This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft File: 6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft (raw, json) Hash identifier: BUBWb4XN4+y+9HqVN98rjdtA1DpfQjGAE+f7nMz0FMI= Subject key identifier: BB:EF:A4:31:7F:A3:A8:DB:12:09:7C:1B:D3:92:E6:63:6A:F9:BD:6B Authority key identifier: E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9 Certificate issuer: /CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9 Certificate serial: 019B4248E95FE4C9361C5C4A6051F53B9B04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft Manifest number: 16B2 Signing time: Sun 21 Dec 2025 19:00:33 +0000 Manifest this update: Sun 21 Dec 2025 19:00:33 +0000 Manifest next update: Mon 22 Dec 2025 19:00:33 +0000 Files and hashes: 1: 6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl (hash: Vnl4zusrys34wuMP0mkhZ9fN0rDnKDTbSfojcrhuCkU=) 2: bmfTB7QP2sQIDpnYEEuqlN4ftmM.roa (hash: vARwTHDByRNch/FCMqW59p/LzP0CiF5frUcfc8ikvnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:48:e9:5f:e4:c9:36:1c:5c:4a:60:51:f5:3b:9b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9 Validity Not Before: Dec 21 19:00:33 2025 GMT Not After : Dec 22 19:00:33 2025 GMT Subject: CN=bbefa4317fa3a8db12097c1bd392e6636af9bd6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:84:64:c2:68:30:96:d8:2a:8b:1e:ea:08:0a: cb:41:77:11:37:6d:8e:a0:e9:d8:f8:ae:d2:cb:8d: 7d:e2:0b:93:55:ca:a1:43:f9:a3:25:3b:0a:db:e8: 73:91:2b:27:81:5e:20:9b:54:f4:ff:c2:36:d1:a2: dc:cd:e0:68:7d:0a:68:61:dc:f2:b9:6b:3d:59:11: 07:6c:9e:dc:04:a7:45:0d:d2:d8:42:3b:96:97:58: c5:a1:eb:e5:6b:70:07:26:e4:f9:a6:5c:e4:e8:c0: 82:23:cd:77:4b:35:e5:6a:b2:c8:39:2c:4c:ad:39: 3e:f9:59:12:87:9d:63:eb:b1:27:b0:2c:b0:f3:8f: b0:e8:0f:e7:61:fd:4d:89:50:43:1a:1d:72:ef:d8: 1b:5f:be:f3:a5:de:0e:b3:60:04:ce:1f:74:ac:42: 08:4b:da:4a:50:1d:69:7b:8b:08:9f:6c:29:71:f5: 14:d5:0f:9e:24:3f:bd:e7:01:2a:ac:ca:a8:ca:39: 87:cc:a0:c7:3a:f2:52:91:c7:d8:7e:de:84:df:fa: 4c:c3:a3:c0:b8:f4:ab:34:6a:4a:89:91:3d:51:ea: 13:32:c5:1a:05:2a:67:4f:8e:91:8b:51:68:25:e3: 2a:7a:4b:63:ce:11:76:80:a3:2c:d8:06:4a:7d:be: aa:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EF:A4:31:7F:A3:A8:DB:12:09:7C:1B:D3:92:E6:63:6A:F9:BD:6B X509v3 Authority Key Identifier: keyid:E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ba:17:b9:58:93:0e:81:5c:5a:56:5f:c4:71:f1:3e:68:4c: 7a:42:3b:e4:73:48:03:4a:c2:1d:24:45:1e:af:24:bc:b9:19: 