This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft File: 6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft (raw, json) Hash identifier: LgSYt1frAyVu2UiToRdLSeEntro0Jdd2QhM7cnT/XXA= Subject key identifier: 04:25:24:EA:A7:9B:10:45:F7:95:9A:2A:19:AB:0D:01:E9:C6:AD:B5 Authority key identifier: E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA Certificate issuer: /CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea Certificate serial: 019B5072ED9F043F258D7A070D7ADC30C6ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft Manifest number: 1055 Signing time: Wed 24 Dec 2025 13:01:07 +0000 Manifest this update: Wed 24 Dec 2025 13:01:07 +0000 Manifest next update: Thu 25 Dec 2025 13:01:07 +0000 Files and hashes: 1: 0IRtpKWzk8HJphT_ihghX52o_pQ.roa (hash: hQ8UcdaXM+7M8W7AcOjTNRV8pYkTm524u6CkYGZP1Ds=) 2: 6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl (hash: QVLqYpM1OwtJY54oK5wyDIna2sp9gWMXQ0/Ga/6VEoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:ed:9f:04:3f:25:8d:7a:07:0d:7a:dc:30:c6:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea Validity Not Before: Dec 24 13:01:07 2025 GMT Not After : Dec 25 13:01:07 2025 GMT Subject: CN=042524eaa79b1045f7959a2a19ab0d01e9c6adb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a0:ec:f4:16:11:6b:ad:43:2f:88:2b:9d:ef: b4:e6:4b:64:60:86:65:74:44:82:14:66:d9:78:8e: 33:a7:8b:2c:83:38:3a:f7:99:33:36:e6:ec:0c:25: da:22:52:91:0d:81:bf:4f:ca:d9:2d:ad:30:f3:ef: fb:f5:b5:1e:c4:60:32:29:80:48:2d:9b:5c:6a:ac: c7:98:aa:e8:f1:0f:0a:54:a7:53:3f:cb:ef:e9:c8: 4d:d5:0b:b6:5e:b2:69:9f:6f:40:ed:1e:9f:b0:27: dd:c6:45:61:3f:5d:e0:80:ea:cb:f1:be:cb:b4:59: 3a:2d:26:69:16:46:de:90:7e:b9:69:2d:4a:44:6f: 25:de:b7:80:f8:55:69:57:ee:0a:78:46:ce:bb:31: 5d:ea:46:18:15:5b:70:e5:34:7c:95:c7:43:a4:28: a9:61:52:61:24:2f:76:be:4a:27:3f:9c:13:7b:fb: c4:06:83:fd:46:fb:fa:83:1a:61:c5:47:1b:db:62: 0a:df:00:51:2e:68:1b:62:da:26:ac:99:e8:d2:be: 1c:07:53:64:69:64:b8:7a:0b:03:6b:78:9b:9e:29: 15:f7:73:7d:09:5e:96:b8:fb:5c:b4:1d:a7:9b:79: 80:f0:98:6d:40:42:88:1e:e4:8a:0e:63:92:7e:ca: 60:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:25:24:EA:A7:9B:10:45:F7:95:9A:2A:19:AB:0D:01:E9:C6:AD:B5 X509v3 Authority Key Identifier: keyid:E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a2:79:3f:e2:45:7f:6f:44:df:85:1c:87:d8:0b:1f:f1:4f: b2:80:0b:31:5e:e1:38:9d:ac:4f:95:e2:3e:bd:e4:21:6d:ce: 