This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft File: b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft (raw, json) Hash identifier: ChgtpaqpEyTH4UD86sVUmjP3nB8a+l5fTMbfQ3O2j2Y= Subject key identifier: CB:7A:41:47:38:63:56:50:A6:1C:1D:1C:63:30:5B:62:94:94:69:A8 Authority key identifier: 6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02 Certificate issuer: /CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02 Certificate serial: 019B394668EB57009BF01AE546C54F02D6DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft Manifest number: 040C Signing time: Sat 20 Dec 2025 01:01:13 +0000 Manifest this update: Sat 20 Dec 2025 01:01:13 +0000 Manifest next update: Sun 21 Dec 2025 01:01:13 +0000 Files and hashes: 1: b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl (hash: ventjneAofUAsBR6KRFxK/WIdJ1XATS0N6qmaDigQvM=) 2: he_LtNesHB3yhhLeem_GRg_44MQ.roa (hash: evnQ8oB4iSjxmSj6Kbjo2AeseAHFfPXeoG38g6RTNyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:68:eb:57:00:9b:f0:1a:e5:46:c5:4f:02:d6:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02 Validity Not Before: Dec 20 01:01:13 2025 GMT Not After : Dec 21 01:01:13 2025 GMT Subject: CN=cb7a414738635650a61c1d1c63305b62949469a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a1:61:3f:84:40:de:0f:f1:45:b4:e4:f7:f7: d6:85:08:91:d2:eb:f0:b4:a0:c4:21:43:02:b7:4b: bc:99:3f:14:b0:02:f7:b8:c5:d0:5a:8b:30:71:61: be:f6:74:e8:85:98:3b:f9:dc:60:57:bb:1c:67:58: 37:36:c0:f2:6f:72:b4:63:c4:80:88:f4:8c:c2:72: d4:fc:2e:28:e1:c5:17:0f:0e:53:01:0f:f3:b5:eb: d6:6d:4f:33:d4:86:1d:c6:78:67:28:8b:66:49:1f: 94:bc:01:df:45:0f:a4:06:93:41:f3:95:9c:ae:c1: fb:7b:e2:73:2d:d5:44:a5:f0:09:ae:39:7c:28:f6: 87:ac:69:d4:34:2b:57:e1:94:34:f4:9c:32:18:dd: 27:d7:a9:b9:c1:55:5a:b3:fb:ed:53:4f:6c:d2:25: 0f:7c:a2:75:e2:37:5b:47:dd:4c:e0:0b:52:e3:61: 74:54:46:47:a7:b1:0e:0e:7a:37:7c:80:98:90:96: c6:38:15:97:3c:91:75:da:38:f2:08:f2:68:13:98: e8:7b:d5:d5:2a:30:f5:a0:87:43:99:3e:f7:47:71: 0e:e4:54:0d:db:6f:b0:7f:c2:99:22:38:28:c3:5e: 41:28:65:30:bb:4d:a0:da:d5:a1:9b:e1:8f:f7:9e: 51:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7A:41:47:38:63:56:50:A6:1C:1D:1C:63:30:5B:62:94:94:69:A8 X509v3 Authority Key Identifier: keyid:6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5d:24:7e:17:5b:f8:a8:5c:d6:27:fa:3b:5f:c0:92:8c:93: e7:2e:5f:b8:f5:0f:38:56:b7:2d:38:9d:38:14:10:56:dc:74: 2d:ea:c5:b5:41:a3:67:76:2d:c0:70:75:e5:df:ba:3a:bd:9e: 37:26:11:a1:57:37:68:9f:44:1a:a7:dc:e5:b2:40:e0:bb:5e: 0e:7a:7f:0f:7c:91:9c:4a:18:54:98:aa:c1:1a:4e:31:b7:43: a5:aa:16:39:23:e5:aa:d0:e1:06:d2:a6:2c:0b:ac:a9:8d:70: b5:30:f1:1e:c2:87:42:a3:43:91:dd:2b:e1:71:1d:c2:c7:d5: 6b:ce:bf:cb:9b:c1:79:11:2c:3e:e1:ae:f5:2c:73:29:08:70: 45:08:38:1f:c4:86:ef:31:cc:0e:c6:40:a6:39:17:78:60:41: 3d:07:45:27:c6:8d:5f:dd:f5:0e:8d:6a:5f:06:71:16:b8:9d: 59:27:97:4a:7e:18:88:c8:b1:1b:db:a7:f6:c6:a5:21:56:11: 5e:6a:4f:28:26:db:10:78:b9:95:9a:5e:bf:9b:76:ab:7e:92: cb:35:f2:cf:45:3a:1d:29:25:05:cb:59:2c:df:91:0f:02:e2: bd:13:1b:5e:09:d8:83:82:96:6a:04:11:4f:7c:5b:b5:7e:76: aa:40:f5:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RmjrVwCb8BrlRsVPAtbbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzVjNDczZjliN2IwMWU5YzI0ODVjNDZiZjU2OWNjZTA4 MTZmMDIwHhcNMjUxMjIwMDEwMTEzWhcNMjUxMjIxMDEwMTEzWjAzMTEwLwYDVQQD EyhjYjdhNDE0NzM4NjM1NjUwYTYxYzFkMWM2MzMwNWI2Mjk0OTQ2OWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6FhP4RA3g/xRbTk9/fWhQiR0uvw tKDEIUMCt0u8mT8UsAL3uMXQWoswcWG+9nTohZg7+dxgV7scZ1g3NsDyb3K0Y8SA iPSMwnLU/C4o4cUXDw5TAQ/ztevWbU8z1IYdxnhnKItmSR+UvAHfRQ+kBpNB85Wc rsH7e+JzLdVEpfAJrjl8KPaHrGnUNCtX4ZQ09JwyGN0n16m5wVVas/vtU09s0iUP fKJ14jdbR91M4AtS42F0VEZHp7EODno3fICYkJbGOBWXPJF12jjyCPJoE5joe9XV KjD1oIdDmT73R3EO5FQN22+wf8KZIjgow15BKGUwu02g2tWhm+GP955R0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMt6QUc4Y1ZQphwdHGMwW2KUlGmoMB8GA1UdIwQY MBaAFG/FxHP5t7AenCSFxGv1aczggW8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhYRWNfbTNzQjZjSklYRWFfVnB6T0NCYndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZTZhYzYtZWRlZi00OTVlLWI2YTIt OWNmMDQwNTc0NzY1LzEvYjhYRWNfbTNzQjZjSklYRWFfVnB6T0NCYndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZTZhYzYtZWRlZi00OTVlLWI2YTItOWNmMDQwNTc0NzY1 LzEvYjhYRWNfbTNzQjZjSklYRWFfVnB6T0NCYndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe10kfhdb +Khc1if6O1/AkoyT5y5fuPUPOFa3LTidOBQQVtx0LerFtUGjZ3YtwHB15d+6Or2e NyYRoVc3aJ9EGqfc5bJA4LteDnp/D3yRnEoYVJiqwRpOMbdDpaoWOSPlqtDhBtKm LAusqY1wtTDxHsKHQqNDkd0r4XEdwsfVa86/y5vBeREsPuGu9SxzKQhwRQg4H8SG 7zHMDsZApjkXeGBBPQdFJ8aNX931Do1qXwZxFridWSeXSn4YiMixG9un9salIVYR XmpPKCbbEHi5lZpev5t2q36SyzXyz0U6HSklBctZLN+RDwLivRMbXgnYg4KWagQR T3xbtX52qkD1xw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:21:07 2025 by rpki-client