This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft File: 6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft (raw, json) Hash identifier: ZY9insmnwsKllOgqrV/7ExlWHqLEoCSbypmOTVa0KAo= Subject key identifier: 19:F3:85:2A:5F:FD:EA:81:00:0B:09:D3:B2:81:50:1F:D5:D6:75:91 Authority key identifier: E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00 Certificate issuer: /CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00 Certificate serial: 019B3F7F79C75268647E80A0946B33E56A60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft Manifest number: 07DD Signing time: Sun 21 Dec 2025 06:01:17 +0000 Manifest this update: Sun 21 Dec 2025 06:01:17 +0000 Manifest next update: Mon 22 Dec 2025 06:01:17 +0000 Files and hashes: 1: 4pppDVsEzxWcpvOQRzSfsEfJ_j4.roa (hash: QqOmQPrrioYAbFdEx9jvAv4IzYIgXNG6tw4Mnvbd0vE=) 2: 6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl (hash: TqGS+CNWrDmzWXAV5FgMWsVth3f4bjiY8Dp9lOj9SU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:79:c7:52:68:64:7e:80:a0:94:6b:33:e5:6a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00 Validity Not Before: Dec 21 06:01:17 2025 GMT Not After : Dec 22 06:01:17 2025 GMT Subject: CN=19f3852a5ffdea81000b09d3b281501fd5d67591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:f9:03:13:57:18:b3:f3:8c:f8:bf:91:70: 05:78:83:81:a6:24:9c:d8:30:d7:66:f9:5c:89:9a: b9:6f:36:e0:74:7a:71:69:ad:c5:d5:30:b6:1d:f6: 7f:6d:33:08:f3:03:35:06:9a:6c:f0:54:ab:43:57: 3e:2e:9f:f7:d3:a7:e4:29:82:f6:2b:38:2c:fc:c2: 05:83:4b:29:f4:21:02:e0:64:3a:fa:b9:17:83:0d: 9c:20:44:80:02:e1:c5:48:0e:b4:d4:a7:2a:71:da: d5:81:1c:cb:c5:4c:58:41:60:86:59:0f:4c:9e:41: f7:b0:a6:9a:7a:9c:2c:34:19:72:f2:5f:91:4c:fb: 7a:2f:4e:a4:b7:33:b0:d5:76:99:a1:38:68:5d:94: b0:21:94:be:02:91:2e:4c:6a:fe:ce:3b:4e:2f:a0: 1f:9f:2f:d7:0a:58:5e:1c:aa:2f:97:e4:29:13:75: b6:97:c4:cc:be:bf:93:48:11:f2:3c:17:9c:6b:61: 21:44:3c:38:ce:40:97:8e:06:4a:49:ed:c1:bf:25: cb:db:2f:8c:07:03:da:d9:f2:26:ac:76:38:a0:15: 83:8d:1b:d0:ae:86:82:3b:85:42:c6:0b:b2:a3:1e: 67:7c:ad:e3:c4:dd:88:b6:aa:cc:91:1e:44:f1:99: 9c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F3:85:2A:5F:FD:EA:81:00:0B:09:D3:B2:81:50:1F:D5:D6:75:91 X509v3 Authority Key Identifier: keyid:E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f2:ae:62:a0:1a:88:3f:f3:4d:7b:6f:7c:25:0a:dd:55:39: b5:17:3c:6a:18:75:48:aa:80:83:0d:9b:f9:53:16:f6:c9:ee: da:48:d7:33:3e:ae:00:e3:c6:d3:dc:c9:97:3b:87:6a:c0:e0: 94:66:55:37:65:30:90:23:0b:c6:9f:29:a1:f3:cc:3a:37:ac: 42:63:29:94:01:73:78:a9:bb:74:dd:c2:8f:c8:e1:90:21:58: 39:0f:b1:f0:45:27:02:de:cd:c1:4a:ab:f3:1e:57:a3:ed:b9: cd:fc:d7:ac:00:cc:1b:a1:da:e4:e3:7d:0c:8e:e6:3a:45:44: f0:9b:12:05:a0:e3:48:57:89:ba:c8:f9:96:d3:29:a6:7c:a6: b7:26:9f:6b:89:d0:72:f8:d0:cd:7b:1c:55:c9:17:13:35:5e: 01:17:e4:df:8c:93:8e:86:04:38:ed:1a:09:db:da:be:b6:1a: 91:5a:81:0f:4f:65:3d:f5:26:14:e9:5c:7d:8b:8d:d9:6f:6e: a8:a7:78:b6:01:c1:26:42:9d:ef:61:79:fd:83:34:1d:e7:35: ed:05:62:49:99:c5:07:95:ed:46:ab:c9:8b:b0:22:0a:b8:34: 5a:08:c4:0b:23:14:f4:21:2d:29:1f:7d:25:90:7f:59:33:a3: 56:ce:e5:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f3nHUmhkfoCglGsz5WpgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Y2JiZmYyMThhNDM3ZGY4ZjgwYTk4Y2QyZmFlYjljMjQx OGZkMDAwHhcNMjUxMjIxMDYwMTE3WhcNMjUxMjIyMDYwMTE3WjAzMTEwLwYDVQQD EygxOWYzODUyYTVmZmRlYTgxMDAwYjA5ZDNiMjgxNTAxZmQ1ZDY3NTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC75AxNXGLPzjPi/kXAFeIOBpiSc 2DDXZvlciZq5bzbgdHpxaa3F1TC2HfZ/bTMI8wM1Bpps8FSrQ1c+Lp/306fkKYL2 Kzgs/MIFg0sp9CEC4GQ6+rkXgw2cIESAAuHFSA601KcqcdrVgRzLxUxYQWCGWQ9M nkH3sKaaepwsNBly8l+RTPt6L06ktzOw1XaZoThoXZSwIZS+ApEuTGr+zjtOL6Af ny/XClheHKovl+QpE3W2l8TMvr+TSBHyPBeca2EhRDw4zkCXjgZKSe3BvyXL2y+M BwPa2fImrHY4oBWDjRvQroaCO4VCxguyox5nfK3jxN2ItqrMkR5E8ZmcXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnzhSpf/eqBAAsJ07KBUB/V1nWRMB8GA1UdIwQY MBaAFOjLv/IYpDffj4CpjNL665wkGP0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xZmQ2YmMtNTdlMi00ZjUwLTk4Yjct Y2M3NjM1ZGU2ZTdhLzEvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8xZmQ2YmMtNTdlMi00ZjUwLTk4YjctY2M3NjM1ZGU2ZTdh LzEvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPKuYqAa iD/zTXtvfCUK3VU5tRc8ahh1SKqAgw2b+VMW9snu2kjXMz6uAOPG09zJlzuHasDg lGZVN2UwkCMLxp8pofPMOjesQmMplAFzeKm7dN3Cj8jhkCFYOQ+x8EUnAt7NwUqr 8x5Xo+25zfzXrADMG6Ha5ON9DI7mOkVE8JsSBaDjSFeJusj5ltMppnymtyafa4nQ cvjQzXscVckXEzVeARfk34yTjoYEOO0aCdvavrYakVqBD09lPfUmFOlcfYuN2W9u qKd4tgHBJkKd72F5/YM0Hec17QViSZnFB5XtRqvJi7AiCrg0WgjECyMU9CEtKR99 JZB/WTOjVs7lLA== -----END CERTIFICATE-----Generated at Sun Dec 21 12:10:54 2025 by rpki-client