This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft File: 6W790RLajZdctZOq0f6IQNbwiuM.mft (raw, json) Hash identifier: n3cuEdqInoXj0iR9MDn+0DAEloItxtAGVSqW6unSa/E= Subject key identifier: 04:24:00:85:E9:61:E2:04:6C:99:4F:95:E5:41:DA:9E:EA:D5:C8:F4 Authority key identifier: E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3 Certificate issuer: /CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3 Certificate serial: 019B41DB226C186DD38F5C244103827A06F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft Manifest number: 0353 Signing time: Sun 21 Dec 2025 17:00:38 +0000 Manifest this update: Sun 21 Dec 2025 17:00:38 +0000 Manifest next update: Mon 22 Dec 2025 17:00:38 +0000 Files and hashes: 1: 6W790RLajZdctZOq0f6IQNbwiuM.crl (hash: QpBwwu9VpM9WbM168H6PbG+VUIIAAQFLjaKimUJCBro=) 2: Nn9zvns-9MxxIXjn8JIbpmV34s8.roa (hash: 7A6j8hAQUIpmUDd+lagtKalWuiGm1he97we0iFCchhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:22:6c:18:6d:d3:8f:5c:24:41:03:82:7a:06:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3 Validity Not Before: Dec 21 17:00:38 2025 GMT Not After : Dec 22 17:00:38 2025 GMT Subject: CN=04240085e961e2046c994f95e541da9eead5c8f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c5:e8:25:3b:e9:b9:9c:2c:32:6e:c1:54:33: 6b:e7:cf:96:e6:1a:82:6d:3c:a8:8b:4e:d7:ce:58: 8a:80:ea:49:a1:7c:e2:8f:b0:2d:ae:2f:b9:e7:d2: bf:3d:0b:86:f6:00:e4:1c:bb:34:89:3d:a9:bf:d0: 69:13:12:b2:e2:54:ed:fc:b1:aa:b2:8b:4b:bb:f2: c4:7e:44:0a:07:ac:02:1b:c9:cf:70:7c:4d:58:d0: fd:5f:b5:80:1c:62:e5:2e:36:e2:2e:32:9f:d0:9b: ea:5e:80:64:78:1e:c7:25:73:ba:d1:55:42:f7:27: dd:48:63:dc:9b:7d:e7:f7:bb:be:ef:d7:f0:00:d6: b0:88:4b:37:64:d8:f5:a2:d1:fa:b2:47:b0:55:79: 65:d4:ef:9a:33:0b:20:1e:8e:f2:8c:81:34:be:c8: be:01:2d:9e:72:c0:ee:06:c4:63:15:b9:05:32:e3: f7:f3:26:da:4e:f2:6b:1a:38:af:ee:dc:bb:58:0f: 50:47:65:6e:02:02:b5:88:f2:42:d5:9d:9e:c8:85: 53:44:3b:ef:f4:07:5f:cc:f0:9d:f0:ba:22:b7:ed: 73:00:8c:58:5b:9b:14:20:de:7c:97:ab:14:ad:c2: 66:46:e6:ba:7e:73:92:05:17:24:54:d4:ca:30:f5: 07:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:24:00:85:E9:61:E2:04:6C:99:4F:95:E5:41:DA:9E:EA:D5:C8:F4 X509v3 Authority Key Identifier: keyid:E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:dd:96:e9:c7:7f:3a:d3:d8:58:42:ce:f0:28:c1:1d:09:4e: 5e:9b:11:28:4c:d7:41:11:61:1f:67:83:dd:33:cc:8d:73:10: 