This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft File: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft (raw, json) Hash identifier: horDe9521Tifip2N6FXKsvUkEvZBmgCQF+ojuz3KULE= Subject key identifier: 21:89:73:EA:B4:39:0E:D2:6E:18:E1:E4:C4:3F:E1:4D:C7:5C:04:32 Authority key identifier: E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2 Certificate issuer: /CN=e972a6c2ebea46413072f90dd526d78f1102f4f2 Certificate serial: 019B33B191EFD018ED67B375947430C5AFFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft Manifest number: 0842 Signing time: Thu 18 Dec 2025 23:00:33 +0000 Manifest this update: Thu 18 Dec 2025 23:00:33 +0000 Manifest next update: Fri 19 Dec 2025 23:00:33 +0000 Files and hashes: 1: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl (hash: yF5Zqf2MZSu82xq90zq3X32oYac0BjBXcuvlO6WDHRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:91:ef:d0:18:ed:67:b3:75:94:74:30:c5:af:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e972a6c2ebea46413072f90dd526d78f1102f4f2 Validity Not Before: Dec 18 23:00:33 2025 GMT Not After : Dec 19 23:00:33 2025 GMT Subject: CN=218973eab4390ed26e18e1e4c43fe14dc75c0432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2e:1c:7f:f3:d4:1e:28:77:71:a7:82:21:a0: 11:f0:37:90:78:d0:50:75:97:60:9f:49:d6:79:a7: 5b:f9:9f:75:3a:1d:6a:14:68:6f:5c:4e:16:d5:fb: 78:2a:50:fe:cb:03:6f:ce:bc:53:5a:e4:84:08:15: d7:f7:ad:11:d8:f3:a9:24:e8:86:e4:18:65:d7:b1: 4f:b1:22:64:b2:32:68:ca:47:88:f4:44:5c:a3:46: 12:d4:dd:69:c8:c3:a5:ae:9c:de:33:5f:20:3e:c0: 08:04:e2:48:36:e0:55:f9:bf:93:2b:88:5c:3c:d1: c7:4e:61:04:23:eb:a3:c5:9b:6f:23:35:15:f1:9f: 92:d6:83:c1:79:a4:56:e4:88:41:c2:a1:08:08:d8: 35:bb:f2:82:c9:ab:18:b8:73:37:4a:7e:b7:6a:ae: 8d:67:87:3c:6f:aa:7f:99:3f:7c:b8:06:ff:79:7c: 25:81:96:77:b4:75:f9:e7:15:8b:a9:7f:7b:22:5a: 9a:e5:22:cb:a6:90:1c:22:89:0c:77:e3:d8:68:98: be:66:02:59:aa:83:ad:7d:b5:3d:4e:6c:1e:83:0c: 1e:ea:95:ac:43:39:ec:81:88:db:80:4f:98:83:52: c2:96:1a:4b:9d:39:30:fb:6a:dc:15:99:20:23:1e: 82:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:89:73:EA:B4:39:0E:D2:6E:18:E1:E4:C4:3F:E1:4D:C7:5C:04:32 X509v3 Authority Key Identifier: keyid:E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f4:ba:00:73:17:fa:75:26:72:52:b3:98:80:6c:ec:eb:3c: b3:2a:c0:3b:f5:17:89:51:ad:e3:8d:65:cc:97:e4:98:ed:9b: ce:f4:6d:5a:78:6d:d2:7b:4f:8b:9a:db:73:ad:55:af:65:2d: 95:0a:55:28:46:bb:aa:8a:fc:73:cc:14:5c:51:f7:f1:2e:31: 49:cb:a1:75:7a:e1:62:74:35:18:7c:00:85:76:73:55:1a:f8: 82:6f:d8:ec:aa:0a:86:4c:e2:06:13:43:81:7b:1c:79:13:40: d1:27:f4:16:09:6b:a2:91:70:0c:8a:63:69:65:91:06:ec:0e: 5a:a9:08:b5:2e:14:ea:f1:7c:5c:46:4f:ea:55:22:a1:ca:07: 15:0c:1c:3c:96:a9:9a:b1:d1:1d:a5:58:4d:2a:85:e1:86:c5: 0e:e2:e6:d9:96:d9:9e:31:cb:de:b0:3d:42:54:b7:6e:b2:b7: 70:90:1b:5c:96:94:8a:7b:04:b2:ff:0a:e1:b5:d7:78:38:6b: d4:a5:b6:d0:e2:24:b4:cc:ba:24:48:8a:c4:c3:dd:f2:f1:ba: 68:74:21:12:10:e2:0c:57:6a:e2:e9:b7:95:14:b8:25:37:27: f1:24:67:b0:fa:dd:c9:0a:e4:fc:7f:c9:3f:a5:37:fa:26:15: e2:be:86:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsZHv0BjtZ7N1lHQwxa/7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzJhNmMyZWJlYTQ2NDEzMDcyZjkwZGQ1MjZkNzhmMTEw MmY0ZjIwHhcNMjUxMjE4MjMwMDMzWhcNMjUxMjE5MjMwMDMzWjAzMTEwLwYDVQQD EygyMTg5NzNlYWI0MzkwZWQyNmUxOGUxZTRjNDNmZTE0ZGM3NWMwNDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS4cf/PUHih3caeCIaAR8DeQeNBQ dZdgn0nWeadb+Z91Oh1qFGhvXE4W1ft4KlD+ywNvzrxTWuSECBXX960R2POpJOiG 5Bhl17FPsSJksjJoykeI9ERco0YS1N1pyMOlrpzeM18gPsAIBOJINuBV+b+TK4hc PNHHTmEEI+ujxZtvIzUV8Z+S1oPBeaRW5IhBwqEICNg1u/KCyasYuHM3Sn63aq6N Z4c8b6p/mT98uAb/eXwlgZZ3tHX55xWLqX97Ilqa5SLLppAcIokMd+PYaJi+ZgJZ qoOtfbU9Tmwegwwe6pWsQznsgYjbgE+Yg1LClhpLnTkw+2rcFZkgIx6CpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGJc+q0OQ7Sbhjh5MQ/4U3HXAQyMB8GA1UdIwQY MBaAFOlypsLr6kZBMHL5DdUm148RAvTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iNzYyOGQtNDI2Yy00ODg5LWEwMGMt NGY5NzRjOTc3OTQ1LzEvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9iNzYyOGQtNDI2Yy00ODg5LWEwMGMtNGY5NzRjOTc3OTQ1 LzEvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvS6AHMX +nUmclKzmIBs7Os8syrAO/UXiVGt441lzJfkmO2bzvRtWnht0ntPi5rbc61Vr2Ut lQpVKEa7qor8c8wUXFH38S4xScuhdXrhYnQ1GHwAhXZzVRr4gm/Y7KoKhkziBhND gXsceRNA0Sf0FglropFwDIpjaWWRBuwOWqkItS4U6vF8XEZP6lUiocoHFQwcPJap mrHRHaVYTSqF4YbFDuLm2ZbZnjHL3rA9QlS3brK3cJAbXJaUinsEsv8K4bXXeDhr 1KW20OIktMy6JEiKxMPd8vG6aHQhEhDiDFdq4um3lRS4JTcn8SRnsPrdyQrk/H/J P6U3+iYV4r6GFw== -----END CERTIFICATE-----Generated at Fri Dec 19 02:21:11 2025 by rpki-client