This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft File: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft (raw, json) Hash identifier: ApP8WtCFzW3gSbzQ6mpP6k/Ln+NZq97WPzb5pFuJBLA= Subject key identifier: B9:7B:DA:61:C3:83:87:A6:0A:B1:20:37:AF:F8:0D:42:89:8B:E5:2E Authority key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07 Certificate issuer: /CN=e91f272b13c750143c7ec87e0c802aead8ac6e07 Certificate serial: 019B46CAF88982E5F79C1C78E994CBD0266A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft Manifest number: 0CEB Signing time: Mon 22 Dec 2025 16:01:05 +0000 Manifest this update: Mon 22 Dec 2025 16:01:05 +0000 Manifest next update: Tue 23 Dec 2025 16:01:05 +0000 Files and hashes: 1: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl (hash: 0Oe8Zwgd1T1vSDgQ2f3mvGxR8c8/k4xVu0yr6LTQLrI=) 2: 9SpuyxwY5s_DY9H2HuXrbxGl_AE.roa (hash: 8TyA+krjmjGFWghMXqG0FTTJGiUwEj3FhItOTxb8jEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:f8:89:82:e5:f7:9c:1c:78:e9:94:cb:d0:26:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07 Validity Not Before: Dec 22 16:01:05 2025 GMT Not After : Dec 23 16:01:05 2025 GMT Subject: CN=b97bda61c38387a60ab12037aff80d42898be52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:39:73:60:53:b3:79:6b:9c:ea:01:4f:ec:c4: 04:64:a3:89:0d:61:d5:f5:06:67:5a:e7:45:67:7c: 52:20:7c:fd:af:d6:93:c6:25:54:4a:82:dd:5e:cd: 5e:ec:f9:5b:42:bb:05:27:76:0f:04:d9:74:c1:10: 8f:3a:0c:8a:ec:e0:9e:f8:f7:d3:3d:8c:20:ff:2c: a6:98:be:10:4f:92:e2:f7:61:86:14:b0:fb:63:dc: 45:94:13:fc:9b:7f:96:66:51:9d:88:a5:20:5d:2a: 25:9c:57:5b:0d:69:ec:38:d2:fb:22:df:d0:8a:24: e8:f8:60:3e:15:c4:6c:df:1a:9e:8c:a9:35:fa:13: ec:fb:35:b1:d1:ed:91:91:fe:a6:cf:b9:96:b8:ce: 6a:2e:25:f2:c0:5a:d7:04:53:ee:60:b6:20:0d:fe: 1c:ee:82:74:02:47:9c:64:8d:8e:6f:92:23:48:ef: a9:2f:33:3a:81:b7:16:ab:d4:1f:69:d1:2e:33:1a: 52:d7:92:a2:50:9c:3e:96:fa:f1:10:b2:d1:4f:2a: ce:29:73:95:0e:74:c0:7c:ec:57:30:58:19:ea:63: 3e:a2:f3:b4:44:e5:78:ce:ff:a4:47:34:b1:5b:09: 9f:c6:a1:9e:c0:84:ab:e0:17:eb:e5:94:33:ac:00: 9e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7B:DA:61:C3:83:87:A6:0A:B1:20:37:AF:F8:0D:42:89:8B:E5:2E X509v3 Authority Key Identifier: keyid:E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e1:99:f8:96:63:f9:88:a2:05:cf:a4:50:b9:88:d5:a3:1d: 