This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft File: B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft (raw, json) Hash identifier: SnbdtBQiVgUVH9EAUs12qSKEjA5+6CDfCnjBSV6hhsQ= Subject key identifier: 4C:AE:DF:C9:D0:FA:60:5D:E9:52:7C:54:19:9B:F3:18:97:8B:C5:2A Authority key identifier: 07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15 Certificate issuer: /CN=07ac64191435789995bc5a67f5b51d9685002815 Certificate serial: 019B40C8A1E1CB6A382560A8EA1AB01FFC98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 12:00:48 +0000 Manifest this update: Sun 21 Dec 2025 12:00:48 +0000 Manifest next update: Mon 22 Dec 2025 12:00:48 +0000 Files and hashes: 1: 1SBGl6Dsc-NanmKmDFRCZHTHXUE.roa (hash: RQb0cT5Ld94CC4E9QaW/599ZeClVgEWvUpN7FpldNG0=) 2: B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl (hash: ZcPaJEKGafL9gnlBorkLuBkJ0AOX5Eaw0Mhj7J0ccYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:a1:e1:cb:6a:38:25:60:a8:ea:1a:b0:1f:fc:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07ac64191435789995bc5a67f5b51d9685002815 Validity Not Before: Dec 21 12:00:48 2025 GMT Not After : Dec 22 12:00:48 2025 GMT Subject: CN=4caedfc9d0fa605de9527c54199bf318978bc52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:aa:5a:a6:76:66:22:e8:68:78:6b:4d:97:58: 1a:c0:a6:de:ae:41:01:de:03:c2:7b:91:50:fc:09: 37:58:e2:3e:06:3c:c3:21:b1:1d:30:cf:b5:fb:b1: 41:3d:a3:01:c6:4d:07:a3:91:92:2e:c0:75:51:85: 04:f4:3c:1b:71:94:62:4e:71:c7:76:7b:12:de:e4: a5:4c:3e:3b:e6:70:64:b7:03:75:24:92:50:34:75: 36:e2:dc:37:03:d7:c5:87:fc:cd:db:f8:2e:30:f6: 28:9c:26:0e:83:e7:54:54:bc:25:7e:52:67:05:72: b6:6d:11:57:f1:3f:b6:a0:7e:31:51:de:fa:3d:10: 86:bc:4d:a9:66:05:a8:42:5c:72:04:95:91:60:d1: 4a:46:ee:50:58:58:2f:e5:9e:a1:d7:e6:e5:4c:16: fb:e6:59:93:84:b3:16:91:9c:c1:96:88:e5:3e:08: 2d:58:2f:65:02:ca:86:bc:24:12:8a:af:d5:7c:35: f4:9c:e4:fd:23:1c:71:b6:da:2e:2f:e5:19:4e:52: 4b:32:67:72:e3:53:46:33:ed:8e:2c:cf:d7:ea:a5: 15:2c:48:60:a7:04:48:64:cb:7b:2f:7f:f5:1d:31: c1:e0:0d:27:9f:81:85:8f:4a:18:cf:b0:1c:c4:26: ba:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AE:DF:C9:D0:FA:60:5D:E9:52:7C:54:19:9B:F3:18:97:8B:C5:2A X509v3 Authority Key Identifier: keyid:07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:a6:44:55:9f:5e:b7:40:55:bc:c5:2f:c0:e6:8c:bf:91:af: cf:bf:85:a4:44:43:8b:b0:ce:8b:b3:96:63:1d:eb:ef:bc:96: fd:d4:81:69:3b:7a:6e:59:d1:75:59:fb:fd:82:62:61:88:b4: bd:72:8d:9e:97:38:72:08:69:9f:a4:02:65:c4:dc:f9:9d:9d: 1d:c4:6c:e6:77:9b:91:43:21:30:49:28:9c:86:8f:71:7d:76: ff:9a:a2:27:99:05:e7:7f:ac:36:2a:9f:02:6c:29:b5:00:fc: b7:12:ff:f1:23:a7:b6:97:e1:f7:9c:ab:ca:59:47:06:71:7d: df:46:e2:46:3c:bb:da:98:d3:07:85:5b:53:ad:40:b1:be:b5: 92:b0:20:1c:33:dc:27:1b:9f:55:0c:01:aa:c4:f1:fb:d5:d5: 95:b6:2a:e6:08:dc:72:d0:50:df:43:7a:17:9b:2b:32:73:af: 52:7d:93:3e:da:37:4f:5a:6d:06:6f:a0:1e:4a:15:dd:c6:66: 56:05:83:cf:0e:0c:f3:f1:1a:b6:36:3c:93:95:9c:ca:dd:28: 96:22:b6:7c:90:ed:34:66:72:fb:7d:45:58:15:d9:ce:7a:98: 54:5a:9e:f7:d8:af:50:da:be:e4:02:cf:82:b7:ed:5b:c5:7e: f3:5b:5d:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyKHhy2o4JWCo6hqwH/yYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YWM2NDE5MTQzNTc4OTk5NWJjNWE2N2Y1YjUxZDk2ODUw MDI4MTUwHhcNMjUxMjIxMTIwMDQ4WhcNMjUxMjIyMTIwMDQ4WjAzMTEwLwYDVQQD Eyg0Y2FlZGZjOWQwZmE2MDVkZTk1MjdjNTQxOTliZjMxODk3OGJjNTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKpapnZmIuhoeGtNl1gawKberkEB 3gPCe5FQ/Ak3WOI+BjzDIbEdMM+1+7FBPaMBxk0Ho5GSLsB1UYUE9DwbcZRiTnHH dnsS3uSlTD475nBktwN1JJJQNHU24tw3A9fFh/zN2/guMPYonCYOg+dUVLwlflJn BXK2bRFX8T+2oH4xUd76PRCGvE2pZgWoQlxyBJWRYNFKRu5QWFgv5Z6h1+blTBb7 5lmThLMWkZzBlojlPggtWC9lAsqGvCQSiq/VfDX0nOT9IxxxttouL+UZTlJLMmdy 41NGM+2OLM/X6qUVLEhgpwRIZMt7L3/1HTHB4A0nn4GFj0oYz7AcxCa6gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyu38nQ+mBd6VJ8VBmb8xiXi8UqMB8GA1UdIwQY MBaAFAesZBkUNXiZlbxaZ/W1HZaFACgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjZ4a0dSUTFlSm1WdkZwbjliVWRsb1VBS0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83YzJlMDctNmNmMi00MTIyLTk5ZjQt OWM2YmVhNGNkNWI1LzEvQjZ4a0dSUTFlSm1WdkZwbjliVWRsb1VBS0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS83YzJlMDctNmNmMi00MTIyLTk5ZjQtOWM2YmVhNGNkNWI1 LzEvQjZ4a0dSUTFlSm1WdkZwbjliVWRsb1VBS0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqZEVZ9e t0BVvMUvwOaMv5Gvz7+FpERDi7DOi7OWYx3r77yW/dSBaTt6blnRdVn7/YJiYYi0 vXKNnpc4cghpn6QCZcTc+Z2dHcRs5nebkUMhMEkonIaPcX12/5qiJ5kF53+sNiqf AmwptQD8txL/8SOntpfh95yryllHBnF930biRjy72pjTB4VbU61Asb61krAgHDPc JxufVQwBqsTx+9XVlbYq5gjcctBQ30N6F5srMnOvUn2TPto3T1ptBm+gHkoV3cZm VgWDzw4M8/EatjY8k5Wcyt0oliK2fJDtNGZy+31FWBXZznqYVFqe99ivUNq+5ALP grftW8V+81tdhg== -----END CERTIFICATE-----Generated at Sun Dec 21 22:28:36 2025 by rpki-client