This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft File: b_xyU8DaFbVuAJVzGhDCu61sEX4.mft (raw, json) Hash identifier: o6p/Dj5b5xnqaftW/6rCpjgrwd/j/e9htqRHEF2N+H0= Subject key identifier: E6:C1:55:AA:2F:42:53:3A:F7:C1:EE:2E:F8:A8:8D:96:19:B6:64:B0 Authority key identifier: 6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E Certificate issuer: /CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e Certificate serial: 019B3BA21690C636629F36F301B4E6108322 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft Manifest number: 05DE Signing time: Sat 20 Dec 2025 12:00:36 +0000 Manifest this update: Sat 20 Dec 2025 12:00:36 +0000 Manifest next update: Sun 21 Dec 2025 12:00:36 +0000 Files and hashes: 1: ViU3nx0KMvyzkw-cFoaI3YiJf24.roa (hash: 2MVqhG3jfXK0CnKSuEcQLvgpRXs6MX1MKLdphJMDw6E=) 2: b_xyU8DaFbVuAJVzGhDCu61sEX4.crl (hash: 9w11Pf17f8Ef9Hq+lCZZ+V/11OEkE8NH2e6sN/FWK3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:16:90:c6:36:62:9f:36:f3:01:b4:e6:10:83:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e Validity Not Before: Dec 20 12:00:36 2025 GMT Not After : Dec 21 12:00:36 2025 GMT Subject: CN=e6c155aa2f42533af7c1ee2ef8a88d9619b664b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a0:ed:7a:04:f6:6b:6d:09:b5:64:8e:10:75: 4c:94:c7:f5:55:81:0c:9a:d9:d2:7a:7e:53:57:e7: 59:d8:7b:09:5c:58:94:e2:21:b6:4a:94:74:72:7d: 89:d0:47:e2:03:17:f9:57:b1:e4:1c:41:60:3f:5d: c0:a3:a3:ed:ac:06:cc:8d:dc:45:34:f1:53:0d:24: 65:45:b2:8b:92:94:b3:6e:32:89:5c:e4:10:fb:d7: 3e:63:78:73:7f:44:e2:d6:db:db:19:05:b5:f0:e6: 3e:98:42:7d:42:98:61:6a:ad:54:eb:29:5a:16:da: e8:5c:c6:8c:d2:4d:dc:9f:98:d2:ba:43:84:79:70: b6:1b:c7:fd:43:ff:e9:27:1e:58:df:75:3d:f1:32: 9f:7a:24:99:10:32:60:77:2d:12:96:2a:06:71:3e: 3a:07:4b:eb:2d:3a:db:a9:66:53:f2:72:4e:e9:51: 24:62:bb:a0:37:03:28:24:fa:85:5a:18:f8:aa:3d: 3a:2c:d7:cb:3f:9c:9c:ba:52:05:b9:c3:a6:76:87: f2:35:2f:32:1d:40:79:c1:75:c0:be:cb:96:45:7a: d5:f6:b8:c3:36:f5:ac:f8:35:28:a0:6f:fe:e3:86: 3f:44:92:46:08:eb:9b:c1:0f:7b:e2:6f:e5:2e:f2: 21:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C1:55:AA:2F:42:53:3A:F7:C1:EE:2E:F8:A8:8D:96:19:B6:64:B0 X509v3 Authority Key Identifier: keyid:6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d5:ce:d4:a0:38:fb:21:5f:05:88:16:2c:d6:6f:b1:62:bf: c7:3b:9a:10:d4:34:84:e8:09:4a:5a:81:01:52:4d:af:1e:ef: