This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft File: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft (raw, json) Hash identifier: UWizOXwLVcqbPxegjvm0khRRdOrCfTgyx2SuMtehK58= Subject key identifier: 03:EF:F5:16:4D:8F:37:F1:36:12:F8:1A:31:C1:07:B3:B3:31:CA:17 Authority key identifier: E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68 Certificate issuer: /CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68 Certificate serial: 019B4994B38ED9A115F4FFBA1CE996E3C0E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft Manifest number: 06D9 Signing time: Tue 23 Dec 2025 05:00:40 +0000 Manifest this update: Tue 23 Dec 2025 05:00:40 +0000 Manifest next update: Wed 24 Dec 2025 05:00:40 +0000 Files and hashes: 1: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl (hash: bXR7gIXtRxorjO3QAA0dhWfnj+XjZlfWFCwlX6Gb4RA=) 2: kRbJM0r9hkR1wq3RdsUFiL0HT7Q.roa (hash: TB8ehbBKofWhXL0zKQ3+dh6paWgo+N+m/aat6bTAmec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:94:b3:8e:d9:a1:15:f4:ff:ba:1c:e9:96:e3:c0:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68 Validity Not Before: Dec 23 05:00:40 2025 GMT Not After : Dec 24 05:00:40 2025 GMT Subject: CN=03eff5164d8f37f13612f81a31c107b3b331ca17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:39:7a:c1:6b:3f:78:b5:b0:bc:6f:89:b9:68: fb:cd:94:3f:9b:04:65:c8:12:b5:0f:ef:0a:5a:2e: 66:69:b2:7f:bd:57:33:c6:5a:94:b9:9d:80:3f:4c: d3:3a:a7:5d:6d:f8:9f:f6:53:ce:1c:c6:dc:77:79: 7f:0d:15:da:80:92:fc:c4:9a:86:42:d6:16:fd:2e: 89:d7:46:ae:0a:22:df:5f:88:ef:90:ab:9f:47:67: c2:ac:f6:ee:ef:64:44:7d:46:6b:d3:c7:80:0a:eb: ab:06:b2:79:91:b5:4a:93:01:a4:96:76:30:b8:d3: 17:9e:e7:f7:a1:9c:a0:e6:20:4a:a3:04:d0:01:a1: de:71:6c:9b:31:80:d9:87:bf:bc:37:48:95:40:82: e2:04:5d:86:8f:b0:1a:a1:ce:ce:a5:98:ea:61:a9: 62:bc:58:69:f3:b8:4e:8a:87:19:5b:c2:22:20:70: d5:4d:ae:46:5d:9f:3b:11:f4:09:1b:11:ea:10:68: c2:48:a4:84:5d:7a:4c:37:0d:ba:70:39:43:80:13: d1:9e:4a:f5:59:a1:6f:8b:21:88:74:bc:a4:a8:b6: 4c:ab:7f:e0:6d:86:b6:4c:6d:8f:7c:ea:26:19:a8: 4b:b1:ee:3f:f9:ef:8f:52:20:d6:c8:d6:b8:f3:c5: 1f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:EF:F5:16:4D:8F:37:F1:36:12:F8:1A:31:C1:07:B3:B3:31:CA:17 X509v3 Authority Key Identifier: keyid:E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:64:e7:33:fd:e0:73:91:b5:e6:44:4c:96:46:df:82:8f:24: 79:01:98:c1:95:85:83:6f:da:9c:4f:78:de:77:28:49:15:d1: