This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft File: 6y7LDykkUqe-lOaWD3znIBa9GAU.mft (raw, json) Hash identifier: G9NlsXCAobBTJOUnXij3np6q7w2b5emxHQi/azfbJy0= Subject key identifier: C7:E5:49:4D:6D:17:AF:3D:BD:9C:DF:8A:31:34:00:08:8E:78:23:FF Authority key identifier: EB:2E:CB:0F:29:24:52:A7:BE:94:E6:96:0F:7C:E7:20:16:BD:18:05 Certificate issuer: /CN=eb2ecb0f292452a7be94e6960f7ce72016bd1805 Certificate serial: 019B4438A12D1B8E09C7A4B591F16E839A7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft Manifest number: 0538 Signing time: Mon 22 Dec 2025 04:02:00 +0000 Manifest this update: Mon 22 Dec 2025 04:02:00 +0000 Manifest next update: Tue 23 Dec 2025 04:02:00 +0000 Files and hashes: 1: 6y7LDykkUqe-lOaWD3znIBa9GAU.crl (hash: iomgc7/5brAwQB0qdgVHzIlCrq1VWapCapjAokRh5Yo=) 2: Aa0efsIBSZxQ_4T_iZQY03PtXFg.roa (hash: OuiSoz74OGRgJiBoShoGAfl/wamUvwrfazeBnaRaH+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft rsync://rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:a1:2d:1b:8e:09:c7:a4:b5:91:f1:6e:83:9a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb2ecb0f292452a7be94e6960f7ce72016bd1805 Validity Not Before: Dec 22 04:02:00 2025 GMT Not After : Dec 23 04:02:00 2025 GMT Subject: CN=c7e5494d6d17af3dbd9cdf8a313400088e7823ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:64:2b:53:0b:66:b5:dd:8d:b8:0e:57:4f: 22:a7:0c:5b:ce:97:dc:a6:19:41:74:2a:8e:6b:7e: d5:c2:df:3e:7f:ba:be:d3:9d:e2:b6:cd:ca:1b:0b: 2b:48:85:5a:9c:9c:62:b1:c9:f0:e6:33:73:51:25: ff:93:0d:74:c5:21:b0:83:2f:60:b0:8f:54:84:f6: b7:61:6c:b6:d1:7d:35:6d:20:fa:df:6e:23:dc:23: 31:41:57:9f:b9:58:30:78:6b:14:a5:bd:cb:8a:21: f2:d8:dc:14:0c:2e:0f:93:80:41:6a:36:35:60:57: 30:c2:7d:e8:3c:f1:1d:14:d2:e7:2c:5d:16:dd:d6: 1f:23:b9:c4:88:d4:83:74:d2:79:67:de:39:b5:b1: 2c:82:74:a8:38:89:25:f6:fb:40:a4:52:b4:33:e8: 68:bc:37:43:32:3c:27:9a:7a:56:ca:9b:2e:d0:d3: 9f:9d:02:50:a1:80:75:cb:28:1a:22:3b:e0:b5:27: 4e:bf:84:14:36:79:63:08:23:0b:29:ac:50:4f:3e: 1c:90:bb:1c:f3:30:78:2f:5d:10:85:ad:e0:10:b1: 2b:b7:bd:d0:71:b2:3a:62:8b:2e:89:b3:80:7d:f4: 54:02:dc:15:7f:3e:31:60:7f:a1:b2:13:c4:15:10: a8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E5:49:4D:6D:17:AF:3D:BD:9C:DF:8A:31:34:00:08:8E:78:23:FF X509v3 Authority Key Identifier: keyid:EB:2E:CB:0F:29:24:52:A7:BE:94:E6:96:0F:7C:E7:20:16:BD:18:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:56:9a:c5:79:e9:41:b7:cb:fe:15:5e:d1:8b:31:c5:b2:14: