This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft File: 6ixOp53bewA94B8dBfbb9xaxEzY.mft (raw, json) Hash identifier: iR/f7T5Purc73pDrxAY6UZX4AWWQYoo3GpbCi8oGXOE= Subject key identifier: 1F:19:AD:53:A7:DB:92:A7:8E:66:BD:5C:84:81:75:A6:B6:12:BA:FE Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36 Certificate issuer: /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336 Certificate serial: 019B4438F1BFE6A1C63C853E79B46E7FA6A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft Manifest number: 171E Signing time: Mon 22 Dec 2025 04:02:21 +0000 Manifest this update: Mon 22 Dec 2025 04:02:21 +0000 Manifest next update: Tue 23 Dec 2025 04:02:21 +0000 Files and hashes: 1: 6ixOp53bewA94B8dBfbb9xaxEzY.crl (hash: Ipu9c7zN3hyWfYq9SQoeSTeHQvgJ1QKilFJXvy7c1fA=) 2: UBg5H2PYYwmFwtuuB5TxJD258zc.roa (hash: mETMUQGm3Ge4vPrABQSGfrYWzYlfLqVqloDe3yUr+lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:f1:bf:e6:a1:c6:3c:85:3e:79:b4:6e:7f:a6:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336 Validity Not Before: Dec 22 04:02:21 2025 GMT Not After : Dec 23 04:02:21 2025 GMT Subject: CN=1f19ad53a7db92a78e66bd5c848175a6b612bafe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:40:aa:1c:71:82:8e:35:91:68:1a:2a:e2:00: 14:21:26:ba:26:10:79:ae:ce:92:ef:f1:10:1a:5e: 7d:c0:93:df:ae:02:4f:18:2d:b4:4a:44:5a:7d:c4: c9:d5:0a:44:6f:4f:a6:fa:8c:74:91:9f:0e:45:3f: eb:11:49:5e:f7:4a:e4:ad:04:ca:58:25:f6:4d:a2: 3c:77:a1:49:fa:02:c0:70:fa:a9:f5:78:04:da:7b: 1d:fa:9f:48:d8:6e:26:fc:bc:0e:5c:0f:75:2e:5b: 47:6a:0d:29:95:56:78:8b:b4:28:c3:47:0e:3e:c8: 9e:9f:c5:8e:88:e8:fa:b5:70:22:70:cc:0a:9e:1a: 3c:29:51:29:b2:86:9d:04:13:0b:c1:ec:0b:47:aa: 95:68:4d:fa:4a:8a:8c:6c:1f:7b:22:fb:94:42:23: c2:4a:42:57:7a:0a:22:c5:10:73:46:1c:86:89:32: 1f:2e:b6:7b:9e:e8:94:96:29:c9:6b:95:47:1d:f6: 47:b2:d3:29:68:da:53:8d:94:a1:35:38:5e:d4:b8: 6f:ba:aa:21:76:1f:21:f7:45:8e:bb:38:e3:d7:a7: 4c:fd:e1:29:8a:09:8e:59:ab:66:f4:e0:d7:8a:2e: 62:e3:0b:87:4f:10:3e:31:04:7c:a2:8f:4a:3f:11: 45:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:19:AD:53:A7:DB:92:A7:8E:66:BD:5C:84:81:75:A6:B6:12:BA:FE X509v3 Authority Key Identifier: keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:3e:69:c4:26:6e:77:54:6b:93:2f:27:46:06:c1:76:00:5d: ab:e3:69:b5:68:b9:47:b7:df:e6:7f:ff:b2:94:46:a9:20:08: 43:81:55:ba:e6:26:95:38:8b:1b:6b:1b:a6:84:04:18:c1:c8: d7:b6:b2:6d:bf:15:1e:19:3c:de:69:40:15:5a:ef:b4:0d:e5: e0:13:1b:72:ff:53:81:43:6c:c2:6a:4c:98:70:74:0e:99:5f: 4a:10:89:f3:2e:77:dd:41:c2:3d:07:c6:f4:d0:f8:8e:ac:97: af:17:10:53:61:26:ee:93:37:65:74:21:4e:e0:2a:10:a9:bb: 85:01:fa:7b:44:77:a7:00:73:02:45:75:fb:2a:4b:69:da:92: b4:d1:9a:95:6f:6d:a9:67:20:9e:5e:63:23:74:c0:b0:57:ea: 1f:46:90:ba:9c:8c:72:ef:54:bf:bd:70:7c:ba:b6:7d:db:ed: a7:8e:28:50:79:d4:7b:1e:64:b3:9e:d3:f2:da:07:54:ab:21: f3:e6:2f:10:f9:6c:d9:7b:a2:46:b5:77:03:02:e0:ce:d5:5d: b0:a8:54:ac:16:e7:c2:60:b3:b5:f1:7f:3a:81:86:3b:4e:39: cd:6c:c8:31:e6:38:5e:06:46:9f:3f:a7:97:f6:43:67:de:1e: 8a:ca:66:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOPG/5qHGPIU+ebRuf6anMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmM0ZWE3OWRkYjdiMDAzZGUwMWYxZDA1ZjZkYmY3MTZi MTEzMzYwHhcNMjUxMjIyMDQwMjIxWhcNMjUxMjIzMDQwMjIxWjAzMTEwLwYDVQQD EygxZjE5YWQ1M2E3ZGI5MmE3OGU2NmJkNWM4NDgxNzVhNmI2MTJiYWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkCqHHGCjjWRaBoq4gAUISa6JhB5 rs6S7/EQGl59wJPfrgJPGC20SkRafcTJ1QpEb0+m+ox0kZ8ORT/rEUle90rkrQTK WCX2TaI8d6FJ+gLAcPqp9XgE2nsd+p9I2G4m/LwOXA91LltHag0plVZ4i7Qow0cO Psien8WOiOj6tXAicMwKnho8KVEpsoadBBMLwewLR6qVaE36SoqMbB97IvuUQiPC SkJXegoixRBzRhyGiTIfLrZ7nuiUlinJa5VHHfZHstMpaNpTjZShNThe1Lhvuqoh dh8h90WOuzjj16dM/eEpigmOWatm9ODXii5i4wuHTxA+MQR8oo9KPxFFHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8ZrVOn25Knjma9XISBdaa2Err+MB8GA1UdIwQY MBaAFOosTqed23sAPeAfHQX22/cWsRM2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84ZTdlMWQtMTU4Zi00YzZlLWFiYTMt MzlmMTNlNzZhZmEzLzEvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC84ZTdlMWQtMTU4Zi00YzZlLWFiYTMtMzlmMTNlNzZhZmEz LzEvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASz5pxCZu d1Rrky8nRgbBdgBdq+NptWi5R7ff5n//spRGqSAIQ4FVuuYmlTiLG2sbpoQEGMHI 17aybb8VHhk83mlAFVrvtA3l4BMbcv9TgUNswmpMmHB0DplfShCJ8y533UHCPQfG 9ND4jqyXrxcQU2Em7pM3ZXQhTuAqEKm7hQH6e0R3pwBzAkV1+ypLadqStNGalW9t qWcgnl5jI3TAsFfqH0aQupyMcu9Uv71wfLq2fdvtp44oUHnUex5ks57T8toHVKsh 8+YvEPls2XuiRrV3AwLgztVdsKhUrBbnwmCztfF/OoGGO045zWzIMeY4XgZGnz+n l/ZDZ94eispmHw== -----END CERTIFICATE-----Generated at Mon Dec 22 11:30:28 2025 by rpki-client