56:28:cd:ac:eb:87:bf:c9:6e:4c:24:94:05:ef:23:70:7f:56: 68:7a:74:01:4d:ac:f8:f0:e2:e8:df:30:7d:ee:e2:01:74:43: 5a:12:43:9b:ee:84:a7:6a:ff:02:d1:26:9a:18:9a:23:ae:53: b1:4d:20:7b:da:29:b6:84:e4:a2:42:75:6a:d9:a2:79:1e:c4: ab:30:90:08:60:6e:6f:dc:7b:28:a8:f2:4d:01:b7:21:19:c3: 14:dc:68:93:76:f0:9b:9a:ef:9a:4c:b9:8b:cf:c4:4e:1e:44: 1f:ec:d4:b8:43:36:f2:51:7d:9d:45:c4:7d:67:fc:44:99:3e: ce:0c:28:2f:cb:54:14:ee:03:84:d3:7c:b0:77:af:d6:1a:2a: 4c:c1:b2:41:80:9f:84:ad:a8:fa:7a:4e:58:08:fb:61:5a:bf: dc:80:b3:c8:4b:c2:0f:3e:55:71:d5:dc:ba:0a:0f:8b:7a:aa: cc:f1:b5:2e:9f:dc:45:17:f7:1c:dd:f9:0d:58:d7:d2:81:13: e8:61:70:85:2e:e3:03:62:67:e4:f7:a5:db:55:0b:b1:1c:62: ea:c6:09:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB2yJsGG3Tj1wkQQOCegbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NmVmZGQxMTJkYThkOTc1Y2I1OTNhYWQxZmU4ODQwZDZm MDhhZTMwHhcNMjUxMjIxMTcwMDM4WhcNMjUxMjIyMTcwMDM4WjAzMTEwLwYDVQQD EygwNDI0MDA4NWU5NjFlMjA0NmM5OTRmOTVlNTQxZGE5ZWVhZDVjOGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMXoJTvpuZwsMm7BVDNr58+W5hqC bTyoi07XzliKgOpJoXzij7Atri+559K/PQuG9gDkHLs0iT2pv9BpExKy4lTt/LGq sotLu/LEfkQKB6wCG8nPcHxNWND9X7WAHGLlLjbiLjKf0JvqXoBkeB7HJXO60VVC 9yfdSGPcm33n97u+79fwANawiEs3ZNj1otH6skewVXll1O+aMwsgHo7yjIE0vsi+ AS2ecsDuBsRjFbkFMuP38ybaTvJrGjiv7ty7WA9QR2VuAgK1iPJC1Z2eyIVTRDvv 9AdfzPCd8Loit+1zAIxYW5sUIN58l6sUrcJmRua6fnOSBRckVNTKMPUHpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQkAIXpYeIEbJlPleVB2p7q1cj0MB8GA1UdIwQY MBaAFOlu/dES2o2XXLWTqtH+iEDW8IrjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlc3OTBSTGFqWmRjdFpPcTBmNklRTmJ3aXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wYWE5YjctMDA3My00Njg1LWFhN2It NzA3NzFiNTVjMmFiLzEvNlc3OTBSTGFqWmRjdFpPcTBmNklRTmJ3aXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wYWE5YjctMDA3My00Njg1LWFhN2ItNzA3NzFiNTVjMmFi LzEvNlc3OTBSTGFqWmRjdFpPcTBmNklRTmJ3aXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfN2W6cd/ OtPYWELO8CjBHQlOXpsRKEzXQRFhH2eD3TPMjXMQVijNrOuHv8luTCSUBe8jcH9W aHp0AU2s+PDi6N8wfe7iAXRDWhJDm+6Ep2r/AtEmmhiaI65TsU0ge9optoTkokJ1 atmieR7EqzCQCGBub9x7KKjyTQG3IRnDFNxok3bwm5rvmky5i8/ETh5EH+zUuEM2 8lF9nUXEfWf8RJk+zgwoL8tUFO4DhNN8sHev1hoqTMGyQYCfhK2o+npOWAj7YVq/ 3ICzyEvCDz5VcdXcugoPi3qqzPG1Lp/cRRf3HN35DVjX0oET6GFwhS7jA2Jn5Pel 21ULsRxi6sYJ/Q== -----END CERTIFICATE-----Generated at Mon Dec 22 01:45:19 2025 by rpki-client