This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft File: 6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft (raw, json) Hash identifier: T397eJRlMfKFBmFhL2T7R6fMq4CcwasKYlENkzQWNgY= Subject key identifier: C2:63:85:99:B5:DC:9A:AC:43:42:94:3C:49:63:59:CB:1F:85:48:E0 Authority key identifier: EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D Certificate issuer: /CN=ebf36087c3fcecfb006f518d7811b255ea57c90d Certificate serial: 019B4C9671B8C452557D2C5F4B4E7A8CCB25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft Manifest number: 1352 Signing time: Tue 23 Dec 2025 19:01:26 +0000 Manifest this update: Tue 23 Dec 2025 19:01:26 +0000 Manifest next update: Wed 24 Dec 2025 19:01:26 +0000 Files and hashes: 1: 6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl (hash: wTtyOaudEM9VZEsFIICRaWE2kXzMGIW2nqXKOMeOXyM=) 2: Cd-K1MEWA2ryKgiTfKMlpJrD0GQ.roa (hash: B7DPcOBfNaFm0TXa9BBHsfzUSprwVkey6QgyDWplAfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:96:71:b8:c4:52:55:7d:2c:5f:4b:4e:7a:8c:cb:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf36087c3fcecfb006f518d7811b255ea57c90d Validity Not Before: Dec 23 19:01:26 2025 GMT Not After : Dec 24 19:01:26 2025 GMT Subject: CN=c2638599b5dc9aac4342943c496359cb1f8548e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:48:31:00:30:db:c8:b4:86:e8:e9:2d:fd:56: 0f:72:84:f4:1b:c3:df:44:44:e6:63:27:86:7d:4d: 7b:9c:a2:da:9d:4c:ad:a8:01:f0:73:7e:67:3e:9d: 5b:48:9c:ea:68:07:6a:07:5c:aa:2c:b3:ce:15:19: 7d:95:a9:cc:f1:d2:a9:9d:ce:ea:2e:1a:99:63:6e: 23:90:17:3b:8b:98:48:ef:e1:7c:4c:94:68:8e:fd: 11:cc:56:47:08:a0:ae:2c:25:18:26:93:eb:e6:3f: ec:cd:7a:52:a2:ed:f5:c8:74:e0:ff:5b:77:ae:11: 07:dd:e7:c0:4d:1c:80:42:2f:66:4f:5f:f3:40:89: 47:40:d4:ef:bf:51:dc:ed:91:0d:32:25:85:10:a1: 15:c8:3e:c0:f9:7a:18:58:fe:53:4a:75:87:81:29: 8e:a3:94:e6:39:e6:3d:2d:47:97:21:60:5d:38:41: 13:db:f6:2c:a7:22:b6:2c:50:c0:9b:57:97:c3:64: 10:57:f9:ba:0b:46:2b:b0:a8:14:9c:59:2f:29:c5: 49:78:d5:aa:50:de:80:24:fd:9d:13:92:de:c7:99: 8e:67:32:6e:06:12:48:d5:d7:a1:fa:68:31:31:4d: 31:4d:68:aa:51:41:7c:e2:9c:e0:a6:bb:ef:f4:1c: 54:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:63:85:99:B5:DC:9A:AC:43:42:94:3C:49:63:59:CB:1F:85:48:E0 X509v3 Authority Key Identifier: keyid:EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:14:e7:c5:5f:fd:09:ba:49:56:37:5b:13:61:02:c9:61:29: 