This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft File: 6WS8XQrZ6gXijILnaP8U0ddNL-s.mft (raw, json) Hash identifier: eVOUjH4hzfkcxyhddWK08rgTUDQcIyekYCcoFgoUGwM= Subject key identifier: 43:D8:14:16:5C:B3:38:5F:62:32:97:0B:FC:43:07:3B:4F:90:7F:2C Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB Certificate issuer: /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb Certificate serial: 019B53AA86B5F1358A6D4373B0B685B09C12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft Manifest number: 090E Signing time: Thu 25 Dec 2025 04:00:43 +0000 Manifest this update: Thu 25 Dec 2025 04:00:43 +0000 Manifest next update: Fri 26 Dec 2025 04:00:43 +0000 Files and hashes: 1: 47Z2HtdwofFjyVEFI9qNr2a-tVU.roa (hash: DNKD/o+eynRMlQCW6kVsQCccIBeiYPf64PT1npjPvG4=) 2: 6WS8XQrZ6gXijILnaP8U0ddNL-s.crl (hash: X3/TvYWMGumSwPs3SqACZfJeWziSLnfw9t7KPUN8NdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:86:b5:f1:35:8a:6d:43:73:b0:b6:85:b0:9c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb Validity Not Before: Dec 25 04:00:43 2025 GMT Not After : Dec 26 04:00:43 2025 GMT Subject: CN=43d814165cb3385f6232970bfc43073b4f907f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d3:f3:f8:a4:2b:dd:d9:74:d0:48:9c:1b:e2: 03:cc:a4:34:34:07:56:fd:63:7d:f2:a5:3c:15:d5: 14:81:e6:a9:85:69:d3:f2:63:4b:aa:e1:53:43:77: 20:4a:bc:e8:ce:75:1d:2c:8b:dd:f3:e5:62:c3:ef: b9:46:12:e3:b8:1d:cc:b1:1d:f0:b8:a4:90:de:f2: d1:85:d8:b7:41:de:bb:60:a1:6a:81:f5:03:02:03: 77:62:b5:f7:33:1d:d3:ef:33:de:1a:72:72:db:8b: bf:f5:11:43:2a:36:b9:c6:9a:d6:83:62:e6:9d:76: 67:2e:40:e2:b5:58:9d:3d:6e:d5:e0:6c:a7:b0:8c: 5b:8e:d1:7c:9e:82:f2:55:45:3e:c4:3a:6c:e0:57: be:11:2a:92:6f:8c:df:96:71:a1:09:3e:24:70:73: ed:fc:34:12:b2:b1:8a:a5:44:23:b9:f4:e2:76:44: 45:52:15:e9:40:36:e1:63:3a:a0:6a:ec:ef:dc:dd: 67:9c:cc:64:99:5c:c7:aa:e2:81:e5:02:5a:a0:07: 31:27:b0:da:4e:b3:13:65:f0:81:29:3c:34:97:b4: 66:1b:de:26:2f:3d:7f:e8:4f:c7:00:88:dc:4b:57: 6a:a2:9b:f3:e3:6a:54:c3:02:11:33:a8:b2:33:d4: f6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D8:14:16:5C:B3:38:5F:62:32:97:0B:FC:43:07:3B:4F:90:7F:2C X509v3 Authority Key Identifier: keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:42:91:92:e7:57:34:2e:70:76:d1:ad:e0:88:ef:b9:f3:e0: b0:ff:bc:e4:52:9f:24:c5:36:96:00:07:45:72:96:43:69:e2: