This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft File: B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft (raw, json) Hash identifier: nHjEXxVttxwDONmOsB4iMRy0ZNYyipchcdC8NRFjFn8= Subject key identifier: 14:D4:22:37:F3:83:A3:5D:DC:4C:A1:93:8A:F5:AA:DC:63:90:73:31 Authority key identifier: 07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15 Certificate issuer: /CN=07ac64191435789995bc5a67f5b51d9685002815 Certificate serial: 019B3AFE17382641B568338E5EBB5CE5B3E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 09:01:29 +0000 Manifest this update: Sat 20 Dec 2025 09:01:29 +0000 Manifest next update: Sun 21 Dec 2025 09:01:29 +0000 Files and hashes: 1: 1SBGl6Dsc-NanmKmDFRCZHTHXUE.roa (hash: RQb0cT5Ld94CC4E9QaW/599ZeClVgEWvUpN7FpldNG0=) 2: B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl (hash: ZjePA1oL+a0fZubv9jiBknSpJuTn00WfjkvhgXn9/LM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:17:38:26:41:b5:68:33:8e:5e:bb:5c:e5:b3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07ac64191435789995bc5a67f5b51d9685002815 Validity Not Before: Dec 20 09:01:29 2025 GMT Not After : Dec 21 09:01:29 2025 GMT Subject: CN=14d42237f383a35ddc4ca1938af5aadc63907331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e8:16:63:7e:62:78:b6:cb:a3:10:30:ac:bb: 39:49:e8:33:0a:95:23:ed:d0:87:45:ab:ff:61:26: 9b:3a:da:0e:4a:8e:15:3b:4b:f8:19:14:98:34:20: cb:3e:47:82:ef:2a:d7:25:7d:14:9b:22:4a:a6:88: fa:aa:db:6f:2c:1e:af:aa:5a:5b:6d:76:0f:6e:2e: 29:b2:8e:1d:4f:10:af:92:c1:a1:c2:1f:6e:e5:4e: 81:8b:28:7e:e3:0b:50:88:97:9d:e0:84:e9:ce:31: cf:5f:d5:4b:9b:17:64:a8:a7:cc:36:31:8c:f6:39: ba:7c:1b:cb:87:32:40:04:27:e7:4f:ce:72:ab:7d: 61:39:ff:61:d0:93:b5:e6:32:d8:49:10:78:90:50: 0d:bf:76:15:12:4c:94:3b:bb:80:62:14:03:1b:45: 0b:68:50:b5:79:88:ae:9b:ac:b0:d2:d7:da:ef:fa: 62:aa:54:e8:d3:5d:25:17:c8:6f:b9:db:66:43:c0: 5c:b2:7a:28:c3:50:d2:fe:63:f1:0d:05:dd:e4:26: fa:9f:cb:46:29:84:13:d7:c5:5b:02:db:3d:7a:cd: 0d:85:22:1d:71:66:3c:f5:27:d2:4a:e1:f2:e4:3b: e1:9d:5c:80:3f:45:ec:6f:a3:f2:16:12:6e:7e:6f: 08:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D4:22:37:F3:83:A3:5D:DC:4C:A1:93:8A:F5:AA:DC:63:90:73:31 X509v3 Authority Key Identifier: keyid:07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bf:74:d6:94:d5:6a:e9:39:d9:52:a3:5d:11:cd:c7:2a:46: ed:5a:aa:4b:a7:26:10:ee:09:1c:5e:2c:eb:24:92:14:3c:91: