This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft File: 6e5l7GbZD_j_-NFwcyBXdALoXMc.mft (raw, json) Hash identifier: RX9CN6fbkwI72BaNwl53FGcHoYPiwnn2T1m/FAKSoO4= Subject key identifier: 09:34:0F:27:CE:4B:E6:D0:A8:50:E8:0F:F3:D3:F9:CF:D1:A0:60:32 Authority key identifier: E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7 Certificate issuer: /CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7 Certificate serial: 019B71EC04A1FD7A0A1C3FB90C5724634BE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft Manifest number: 119E Signing time: Wed 31 Dec 2025 01:00:51 +0000 Manifest this update: Wed 31 Dec 2025 01:00:51 +0000 Manifest next update: Thu 01 Jan 2026 01:00:51 +0000 Files and hashes: 1: 49q3DDmrg6cVtppsLABS81MGkqg.roa (hash: Y49UGOvEecC7Z5Ts0nifT62msA+Ws1fglGSRVZSw/Hs=) 2: 6e5l7GbZD_j_-NFwcyBXdALoXMc.crl (hash: IN7vOoQY+cQ6zeWVDwoWeOvFnzb5OSbUGUJz5vd+G0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:ec:04:a1:fd:7a:0a:1c:3f:b9:0c:57:24:63:4b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7 Validity Not Before: Dec 31 01:00:51 2025 GMT Not After : Jan 1 01:00:51 2026 GMT Subject: CN=09340f27ce4be6d0a850e80ff3d3f9cfd1a06032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:89:d8:b8:93:48:37:ce:d4:98:dc:00:b0:9c: b5:9b:25:3a:3c:fa:e2:9e:a3:34:a4:54:dc:bf:d4: 46:86:19:cb:46:86:82:4c:19:d4:91:65:cf:4d:fd: fd:bb:02:e7:57:10:4c:99:1e:99:17:c4:21:7c:1d: 64:7e:b0:b3:67:7f:f6:bd:6d:27:ae:04:67:a8:64: b4:fc:f9:a3:82:61:6a:83:b6:8a:d7:1a:13:7a:f5: 18:34:4b:09:41:c6:7b:22:aa:d2:88:c9:4d:d8:4a: 32:0e:08:49:db:ce:26:42:27:b5:f8:16:5f:72:ec: 83:1a:81:8f:46:51:75:c0:1e:0c:0d:86:c2:e6:2f: 28:af:96:73:4b:b0:99:92:4f:a8:f4:c2:55:00:90: 9f:49:66:84:a8:12:13:65:e7:7e:45:4a:fd:d9:3a: 24:df:e9:c5:40:7a:2c:59:70:7b:d2:ba:92:0d:6e: fd:ee:b0:32:ae:8a:ce:ee:eb:4e:31:db:9a:82:af: 5a:0c:f0:3b:1a:5f:64:90:97:87:12:83:68:de:50: da:2e:cc:e0:e4:10:aa:2d:a0:33:a9:66:b7:59:d1: 29:e6:fd:53:ef:42:6c:d7:f9:de:3e:27:57:92:12: 88:53:70:8b:6b:67:28:d3:94:e5:ab:53:4b:d6:b2: 46:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:34:0F:27:CE:4B:E6:D0:A8:50:E8:0F:F3:D3:F9:CF:D1:A0:60:32 X509v3 Authority Key Identifier: keyid:E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:e5:b1:15:4f:58:42:63:cd:42:9f:44:1a:ed:49:be:7c:c5: f6:68:2e:b4:69:ea:d1:29:c4:b6:6d:3b:b4:5d:6d:24:06:b8: cb:c4:85:b4:4e:91:ee:4f:ed:5f:6b:59:ca:58:69:7f:44:8a: 2c:80:9f:3a:a7:07:84:56:ac:28:cf:df:f2:06:62:f2:fc:65: 63:b7:d5:3c:1d:52:ff:d1:10:f4:14:16:63:b7:fb:1e:5a:d8: 11:03:65:81:73:13:77:d3:74:c8:4c:b3:7f:ef:f1:c6:5f:a3: 5b:27:ab:ff:4c:04:be:13:d0:6a:4d:f0:74:40:28:48:66:5c: c0:fb:93:c3:21:2f:28:19:1a:f8:bb:32:75:70:6c:e2:53:79: e3:4b:7e:72:08:ce:8e:a0:4a:16:2b:69:9b:1f:55:b7:ac:f5: 6b:88:82:62:8c:aa:31:0e:bb:38:84:b3:c5:e2:ed:88:74:af: 3c:d3:f1:2b:15:8a:29:c6:4c:6c:04:78:d7:59:38:65:a9:5e: a8:bf:cf:a9:19:89:1b:8b:de:fc:97:05:4f:8e:71:16:d7:e3: 7e:52:b6:b1:2c:bb:9a:51:0b:67:5b:3b:9d:69:77:d2:e6:89: 66:56:d9:cd:12:16:60:17:fd:89:41:bc:de:97:b2:f1:dc:f3: c3:48:a2:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtx7ASh/XoKHD+5DFckY0voMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZWU2NWVjNjZkOTBmZjhmZmY4ZDE3MDczMjA1Nzc0MDJl ODVjYzcwHhcNMjUxMjMxMDEwMDUxWhcNMjYwMTAxMDEwMDUxWjAzMTEwLwYDVQQD EygwOTM0MGYyN2NlNGJlNmQwYTg1MGU4MGZmM2QzZjljZmQxYTA2MDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAronYuJNIN87UmNwAsJy1myU6PPri nqM0pFTcv9RGhhnLRoaCTBnUkWXPTf39uwLnVxBMmR6ZF8QhfB1kfrCzZ3/2vW0n rgRnqGS0/PmjgmFqg7aK1xoTevUYNEsJQcZ7IqrSiMlN2EoyDghJ284mQie1+BZf cuyDGoGPRlF1wB4MDYbC5i8or5ZzS7CZkk+o9MJVAJCfSWaEqBITZed+RUr92Tok 3+nFQHosWXB70rqSDW797rAyrorO7utOMduagq9aDPA7Gl9kkJeHEoNo3lDaLszg 5BCqLaAzqWa3WdEp5v1T70Js1/nePidXkhKIU3CLa2co05Tlq1NL1rJG8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAk0DyfOS+bQqFDoD/PT+c/RoGAyMB8GA1UdIwQY MBaAFOnuZexm2Q/4//jRcHMgV3QC6FzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmU1bDdHYlpEX2pfLU5Gd2N5QlhkQUxvWE1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mZGUyZjUtYWYzNS00YTQ5LTliNDQt OTQ2ZDkyYzNmMDkzLzEvNmU1bDdHYlpEX2pfLU5Gd2N5QlhkQUxvWE1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mZGUyZjUtYWYzNS00YTQ5LTliNDQtOTQ2ZDkyYzNmMDkz LzEvNmU1bDdHYlpEX2pfLU5Gd2N5QlhkQUxvWE1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAueWxFU9Y QmPNQp9EGu1JvnzF9mgutGnq0SnEtm07tF1tJAa4y8SFtE6R7k/tX2tZylhpf0SK LICfOqcHhFasKM/f8gZi8vxlY7fVPB1S/9EQ9BQWY7f7HlrYEQNlgXMTd9N0yEyz f+/xxl+jWyer/0wEvhPQak3wdEAoSGZcwPuTwyEvKBka+LsydXBs4lN540t+cgjO jqBKFitpmx9Vt6z1a4iCYoyqMQ67OISzxeLtiHSvPNPxKxWKKcZMbAR411k4Zale qL/PqRmJG4ve/JcFT45xFtfjflK2sSy7mlELZ1s7nWl30uaJZlbZzRIWYBf9iUG8 3pey8dzzw0iiyA== -----END CERTIFICATE-----Generated at Wed Dec 31 05:21:32 2025 by rpki-client