This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft File: 6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft (raw, json) Hash identifier: 3oOK5mIX+CrCvEbfMIKEmeB2Cfse8LiVg8N0OZrvah0= Subject key identifier: 4B:20:90:62:D5:DD:27:0A:EB:39:DB:A6:03:83:B7:9D:31:DF:C0:7D Authority key identifier: E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4 Certificate issuer: /CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4 Certificate serial: 019B3EA35004C045AD5ABD1FA509BEB075FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft Manifest number: 1290 Signing time: Sun 21 Dec 2025 02:00:48 +0000 Manifest this update: Sun 21 Dec 2025 02:00:48 +0000 Manifest next update: Mon 22 Dec 2025 02:00:48 +0000 Files and hashes: 1: 6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl (hash: IO6p2fS4/XJYeKReC1ZSHbGI6ZqESqnHKE99asXuAjI=) 2: zzkHgU3pPK_renmca_tjyEqX_S4.roa (hash: ANmTP8T5HJ5lr31OcBilkarY0aetBNgPCtaIRztJMUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:50:04:c0:45:ad:5a:bd:1f:a5:09:be:b0:75:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4 Validity Not Before: Dec 21 02:00:48 2025 GMT Not After : Dec 22 02:00:48 2025 GMT Subject: CN=4b209062d5dd270aeb39dba60383b79d31dfc07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a8:29:ff:d8:7a:c8:c8:4c:c2:81:4e:08:0d: 6a:e0:5c:bb:30:4a:b1:1b:c4:fc:2a:71:07:08:9c: b2:2b:7c:15:de:b6:c8:bf:4a:6d:9d:5e:57:64:68: d6:0b:d8:28:53:96:4c:e4:e0:0f:99:31:84:c0:86: ac:83:58:6e:d5:53:4a:39:d4:60:66:40:f0:4d:6d: 3f:d8:30:36:0c:5a:b2:08:5b:4c:42:b9:11:fe:7d: 87:c4:a4:8c:45:d7:3d:3a:25:29:c6:d4:f3:78:8b: cc:04:e5:86:1d:ef:30:2a:66:12:57:67:52:92:ab: 1f:d1:c6:b7:60:8c:ab:09:8f:b1:b9:cb:ac:e9:4c: 35:1c:c8:87:2c:ec:f8:71:31:52:78:47:ff:04:76: a6:05:ae:88:ea:e0:66:f1:25:9d:ed:44:e8:3c:b1: 6a:10:a5:c2:69:ec:eb:67:96:df:46:f9:68:ae:78: 4b:68:47:29:f7:c3:01:b8:81:16:8b:ce:26:e6:13: c3:30:62:7b:60:30:63:cc:6a:5e:d8:f8:d5:b0:87: 8b:c1:fd:26:4e:6d:bc:f3:2b:4d:7b:88:f1:1e:a9: ad:8e:f6:eb:57:a9:71:03:33:00:06:71:37:6d:79: 1d:70:e0:48:2e:c6:fe:dd:47:36:11:e8:1e:17:8f: b7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:20:90:62:D5:DD:27:0A:EB:39:DB:A6:03:83:B7:9D:31:DF:C0:7D X509v3 Authority Key Identifier: keyid:E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:78:92:76:2a:78:85:52:e1:e5:1d:ee:d7:18:9a:dd:aa:bd: 62:62:4f:0c:18:55:79:6f:11:89:2c:f3:82:32:d2:b4:bf:56: 