a6:f7:4f:7d:51:9a:da:05:a0:f7:02:13:59:01:1c:a1:13:b6: b4:a6:9d:3d:95:b8:88:15:4e:d3:79:e0:f5:ab:82:5e:6b:6a: 36:c0:ef:28:99:1e:74:6d:4e:31:05:10:62:2c:59:f0:0c:49: 72:86:f7:e2:bb:d4:f2:5a:e7:b9:3a:94:2f:1a:46:47:71:42: 42:cb:cc:06:87:8c:12:1d:16:4b:f9:b9:5b:3d:21:8e:86:e7: f6:39:2b:6f:da:47:bc:a0:54:85:89:78:75:53:79:ca:f4:75: d7:c4:b2:a9:f4:fd:11:1e:9e:d0:96:3b:66:aa:d8:83:d1:57: c8:c0:04:03:a5:4b:8c:50:ee:82:d7:33:4b:de:8f:67:e4:06: f7:57:42:c4:3c:87:7a:75:2c:0f:2c:81:8c:b6:e0:e9:9f:30: b6:1a:7b:28:75:e5:b8:2c:3f:ab:89:48:e3:07:aa:6d:f5:a5: f0:86:fc:3f:db:b1:bb:81:76:fb:88:ee:c1:0c:b5:2a:ac:2b: 80:fd:96:97:67:b6:50:a8:8d:b8:5f:40:c0:3e:1a:8a:dd:ab: 8f:b3:0f:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/hc4JkG1aDOOXrtc5bPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YWM2NDE5MTQzNTc4OTk5NWJjNWE2N2Y1YjUxZDk2ODUw MDI4MTUwHhcNMjUxMjIwMDkwMTI5WhcNMjUxMjIxMDkwMTI5WjAzMTEwLwYDVQQD EygxNGQ0MjIzN2YzODNhMzVkZGM0Y2ExOTM4YWY1YWFkYzYzOTA3MzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxugWY35ieLbLoxAwrLs5SegzCpUj 7dCHRav/YSabOtoOSo4VO0v4GRSYNCDLPkeC7yrXJX0UmyJKpoj6qttvLB6vqlpb bXYPbi4pso4dTxCvksGhwh9u5U6Biyh+4wtQiJed4ITpzjHPX9VLmxdkqKfMNjGM 9jm6fBvLhzJABCfnT85yq31hOf9h0JO15jLYSRB4kFANv3YVEkyUO7uAYhQDG0UL aFC1eYium6yw0tfa7/piqlTo010lF8hvudtmQ8Bcsnoow1DS/mPxDQXd5Cb6n8tG KYQT18VbAts9es0NhSIdcWY89SfSSuHy5DvhnVyAP0Xsb6PyFhJufm8ImQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTUIjfzg6Nd3Eyhk4r1qtxjkHMxMB8GA1UdIwQY MBaAFAesZBkUNXiZlbxaZ/W1HZaFACgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjZ4a0dSUTFlSm1WdkZwbjliVWRsb1VBS0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83YzJlMDctNmNmMi00MTIyLTk5ZjQt OWM2YmVhNGNkNWI1LzEvQjZ4a0dSUTFlSm1WdkZwbjliVWRsb1VBS0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS83YzJlMDctNmNmMi00MTIyLTk5ZjQtOWM2YmVhNGNkNWI1 LzEvQjZ4a0dSUTFlSm1WdkZwbjliVWRsb1VBS0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALL901pTV auk52VKjXRHNxypG7VqqS6cmEO4JHF4s6ySSFDyRpvdPfVGa2gWg9wITWQEcoRO2 tKadPZW4iBVO03ng9auCXmtqNsDvKJkedG1OMQUQYixZ8AxJcob34rvU8lrnuTqU LxpGR3FCQsvMBoeMEh0WS/m5Wz0hjobn9jkrb9pHvKBUhYl4dVN5yvR118SyqfT9 ER6e0JY7ZqrYg9FXyMAEA6VLjFDugtczS96PZ+QG91dCxDyHenUsDyyBjLbg6Z8w thp7KHXluCw/q4lI4weqbfWl8Ib8P9uxu4F2+4juwQy1KqwrgP2Wl2e2UKiNuF9A wD4ait2rj7MPEQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:16:27 2025 by rpki-client