a4:3f:93:c9:b6:2a:5c:50:73:47:18:16:78:1b:ba:0c:cb:85: 5b:1c:36:75:81:73:ac:98:1a:2c:d5:f1:95:84:37:c6:17:ef: ed:ad:92:6f:1c:05:5e:0a:5f:be:a3:2c:66:d4:61:e8:79:1b: 20:48:23:56:a3:50:95:35:1e:7e:1d:cc:c2:fd:03:d0:06:24: 25:c5:e4:ed:7b:49:80:ed:96:ba:0c:88:ef:15:e9:de:56:f3: 8a:98:4a:b0:d8:00:d7:96:3e:d5:86:5e:ff:9e:36:a3:92:ae: bb:41:22:44:16:40:d9:0c:49:ee:4c:68:4f:95:a7:8b:54:7c: 0e:25:4a:0d:16:67:d2:03:33:69:f8:33:21:a1:af:4c:6c:8a: 43:a6:ae:03:f7:21:a3:ee:e4:ca:a3:86:9e:e9:73:9f:73:6f: 1f:7f:90:33:c7:9a:37:4a:47:2f:ec:d0:d3:68:15:84:08:80: da:b1:4a:e3:a5:86:2f:0a:0f:c4:4a:af:7e:ff:fc:da:c5:bf: 75:3b:6f:02:42:06:63:47:62:b8:c4:fa:57:82:b4:92:4b:de: a6:d3:82:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ohaQxjZinzbzAbTmEIMiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZmM3MjUzYzBkYTE1YjU2ZTAwOTU3MzFhMTBjMmJiYWQ2 YzExN2UwHhcNMjUxMjIwMTIwMDM2WhcNMjUxMjIxMTIwMDM2WjAzMTEwLwYDVQQD EyhlNmMxNTVhYTJmNDI1MzNhZjdjMWVlMmVmOGE4OGQ5NjE5YjY2NGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6DtegT2a20JtWSOEHVMlMf1VYEM mtnSen5TV+dZ2HsJXFiU4iG2SpR0cn2J0EfiAxf5V7HkHEFgP13Ao6PtrAbMjdxF NPFTDSRlRbKLkpSzbjKJXOQQ+9c+Y3hzf0Ti1tvbGQW18OY+mEJ9Qphhaq1U6yla FtroXMaM0k3cn5jSukOEeXC2G8f9Q//pJx5Y33U98TKfeiSZEDJgdy0SlioGcT46 B0vrLTrbqWZT8nJO6VEkYrugNwMoJPqFWhj4qj06LNfLP5yculIFucOmdofyNS8y HUB5wXXAvsuWRXrV9rjDNvWs+DUooG/+44Y/RJJGCOubwQ974m/lLvIhhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObBVaovQlM698HuLviojZYZtmSwMB8GA1UdIwQY MBaAFG/8clPA2hW1bgCVcxoQwrutbBF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYl94eVU4RGFGYlZ1QUpWekdoREN1NjFzRVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kZWU3MmQtZDkxZC00NjVlLTlkNTct MzdhN2NkMzdkNDllLzEvYl94eVU4RGFGYlZ1QUpWekdoREN1NjFzRVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9kZWU3MmQtZDkxZC00NjVlLTlkNTctMzdhN2NkMzdkNDll LzEvYl94eVU4RGFGYlZ1QUpWekdoREN1NjFzRVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtXO1KA4 +yFfBYgWLNZvsWK/xzuaENQ0hOgJSlqBAVJNrx7vpD+TybYqXFBzRxgWeBu6DMuF Wxw2dYFzrJgaLNXxlYQ3xhfv7a2SbxwFXgpfvqMsZtRh6HkbIEgjVqNQlTUefh3M wv0D0AYkJcXk7XtJgO2WugyI7xXp3lbziphKsNgA15Y+1YZe/542o5Kuu0EiRBZA 2QxJ7kxoT5Wni1R8DiVKDRZn0gMzafgzIaGvTGyKQ6auA/cho+7kyqOGnulzn3Nv H3+QM8eaN0pHL+zQ02gVhAiA2rFK46WGLwoPxEqvfv/82sW/dTtvAkIGY0diuMT6 V4K0kkveptOC7Q== -----END CERTIFICATE-----Generated at Sat Dec 20 20:46:09 2025 by rpki-client