This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft File: 6Ed60hy3iRQzE8QLGfjMACPeiKY.mft (raw, json) Hash identifier: 9zlU15pAn7gHFYePuNVFT+sHHurCUInas9mhSa1cnkQ= Subject key identifier: 70:B7:C8:BC:FE:FB:C8:AE:AF:03:F0:87:B6:11:20:1F:F6:B4:B4:66 Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6 Certificate issuer: /CN=e8477ad21cb789143313c40b19f8cc0023de88a6 Certificate serial: 019B3F7EC569023B142CB153E4A69ED6DDDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft Manifest number: 024F Signing time: Sun 21 Dec 2025 06:00:31 +0000 Manifest this update: Sun 21 Dec 2025 06:00:31 +0000 Manifest next update: Mon 22 Dec 2025 06:00:31 +0000 Files and hashes: 1: 2M47-6eKALJ6FmiVAowRa7gLSUI.roa (hash: sTE5YWztn/a2MX2OSX/0Yz9OgI3CBWwdi/QI1zYZYUk=) 2: 6Ed60hy3iRQzE8QLGfjMACPeiKY.crl (hash: 5hsqi9d3OcQMcSa4AL4bgN2ppQWg6qiRFXMHKesAzlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:c5:69:02:3b:14:2c:b1:53:e4:a6:9e:d6:dd:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6 Validity Not Before: Dec 21 06:00:31 2025 GMT Not After : Dec 22 06:00:31 2025 GMT Subject: CN=70b7c8bcfefbc8aeaf03f087b611201ff6b4b466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4e:14:d6:00:66:a1:e4:d6:26:fd:d4:7c:4a: cd:a4:ca:02:80:02:ac:6f:b5:94:ff:d9:20:0b:71: 2d:4e:aa:b4:94:87:f7:4c:b8:3f:04:67:ec:7f:c5: 57:39:bd:21:be:e8:05:39:e4:50:f7:52:a0:b7:79: a7:74:8f:74:1c:f4:59:c9:e8:0a:bc:38:30:4d:b5: ef:ea:5d:06:b3:8f:59:dd:a6:a0:20:bb:08:d2:ec: 9a:9a:f6:43:dd:57:67:e4:34:9c:bf:2a:29:ed:6c: c0:1a:5c:0e:b5:63:af:cc:6d:0f:50:55:b7:ac:b6: 31:d0:91:4c:e5:ac:58:e2:85:df:6c:56:53:09:13: 99:86:26:54:f7:f4:24:80:25:1f:62:e4:00:d0:63: ab:5b:0c:fc:ef:a7:17:e2:95:a6:78:63:09:72:b6: ab:49:4e:e5:82:2c:a1:bc:99:9e:33:c4:13:8e:c0: 67:10:5e:b2:17:24:a3:8e:b8:8a:7e:e7:b8:30:18: 24:54:8a:73:b8:db:b8:2a:82:0a:46:0f:53:d9:11: 4c:fa:27:7e:3d:20:b4:82:27:52:dd:6c:67:18:ae: e7:c9:f2:62:42:00:77:de:e0:b6:91:5e:e8:96:8b: 09:8a:21:b0:13:27:b7:d8:84:2e:12:66:03:e2:91: 72:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B7:C8:BC:FE:FB:C8:AE:AF:03:F0:87:B6:11:20:1F:F6:B4:B4:66 X509v3 Authority Key Identifier: keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:d9:9f:d0:ae:d3:d5:39:11:07:7b:a5:66:91:7a:15:00:f2: b6:81:8f:a0:37:a0:f5:08:e0:3f:63:b2:2d:60:e6:e1:65:4c: 4c:51:ba:c8:41:68:0d:62:44:94:41:f5:e5:20:7e:8a:47:b9: 4e:18:93:bc:b0:ce:71:99:54:7f:9d:1e:52:b9:21:a9:0f:d1: c5:50:8a:19:39:a8:dc:43:3d:da:66:86:e4:c0:de:f1:05:d9: 99:dd:f7:ab:c6:49:df:47:32:ba:97:51:3c:89:97:4d:98:90: 48:e6:0c:9b:23:7a:07:14:64:42:38:dc:f7:eb:86:6e:c7:33: c5:ba:83:7f:3d:ce:a6:6c:82:fa:c0:ce:24:35:27:16:64:76: 23:c8:63:6f:dd:07:78:38:de:58:1e:81:b4:f5:26:ee:b8:e9: f3:12:1c:76:ec:ce:88:3b:f3:58:43:64:83:c5:a6:38:b9:4c: 07:fb:63:e8:82:a2:05:5e:37:ed:ed:ce:95:11:c3:0d:3f:59: 79:2d:62:fb:04:50:d1:da:5c:5b:c7:38:06:d7:af:e1:ce:b8: 69:31:8d:8e:06:28:06:40:ce:ca:b9:30:23:04:16:f2:5e:3d: c7:ad:a7:9b:68:46:6b:07:b7:32:75:90:b2:dd:52:40:33:0e: ff:e3:55:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fsVpAjsULLFT5Kae1t3cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDc3YWQyMWNiNzg5MTQzMzEzYzQwYjE5ZjhjYzAwMjNk ZTg4YTYwHhcNMjUxMjIxMDYwMDMxWhcNMjUxMjIyMDYwMDMxWjAzMTEwLwYDVQQD Eyg3MGI3YzhiY2ZlZmJjOGFlYWYwM2YwODdiNjExMjAxZmY2YjRiNDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk4U1gBmoeTWJv3UfErNpMoCgAKs b7WU/9kgC3EtTqq0lIf3TLg/BGfsf8VXOb0hvugFOeRQ91Kgt3mndI90HPRZyegK vDgwTbXv6l0Gs49Z3aagILsI0uyamvZD3Vdn5DScvyop7WzAGlwOtWOvzG0PUFW3 rLYx0JFM5axY4oXfbFZTCROZhiZU9/QkgCUfYuQA0GOrWwz876cX4pWmeGMJcrar SU7lgiyhvJmeM8QTjsBnEF6yFySjjriKfue4MBgkVIpzuNu4KoIKRg9T2RFM+id+ PSC0gidS3WxnGK7nyfJiQgB33uC2kV7olosJiiGwEye32IQuEmYD4pFytQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHC3yLz++8iurwPwh7YRIB/2tLRmMB8GA1UdIwQY MBaAFOhHetIct4kUMxPECxn4zAAj3oimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAt NjA0NTg0ODk1OTI1LzEvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAtNjA0NTg0ODk1OTI1 LzEvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldmf0K7T 1TkRB3ulZpF6FQDytoGPoDeg9QjgP2OyLWDm4WVMTFG6yEFoDWJElEH15SB+ike5 ThiTvLDOcZlUf50eUrkhqQ/RxVCKGTmo3EM92maG5MDe8QXZmd33q8ZJ30cyupdR PImXTZiQSOYMmyN6BxRkQjjc9+uGbsczxbqDfz3OpmyC+sDOJDUnFmR2I8hjb90H eDjeWB6BtPUm7rjp8xIcduzOiDvzWENkg8WmOLlMB/tj6IKiBV437e3OlRHDDT9Z eS1i+wRQ0dpcW8c4Btev4c64aTGNjgYoBkDOyrkwIwQW8l49x62nm2hGawe3MnWQ st1SQDMO/+NVYg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:34:42 2025 by rpki-client