This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft File: 6z1v54fFBVOwcxcRLhnmW09nWTE.mft (raw, json) Hash identifier: z8nuv407siqwyoGDMympIcUJH02m0DUqzSfosA7fHBA= Subject key identifier: D1:FF:BB:46:6F:61:BA:0F:B3:E9:F2:10:1D:93:2B:2A:BB:8B:71:9D Authority key identifier: EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31 Certificate issuer: /CN=eb3d6fe787c50553b07317112e19e65b4f675931 Certificate serial: 019B2F30634F447E84FC3EAC54272CB3DB4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft Manifest number: 1744 Signing time: Thu 18 Dec 2025 02:00:58 +0000 Manifest this update: Thu 18 Dec 2025 02:00:58 +0000 Manifest next update: Fri 19 Dec 2025 02:00:58 +0000 Files and hashes: 1: 6z1v54fFBVOwcxcRLhnmW09nWTE.crl (hash: g6ZSpJuxUbs3zkWyFL+6hBB3x5yT4abkqeT+UdrLu4Q=) 2: jcrTKRLVafxbmhoPzjEKfBszAmk.roa (hash: dZzjw0X45T+if5mYD87H3+tKeMoeDlrA485y+6aDQxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:63:4f:44:7e:84:fc:3e:ac:54:27:2c:b3:db:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb3d6fe787c50553b07317112e19e65b4f675931 Validity Not Before: Dec 18 02:00:58 2025 GMT Not After : Dec 19 02:00:58 2025 GMT Subject: CN=d1ffbb466f61ba0fb3e9f2101d932b2abb8b719d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:65:19:98:83:83:cd:aa:a4:5e:c0:f3:bd: 8c:6a:8c:e7:b0:b9:33:5c:c9:ac:d6:65:f6:86:59: d6:72:1f:91:84:5c:29:71:1e:07:23:e4:ef:61:f6: 4c:b7:b5:18:6d:eb:26:ba:0b:8f:19:de:cc:9e:65: 87:f6:fe:24:54:85:d3:15:65:4c:6e:86:71:e1:2d: f4:a4:c7:a6:d5:1d:08:f2:7d:73:3f:7c:89:47:aa: d4:db:7c:79:aa:e5:42:d6:a2:bc:77:3c:dc:7f:63: b7:40:90:4e:76:91:b4:e4:d9:09:2b:8a:f2:c2:c9: 15:17:18:f5:c5:78:98:c1:88:d6:e5:52:a0:39:0d: 9d:9e:62:8c:e9:52:9a:cb:76:0f:da:88:ba:d9:8f: 40:4f:cb:ec:e9:f2:32:16:df:5d:2d:ad:89:2d:89: 0f:0c:9d:6d:b1:61:e4:73:70:97:ba:cd:27:ea:88: e4:ca:7c:2d:e4:8a:91:75:69:fb:b6:fb:f8:85:e0: 8d:c8:04:71:b2:b3:a4:84:20:4a:aa:0c:8e:5a:74: d5:3d:f2:00:5a:3a:6d:70:81:8e:87:9d:85:10:17: 31:16:a0:22:e3:eb:19:69:4e:9d:fa:bf:05:93:3b: 16:f8:72:40:f6:8b:d0:69:0f:86:29:ff:a2:44:ac: ab:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FF:BB:46:6F:61:BA:0F:B3:E9:F2:10:1D:93:2B:2A:BB:8B:71:9D X509v3 Authority Key Identifier: keyid:EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:b3:b7:4f:ba:fa:53:7e:a7:e9:ae:5a:74:48:95:c4:3b:ef: a9:61:a5:55:cd:bc:d8:d7:d4:ff:29:46:9d:85:3d:42:e8:40: 