This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft File: 6Oz45OybRCqVN0wqPH54Swdhh8w.mft (raw, json) Hash identifier: jsLHQBrS0VpdjfQaY2d/Wlru+cti4sRUGWsLp4H0oxA= Subject key identifier: B5:BD:8C:DA:B1:D3:36:95:89:EC:F3:78:AE:56:DE:9A:C8:D3:71:27 Authority key identifier: E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC Certificate issuer: /CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc Certificate serial: 019B3CB4C9D6B7E18FBA767B2E8B838A89BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft Manifest number: 1719 Signing time: Sat 20 Dec 2025 17:00:39 +0000 Manifest this update: Sat 20 Dec 2025 17:00:39 +0000 Manifest next update: Sun 21 Dec 2025 17:00:39 +0000 Files and hashes: 1: 1favdYYY_m115fJbPCqnNQTQC-4.roa (hash: JqdrpIAPsvsNkIpUiM7hC8jOVuzgCWUVOGVp30lphlM=) 2: 6Oz45OybRCqVN0wqPH54Swdhh8w.crl (hash: 5+Lk6J4OtIgBU0oERDfL2AfWfDSqGaUqcYQTstkj0P4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:c9:d6:b7:e1:8f:ba:76:7b:2e:8b:83:8a:89:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc Validity Not Before: Dec 20 17:00:39 2025 GMT Not After : Dec 21 17:00:39 2025 GMT Subject: CN=b5bd8cdab1d3369589ecf378ae56de9ac8d37127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:78:45:35:aa:ed:03:99:b7:63:30:9d:38:8d: df:89:c7:59:fd:c5:61:56:c5:f9:ce:b2:4f:5e:43: cf:8f:3e:de:0d:20:a5:0d:92:eb:20:8e:5c:3d:59: d1:9d:03:7d:e5:50:49:2a:51:64:14:bb:20:e6:ab: 81:f0:9e:fe:1c:d6:5d:e3:10:84:59:6b:1b:86:51: d2:31:f9:a5:b8:f6:ac:02:b9:a1:7c:a5:c3:6a:38: d5:0b:5d:e3:7b:3b:e3:82:42:44:a2:6f:86:97:54: 77:9d:f1:ff:e1:78:33:71:84:25:cb:aa:14:4d:26: 48:4a:70:b8:be:44:73:a1:87:f9:4a:a0:a3:31:49: 52:d4:8b:26:dd:1f:9b:51:b9:b7:d7:30:e8:59:2e: ba:b0:82:2a:15:cb:8a:f9:d4:79:b9:b7:50:d7:e6: d9:67:28:53:16:01:6f:fa:23:5c:92:5b:33:33:1d: ae:b9:83:e7:06:bc:87:eb:37:eb:c1:1e:2e:c7:52: 10:d8:a0:a4:ff:fc:8c:3c:e3:37:9f:80:98:09:5c: 86:c4:09:73:56:8a:46:c7:73:5f:9a:69:b5:bd:ad: 60:93:f0:8d:86:07:26:42:8f:db:28:22:e8:ee:33: b5:39:6b:a4:74:11:12:36:ee:4d:0b:59:cb:a5:6d: dc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BD:8C:DA:B1:D3:36:95:89:EC:F3:78:AE:56:DE:9A:C8:D3:71:27 X509v3 Authority Key Identifier: keyid:E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:db:93:d1:8f:5d:12:90:a5:5f:7f:24:12:7b:0c:41:3e:3c: 1c:31:35:37:46:f4:f3:a8:3a:9b:75:19:0a:f1:79:b1:c1:2d: 7b:31:44:f4:f3:5f:81:e3:4c:7e:b7:1c:e7:ca:c1:40:ad:fb: 34:8b:2c:e4:d7:7f:c9:b4:ce:eb:e0:61:52:b5:64:40:49:01: 31:70:6f:9b:56:bd:04:a2:5c:dc:89:c6:fb:8c:44:c1:dc:e5: 90:6d:df:a3:b4:11:74:de:a8:2f:60:7f:f1:1d:e4:f4:c3:53: 7e:29:be:9a:45:a9:78:75:58:d1:77:ee:fc:49:0b:7b:68:f8: 3d:f8:ac:63:ea:b8:9a:aa:fb:d8:33:ac:f6:ca:a9:5e:6a:6c: e8:d4:02:87:73:06:96:f5:e7:22:cc:16:32:4d:ba:2a:41:27: a7:47:0a:eb:c9:d3:2b:24:66:6b:ae:5d:80:bd:b5:71:7a:ac: d8:8e:ea:98:aa:b4:28:0d:0b:43:6b:64:46:b8:a1:87:de:d6: bc:4f:62:d6:a2:bd:68:a6:9f:23:f2:d1:63:80:47:82:ab:80: 06:3e:5f:c0:5b:8e:e1:42:3b:1e:f7:5e:56:74:fe:c8:fa:fa: bf:3e:de:18:21:05:2a:39:fe:57:21:5c:25:47:8a:0f:09:4d: ca:68:75:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tMnWt+GPunZ7LouDiom+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZWNmOGU0ZWM5YjQ0MmE5NTM3NGMyYTNjN2U3ODRiMDc2 MTg3Y2MwHhcNMjUxMjIwMTcwMDM5WhcNMjUxMjIxMTcwMDM5WjAzMTEwLwYDVQQD EyhiNWJkOGNkYWIxZDMzNjk1ODllY2YzNzhhZTU2ZGU5YWM4ZDM3MTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHhFNartA5m3YzCdOI3ficdZ/cVh VsX5zrJPXkPPjz7eDSClDZLrII5cPVnRnQN95VBJKlFkFLsg5quB8J7+HNZd4xCE WWsbhlHSMfmluPasArmhfKXDajjVC13jezvjgkJEom+Gl1R3nfH/4XgzcYQly6oU TSZISnC4vkRzoYf5SqCjMUlS1Ism3R+bUbm31zDoWS66sIIqFcuK+dR5ubdQ1+bZ ZyhTFgFv+iNcklszMx2uuYPnBryH6zfrwR4ux1IQ2KCk//yMPOM3n4CYCVyGxAlz VopGx3Nfmmm1va1gk/CNhgcmQo/bKCLo7jO1OWukdBESNu5NC1nLpW3crQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLW9jNqx0zaViezzeK5W3prI03EnMB8GA1UdIwQY MBaAFOjs+OTsm0QqlTdMKjx+eEsHYYfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81ZTgwYjQtY2IxNi00YTM1LWI0Mjkt MjI5YWU5ZjcyOGQ2LzEvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81ZTgwYjQtY2IxNi00YTM1LWI0MjktMjI5YWU5ZjcyOGQ2 LzEvNk96NDVPeWJSQ3FWTjB3cVBINTRTd2RoaDh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9uT0Y9d EpClX38kEnsMQT48HDE1N0b086g6m3UZCvF5scEtezFE9PNfgeNMfrcc58rBQK37 NIss5Nd/ybTO6+BhUrVkQEkBMXBvm1a9BKJc3InG+4xEwdzlkG3fo7QRdN6oL2B/ 8R3k9MNTfim+mkWpeHVY0Xfu/EkLe2j4PfisY+q4mqr72DOs9sqpXmps6NQCh3MG lvXnIswWMk26KkEnp0cK68nTKyRma65dgL21cXqs2I7qmKq0KA0LQ2tkRrihh97W vE9i1qK9aKafI/LRY4BHgquABj5fwFuO4UI7HvdeVnT+yPr6vz7eGCEFKjn+VyFc JUeKDwlNymh1aQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:30:05 2025 by rpki-client