This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft File: 6NHRX1kR1I0cWe7zdPezf3HU678.mft (raw, json) Hash identifier: NVLcASU4q04JwQ4JxigdGkcu2QYAcyGZ39BU89vEis8= Subject key identifier: E4:B4:D5:DC:74:A0:67:18:89:37:22:4B:DD:01:F3:4F:62:1F:B4:7B Authority key identifier: E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF Certificate issuer: /CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf Certificate serial: 019B3CB4CE4B6CAD0E84EEFC51818F05E3DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft Manifest number: 0F26 Signing time: Sat 20 Dec 2025 17:00:40 +0000 Manifest this update: Sat 20 Dec 2025 17:00:40 +0000 Manifest next update: Sun 21 Dec 2025 17:00:40 +0000 Files and hashes: 1: 6NHRX1kR1I0cWe7zdPezf3HU678.crl (hash: Oou8jB+PNCTNQpHarQEkkJW91NbxDjEc1cB+dloqPnc=) 2: mqack1zg1aDbcOyT4cRxSwy3UDQ.roa (hash: ZwWlDd1N6JTl2qCwygwMAx3Ukou4tkcRR0CWTPfDGaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:ce:4b:6c:ad:0e:84:ee:fc:51:81:8f:05:e3:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf Validity Not Before: Dec 20 17:00:40 2025 GMT Not After : Dec 21 17:00:40 2025 GMT Subject: CN=e4b4d5dc74a067188937224bdd01f34f621fb47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ef:06:0e:bc:9b:5f:22:eb:54:dd:3e:53:5c: 7b:3d:1a:85:c3:74:2b:5d:22:bb:d1:e9:8a:0c:b2: 5a:7f:ba:6e:e2:a9:5d:a4:42:4f:0f:46:fd:3d:fc: 41:3b:45:d4:23:31:f0:d5:1a:96:a5:a9:be:ab:1d: f1:db:40:6b:b7:db:84:df:3a:34:51:ae:f4:9c:81: af:a8:d7:df:83:53:9b:24:3b:54:fc:3d:66:93:e2: a2:52:f4:c9:80:eb:9e:f9:c4:ae:79:21:9b:d7:8a: 76:13:75:15:f4:ae:36:1c:7f:12:9a:a8:55:6c:07: 05:32:98:dc:ba:7e:e9:3d:f4:b8:7c:f8:15:a0:f1: 50:03:39:1f:8b:fa:82:87:6b:c4:cb:39:c8:a5:79: 31:ab:de:1e:5b:db:fa:1a:f0:75:22:f3:b0:0a:24: d9:e4:aa:88:c1:30:bd:15:ce:e1:f8:d2:1d:d0:43: 10:f2:e2:b4:c6:12:d1:35:fc:bb:30:1d:03:45:07: b2:79:37:de:25:55:27:a8:d1:90:e5:cc:37:8d:06: a8:64:75:87:31:07:e9:1b:71:17:01:2b:a1:2b:6e: eb:5e:3a:e2:02:f1:3a:9d:12:fd:b7:2b:c8:ba:05: e1:82:cf:f5:63:5c:78:5b:58:fb:b0:ce:e2:d7:f6: 2f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B4:D5:DC:74:A0:67:18:89:37:22:4B:DD:01:F3:4F:62:1F:B4:7B X509v3 Authority Key Identifier: keyid:E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:bc:80:9d:6d:c6:e1:c8:0f:fe:e9:5c:5a:13:fd:ba:dd:81: ee:75:7a:b7:7b:75:35:d7:8f:7d:42:74:99:98:82:5a:0f:b1: