This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft File: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft (raw, json) Hash identifier: t8aJfMZHXRGZEwE1woJD0riVYTGW5nIa1hqdQh+TfGU= Subject key identifier: CC:3F:A0:7A:32:62:17:0C:D2:46:58:14:07:B7:05:06:28:CF:83:E4 Authority key identifier: EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9 Certificate issuer: /CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9 Certificate serial: 019B612FD36235144C3B4EDBF5F503EFA55D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft Manifest number: 1799 Signing time: Sat 27 Dec 2025 19:01:22 +0000 Manifest this update: Sat 27 Dec 2025 19:01:22 +0000 Manifest next update: Sun 28 Dec 2025 19:01:22 +0000 Files and hashes: 1: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl (hash: R3BhRanYxV66XOmGfOlkPGlpVi2gvLqFXErUTN39uVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:2f:d3:62:35:14:4c:3b:4e:db:f5:f5:03:ef:a5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9 Validity Not Before: Dec 27 19:01:22 2025 GMT Not After : Dec 28 19:01:22 2025 GMT Subject: CN=cc3fa07a3262170cd246581407b7050628cf83e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:aa:50:cd:fa:15:9a:d5:32:67:b5:5b:9f:04: 7c:2f:36:56:4e:93:6c:a0:fd:84:ad:96:83:a3:eb: 25:87:34:ce:a4:be:8c:88:74:61:7f:fc:40:5c:0f: a4:57:f0:4b:3f:3d:ad:55:8b:fe:16:b0:61:71:5c: bc:70:bf:f2:5a:d1:ee:6c:43:78:7a:9b:ba:a0:1c: 77:3e:8b:95:31:a0:ef:b1:b1:2a:a3:60:41:4e:dc: 10:e6:ab:56:91:e6:cb:98:a4:f2:46:41:30:91:78: a0:e2:eb:49:74:ef:0b:1a:8f:51:c2:0b:b9:4d:e2: 16:e5:45:22:5d:0a:3e:9e:f2:17:0b:d9:32:cc:64: 13:6d:97:c2:40:55:cd:1b:4c:4b:c3:41:fc:b7:66: f8:50:0b:a0:04:2b:3a:58:53:9a:9e:8b:97:2e:99: b7:cf:44:80:d4:ba:0a:3f:40:3b:ad:b6:90:b1:3a: b9:d3:59:ad:90:d5:55:02:88:9f:0b:b4:46:d8:ee: 27:bb:23:44:e7:ac:fa:b0:5a:dd:6e:ca:2b:f2:14: 12:8f:c5:83:e6:88:89:1e:66:19:ee:fb:d1:65:ab: af:fc:6e:fa:7d:13:c2:db:63:83:8b:38:40:d2:33: d7:e7:d5:ea:54:a5:88:0f:54:17:4b:dc:34:d8:de: df:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3F:A0:7A:32:62:17:0C:D2:46:58:14:07:B7:05:06:28:CF:83:E4 X509v3 Authority Key Identifier: keyid:EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:4d:a4:e0:95:0f:bd:dc:69:2b:f2:0b:0c:78:3f:ad:61:4d: ba:75:80:83:de:63:4b:39:fe:3c:d6:b4:db:f6:a1:be:61:33: a0:f6:85:80:f4:d4:25:c4:e5:0f:42:ab:88:8e:4f:df:a7:7a: 41:46:40:9f:1c:ab:e0:8a:77:51:eb:af:23:84:bd:a1:24:9b: 7a:b0:d1:14:6d:f1:1d:7a:df:e2:8b:00:6e:dc:79:cc:2d:d0: 32:0f:95:44:77:c9:3e:a5:51:0a:f3:3d:09:7b:4f:07:f2:a1: 36:bd:6c:b4:ec:16:e5:61:d1:23:15:93:55:31:6f:e8:bc:64: 78:0c:c4:a2:04:14:c4:5f:43:3f:e4:f6:89:4b:c6:ca:3f:41: c2:25:35:66:b0:5e:3b:43:27:04:39:a6:6b:63:35:57:8e:ab: 94:61:a2:67:d1:13:f6:b0:17:bd:a0:e9:80:2d:5d:db:e5:cb: e2:de:e6:44:47:3e:7a:45:5c:1e:d6:f3:e9:71:81:ab:0f:5d: eb:08:68:b1:f8:1c:87:8e:bc:6a:aa:8b:a1:a4:f8:40:ff:68: 9d:86:bf:97:de:28:4f:59:00:06:21:30:cd:91:4e:44:83:87: 5e:1f:a2:71:72:1b:02:7b:12:ac:8e:53:36:2a:31:fc:ce:1e: 38:a7:40:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthL9NiNRRMO07b9fUD76VdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMWJjMmVhNjI1MjM4YmI0ZTI4MjFhMThiZDVlZWVhM2E2 OGE3ZjkwHhcNMjUxMjI3MTkwMTIyWhcNMjUxMjI4MTkwMTIyWjAzMTEwLwYDVQQD EyhjYzNmYTA3YTMyNjIxNzBjZDI0NjU4MTQwN2I3MDUwNjI4Y2Y4M2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qpQzfoVmtUyZ7VbnwR8LzZWTpNs oP2ErZaDo+slhzTOpL6MiHRhf/xAXA+kV/BLPz2tVYv+FrBhcVy8cL/yWtHubEN4 epu6oBx3PouVMaDvsbEqo2BBTtwQ5qtWkebLmKTyRkEwkXig4utJdO8LGo9Rwgu5 TeIW5UUiXQo+nvIXC9kyzGQTbZfCQFXNG0xLw0H8t2b4UAugBCs6WFOanouXLpm3 z0SA1LoKP0A7rbaQsTq501mtkNVVAoifC7RG2O4nuyNE56z6sFrdbsor8hQSj8WD 5oiJHmYZ7vvRZauv/G76fRPC22ODizhA0jPX59XqVKWID1QXS9w02N7fJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMw/oHoyYhcM0kZYFAe3BQYoz4PkMB8GA1UdIwQY MBaAFOsbwupiUji7TighoYvV7uo6aKf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnh2QzZtSlNPTHRPS0NHaGk5WHU2anBvcF9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8xM2Y1M2MtMmFhMi00N2M2LTg4Y2Et NTg5MjIyNzJiYjE3LzEvNnh2QzZtSlNPTHRPS0NHaGk5WHU2anBvcF9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8xM2Y1M2MtMmFhMi00N2M2LTg4Y2EtNTg5MjIyNzJiYjE3 LzEvNnh2QzZtSlNPTHRPS0NHaGk5WHU2anBvcF9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi02k4JUP vdxpK/ILDHg/rWFNunWAg95jSzn+PNa02/ahvmEzoPaFgPTUJcTlD0KriI5P36d6 QUZAnxyr4Ip3UeuvI4S9oSSberDRFG3xHXrf4osAbtx5zC3QMg+VRHfJPqVRCvM9 CXtPB/KhNr1stOwW5WHRIxWTVTFv6LxkeAzEogQUxF9DP+T2iUvGyj9BwiU1ZrBe O0MnBDmma2M1V46rlGGiZ9ET9rAXvaDpgC1d2+XL4t7mREc+ekVcHtbz6XGBqw9d 6whosfgch468aqqLoaT4QP9onYa/l94oT1kABiEwzZFORIOHXh+icXIbAnsSrI5T Niox/M4eOKdApQ== -----END CERTIFICATE-----Generated at Sun Dec 28 03:21:52 2025 by rpki-client