16:8b:33:11:8e:c8:da:ec:97:a6:07:cb:01:ee:01:eb:22:8c: ab:f5:cf:b9:07:a3:d4:57:d7:ba:ab:2d:7a:e7:69:9b:e6:85: dd:d2:03:2f:9a:ff:15:4a:18:c3:ed:6e:8a:f4:33:f5:83:11: 7b:3d:50:93:66:43:20:c3:6f:c7:37:7f:99:38:b1:f2:ea:af: 63:a0:99:20:01:dd:4d:27:bd:dd:46:fc:1c:23:e9:a7:db:74: 24:13:53:b0:ee:6d:e2:5b:2a:c3:1c:55:34:eb:93:a5:b8:17: 6e:1c:bd:85:b8:b7:60:b7:fd:0d:9a:b5:9c:36:18:7d:55:c9: 99:93:df:25:1c:7b:46:4b:ef:ce:16:05:0e:5e:d1:d1:14:d6: 97:92:c1:20:a1:01:68:c9:30:bb:65:f0:95:e7:19:05:00:d4: 17:99:59:a4:65:d9:c6:8a:48:7c:8f:6a:3e:51:77:91:d7:55: 31:5a:da:25:15:18:58:03:27:ee:47:70:c0:09:ce:a3:0b:10: 49:80:10:c1:94:76:9b:d5:dd:8b:29:93:88:3c:c1:e9:e2:ce: 9b:ca:df:f6:a3:42:7b:c0:4e:fc:21:8f:76:76:b3:fd:88:e2: bf:b9:aa:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMlnG4xFJVfSxfS056jMslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZjM2MDg3YzNmY2VjZmIwMDZmNTE4ZDc4MTFiMjU1ZWE1 N2M5MGQwHhcNMjUxMjIzMTkwMTI2WhcNMjUxMjI0MTkwMTI2WjAzMTEwLwYDVQQD EyhjMjYzODU5OWI1ZGM5YWFjNDM0Mjk0M2M0OTYzNTljYjFmODU0OGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEgxADDbyLSG6Okt/VYPcoT0G8Pf RETmYyeGfU17nKLanUytqAHwc35nPp1bSJzqaAdqB1yqLLPOFRl9lanM8dKpnc7q LhqZY24jkBc7i5hI7+F8TJRojv0RzFZHCKCuLCUYJpPr5j/szXpSou31yHTg/1t3 rhEH3efATRyAQi9mT1/zQIlHQNTvv1Hc7ZENMiWFEKEVyD7A+XoYWP5TSnWHgSmO o5TmOeY9LUeXIWBdOEET2/YspyK2LFDAm1eXw2QQV/m6C0YrsKgUnFkvKcVJeNWq UN6AJP2dE5Lex5mOZzJuBhJI1deh+mgxMU0xTWiqUUF84pzgprvv9BxUmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJjhZm13JqsQ0KUPEljWcsfhUjgMB8GA1UdIwQY MBaAFOvzYIfD/Oz7AG9RjXgRslXqV8kNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNl9OZ2g4UDg3UHNBYjFHTmVCR3lWZXBYeVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80NjQzMWUtNDk1MS00ZTFhLTkxOTUt NjhhNDU1MWY2OGE4LzEvNl9OZ2g4UDg3UHNBYjFHTmVCR3lWZXBYeVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80NjQzMWUtNDk1MS00ZTFhLTkxOTUtNjhhNDU1MWY2OGE4 LzEvNl9OZ2g4UDg3UHNBYjFHTmVCR3lWZXBYeVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBTnxV/9 CbpJVjdbE2ECyWEpFoszEY7I2uyXpgfLAe4B6yKMq/XPuQej1FfXuqsteudpm+aF 3dIDL5r/FUoYw+1uivQz9YMRez1Qk2ZDIMNvxzd/mTix8uqvY6CZIAHdTSe93Ub8 HCPpp9t0JBNTsO5t4lsqwxxVNOuTpbgXbhy9hbi3YLf9DZq1nDYYfVXJmZPfJRx7 RkvvzhYFDl7R0RTWl5LBIKEBaMkwu2XwlecZBQDUF5lZpGXZxopIfI9qPlF3kddV MVraJRUYWAMn7kdwwAnOowsQSYAQwZR2m9XdiymTiDzB6eLOm8rf9qNCe8BO/CGP dnaz/Yjiv7mqKg== -----END CERTIFICATE-----Generated at Wed Dec 24 01:59:26 2025 by rpki-client