This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft File: 6fxsgWY89vzpLoPl1mKLwOtqlNI.mft (raw, json) Hash identifier: sh6VZYF0pn0+0IiyDhbjWpJ4zdfmC2XadYBwh6W/AsQ= Subject key identifier: 4B:F8:C0:3F:CD:86:28:C6:DD:20:D5:F3:D4:60:11:E0:97:8D:01:54 Authority key identifier: E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2 Certificate issuer: /CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2 Certificate serial: 019B3645870D7B1CB459D8AFB355D95926F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft Manifest number: 0510 Signing time: Fri 19 Dec 2025 11:01:24 +0000 Manifest this update: Fri 19 Dec 2025 11:01:24 +0000 Manifest next update: Sat 20 Dec 2025 11:01:24 +0000 Files and hashes: 1: 6fxsgWY89vzpLoPl1mKLwOtqlNI.crl (hash: fvzSW4N5zQI/0XJG/HHhj55TzTsudawZzyuCsPPj2mk=) 2: hiFOlTDCg2a8NEVG384am3Bu0NI.roa (hash: QsAcrNKEK47Yz8Letal9hjURM1pVKMmWpzSetDZsOkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:87:0d:7b:1c:b4:59:d8:af:b3:55:d9:59:26:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2 Validity Not Before: Dec 19 11:01:24 2025 GMT Not After : Dec 20 11:01:24 2025 GMT Subject: CN=4bf8c03fcd8628c6dd20d5f3d46011e0978d0154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:69:e5:ce:11:74:f7:ff:ec:fc:0f:d8:b3:d9: ed:4c:6c:c2:86:8a:67:9d:e8:cc:69:cc:e7:21:c2: 35:4b:8a:f4:7c:a4:16:35:2e:2c:2b:13:7c:83:ce: 8c:04:f7:e4:53:8a:da:e5:b4:f2:9d:2d:cc:bf:de: 05:7c:ee:9b:de:1f:09:da:4c:aa:bf:94:21:f2:ae: bb:25:49:93:02:79:d6:b1:3f:ff:7c:b3:7b:1d:d6: 89:46:cd:b3:9e:50:bc:96:6f:aa:c6:76:c9:23:8f: f1:0f:18:57:5a:89:ad:c5:b9:fa:17:8a:c2:d0:ea: df:40:62:94:e5:e2:ac:ce:87:fc:51:58:17:1c:cf: d9:1d:94:38:b9:8a:e7:02:ca:9b:8a:59:1f:1b:4f: ad:5b:ab:57:6c:be:08:01:7b:3f:22:ad:f9:0d:8f: 22:05:d6:d1:53:7a:70:d7:62:c8:b2:67:b9:66:8f: da:2e:3c:f8:76:e2:d1:65:74:3e:27:d4:2e:cf:d4: 4a:fb:f1:2e:72:7f:e5:b7:a6:6e:96:59:a0:fd:2e: 37:ba:f9:ee:ed:5d:af:3f:59:e5:82:57:c6:7d:2c: 01:a3:3f:20:8e:13:00:2b:29:b6:d6:ab:7e:7c:52: 96:36:94:d3:be:3d:83:68:7a:fb:af:b4:33:37:40: 20:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F8:C0:3F:CD:86:28:C6:DD:20:D5:F3:D4:60:11:E0:97:8D:01:54 X509v3 Authority Key Identifier: keyid:E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:3a:35:39:60:45:45:fb:55:b6:ad:fc:8b:56:88:ff:49:79: b7:f7:c5:6e:95:10:b9:37:ea:aa:5c:c4:4d:a7:71:15:44:36: 