This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft File: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json) Hash identifier: ljjvoZhkKTRMClXNiA7ZUJBqH1gXBAp+xsDFzN0XL2U= Subject key identifier: 1D:40:A9:1C:67:A1:3E:33:AB:26:1F:4A:20:95:EC:F9:7A:BD:F3:DF Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91 Certificate issuer: /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691 Certificate serial: 019B495DCF702C631EFC4BC14F612BB7B013 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft Manifest number: 1716 Signing time: Tue 23 Dec 2025 04:00:43 +0000 Manifest this update: Tue 23 Dec 2025 04:00:43 +0000 Manifest next update: Wed 24 Dec 2025 04:00:43 +0000 Files and hashes: 1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: OAxV7cNCt/WneQJGaGNtAHC8qRf8AvXseaJpn823qgs=) 2: rvzjyC9muvr4migx_xtUIzZ2FRM.roa (hash: 2jsltHZ+YtkUSfR/OVprtu2235QmWCtb64qQWKzazWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 04:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:cf:70:2c:63:1e:fc:4b:c1:4f:61:2b:b7:b0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691 Validity Not Before: Dec 23 04:00:43 2025 GMT Not After : Dec 24 04:00:43 2025 GMT Subject: CN=1d40a91c67a13e33ab261f4a2095ecf97abdf3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f9:e5:f1:d6:c2:d5:22:f8:9c:fb:c5:fb:f1: 3a:e3:e1:50:da:12:0d:99:f5:e2:95:d8:02:1e:9a: 8a:9d:c6:5b:6a:40:18:a9:df:42:bb:c3:79:f0:13: 8c:62:89:e5:75:96:8d:0e:af:44:70:c3:55:8d:22: dc:0c:fb:64:1e:85:22:01:46:16:2f:1a:9b:a4:bf: c9:93:63:5f:0a:fe:86:82:43:7b:5b:e4:d9:cd:0d: f5:35:cc:a1:7b:ba:8d:aa:05:80:6d:3b:d2:14:c4: 8b:67:75:cc:91:a0:80:13:24:73:1d:68:88:36:8f: 47:00:e2:07:a0:19:ce:95:1d:e4:58:35:64:e1:f0: 5c:dd:05:1d:9d:0a:2f:9a:cd:81:8b:14:81:ca:eb: bd:98:b3:fd:53:e9:81:10:48:55:28:73:07:80:80: 89:f1:12:2a:7d:2f:db:b3:9d:ea:36:48:09:63:b3: ab:93:8c:00:51:9d:e5:3e:28:ce:8d:4d:b1:af:0c: cb:63:5c:26:8c:65:87:2d:a9:2a:f4:09:5c:ff:ef: a8:92:61:38:58:42:58:70:59:04:53:33:1a:79:20: 82:b7:e8:ca:da:b6:2d:1f:3f:b0:4c:03:17:d6:f0: dc:cd:4a:fb:a6:4e:cf:cf:11:d3:7d:70:df:9a:02: f2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:40:A9:1C:67:A1:3E:33:AB:26:1F:4A:20:95:EC:F9:7A:BD:F3:DF X509v3 Authority Key Identifier: keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:2f:5f:b6:8f:9a:04:9a:f7:77:66:49:03:bd:96:9c:50:16: c1:bd:52:7e:c0:22:00:8f:33:00:64:84:2a:05:4c:37:5f:a6: