This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft File: 6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft (raw, json) Hash identifier: YZL5sGItOR3XCoBOvC/MsUKHZP++V0BO/9Y9fE0uEmo= Subject key identifier: 85:76:23:3B:46:DF:67:2E:74:02:07:8D:84:86:B2:4C:C2:3F:C4:D7 Authority key identifier: EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0 Certificate issuer: /CN=eb36779b13aec780b0d437f8444ab0f443a05dd0 Certificate serial: 019B4EBB773CB63159B451339FFDBBC44A30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft Manifest number: 1092 Signing time: Wed 24 Dec 2025 05:01:07 +0000 Manifest this update: Wed 24 Dec 2025 05:01:07 +0000 Manifest next update: Thu 25 Dec 2025 05:01:07 +0000 Files and hashes: 1: 6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl (hash: Ym0fHUYEmnfgLZ8YmA8AQBHjSqfl7QHsYG7eSCmH4aE=) 2: bbiCAC8k2CawpBPgM6fTMAmYAY0.roa (hash: FIWbsZ3JZZD2fluaVWFHhluHhUwUg7ek5YY8fTNR7Ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:77:3c:b6:31:59:b4:51:33:9f:fd:bb:c4:4a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb36779b13aec780b0d437f8444ab0f443a05dd0 Validity Not Before: Dec 24 05:01:07 2025 GMT Not After : Dec 25 05:01:07 2025 GMT Subject: CN=8576233b46df672e7402078d8486b24cc23fc4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b5:a6:9c:40:21:59:c9:a4:54:61:98:42:27: 3d:3a:f3:f3:92:8b:52:cf:f3:77:16:b0:ec:4a:c0: 4d:34:8e:0a:c9:c6:20:67:e3:e8:c2:94:95:b0:54: 76:d6:21:11:c1:1d:5d:69:3f:df:34:ea:c8:1e:a8: 6b:7e:94:c1:ee:e4:0f:2b:61:f9:a8:28:b1:3e:1a: 4d:c1:51:3d:3c:31:55:bf:f1:29:32:0a:31:1a:7c: 1b:8c:5c:54:63:51:71:76:e2:68:2e:62:3d:05:db: 46:8d:fc:b9:28:ad:a6:d0:82:a4:4d:f5:10:67:79: 73:8a:24:b7:27:da:7a:37:ef:ec:b6:72:fb:a8:fd: b0:52:68:83:a5:f7:47:29:0a:3b:ab:16:1a:4a:c1: 78:3d:27:42:e1:c3:37:b2:97:45:4b:40:d3:e0:42: 4a:6f:9d:42:be:28:a8:bd:b6:a4:c9:c3:f6:f8:1c: 98:d7:c8:ed:b1:45:d9:bf:14:7c:6b:0b:26:84:4f: 23:a6:b8:79:04:33:48:c7:f6:bd:8c:01:57:a0:70: 9b:7d:4e:bc:18:af:e1:8f:24:22:c2:53:61:c5:66: 40:3a:dc:75:81:fc:a4:90:8c:0a:dc:19:8a:cc:49: f7:ff:40:a6:8f:9d:11:01:80:b8:c3:ab:b8:ef:b4: 42:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:76:23:3B:46:DF:67:2E:74:02:07:8D:84:86:B2:4C:C2:3F:C4:D7 X509v3 Authority Key Identifier: keyid:EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:88:af:f5:b6:d5:df:51:3d:12:09:ee:2e:80:ad:66:36:43: d6:fc:2c:ae:8a:7e:02:73:8b:58:75:fd:b1:db:10:03:7d:32: d5:4e:f7:65:de:51:c1:eb:c5:21:72:4a:5a:c9:cc:e0:96:2a: af:ce:f4:17:b5:22:70:d2:35:db:37:bb:f9:c0:5c:cc:15:40: 9d:c8:81:86:b0:21:51:a0:a1:1e:2f:97:1f:ad:db:dd:4e:cb: db:d7:33:56:8f:ea:12:9a:ba:3c:93:7b:55:75:98:c8:ba:b1: 4d:72:6e:c2:65:54:b5:04:c8:61:da:09:15:5c:1e:c8:c4:c0: 6e:99:57:1b:6b:7f:07:9f:b6:02:bc:ee:a1:0b:70:d0:11:ff: 71:f7:82:c2:f2:5e:19:09:ad:76:02:27:9b:9d:57:da:ce:60: 7d:56:90:d1:bf:bd:18:ba:5c:a9:4f:bd:83:67:ce:aa:31:9a: c6:c8:bb:62:9c:0a:ef:99:a8:20:e7:0b:ad:85:6e:b0:6f:8c: a3:14:c3:be:d7:a9:36:ab:c3:80:40:76:35:b4:d3:c1:2e:a8: 5b:7b:cd:ce:43:d1:76:be:34:76:6a:7e:ff:24:f4:e0:9c:ce: 10:c8:ab:08:a1:07:a3:7a:a1:db:1b:ee:0a:58:6f:d5:21:76: df:04:21:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu3c8tjFZtFEzn/27xEowMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzY3NzliMTNhZWM3ODBiMGQ0MzdmODQ0NGFiMGY0NDNh MDVkZDAwHhcNMjUxMjI0MDUwMTA3WhcNMjUxMjI1MDUwMTA3WjAzMTEwLwYDVQQD Eyg4NTc2MjMzYjQ2ZGY2NzJlNzQwMjA3OGQ4NDg2YjI0Y2MyM2ZjNGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrWmnEAhWcmkVGGYQic9OvPzkotS z/N3FrDsSsBNNI4KycYgZ+PowpSVsFR21iERwR1daT/fNOrIHqhrfpTB7uQPK2H5 qCixPhpNwVE9PDFVv/EpMgoxGnwbjFxUY1FxduJoLmI9BdtGjfy5KK2m0IKkTfUQ Z3lziiS3J9p6N+/stnL7qP2wUmiDpfdHKQo7qxYaSsF4PSdC4cM3spdFS0DT4EJK b51CviiovbakycP2+ByY18jtsUXZvxR8awsmhE8jprh5BDNIx/a9jAFXoHCbfU68 GK/hjyQiwlNhxWZAOtx1gfykkIwK3BmKzEn3/0Cmj50RAYC4w6u477RCAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIV2IztG32cudAIHjYSGskzCP8TXMB8GA1UdIwQY MBaAFOs2d5sTrseAsNQ3+ERKsPRDoF3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ODY0ZmYtNjM0MS00MDA0LWFiNmQt MGYzYjljMDVkZTQ1LzEvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC85ODY0ZmYtNjM0MS00MDA0LWFiNmQtMGYzYjljMDVkZTQ1 LzEvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYiv9bbV 31E9EgnuLoCtZjZD1vwsrop+AnOLWHX9sdsQA30y1U73Zd5RwevFIXJKWsnM4JYq r870F7UicNI12ze7+cBczBVAnciBhrAhUaChHi+XH63b3U7L29czVo/qEpq6PJN7 VXWYyLqxTXJuwmVUtQTIYdoJFVweyMTAbplXG2t/B5+2ArzuoQtw0BH/cfeCwvJe GQmtdgInm51X2s5gfVaQ0b+9GLpcqU+9g2fOqjGaxsi7YpwK75moIOcLrYVusG+M oxTDvtepNqvDgEB2NbTTwS6oW3vNzkPRdr40dmp+/yT04JzOEMirCKEHo3qh2xvu Clhv1SF23wQhdA== -----END CERTIFICATE-----Generated at Wed Dec 24 10:32:22 2025 by rpki-client