fb:43:88:d9:15:a6:64:64:d3:67:fe:be:a7:21:9d:37:be:df: 92:78:9f:07:6e:5e:42:2a:16:38:9f:92:99:26:5c:c9:26:42: 24:21:5e:2c:9a:41:86:ac:aa:ce:e4:60:d3:86:31:9f:94:88: 26:6f:29:98:6a:36:2d:05:32:4d:ad:d5:6d:c8:fd:8b:99:3a: 9a:62:21:3d:a9:21:80:ba:32:bc:60:99:fa:84:5f:bf:f6:f6: b2:74:bd:57:06:3e:a4:83:db:7b:70:69:e2:61:18:03:f0:c8: 0a:f1:df:b2:09:1d:35:9c:36:85:8f:b1:d7:be:95:20:a1:53: 21:88:a2:f0:94:8a:64:d7:90:ea:c1:76:c7:6e:ad:37:22:07: 99:52:80:29:23:8e:e9:33:38:ff:84:6f:b6:d3:d6:1b:f8:df: a8:c0:e9:c9:39:8e:db:5d:42:58:5c:75:5f:13:b0:bd:25:36: 27:3e:89:d7:5d:e1:30:53:cd:60:fd:c3:15:9e:8e:a6:3b:e9: ff:2f:34:f3:41:e3:d0:dd:ac:b3:eb:f8:5f:bb:07:a0:b1:79: 22:ff:9e:24:e6:03:66:dd:ff:a4:5d:da:b5:e7:16:03:98:e2: c2:fe:ba:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOKEtG44Jx6S1kfFug5p8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMmVjYjBmMjkyNDUyYTdiZTk0ZTY5NjBmN2NlNzIwMTZi ZDE4MDUwHhcNMjUxMjIyMDQwMjAwWhcNMjUxMjIzMDQwMjAwWjAzMTEwLwYDVQQD EyhjN2U1NDk0ZDZkMTdhZjNkYmQ5Y2RmOGEzMTM0MDAwODhlNzgyM2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLdkK1MLZrXdjbgOV08ipwxbzpfc phlBdCqOa37Vwt8+f7q+053its3KGwsrSIVanJxiscnw5jNzUSX/kw10xSGwgy9g sI9UhPa3YWy20X01bSD6324j3CMxQVefuVgweGsUpb3LiiHy2NwUDC4Pk4BBajY1 YFcwwn3oPPEdFNLnLF0W3dYfI7nEiNSDdNJ5Z945tbEsgnSoOIkl9vtApFK0M+ho vDdDMjwnmnpWypsu0NOfnQJQoYB1yygaIjvgtSdOv4QUNnljCCMLKaxQTz4ckLsc 8zB4L10Qha3gELErt73QcbI6YosuibOAffRUAtwVfz4xYH+hshPEFRCoIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMflSU1tF689vZzfijE0AAiOeCP/MB8GA1UdIwQY MBaAFOsuyw8pJFKnvpTmlg985yAWvRgFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnk3TER5a2tVcWUtbE9hV0Qzem5JQmE5R0FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81NDhlZjYtZTcyZS00NTAzLThhZjkt YjU1ZDg4ZjdjOWRlLzEvNnk3TER5a2tVcWUtbE9hV0Qzem5JQmE5R0FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81NDhlZjYtZTcyZS00NTAzLThhZjktYjU1ZDg4ZjdjOWRl LzEvNnk3TER5a2tVcWUtbE9hV0Qzem5JQmE5R0FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVaaxXnp QbfL/hVe0YsxxbIU+0OI2RWmZGTTZ/6+pyGdN77fknifB25eQioWOJ+SmSZcySZC JCFeLJpBhqyqzuRg04Yxn5SIJm8pmGo2LQUyTa3Vbcj9i5k6mmIhPakhgLoyvGCZ +oRfv/b2snS9VwY+pIPbe3Bp4mEYA/DICvHfsgkdNZw2hY+x176VIKFTIYii8JSK ZNeQ6sF2x26tNyIHmVKAKSOO6TM4/4RvttPWG/jfqMDpyTmO211CWFx1XxOwvSU2 Jz6J113hMFPNYP3DFZ6Opjvp/y8080Hj0N2ss+v4X7sHoLF5Iv+eJOYDZt3/pF3a tecWA5jiwv669Q== -----END CERTIFICATE-----Generated at Mon Dec 22 14:07:10 2025 by rpki-client