4d:c1:8a:e7:5b:c5:ef:ea:b5:61:4e:0b:95:9c:bb:b0:fd:5e: ab:78:10:e9:59:fd:18:86:47:7e:ce:76:36:6b:f7:25:d7:55: 0f:73:cf:8e:ad:b3:6d:ce:cd:e0:c8:cc:35:27:68:fc:46:f4: b2:db:88:5d:cb:fe:88:08:3b:d6:1e:f6:78:ae:31:5a:2f:ca: a5:78:d2:af:c8:27:7f:2e:b3:fb:13:54:48:ac:78:ef:0d:89: 7e:ad:99:e1:2a:ea:91:8d:ee:68:22:71:4d:cf:a7:28:82:8a: 17:34:65:de:98:1b:74:49:cb:0d:77:9b:41:c1:d5:27:58:af: 23:37:48:a0:92:01:1d:f1:53:9e:93:2e:2d:52:7c:33:bb:13: 06:8a:bb:fb:23:13:6c:81:2b:fa:7a:61:09:93:cd:7c:5d:f6: df:52:c6:36:df:5e:af:cc:ac:02:e1:49:2b:36:77:8f:9d:c8: f2:1a:d7:2a:aa:56:f1:32:70:f2:34:80:e7:6d:7b:e6:3c:a4: ab:b1:11:b9:0e:34:e4:95:5c:0d:dc:82:89:23:88:e0:88:74: 67:65:bf:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RYcNexy0Wdivs1XZWSbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZmM2YzgxNjYzY2Y2ZmNlOTJlODNlNWQ2NjI4YmMwZWI2 YTk0ZDIwHhcNMjUxMjE5MTEwMTI0WhcNMjUxMjIwMTEwMTI0WjAzMTEwLwYDVQQD Eyg0YmY4YzAzZmNkODYyOGM2ZGQyMGQ1ZjNkNDYwMTFlMDk3OGQwMTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGnlzhF09//s/A/Ys9ntTGzChopn nejMacznIcI1S4r0fKQWNS4sKxN8g86MBPfkU4ra5bTynS3Mv94FfO6b3h8J2kyq v5Qh8q67JUmTAnnWsT//fLN7HdaJRs2znlC8lm+qxnbJI4/xDxhXWomtxbn6F4rC 0OrfQGKU5eKszof8UVgXHM/ZHZQ4uYrnAsqbilkfG0+tW6tXbL4IAXs/Iq35DY8i BdbRU3pw12LIsme5Zo/aLjz4duLRZXQ+J9Quz9RK+/Eucn/lt6Zullmg/S43uvnu 7V2vP1nlglfGfSwBoz8gjhMAKym21qt+fFKWNpTTvj2DaHr7r7QzN0AgKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEv4wD/NhijG3SDV89RgEeCXjQFUMB8GA1UdIwQY MBaAFOn8bIFmPPb86S6D5dZii8DrapTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmZ4c2dXWTg5dnpwTG9QbDFtS0x3T3RxbE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80YjhjYzQtNWZjMi00ZjI2LTgwNDUt NTBlZjcyNmE5MTM2LzEvNmZ4c2dXWTg5dnpwTG9QbDFtS0x3T3RxbE5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC80YjhjYzQtNWZjMi00ZjI2LTgwNDUtNTBlZjcyNmE5MTM2 LzEvNmZ4c2dXWTg5dnpwTG9QbDFtS0x3T3RxbE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTo1OWBF RftVtq38i1aI/0l5t/fFbpUQuTfqqlzETadxFUQ2TcGK51vF7+q1YU4LlZy7sP1e q3gQ6Vn9GIZHfs52Nmv3JddVD3PPjq2zbc7N4MjMNSdo/Eb0stuIXcv+iAg71h72 eK4xWi/KpXjSr8gnfy6z+xNUSKx47w2Jfq2Z4SrqkY3uaCJxTc+nKIKKFzRl3pgb dEnLDXebQcHVJ1ivIzdIoJIBHfFTnpMuLVJ8M7sTBoq7+yMTbIEr+nphCZPNfF32 31LGNt9er8ysAuFJKzZ3j53I8hrXKqpW8TJw8jSA52175jykq7ERuQ405JVcDdyC iSOI4Ih0Z2W/Bw== -----END CERTIFICATE-----Generated at Fri Dec 19 14:33:19 2025 by rpki-client