This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft File: 6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft (raw, json) Hash identifier: QXd4zGabYGERsWlc3MgBNnP59u+IRAuuRLewlsU9ftI= Subject key identifier: A0:31:F0:2F:1A:11:BA:AB:B5:B3:14:67:C4:08:D4:2A:96:E6:AF:A5 Authority key identifier: E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3 Certificate issuer: /CN=e87244897c7917b791e100d4680339c4a3593fc3 Certificate serial: 019B45135BBDE286CAD749C4DBE0C2EC72F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft Manifest number: 178A Signing time: Mon 22 Dec 2025 08:00:55 +0000 Manifest this update: Mon 22 Dec 2025 08:00:55 +0000 Manifest next update: Tue 23 Dec 2025 08:00:55 +0000 Files and hashes: 1: 6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl (hash: o8u5Aotbeu54rjokFwmjdMFIRO/TA+Y1HWOIqHNy7JI=) 2: bnk0ln2aj6MfWOT6o9kQMXhL3ow.roa (hash: nUC34YHIv92VX7i6tmE4A0fGDBK2kzWYfNC+d/UuSnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:5b:bd:e2:86:ca:d7:49:c4:db:e0:c2:ec:72:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e87244897c7917b791e100d4680339c4a3593fc3 Validity Not Before: Dec 22 08:00:55 2025 GMT Not After : Dec 23 08:00:55 2025 GMT Subject: CN=a031f02f1a11baabb5b31467c408d42a96e6afa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5c:47:95:ed:ef:f0:96:39:c5:59:d2:40:6d: ed:6b:f4:88:c1:7f:f2:ea:4e:75:17:e7:71:6b:03: b0:e9:da:89:47:d9:2b:54:20:65:47:42:0d:0f:aa: 33:a5:16:ee:a8:6d:d5:79:4d:b4:4d:22:9b:37:79: 66:54:51:5a:04:2f:6b:42:58:b9:47:70:0a:ec:d9: 1e:47:90:0f:b1:68:f2:1a:ae:3f:28:da:2f:5f:7e: 90:cf:33:b8:ec:ce:89:46:24:3c:32:bc:3f:ec:71: 53:8a:16:01:1c:95:27:56:80:24:a7:96:d0:bf:79: 6c:63:0e:01:d8:87:aa:3b:cb:f3:58:ec:0f:e3:5b: ea:9a:55:ce:25:45:61:cd:b6:e4:9a:b4:fe:36:04: 3b:c8:a4:f0:9a:8f:8b:f7:6a:9b:4a:17:cb:18:12: 61:20:49:c6:45:f5:82:fd:2d:ba:ab:3e:41:1c:67: 60:c6:8d:b4:6e:92:3b:5f:c1:3b:3c:2d:40:cd:4d: 87:77:0b:90:7c:45:e1:77:44:fd:55:68:54:11:9d: f2:d7:e6:65:b7:cf:41:b6:5c:85:02:98:c7:84:f5: 26:aa:76:70:df:4c:d6:21:85:9e:ca:34:6e:4a:43: 76:f6:27:b7:43:0f:3e:5f:be:e2:50:90:3e:92:80: 38:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:31:F0:2F:1A:11:BA:AB:B5:B3:14:67:C4:08:D4:2A:96:E6:AF:A5 X509v3 Authority Key Identifier: keyid:E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:28:88:ac:fb:06:98:c6:e9:3f:49:05:f8:19:27:e9:71:28: 