXRaJZNtSdqtGveoNM9rzOFRtwguYkyXZUIk4fTy1LO13/ EEzw2c7WTMo0fzupKoCSGNWxxOOcTxzn75GGVHvO72RIJ9R5H2DJ0HTJgYcy39Wm w2QBg3Q3mm8K6hbIgp1g7jjNws1LaIvyGGPZPtmo3joRCAdnW3XtmfBATnL3f5ak MPQhaLZTKXML2GZM6NDHew4knuOBjVXK/Qe0JIM3cK6QO4RstRQ/+0XvLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/4W2gr9+AhZEok0Ed9NzzguX22MB8GA1UdIwQY MBaAFOjWcvpgruTCc6EVB/SbWE3FUsRyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk5aeS1tQ3U1TUp6b1JVSDlKdFlUY1ZTeEhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNDE2MGQtNzcyYi00NTY3LWE1NGUt NzUxYWM2ODA3YjA0LzEvNk5aeS1tQ3U1TUp6b1JVSDlKdFlUY1ZTeEhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jNDE2MGQtNzcyYi00NTY3LWE1NGUtNzUxYWM2ODA3YjA0 LzEvNk5aeS1tQ3U1TUp6b1JVSDlKdFlUY1ZTeEhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCVPOLSv HUtrqvUXdzIMsmmhcrT9JHEmGs8JkK0huumqKlAgVAjTUhQiOnDt3hgf3+3sIyfP UqNYuIOdIJwTsgrLRUaorzlnKKaaWoPowF7za/Bbm4kzQTdWJk5cLQPUErHhTuSz 6dVQdfQec1a8ty6DGSrA37DS82peFE3KJ4AzsL3WDFLFrB2GurjUBfGmKC9IwZlm QE4L5o824AmLcnzddx2ijy3jVJDGaokF/T+2jxFd4KJLW+Fkn6xCyZIDFBEKmJLq +YzFyU5orP4ISLQqbnNcurq2SXQIblsZwcoGzazJ3zuvhzNijtYQ107ZmOvYKCWS YEeq3deTUvAwjA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:12:28 2025 by rpki-client