88:2b:1f:1e:aa:31:75:3d:3e:59:2c:f8:c6:ff:e7:28:3a:90: 61:e9:f8:95:d6:6c:19:80:e9:ba:27:e8:38:cd:69:06:48:fc: 8d:b9:49:1c:5a:61:76:f5:ef:e6:9f:51:25:1c:d1:00:93:d9: 12:ed:42:6d:14:d7:4d:51:9c:26:d0:c0:32:73:c0:f8:a4:25: c6:22:ef:bf:5e:d6:b4:bb:cd:74:e5:e6:eb:7a:01:02:12:35: 60:25:22:05:ef:e9:ac:96:70:3f:57:05:4b:4e:a5:bf:fc:19: 41:d6:d3:4e:f8:0e:7e:c6:db:4f:10:b4:1e:ff:95:39:64:5c: 7e:a0:e1:ca:5a:ef:5e:2a:88:c0:8c:62:57:2f:fc:25:e1:1b: 39:a5:2a:e1:18:65:30:68:6a:85:d4:71:e0:dd:d5:45:a0:91: 33:58:1a:65:77:04:b1:68:e3:3a:96:fd:11:c1:a7:d8:4d:1a: eb:2a:3c:fa:fa:ea:31:6e:6c:31:c2:7d:e6:7e:aa:20:10:f8: d9:3d:29:9c:d8:69:cd:24:1e:db:aa:37:3f:79:da:7b:e2:49: 09:3b:95:91:8e:20:c1:90:50:87:5b:f4:0c:01:5c:ad:88:be: 22:5c:4b:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyviJguX3nBx46ZTL0CZqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MWYyNzJiMTNjNzUwMTQzYzdlYzg3ZTBjODAyYWVhZDhh YzZlMDcwHhcNMjUxMjIyMTYwMTA1WhcNMjUxMjIzMTYwMTA1WjAzMTEwLwYDVQQD EyhiOTdiZGE2MWMzODM4N2E2MGFiMTIwMzdhZmY4MGQ0Mjg5OGJlNTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTlzYFOzeWuc6gFP7MQEZKOJDWHV 9QZnWudFZ3xSIHz9r9aTxiVUSoLdXs1e7PlbQrsFJ3YPBNl0wRCPOgyK7OCe+PfT PYwg/yymmL4QT5Li92GGFLD7Y9xFlBP8m3+WZlGdiKUgXSolnFdbDWnsONL7It/Q iiTo+GA+FcRs3xqejKk1+hPs+zWx0e2Rkf6mz7mWuM5qLiXywFrXBFPuYLYgDf4c 7oJ0AkecZI2Ob5IjSO+pLzM6gbcWq9QfadEuMxpS15KiUJw+lvrxELLRTyrOKXOV DnTAfOxXMFgZ6mM+ovO0ROV4zv+kRzSxWwmfxqGewISr4Bfr5ZQzrACerwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLl72mHDg4emCrEgN6/4DUKJi+UuMB8GA1UdIwQY MBaAFOkfJysTx1AUPH7IfgyAKurYrG4HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNjJkMjItODJmMi00YjIwLWJhYzQt NjAxYTcyNWEwMGY1LzEvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9kNjJkMjItODJmMi00YjIwLWJhYzQtNjAxYTcyNWEwMGY1 LzEvNlI4bkt4UEhVQlE4ZnNoLURJQXE2dGlzYmdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOGZ+JZj +YiiBc+kULmI1aMdiCsfHqoxdT0+WSz4xv/nKDqQYen4ldZsGYDpuifoOM1pBkj8 jblJHFphdvXv5p9RJRzRAJPZEu1CbRTXTVGcJtDAMnPA+KQlxiLvv17WtLvNdOXm 63oBAhI1YCUiBe/prJZwP1cFS06lv/wZQdbTTvgOfsbbTxC0Hv+VOWRcfqDhylrv XiqIwIxiVy/8JeEbOaUq4RhlMGhqhdRx4N3VRaCRM1gaZXcEsWjjOpb9EcGn2E0a 6yo8+vrqMW5sMcJ95n6qIBD42T0pnNhpzSQe26o3P3nae+JJCTuVkY4gwZBQh1v0 DAFcrYi+IlxLxA== -----END CERTIFICATE-----Generated at Mon Dec 22 22:55:36 2025 by rpki-client