26:a8:f1:f4:77:8a:91:ae:f6:22:74:ad:30:4b:4b:ee:1e:57: 5a:66:9f:80:89:a8:0d:55:89:4d:9f:63:32:0d:46:62:97:e1: 5b:59:9d:f5:04:42:44:bd:83:b4:e3:15:87:0e:51:7b:30:b8: 6c:e5:d4:9f:e0:df:9a:aa:54:05:46:f5:5c:3a:7e:5e:90:2d: 1a:17:16:94:f9:b3:8b:63:b1:6d:ac:bf:66:1e:60:7f:72:d8: 81:a2:e5:68:12:90:66:72:a3:b8:a4:50:b8:a8:a4:50:31:39: 9f:5f:17:57:24:b9:b6:89:77:81:6e:f6:a4:0d:d1:08:14:23: f8:28:a3:a5:81:50:a8:f9:5b:e7:4b:34:41:2d:f0:b6:a1:ae: 09:fc:e8:b4:39:86:9d:8c:82:1b:ce:01:a5:94:f2:63:3f:4b: d0:bd:a5:58:ce:ec:7f:ec:74:82:68:f8:ab:e1:72:75:3a:f9: 4a:aa:54:4c:dc:64:38:97:2f:8c:f8:70:37:ba:df:82:db:cc: eb:f3:3a:cd:5e:ab:93:19:8e:4c:cf:db:f1:ab:e4:39:c2:2d: 64:a8:9f:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o1AEwEWtWr0fpQm+sHX8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4OTY0ZTRlOGZmZTMxZjY5MmY3MTMxOGMyYjcyODIwMjhk MGYzYTQwHhcNMjUxMjIxMDIwMDQ4WhcNMjUxMjIyMDIwMDQ4WjAzMTEwLwYDVQQD Eyg0YjIwOTA2MmQ1ZGQyNzBhZWIzOWRiYTYwMzgzYjc5ZDMxZGZjMDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKgp/9h6yMhMwoFOCA1q4Fy7MEqx G8T8KnEHCJyyK3wV3rbIv0ptnV5XZGjWC9goU5ZM5OAPmTGEwIasg1hu1VNKOdRg ZkDwTW0/2DA2DFqyCFtMQrkR/n2HxKSMRdc9OiUpxtTzeIvMBOWGHe8wKmYSV2dS kqsf0ca3YIyrCY+xucus6Uw1HMiHLOz4cTFSeEf/BHamBa6I6uBm8SWd7UToPLFq EKXCaezrZ5bfRvlornhLaEcp98MBuIEWi84m5hPDMGJ7YDBjzGpe2PjVsIeLwf0m Tm288ytNe4jxHqmtjvbrV6lxAzMABnE3bXkdcOBILsb+3Uc2EegeF4+3pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsgkGLV3ScK6znbpgODt50x38B9MB8GA1UdIwQY MBaAFOiWTk6P/jH2kvcTGMK3KCAo0POkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkpaT1RvXy1NZmFTOXhNWXdyY29JQ2pRODZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xMzFhNzctYzhjOC00YmI3LTlhZWUt NWE2NjU2NTVlYjU3LzEvNkpaT1RvXy1NZmFTOXhNWXdyY29JQ2pRODZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8xMzFhNzctYzhjOC00YmI3LTlhZWUtNWE2NjU2NTVlYjU3 LzEvNkpaT1RvXy1NZmFTOXhNWXdyY29JQ2pRODZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHiSdip4 hVLh5R3u1xia3aq9YmJPDBhVeW8RiSzzgjLStL9WJqjx9HeKka72InStMEtL7h5X WmafgImoDVWJTZ9jMg1GYpfhW1md9QRCRL2DtOMVhw5RezC4bOXUn+DfmqpUBUb1 XDp+XpAtGhcWlPmzi2Oxbay/Zh5gf3LYgaLlaBKQZnKjuKRQuKikUDE5n18XVyS5 tol3gW72pA3RCBQj+CijpYFQqPlb50s0QS3wtqGuCfzotDmGnYyCG84BpZTyYz9L 0L2lWM7sf+x0gmj4q+FydTr5SqpUTNxkOJcvjPhwN7rfgtvM6/M6zV6rkxmOTM/b 8avkOcItZKifWw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:04:42 2025 by rpki-client