This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft File: 6W790RLajZdctZOq0f6IQNbwiuM.mft (raw, json) Hash identifier: FqOVWUWjyi0jmgRyCQHxyTr85h9MR3QN70d8symH40c= Subject key identifier: 2B:F6:F4:DF:68:07:FD:0D:B3:A3:0F:0E:3E:DE:40:92:0D:E7:1F:CB Authority key identifier: E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3 Certificate issuer: /CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3 Certificate serial: 019B5ED319EBD4C01630812F1B0122DAA795 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft Manifest number: 0362 Signing time: Sat 27 Dec 2025 08:00:51 +0000 Manifest this update: Sat 27 Dec 2025 08:00:51 +0000 Manifest next update: Sun 28 Dec 2025 08:00:51 +0000 Files and hashes: 1: 6W790RLajZdctZOq0f6IQNbwiuM.crl (hash: 2N0oWsrOCIlge64VoL+yEqQM28ZhgxMBjGjrrx73GNc=) 2: Nn9zvns-9MxxIXjn8JIbpmV34s8.roa (hash: 7A6j8hAQUIpmUDd+lagtKalWuiGm1he97we0iFCchhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:d3:19:eb:d4:c0:16:30:81:2f:1b:01:22:da:a7:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3 Validity Not Before: Dec 27 08:00:51 2025 GMT Not After : Dec 28 08:00:51 2025 GMT Subject: CN=2bf6f4df6807fd0db3a30f0e3ede40920de71fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9f:d2:3c:28:f2:a1:e1:45:15:42:a8:60:d6: a8:f8:5b:0c:3b:85:84:ca:2f:bd:8c:30:94:79:78: 79:30:41:cb:66:53:c6:cb:2e:b2:5a:86:56:17:4e: 84:fe:40:eb:1b:aa:66:e7:41:48:9e:11:eb:dd:2a: 5f:3a:87:44:aa:63:d9:10:c7:da:6a:ee:4f:c6:5f: 5c:bd:f4:66:27:d5:f3:4c:e0:37:a4:0f:bc:73:0e: fa:93:90:3f:19:99:26:28:2b:4d:a5:a1:1d:27:c5: 48:b8:72:ca:48:09:e5:c9:56:06:5e:b9:2a:8d:55: ae:08:f7:24:97:bc:02:c0:6a:b5:b2:28:5a:4a:a7: 89:59:bd:5c:da:06:07:df:74:86:a3:75:17:c7:ab: 6a:41:fb:7f:6a:a5:47:ee:9f:18:06:93:51:40:ca: 44:c6:0c:75:2c:ff:d5:a3:a0:c7:a3:56:9f:35:39: bb:5f:c7:15:e6:7e:53:32:af:7a:58:26:bf:33:e8: d6:c7:a2:90:47:be:c0:5d:d5:21:65:2c:7c:ae:f8: af:48:e6:de:6b:34:18:04:cc:13:8a:f4:19:6c:b0: 98:db:75:38:d8:ca:73:69:63:97:4a:64:09:a5:4a: a7:b5:8d:da:4e:eb:c2:11:86:64:38:56:09:3a:c3: 04:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F6:F4:DF:68:07:FD:0D:B3:A3:0F:0E:3E:DE:40:92:0D:E7:1F:CB X509v3 Authority Key Identifier: keyid:E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:de:76:7a:a7:4c:04:7c:b0:6d:a5:20:57:94:9c:05:8c:bc: 14:f3:46:7a:5e:82:a6:61:25:4e:ef:d1:81:8a:6a:fd:84:cd: 