23:7f:02:7f:31:04:bb:de:24:1c:d1:06:10:aa:0f:2b:ae:d5: ef:b3:c0:ef:0e:f9:ff:7a:07:4d:96:f0:11:23:e9:d8:a9:c2: c1:ce:8c:a0:b5:5c:da:c3:6b:1a:2b:74:a0:2f:d6:7a:43:4e: 8b:ff:4c:d0:87:7c:b1:c5:fa:f2:31:c8:1b:b0:ff:6c:d8:e3: d8:c3:9d:75:3e:75:49:a1:e7:3b:5b:29:80:9b:09:dc:e5:61: 3e:0b:3a:ad:8f:6c:d7:38:5d:c2:4b:66:b4:bd:da:01:dd:1f: 3e:ed:3b:38:6c:6e:c5:79:1a:63:a9:a8:b8:b7:8a:5a:81:70: 08:08:1c:9a:51:f1:7c:87:ca:45:da:40:e9:01:8f:aa:a7:75: 03:aa:a2:5c:32:b7:1e:7c:87:48:76:9e:d7:08:57:c2:2b:1c: a2:ec:39:45:7e:c9:d7:ef:17:4f:e6:16:27:86:45:0e:7d:ba: d7:4d:a4:92:09:77:75:9a:6d:3c:74:5f:c9:44:2b:7c:6a:02: c7:da:fe:ad:bc:bc:89:f5:a2:05:64:d8:a4:99:28:4c:51:27: a3:5c:f2:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcu2fBD8ljXoHDXrcMMbtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ODI5M2FjMTY3MGNmMmUzYTRiM2RhNmM3NzcxZjhiMWU4 NGNmZWEwHhcNMjUxMjI0MTMwMTA3WhcNMjUxMjI1MTMwMTA3WjAzMTEwLwYDVQQD EygwNDI1MjRlYWE3OWIxMDQ1Zjc5NTlhMmExOWFiMGQwMWU5YzZhZGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6Ds9BYRa61DL4grne+05ktkYIZl dESCFGbZeI4zp4ssgzg695kzNubsDCXaIlKRDYG/T8rZLa0w8+/79bUexGAyKYBI LZtcaqzHmKro8Q8KVKdTP8vv6chN1Qu2XrJpn29A7R6fsCfdxkVhP13ggOrL8b7L tFk6LSZpFkbekH65aS1KRG8l3reA+FVpV+4KeEbOuzFd6kYYFVtw5TR8lcdDpCip YVJhJC92vkonP5wTe/vEBoP9Rvv6gxphxUcb22IK3wBRLmgbYtomrJno0r4cB1Nk aWS4egsDa3ibnikV93N9CV6WuPtctB2nm3mA8JhtQEKIHuSKDmOSfspgfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQlJOqnmxBF95WaKhmrDQHpxq21MB8GA1UdIwQY MBaAFOiCk6wWcM8uOks9psd3H4sehM/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNklLVHJCWnd6eTQ2U3oybXgzY2ZpeDZFei1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mYjZlMDctYmJjMS00NDdlLWIzZmEt NTExMGY2YjU3OWJmLzEvNklLVHJCWnd6eTQ2U3oybXgzY2ZpeDZFei1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mYjZlMDctYmJjMS00NDdlLWIzZmEtNTExMGY2YjU3OWJm LzEvNklLVHJCWnd6eTQ2U3oybXgzY2ZpeDZFei1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmqJ5P+JF f29E34Uch9gLH/FPsoALMV7hOJ2sT5XiPr3kIW3OI38CfzEEu94kHNEGEKoPK67V 77PA7w75/3oHTZbwESPp2KnCwc6MoLVc2sNrGit0oC/WekNOi/9M0Id8scX68jHI G7D/bNjj2MOddT51SaHnO1spgJsJ3OVhPgs6rY9s1zhdwktmtL3aAd0fPu07OGxu xXkaY6mouLeKWoFwCAgcmlHxfIfKRdpA6QGPqqd1A6qiXDK3HnyHSHae1whXwisc ouw5RX7J1+8XT+YWJ4ZFDn26102kkgl3dZptPHRfyUQrfGoCx9r+rby8ifWiBWTY pJkoTFEno1zysg== -----END CERTIFICATE-----Generated at Wed Dec 24 19:59:32 2025 by rpki-client