This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft File: 6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json) Hash identifier: 3BgtzUZyJvYrN9FrCGloBdigxIK14QGMRcjw4gW486c= Subject key identifier: 57:8A:50:76:D5:83:C8:C1:E4:0A:E3:49:9F:CD:D7:90:7F:3B:6C:D9 Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8 Certificate issuer: /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8 Certificate serial: 019B435C18FC9E1A58C24398C438C013BEB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft Manifest number: 0AE2 Signing time: Mon 22 Dec 2025 00:01:07 +0000 Manifest this update: Mon 22 Dec 2025 00:01:07 +0000 Manifest next update: Tue 23 Dec 2025 00:01:07 +0000 Files and hashes: 1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: wohRKja42/d7/8ImabMFnADTw5SaoilLnJWikOwyB7o=) 2: vDzT1MfGHy3qiiGgUF2NvHG69NY.roa (hash: /QoWZln+ZcMlohGoxqm79B+9B4Oq5GX6wiGGVl8wkGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:18:fc:9e:1a:58:c2:43:98:c4:38:c0:13:be:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8 Validity Not Before: Dec 22 00:01:07 2025 GMT Not After : Dec 23 00:01:07 2025 GMT Subject: CN=578a5076d583c8c1e40ae3499fcdd7907f3b6cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:90:be:ad:3b:19:a8:30:4d:a7:b2:c1:28:61: 16:68:d8:8d:75:c5:db:60:b9:4b:bd:e4:69:4e:b1: b9:9f:4e:4e:b0:b8:45:65:d2:b8:79:31:2a:9b:29: 25:2a:78:55:90:ac:45:52:c8:8a:f2:1b:4f:db:e9: e9:a6:9b:2e:5e:0e:5a:1a:6e:f8:88:fa:43:e6:b2: 5e:c6:da:1f:f4:48:af:88:a6:9c:06:94:9c:f6:c4: d7:0d:4f:24:b6:49:06:03:1b:d4:a2:3d:b7:68:ea: 35:62:55:c0:df:be:da:82:5e:fe:2d:fa:f2:6e:be: 1f:e1:95:ae:51:26:ad:0e:9c:2d:95:19:65:3b:63: 91:5e:5b:68:89:1b:75:12:b2:d4:f5:99:28:1f:66: 19:74:37:d1:f0:27:90:2e:81:6f:f1:f3:2d:13:25: 86:22:86:6e:35:05:11:d6:80:df:64:57:52:eb:bb: 06:a4:d6:b2:0a:03:14:4b:1a:30:09:aa:b8:a9:10: 84:f1:d0:42:e3:60:f0:33:31:cb:63:17:0a:07:ee: 06:64:0b:c5:c8:db:19:99:5f:c1:68:b8:34:a3:d2: 58:4e:d4:f0:1c:4c:b9:fb:1d:ed:de:6c:0a:12:35: 47:37:ce:bc:d8:57:81:8e:75:ad:2b:71:1d:ef:29: f2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:8A:50:76:D5:83:C8:C1:E4:0A:E3:49:9F:CD:D7:90:7F:3B:6C:D9 X509v3 Authority Key Identifier: keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:9a:82:83:45:e7:d1:cf:1f:3c:1d:d5:bf:e4:9d:0d:8c:55: 0b:0b:67:c0:5a:e6:12:a3:dc:95:a3:2e:a6:24:56:30:ea:f9: 