This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft File: 6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft (raw, json) Hash identifier: TfgJ09ckPT3QtiRKuhJd6iDe8T8oO4zsMF7qmQDCI6Q= Subject key identifier: 98:BA:49:90:22:E6:64:05:98:A8:73:2E:AE:75:F4:66:4A:EC:D7:D4 Authority key identifier: E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA Certificate issuer: /CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea Certificate serial: 019B5FE5CF95384064BB814BDEC27913DE09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft Manifest number: 105D Signing time: Sat 27 Dec 2025 13:00:54 +0000 Manifest this update: Sat 27 Dec 2025 13:00:54 +0000 Manifest next update: Sun 28 Dec 2025 13:00:54 +0000 Files and hashes: 1: 0IRtpKWzk8HJphT_ihghX52o_pQ.roa (hash: hQ8UcdaXM+7M8W7AcOjTNRV8pYkTm524u6CkYGZP1Ds=) 2: 6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl (hash: HX0Op1L/UrkNzjN/DX8jYqX3pd0uP5Z0YuVJLFg9yZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:e5:cf:95:38:40:64:bb:81:4b:de:c2:79:13:de:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea Validity Not Before: Dec 27 13:00:54 2025 GMT Not After : Dec 28 13:00:54 2025 GMT Subject: CN=98ba499022e6640598a8732eae75f4664aecd7d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f5:67:83:4b:e6:c4:5a:bf:1c:7a:ea:06:a6: e0:82:2b:11:56:29:66:92:b8:af:52:ee:25:09:31: b9:91:97:bd:b9:07:7d:c5:ae:8b:1c:91:03:68:df: ac:c1:c2:d0:e7:38:25:11:2d:49:28:5d:2e:53:e2: 46:73:2c:b3:40:75:c7:a0:c3:e1:01:71:f5:3e:29: 50:68:b7:74:42:96:1d:a5:86:0a:86:96:be:86:6f: 80:a4:2c:01:3e:32:88:65:b1:e6:88:be:2f:51:b0: 90:61:66:be:99:05:62:ce:ab:28:01:1e:03:74:57: bb:d5:11:77:54:37:92:95:01:5c:c9:3c:09:3c:ea: 8e:04:7b:32:b8:d0:43:bc:03:55:dd:fb:32:ba:e0: b0:8a:42:57:1e:45:b6:e3:55:37:79:3a:66:a9:b1: 6a:03:e7:d7:4b:af:d7:47:f1:83:de:85:dd:54:2f: c6:62:24:cd:29:29:20:d9:d0:fc:13:93:38:7a:93: a8:0b:c2:bc:36:a3:54:79:39:0a:d3:bc:a7:d2:a8: c5:82:67:ac:6e:e3:3b:e9:fc:bf:a0:55:63:58:e5: 24:1e:36:04:8c:78:89:82:65:76:d4:69:78:d7:34: f3:59:94:d1:1d:f0:24:b9:de:fb:09:22:13:5a:ef: 9a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BA:49:90:22:E6:64:05:98:A8:73:2E:AE:75:F4:66:4A:EC:D7:D4 X509v3 Authority Key Identifier: keyid:E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ce:c8:5f:eb:48:25:6f:29:e8:44:83:1d:9d:d6:89:6d:41: 27:8b:e1:f3:d2:cf:1a:1d:c5:69:b4:c4:84:a1:15:26:1b:4b: 66:7a:6a:7b:35:6d:f4:62:24:43:e9:7d:5f:4d:1e:63:62:7b: ae:38:b8:20:ee:70:97:71:bd:d6:b3:f6:d9:e3:1d:c9:d7:4c: 4c:ac:87:d7:bb:ce:6d:cd:09:90:2c:4c:91:04:67:d5:68:b3: b4:d3:f5:25:b3:28:09:02:d8:a3:1a:14:f8:86:95:df:cd:99: 03:50:db:e5:b6:7c:32:cb:c6:82:ee:2e:f7:a5:8e:79:2c:12: 4e:f4:f1:3b:20:c6:f3:c5:c7:9c:1a:06:7e:fc:f5:32:37:da: 92:22:70:9f:01:88:28:03:32:eb:16:4d:bb:c3:4b:ea:72:e1: 5e:eb:ef:56:3d:f7:58:85:ac:89:1d:f1:68:4a:fe:80:17:59: fe:eb:04:31:d1:25:41:b4:91:c3:d8:17:1b:9c:5d:ba:9e:0c: 5b:4c:d3:be:a4:29:f0:7a:5d:a2:b4:2a:35:de:8f:e8:f6:62: f6:c2:71:b2:13:67:4f:e4:61:12:25:d5:0b:e2:83:ff:f0:22: e9:7d:41:bf:09:52:67:c7:da:b8:22:eb:3b:3e:88:e5:91:81: 93:8c:03:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtf5c+VOEBku4FL3sJ5E94JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ODI5M2FjMTY3MGNmMmUzYTRiM2RhNmM3NzcxZjhiMWU4 NGNmZWEwHhcNMjUxMjI3MTMwMDU0WhcNMjUxMjI4MTMwMDU0WjAzMTEwLwYDVQQD Eyg5OGJhNDk5MDIyZTY2NDA1OThhODczMmVhZTc1ZjQ2NjRhZWNkN2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vVng0vmxFq/HHrqBqbggisRVilm krivUu4lCTG5kZe9uQd9xa6LHJEDaN+swcLQ5zglES1JKF0uU+JGcyyzQHXHoMPh AXH1PilQaLd0QpYdpYYKhpa+hm+ApCwBPjKIZbHmiL4vUbCQYWa+mQVizqsoAR4D dFe71RF3VDeSlQFcyTwJPOqOBHsyuNBDvANV3fsyuuCwikJXHkW241U3eTpmqbFq A+fXS6/XR/GD3oXdVC/GYiTNKSkg2dD8E5M4epOoC8K8NqNUeTkK07yn0qjFgmes buM76fy/oFVjWOUkHjYEjHiJgmV21Gl41zTzWZTRHfAkud77CSITWu+acwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJi6SZAi5mQFmKhzLq519GZK7NfUMB8GA1UdIwQY MBaAFOiCk6wWcM8uOks9psd3H4sehM/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNklLVHJCWnd6eTQ2U3oybXgzY2ZpeDZFei1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mYjZlMDctYmJjMS00NDdlLWIzZmEt NTExMGY2YjU3OWJmLzEvNklLVHJCWnd6eTQ2U3oybXgzY2ZpeDZFei1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mYjZlMDctYmJjMS00NDdlLWIzZmEtNTExMGY2YjU3OWJm LzEvNklLVHJCWnd6eTQ2U3oybXgzY2ZpeDZFei1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAns7IX+tI JW8p6ESDHZ3WiW1BJ4vh89LPGh3FabTEhKEVJhtLZnpqezVt9GIkQ+l9X00eY2J7 rji4IO5wl3G91rP22eMdyddMTKyH17vObc0JkCxMkQRn1WiztNP1JbMoCQLYoxoU +IaV382ZA1Db5bZ8MsvGgu4u96WOeSwSTvTxOyDG88XHnBoGfvz1MjfakiJwnwGI KAMy6xZNu8NL6nLhXuvvVj33WIWsiR3xaEr+gBdZ/usEMdElQbSRw9gXG5xdup4M W0zTvqQp8HpdorQqNd6P6PZi9sJxshNnT+RhEiXVC+KD//Ai6X1BvwlSZ8fauCLr Oz6I5ZGBk4wDsw== -----END CERTIFICATE-----Generated at Sat Dec 27 17:45:59 2025 by rpki-client