94:e3:08:e2:67:53:34:bd:30:f8:f1:b6:d9:77:35:cc:03:3c: f7:34:5e:1a:a2:f1:70:97:23:65:dd:9e:fd:b9:82:9b:47:1f: 86:6a:07:3f:fa:d7:89:1a:bc:bc:2f:90:56:9c:3c:90:61:f8: 1f:b2:ad:11:f2:11:4c:0c:60:8b:15:43:ce:7e:02:5d:1f:74: 3d:d1:15:20:ac:c6:e8:58:7d:39:03:32:b8:88:a2:88:9d:80: b9:30:26:8b:ab:d9:2b:54:11:61:b4:ab:af:a1:e6:9f:70:ba: 76:fe:29:c4:4b:a1:36:54:33:b2:cc:d0:e5:c1:74:e3:86:bf: f3:e9:53:2f:cd:2e:47:d1:9f:91:67:b3:82:87:27:4f:54:0e: b1:e5:25:68:1e:cc:e4:50:f6:ef:f0:6d:50:7b:b9:de:f8:b0: ca:8a:6b:ae:35:0f:23:38:7d:0e:89:1e:af:35:7f:da:3a:4f: 15:1f:b8:31:c0:62:be:8d:4b:4c:09:1d:8e:12:3b:d2:86:bf: ad:84:d5:d5:81:19:48:8c:3c:28:38:e6:3c:3b:5e:ba:33:1f: 26:13:73:aa:7f:8e:db:92:d3:08:ee:1e:e8:56:c6:5c:ee:f5: da:0c:a7:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE1u94obK10nE2+DC7HL4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NzI0NDg5N2M3OTE3Yjc5MWUxMDBkNDY4MDMzOWM0YTM1 OTNmYzMwHhcNMjUxMjIyMDgwMDU1WhcNMjUxMjIzMDgwMDU1WjAzMTEwLwYDVQQD EyhhMDMxZjAyZjFhMTFiYWFiYjViMzE0NjdjNDA4ZDQyYTk2ZTZhZmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFxHle3v8JY5xVnSQG3ta/SIwX/y 6k51F+dxawOw6dqJR9krVCBlR0IND6ozpRbuqG3VeU20TSKbN3lmVFFaBC9rQli5 R3AK7NkeR5APsWjyGq4/KNovX36QzzO47M6JRiQ8Mrw/7HFTihYBHJUnVoAkp5bQ v3lsYw4B2IeqO8vzWOwP41vqmlXOJUVhzbbkmrT+NgQ7yKTwmo+L92qbShfLGBJh IEnGRfWC/S26qz5BHGdgxo20bpI7X8E7PC1AzU2HdwuQfEXhd0T9VWhUEZ3y1+Zl t89BtlyFApjHhPUmqnZw30zWIYWeyjRuSkN29ie3Qw8+X77iUJA+koA4xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAx8C8aEbqrtbMUZ8QI1CqW5q+lMB8GA1UdIwQY MBaAFOhyRIl8eRe3keEA1GgDOcSjWT/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkhKRWlYeDVGN2VSNFFEVWFBTTV4S05aUDhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDU5N2YtZWUxYy00NjJiLWFiODQt ZWJlNTllMjc0ODQwLzEvNkhKRWlYeDVGN2VSNFFEVWFBTTV4S05aUDhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDU5N2YtZWUxYy00NjJiLWFiODQtZWJlNTllMjc0ODQw LzEvNkhKRWlYeDVGN2VSNFFEVWFBTTV4S05aUDhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSiIrPsG mMbpP0kF+Bkn6XEolOMI4mdTNL0w+PG22Xc1zAM89zReGqLxcJcjZd2e/bmCm0cf hmoHP/rXiRq8vC+QVpw8kGH4H7KtEfIRTAxgixVDzn4CXR90PdEVIKzG6Fh9OQMy uIiiiJ2AuTAmi6vZK1QRYbSrr6Hmn3C6dv4pxEuhNlQzsszQ5cF044a/8+lTL80u R9GfkWezgocnT1QOseUlaB7M5FD27/BtUHu53viwyoprrjUPIzh9DokerzV/2jpP FR+4McBivo1LTAkdjhI70oa/rYTV1YEZSIw8KDjmPDteujMfJhNzqn+O25LTCO4e 6FbGXO712gyn5A== -----END CERTIFICATE-----Generated at Mon Dec 22 16:01:30 2025 by rpki-client