05:65:61:30:d1:6a:70:d0:4f:d3:ce:0a:d9:0b:62:45:c5:c6: 90:6c:4b:84:e8:2d:59:8b:24:df:90:04:b2:a2:04:17:58:28: bc:9f:72:53:38:01:91:55:9e:03:a3:b8:e4:e3:98:a8:03:aa: e6:85:8c:41:c9:e7:60:e7:40:7a:09:aa:26:c6:23:b6:e2:85: 21:8d:02:c5:ca:88:4d:9d:0b:b2:f3:c9:16:a3:04:99:35:f7: 0e:ac:06:3f:03:68:6c:d6:cb:8b:dd:7d:c4:f4:2e:2f:ac:73: 24:7a:26:bc:a2:e6:a4:b6:c7:65:9b:5f:24:d0:b5:24:6e:bc: 46:e4:da:d4:33:28:e8:dc:ec:41:e0:16:95:47:ed:ef:6c:ec: eb:f8:7c:4e:cc:47:01:e8:c6:ae:a8:e6:92:d9:44:ab:c5:80: bb:17:a9:f5:26:2f:6c:bc:c5:52:9f:1b:2d:d1:11:ff:d9:99: 21:fd:01:c2:97:b0:cc:7a:26:32:b5:99:2c:1a:6f:2c:51:7e: 5f:55:68:30:15:ab:9b:54:cd:54:5c:96:f9:e7:b4:d8:a2:a0: 6c:27:55:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSOlf5Mk2HFxKYFH1O5sEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MzM0NjFlOWQyYmRhZmNjMjlhZDkxODlmYjBhY2YxZjMz OTYwYTkwHhcNMjUxMjIxMTkwMDMzWhcNMjUxMjIyMTkwMDMzWjAzMTEwLwYDVQQD EyhiYmVmYTQzMTdmYTNhOGRiMTIwOTdjMWJkMzkyZTY2MzZhZjliZDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoRkwmgwltgqix7qCArLQXcRN22O oOnY+K7Sy4194guTVcqhQ/mjJTsK2+hzkSsngV4gm1T0/8I20aLczeBofQpoYdzy uWs9WREHbJ7cBKdFDdLYQjuWl1jFoevla3AHJuT5plzk6MCCI813SzXlarLIOSxM rTk++VkSh51j67EnsCyw84+w6A/nYf1NiVBDGh1y79gbX77zpd4Os2AEzh90rEII S9pKUB1pe4sIn2wpcfUU1Q+eJD+95wEqrMqoyjmHzKDHOvJSkcfYft6E3/pMw6PA uPSrNGpKiZE9UeoTMsUaBSpnT46Ri1FoJeMqektjzhF2gKMs2AZKfb6qdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvvpDF/o6jbEgl8G9OS5mNq+b1rMB8GA1UdIwQY MBaAFOgzRh6dK9r8wprZGJ+wrPHzOWCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkROR0hwMHIydnpDbXRrWW43Q3M4Zk01WUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NzExOTQtNTFjOC00YmNmLWJkODMt YWVmZThkMTc4ZTZhLzEvNkROR0hwMHIydnpDbXRrWW43Q3M4Zk01WUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82NzExOTQtNTFjOC00YmNmLWJkODMtYWVmZThkMTc4ZTZh LzEvNkROR0hwMHIydnpDbXRrWW43Q3M4Zk01WUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApboXuViT DoFcWlZfxHHxPmhMekI75HNIA0rCHSRFHq8kvLkZBWVhMNFqcNBP084K2QtiRcXG kGxLhOgtWYsk35AEsqIEF1govJ9yUzgBkVWeA6O45OOYqAOq5oWMQcnnYOdAegmq JsYjtuKFIY0CxcqITZ0LsvPJFqMEmTX3DqwGPwNobNbLi919xPQuL6xzJHomvKLm pLbHZZtfJNC1JG68RuTa1DMo6NzsQeAWlUft72zs6/h8TsxHAejGrqjmktlEq8WA uxep9SYvbLzFUp8bLdER/9mZIf0BwpewzHomMrWZLBpvLFF+X1VoMBWrm1TNVFyW +ee02KKgbCdV6w== -----END CERTIFICATE-----Generated at Sun Dec 21 22:27:12 2025 by rpki-client