d3:3e:fe:77:cc:b0:c3:2f:c4:70:9d:8d:d7:fd:f0:28:33:fa: 7a:f1:a9:61:d3:76:f7:63:3a:4a:4f:e9:f0:22:a3:23:2f:a4: 34:1c:75:13:d4:30:6b:56:fa:ba:e2:7e:08:39:00:6e:9e:02: 6b:a7:2a:bf:0e:6e:82:68:68:f0:3f:76:b2:6d:35:a7:33:76: 36:33:fe:c8:87:80:3c:e2:d1:2f:d3:77:5b:4c:8b:a0:c6:a9: af:57:a7:08:91:1a:f7:3f:a9:5a:68:36:d5:e8:2e:0f:92:56: e9:50:e5:55:9b:d6:7c:4c:91:a2:db:df:91:a0:b3:63:47:46: 28:19:e9:6c:b7:18:42:28:86:09:fd:aa:3a:ff:08:ab:d4:66: cb:6b:e6:0f:80:30:65:58:98:04:25:3c:53:47:89:95:8b:42: 5b:8b:35:1f:5a:6e:7e:c1:62:b4:ab:9d:fc:e4:3d:82:09:b5: 9c:b2:23:cd:c9:f5:52:0b:47:2c:69:5a:91:5b:e1:b8:89:4c: 90:44:45:46:c3:e2:41:fc:8d:37:4b:12:58:4c:3b:a6:3f:a6: a0:4c:f6:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXc9wLGMe/EvBT2Ert7ATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZWQ2MDJmZDBkNDZkMzhjZGUxZTczMmM2NTJlYTk5NThl OTc2OTEwHhcNMjUxMjIzMDQwMDQzWhcNMjUxMjI0MDQwMDQzWjAzMTEwLwYDVQQD EygxZDQwYTkxYzY3YTEzZTMzYWIyNjFmNGEyMDk1ZWNmOTdhYmRmM2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvnl8dbC1SL4nPvF+/E64+FQ2hIN mfXildgCHpqKncZbakAYqd9Cu8N58BOMYonldZaNDq9EcMNVjSLcDPtkHoUiAUYW LxqbpL/Jk2NfCv6GgkN7W+TZzQ31Ncyhe7qNqgWAbTvSFMSLZ3XMkaCAEyRzHWiI No9HAOIHoBnOlR3kWDVk4fBc3QUdnQovms2BixSByuu9mLP9U+mBEEhVKHMHgICJ 8RIqfS/bs53qNkgJY7Ork4wAUZ3lPijOjU2xrwzLY1wmjGWHLakq9Alc/++okmE4 WEJYcFkEUzMaeSCCt+jK2rYtHz+wTAMX1vDczUr7pk7PzxHTfXDfmgLybwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1AqRxnoT4zqyYfSiCV7Pl6vfPfMB8GA1UdIwQY MBaAFOjtYC/Q1G04zeHnMsZS6plY6XaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk8xZ0w5RFViVGpONGVjeXhsTHFtVmpwZHBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iNjQwOWItMTYzOC00YzdhLTgxZjIt OTRmOGZiMzAwOWYyLzEvNk8xZ0w5RFViVGpONGVjeXhsTHFtVmpwZHBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9iNjQwOWItMTYzOC00YzdhLTgxZjItOTRmOGZiMzAwOWYy LzEvNk8xZ0w5RFViVGpONGVjeXhsTHFtVmpwZHBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAC9fto+a BJr3d2ZJA72WnFAWwb1SfsAiAI8zAGSEKgVMN1+m0z7+d8ywwy/EcJ2N1/3wKDP6 evGpYdN292M6Sk/p8CKjIy+kNBx1E9Qwa1b6uuJ+CDkAbp4Ca6cqvw5ugmho8D92 sm01pzN2NjP+yIeAPOLRL9N3W0yLoMapr1enCJEa9z+pWmg21eguD5JW6VDlVZvW fEyRotvfkaCzY0dGKBnpbLcYQiiGCf2qOv8Iq9Rmy2vmD4AwZViYBCU8U0eJlYtC W4s1H1pufsFitKud/OQ9ggm1nLIjzcn1UgtHLGlakVvhuIlMkERFRsPiQfyNN0sS WEw7pj+moEz23g== -----END CERTIFICATE-----Generated at Tue Dec 23 12:29:56 2025 by rpki-client