be:4a:a7:1f:96:d1:04:90:89:a5:6a:39:52:28:c8:63:be:7d: 69:6a:aa:07:16:e5:e7:20:0c:72:86:a3:d3:34:f0:2a:07:46: a1:95:88:b1:71:ed:5e:e8:51:5b:83:7f:83:be:fd:2e:22:eb: 39:bb:4b:ac:a8:80:b1:f3:f5:81:a1:af:d2:7d:b9:0b:e7:0f: 75:40:65:0e:0d:84:19:32:82:42:a3:40:f4:25:d9:c8:9a:29: 0f:1b:e6:e6:6a:b8:6f:24:a1:65:11:42:b4:68:8d:e9:89:b7: e0:c6:69:b7:6d:0f:84:55:a5:7a:db:d1:d0:3d:75:e2:f6:2d: 89:36:67:7a:e1:a2:2e:ac:b5:08:6c:64:39:d0:13:22:aa:c9: 1f:99:64:57:f8:fa:a5:bf:91:77:fd:a2:a0:93:ee:cc:ff:22: f6:41:3a:d0:8b:f9:58:ca:91:b3:b8:8b:b5:58:c9:1a:bc:0b: 59:90:ec:9f:64:78:10:6b:10:4a:df:c4:77:fd:08:e2:98:55: aa:b9:dd:07:e2:e1:b7:03:44:88:4a:7a:57:2e:9d:1e:81:a1: e0:10:27:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlLOO2aEV9P+6HOmW48DmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NWIyMWFmZTFiMDkxNmY1NWVlYTZkNWJkYzFkYmYyZTcz YTNjNjgwHhcNMjUxMjIzMDUwMDQwWhcNMjUxMjI0MDUwMDQwWjAzMTEwLwYDVQQD EygwM2VmZjUxNjRkOGYzN2YxMzYxMmY4MWEzMWMxMDdiM2IzMzFjYTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjl6wWs/eLWwvG+JuWj7zZQ/mwRl yBK1D+8KWi5mabJ/vVczxlqUuZ2AP0zTOqddbfif9lPOHMbcd3l/DRXagJL8xJqG QtYW/S6J10auCiLfX4jvkKufR2fCrPbu72REfUZr08eACuurBrJ5kbVKkwGklnYw uNMXnuf3oZyg5iBKowTQAaHecWybMYDZh7+8N0iVQILiBF2Gj7Aaoc7OpZjqYali vFhp87hOiocZW8IiIHDVTa5GXZ87EfQJGxHqEGjCSKSEXXpMNw26cDlDgBPRnkr1 WaFviyGIdLykqLZMq3/gbYa2TG2PfOomGahLse4/+e+PUiDWyNa488UfgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPv9RZNjzfxNhL4GjHBB7OzMcoXMB8GA1UdIwQY MBaAFOhbIa/hsJFvVe6m1b3B2/LnOjxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkZzaHItR3drVzlWN3FiVnZjSGI4dWM2UEdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC80YjQ3NDgtNWFmMC00NTEzLWFjYTkt MGI0MTIzNGNiMGNlLzEvNkZzaHItR3drVzlWN3FiVnZjSGI4dWM2UEdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC80YjQ3NDgtNWFmMC00NTEzLWFjYTktMGI0MTIzNGNiMGNl LzEvNkZzaHItR3drVzlWN3FiVnZjSGI4dWM2UEdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArGTnM/3g c5G15kRMlkbfgo8keQGYwZWFg2/anE943ncoSRXRvkqnH5bRBJCJpWo5UijIY759 aWqqBxbl5yAMcoaj0zTwKgdGoZWIsXHtXuhRW4N/g779LiLrObtLrKiAsfP1gaGv 0n25C+cPdUBlDg2EGTKCQqNA9CXZyJopDxvm5mq4byShZRFCtGiN6Ym34MZpt20P hFWletvR0D114vYtiTZneuGiLqy1CGxkOdATIqrJH5lkV/j6pb+Rd/2ioJPuzP8i 9kE60Iv5WMqRs7iLtVjJGrwLWZDsn2R4EGsQSt/Ed/0I4phVqrndB+LhtwNEiEp6 Vy6dHoGh4BAnWw== -----END CERTIFICATE-----Generated at Tue Dec 23 07:18:11 2025 by rpki-client