a5:87:b4:39:3a:84:fb:b6:69:09:56:13:e5:7a:56:83:a9:9f: 30:e2:6d:c7:72:f7:0d:b3:9a:f6:e1:5b:e3:98:4c:e6:cd:aa: 26:d7:7c:78:24:86:5b:e1:7a:4e:fd:35:bd:60:18:b9:0c:05: 96:06:28:e1:9e:3e:34:54:d4:94:31:ac:1a:12:ab:fd:4f:05: 03:ee:81:a5:da:21:bd:af:6a:60:f1:04:61:21:cc:6a:bc:2b: 7c:ae:de:77:67:bf:8a:97:8f:c5:2f:2f:f1:bf:3d:bc:0e:a4: 6a:f4:85:e3:a1:da:85:8b:ad:c5:87:cc:fd:ee:34:49:a3:c2: aa:d6:ad:51:b5:0d:63:e1:cf:57:a8:52:93:e2:a5:cb:30:cd: 1d:8e:6c:4e:75:ce:78:28:0e:22:ad:41:44:41:35:ce:bb:67: 96:0e:d5:fc:36:4d:72:5c:54:b8:84:96:d3:14:a2:33:24:67: a2:0a:41:c6:cb:53:05:9c:33:09:7e:df:53:13:af:d7:b8:12: ab:25:b1:29:e5:e6:16:df:22:df:b3:b9:0f:27:bf:d0:82:8e: e3:98:90:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tM5LbK0OhO78UYGPBePbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZDFkMTVmNTkxMWQ0OGQxYzU5ZWVmMzc0ZjdiMzdmNzFk NGViYmYwHhcNMjUxMjIwMTcwMDQwWhcNMjUxMjIxMTcwMDQwWjAzMTEwLwYDVQQD EyhlNGI0ZDVkYzc0YTA2NzE4ODkzNzIyNGJkZDAxZjM0ZjYyMWZiNDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+8GDrybXyLrVN0+U1x7PRqFw3Qr XSK70emKDLJaf7pu4qldpEJPD0b9PfxBO0XUIzHw1RqWpam+qx3x20Brt9uE3zo0 Ua70nIGvqNffg1ObJDtU/D1mk+KiUvTJgOue+cSueSGb14p2E3UV9K42HH8SmqhV bAcFMpjcun7pPfS4fPgVoPFQAzkfi/qCh2vEyznIpXkxq94eW9v6GvB1IvOwCiTZ 5KqIwTC9Fc7h+NId0EMQ8uK0xhLRNfy7MB0DRQeyeTfeJVUnqNGQ5cw3jQaoZHWH MQfpG3EXASuhK27rXjriAvE6nRL9tyvIugXhgs/1Y1x4W1j7sM7i1/YvbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOS01dx0oGcYiTciS90B809iH7R7MB8GA1UdIwQY MBaAFOjR0V9ZEdSNHFnu83T3s39x1Ou/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk5IUlgxa1IxSTBjV2U3emRQZXpmM0hVNjc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NzI5ZTQtNmE2ZC00YmM1LTg4ZTEt NjZmOGI2ZTE2YjhhLzEvNk5IUlgxa1IxSTBjV2U3emRQZXpmM0hVNjc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NzI5ZTQtNmE2ZC00YmM1LTg4ZTEtNjZmOGI2ZTE2Yjhh LzEvNk5IUlgxa1IxSTBjV2U3emRQZXpmM0hVNjc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvryAnW3G 4cgP/ulcWhP9ut2B7nV6t3t1NdePfUJ0mZiCWg+xpYe0OTqE+7ZpCVYT5XpWg6mf MOJtx3L3DbOa9uFb45hM5s2qJtd8eCSGW+F6Tv01vWAYuQwFlgYo4Z4+NFTUlDGs GhKr/U8FA+6Bpdohva9qYPEEYSHMarwrfK7ed2e/ipePxS8v8b89vA6kavSF46Ha hYutxYfM/e40SaPCqtatUbUNY+HPV6hSk+KlyzDNHY5sTnXOeCgOIq1BREE1zrtn lg7V/DZNclxUuISW0xSiMyRnogpBxstTBZwzCX7fUxOv17gSqyWxKeXmFt8i37O5 Dye/0IKO45iQEg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:20:32 2025 by rpki-client