78:79:11:08:b1:02:a6:6f:22:c6:78:ec:e6:1d:73:b2:9b:5d: 33:ab:74:c3:b7:cc:c5:54:e7:f1:b2:3a:d5:b0:99:cd:4c:57: 91:0d:30:8b:ff:58:05:97:74:3e:88:c6:d7:38:b4:4f:02:41: 40:6c:2b:c7:f8:c9:2b:2c:13:8a:23:ab:4c:6b:cb:3d:a8:c8: 54:54:f4:c0:79:2b:42:76:3e:c2:6d:38:f2:fb:be:45:1c:1b: 35:1e:dd:c4:bd:a6:b3:91:af:e9:41:36:12:cb:73:2e:92:cf: 8e:62:f0:ef:78:d8:94:24:6c:d7:60:7c:11:ac:85:09:bc:63: ac:f0:74:9b:92:75:73:71:eb:0e:30:36:49:2e:aa:9b:23:28: f6:1f:d7:80:c4:c3:eb:cd:e9:ce:33:62:cb:ed:73:a0:e4:af: 36:43:2f:72:07:e8:c3:60:ce:a7:41:26:3a:8e:c5:91:f2:9d: cc:90:44:e7:16:20:eb:4f:2e:08:26:f2:e7:7e:ba:f8:70:2b: 83:a7:3d:97:8d:57:5c:6b:bc:58:39:d3:04:a3:96:d9:be:cb: d6:9c:8c:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXBj8nhpYwkOYxDjAE76xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5OTQwNWVlOGY1ZDhlNzY0ZTkwYmQ2NmJkZDFlODlhYzEy ODA5ZTgwHhcNMjUxMjIyMDAwMTA3WhcNMjUxMjIzMDAwMTA3WjAzMTEwLwYDVQQD Eyg1NzhhNTA3NmQ1ODNjOGMxZTQwYWUzNDk5ZmNkZDc5MDdmM2I2Y2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJC+rTsZqDBNp7LBKGEWaNiNdcXb YLlLveRpTrG5n05OsLhFZdK4eTEqmyklKnhVkKxFUsiK8htP2+npppsuXg5aGm74 iPpD5rJextof9EiviKacBpSc9sTXDU8ktkkGAxvUoj23aOo1YlXA377agl7+Lfry br4f4ZWuUSatDpwtlRllO2ORXltoiRt1ErLU9ZkoH2YZdDfR8CeQLoFv8fMtEyWG IoZuNQUR1oDfZFdS67sGpNayCgMUSxowCaq4qRCE8dBC42DwMzHLYxcKB+4GZAvF yNsZmV/BaLg0o9JYTtTwHEy5+x3t3mwKEjVHN8682FeBjnWtK3Ed7ynyVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeKUHbVg8jB5ArjSZ/N15B/O2zZMB8GA1UdIwQY MBaAFOmUBe6PXY52TpC9Zr3R6JrBKAnoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlpRRjdvOWRqblpPa0wxbXZkSG9tc0VvQ2VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xYjkyMDItNDg2OS00ZDQ1LTk1MjEt ZWIxMWI0OTU0ZjMzLzEvNlpRRjdvOWRqblpPa0wxbXZkSG9tc0VvQ2VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8xYjkyMDItNDg2OS00ZDQ1LTk1MjEtZWIxMWI0OTU0ZjMz LzEvNlpRRjdvOWRqblpPa0wxbXZkSG9tc0VvQ2VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJqCg0Xn 0c8fPB3Vv+SdDYxVCwtnwFrmEqPclaMupiRWMOr5eHkRCLECpm8ixnjs5h1zsptd M6t0w7fMxVTn8bI61bCZzUxXkQ0wi/9YBZd0PojG1zi0TwJBQGwrx/jJKywTiiOr TGvLPajIVFT0wHkrQnY+wm048vu+RRwbNR7dxL2ms5Gv6UE2EstzLpLPjmLw73jY lCRs12B8EayFCbxjrPB0m5J1c3HrDjA2SS6qmyMo9h/XgMTD683pzjNiy+1zoOSv NkMvcgfow2DOp0EmOo7FkfKdzJBE5xYg608uCCby5366+HArg6c9l41XXGu8WDnT BKOW2b7L1pyMvQ== -----END CERTIFICATE-----Generated at Mon Dec 22 03:58:59 2025 by rpki-client