0c:11:b3:89:5c:89:8e:75:99:12:66:b6:1b:4a:3c:f3:5d:01: 95:6b:01:49:b7:27:c6:37:de:27:80:4b:7c:84:12:7a:c6:65: 16:f8:44:1f:53:6b:a8:3d:b8:4a:39:dc:ac:11:61:18:a0:da: a6:41:ee:2a:cf:81:d8:40:c9:6d:32:89:15:89:93:64:ef:b0: 5b:fd:82:54:c3:e0:11:93:24:85:fa:48:f8:12:af:ce:08:c7: 7a:28:4a:c5:ce:a3:30:c9:7f:54:d2:43:e8:c1:d4:b5:0a:3e: e2:3d:70:f8:b3:0f:3b:e5:36:6c:c9:fe:00:94:26:58:24:36: dd:c3:4f:7e:69:c3:eb:81:05:2c:00:5a:bb:67:0b:74:3e:8d: 1f:0e:0a:5e:62:8e:5b:2a:a4:e4:0f:37:39:55:10:a2:77:54: 2b:32:36:ef:c9:d0:71:f6:96:61:53:8e:fa:3a:2f:55:30:d3: 33:04:53:f6:3c:5b:0a:66:49:ea:9b:15:de:5c:b6:bb:23:40: 96:81:02:59:91:89:e8:fd:53:04:fd:42:f2:5d:67:f4:93:35: 04:9b:0d:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMGNPRH6E/D6sVCcss9tNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViM2Q2ZmU3ODdjNTA1NTNiMDczMTcxMTJlMTllNjViNGY2 NzU5MzEwHhcNMjUxMjE4MDIwMDU4WhcNMjUxMjE5MDIwMDU4WjAzMTEwLwYDVQQD EyhkMWZmYmI0NjZmNjFiYTBmYjNlOWYyMTAxZDkzMmIyYWJiOGI3MTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG5lGZiDg82qpF7A872MaoznsLkz XMms1mX2hlnWch+RhFwpcR4HI+TvYfZMt7UYbesmuguPGd7MnmWH9v4kVIXTFWVM boZx4S30pMem1R0I8n1zP3yJR6rU23x5quVC1qK8dzzcf2O3QJBOdpG05NkJK4ry wskVFxj1xXiYwYjW5VKgOQ2dnmKM6VKay3YP2oi62Y9AT8vs6fIyFt9dLa2JLYkP DJ1tsWHkc3CXus0n6ojkynwt5IqRdWn7tvv4heCNyARxsrOkhCBKqgyOWnTVPfIA WjptcIGOh52FEBcxFqAi4+sZaU6d+r8FkzsW+HJA9ovQaQ+GKf+iRKyrpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNH/u0ZvYboPs+nyEB2TKyq7i3GdMB8GA1UdIwQY MBaAFOs9b+eHxQVTsHMXES4Z5ltPZ1kxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnoxdjU0ZkZCVk93Y3hjUkxobm1XMDluV1RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wN2NlN2UtNDY0MS00OTg1LTk4NDUt MWEwMDcxNTdkNTlhLzEvNnoxdjU0ZkZCVk93Y3hjUkxobm1XMDluV1RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wN2NlN2UtNDY0MS00OTg1LTk4NDUtMWEwMDcxNTdkNTlh LzEvNnoxdjU0ZkZCVk93Y3hjUkxobm1XMDluV1RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7O3T7r6 U36n6a5adEiVxDvvqWGlVc282NfU/ylGnYU9QuhADBGziVyJjnWZEma2G0o8810B lWsBSbcnxjfeJ4BLfIQSesZlFvhEH1NrqD24SjncrBFhGKDapkHuKs+B2EDJbTKJ FYmTZO+wW/2CVMPgEZMkhfpI+BKvzgjHeihKxc6jMMl/VNJD6MHUtQo+4j1w+LMP O+U2bMn+AJQmWCQ23cNPfmnD64EFLABau2cLdD6NHw4KXmKOWyqk5A83OVUQondU KzI278nQcfaWYVOO+jovVTDTMwRT9jxbCmZJ6psV3ly2uyNAloECWZGJ6P1TBP1C 8l1n9JM1BJsNkw== -----END CERTIFICATE-----Generated at Thu Dec 18 11:12:16 2025 by rpki-client