b5:49:2b:c6:7c:0b:88:83:85:63:a7:73:c2:55:8c:e7:8b:01: b0:99:e7:50:bd:33:61:f1:e3:fe:9e:f6:2d:8a:5d:a5:28:28: a8:63:f7:55:3f:93:c0:03:72:0f:5d:05:51:65:4c:79:2d:e3: 37:a1:a8:98:49:1f:25:dd:de:45:8d:29:73:1d:ef:8c:ed:4e: 23:be:dd:11:e7:9e:5a:78:e4:5a:66:82:1a:e0:ee:52:d6:a4: 07:34:7d:3e:67:9b:f3:af:f7:e9:9f:7c:4f:cc:5a:0a:9f:06: a4:82:fd:46:89:fe:5f:65:c7:c5:94:dd:18:bd:2b:48:86:8d: 59:68:18:3d:07:09:58:ff:6b:8d:55:19:5a:79:36:2b:7e:e6: bf:75:ed:df:89:ab:81:61:0c:c2:27:03:86:53:d7:e7:f2:07: 91:e9:aa:7c:cf:44:4a:24:c8:bf:58:70:79:af:26:ab:e4:07: ec:4a:ce:70:5f:60:12:e1:4f:9b:3f:d9:ac:6b:d8:0d:c2:ec: 32:a4:43:65:aa:38:7c:fa:a3:67:74:27:93:7f:0b:f2:1a:c0: ae:48:fe:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqoa18TWKbUNzsLaFsJwSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NjRiYzVkMGFkOWVhMDVlMjhjODJlNzY4ZmYxNGQxZDc0 ZDJmZWIwHhcNMjUxMjI1MDQwMDQzWhcNMjUxMjI2MDQwMDQzWjAzMTEwLwYDVQQD Eyg0M2Q4MTQxNjVjYjMzODVmNjIzMjk3MGJmYzQzMDczYjRmOTA3ZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNPz+KQr3dl00EicG+IDzKQ0NAdW /WN98qU8FdUUgeaphWnT8mNLquFTQ3cgSrzoznUdLIvd8+Viw++5RhLjuB3MsR3w uKSQ3vLRhdi3Qd67YKFqgfUDAgN3YrX3Mx3T7zPeGnJy24u/9RFDKja5xprWg2Lm nXZnLkDitVidPW7V4GynsIxbjtF8noLyVUU+xDps4Fe+ESqSb4zflnGhCT4kcHPt /DQSsrGKpUQjufTidkRFUhXpQDbhYzqgauzv3N1nnMxkmVzHquKB5QJaoAcxJ7Da TrMTZfCBKTw0l7RmG94mLz1/6E/HAIjcS1dqopvz42pUwwIRM6iyM9T2OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPYFBZcszhfYjKXC/xDBztPkH8sMB8GA1UdIwQY MBaAFOlkvF0K2eoF4oyC52j/FNHXTS/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNldTOFhRclo2Z1hpaklMbmFQOFUwZGROTC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xYzhjYmEtNzQ5MS00NTQ2LTk5NTMt NTg5OWE3NGJlMmFlLzEvNldTOFhRclo2Z1hpaklMbmFQOFUwZGROTC1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xYzhjYmEtNzQ5MS00NTQ2LTk5NTMtNTg5OWE3NGJlMmFl LzEvNldTOFhRclo2Z1hpaklMbmFQOFUwZGROTC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEKRkudX NC5wdtGt4IjvufPgsP+85FKfJMU2lgAHRXKWQ2nitUkrxnwLiIOFY6dzwlWM54sB sJnnUL0zYfHj/p72LYpdpSgoqGP3VT+TwANyD10FUWVMeS3jN6GomEkfJd3eRY0p cx3vjO1OI77dEeeeWnjkWmaCGuDuUtakBzR9Pmeb86/36Z98T8xaCp8GpIL9Ron+ X2XHxZTdGL0rSIaNWWgYPQcJWP9rjVUZWnk2K37mv3Xt34mrgWEMwicDhlPX5/IH kemqfM9ESiTIv1hwea8mq+QH7ErOcF9gEuFPmz/ZrGvYDcLsMqRDZao4fPqjZ3Qn k38L8hrArkj+nA== -----END CERTIFICATE-----Generated at Thu Dec 25 07:07:20 2025 by rpki-client