80:a5:41:21:d7:0b:da:58:ef:66:55:51:cd:3e:80:ba:81:5c: a9:30:d5:03:80:ca:ef:42:16:00:c7:08:c8:86:d7:ad:4b:5b: c1:be:08:ca:f6:c1:93:36:75:9a:50:ab:42:46:14:f2:ba:e3: ae:95:b1:18:a2:8b:e0:6b:42:d2:74:42:80:40:1d:ac:4c:ed: ce:99:8a:ff:13:a2:30:bd:cc:d5:1a:67:9a:3d:5e:d0:eb:82: 1f:f9:11:62:91:8e:05:d0:17:08:57:94:ac:3a:f6:64:15:40: fb:b2:fc:e0:bd:fc:b2:98:54:a1:8b:4a:d0:7c:c1:b0:cf:1f: 3a:2f:f3:e5:1e:a9:bb:de:b2:64:c3:30:e3:06:65:d3:4b:48: f7:98:16:34:50:20:0a:c8:82:5d:51:4e:e7:03:b5:06:34:3a: d0:73:2b:4c:03:27:d5:1d:d5:be:af:58:aa:ce:46:d8:92:e4: cb:0f:3c:43:5b:f3:7b:4e:6a:17:cb:13:8e:00:fd:46:12:db: 6f:8e:f5:f5:b2:0f:2b:ac:9c:ec:aa:65:85:43:f1:48:1d:29: 99:c6:38:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZte0xnr1MAWMIEvGwEi2qeVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NmVmZGQxMTJkYThkOTc1Y2I1OTNhYWQxZmU4ODQwZDZm MDhhZTMwHhcNMjUxMjI3MDgwMDUxWhcNMjUxMjI4MDgwMDUxWjAzMTEwLwYDVQQD EygyYmY2ZjRkZjY4MDdmZDBkYjNhMzBmMGUzZWRlNDA5MjBkZTcxZmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ/SPCjyoeFFFUKoYNao+FsMO4WE yi+9jDCUeXh5MEHLZlPGyy6yWoZWF06E/kDrG6pm50FInhHr3SpfOodEqmPZEMfa au5Pxl9cvfRmJ9XzTOA3pA+8cw76k5A/GZkmKCtNpaEdJ8VIuHLKSAnlyVYGXrkq jVWuCPckl7wCwGq1sihaSqeJWb1c2gYH33SGo3UXx6tqQft/aqVH7p8YBpNRQMpE xgx1LP/Vo6DHo1afNTm7X8cV5n5TMq96WCa/M+jWx6KQR77AXdUhZSx8rvivSObe azQYBMwTivQZbLCY23U42MpzaWOXSmQJpUqntY3aTuvCEYZkOFYJOsMEmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCv29N9oB/0Ns6MPDj7eQJIN5x/LMB8GA1UdIwQY MBaAFOlu/dES2o2XXLWTqtH+iEDW8IrjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlc3OTBSTGFqWmRjdFpPcTBmNklRTmJ3aXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wYWE5YjctMDA3My00Njg1LWFhN2It NzA3NzFiNTVjMmFiLzEvNlc3OTBSTGFqWmRjdFpPcTBmNklRTmJ3aXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wYWE5YjctMDA3My00Njg1LWFhN2ItNzA3NzFiNTVjMmFi LzEvNlc3OTBSTGFqWmRjdFpPcTBmNklRTmJ3aXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY952eqdM BHywbaUgV5ScBYy8FPNGel6CpmElTu/RgYpq/YTNgKVBIdcL2ljvZlVRzT6AuoFc qTDVA4DK70IWAMcIyIbXrUtbwb4IyvbBkzZ1mlCrQkYU8rrjrpWxGKKL4GtC0nRC gEAdrEztzpmK/xOiML3M1Rpnmj1e0OuCH/kRYpGOBdAXCFeUrDr2ZBVA+7L84L38 sphUoYtK0HzBsM8fOi/z5R6pu96yZMMw4wZl00tI95gWNFAgCsiCXVFO5wO1BjQ6 0HMrTAMn1R3Vvq9Yqs5G2JLkyw88Q1vze05qF8sTjgD9RhLbb4719bIPK6yc7Kpl hUPxSB0pmcY4uA== -----END CERTIFICATE-----Generated at Sat Dec 27 15:42:19 2025 by rpki-client