This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft File: b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft (raw, json) Hash identifier: iMFxKVPr1IZRoyyUXLFrWaStuhuHgaY+vONh4S/mqxM= Subject key identifier: B5:99:36:20:5C:55:67:BF:1C:B4:01:A9:C0:19:0B:25:D4:73:F6:37 Authority key identifier: 6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64 Certificate issuer: /CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564 Certificate serial: 019B3D2344700DFE67ACEBC394C4BE6DE6E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 19:01:19 +0000 Manifest this update: Sat 20 Dec 2025 19:01:19 +0000 Manifest next update: Sun 21 Dec 2025 19:01:19 +0000 Files and hashes: 1: PalviZLco2h6ucG2viir5MJ4Wvg.roa (hash: D2pj+/BZD2XBYZUI3y81qdZCcE/mlmlKVW87ul9H5bc=) 2: b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl (hash: zKYgFdriNby2a1N/X2RWFw8HRtQ9hYscvLdt4mqxdfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:44:70:0d:fe:67:ac:eb:c3:94:c4:be:6d:e6:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564 Validity Not Before: Dec 20 19:01:19 2025 GMT Not After : Dec 21 19:01:19 2025 GMT Subject: CN=b59936205c5567bf1cb401a9c0190b25d473f637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a6:fd:aa:29:93:31:8b:36:41:cc:df:1b:d3: f5:b4:3e:bc:c2:a6:8b:77:6b:52:c7:2a:83:d5:f7: 9b:cf:3d:2d:34:7b:73:71:ae:5e:a6:60:3d:0d:ae: 76:aa:28:cf:cc:92:4a:5a:5f:b6:39:0f:78:c0:6c: 83:50:bc:e0:d0:fa:f6:b0:24:88:f4:b5:f0:88:95: 77:69:5b:e0:d2:53:84:4e:2e:23:13:6e:b1:5f:30: e3:16:67:a8:1e:08:aa:2e:75:9e:df:a3:b5:4d:47: 3c:60:2e:d5:39:03:b9:a2:a9:a8:e6:68:93:1e:d7: a1:14:f8:c2:01:4e:83:4c:03:13:97:0b:b1:c4:49: 12:46:b3:15:ef:f4:bd:a3:e9:24:11:ed:1b:8d:23: f4:fa:aa:40:7a:bf:8d:35:ef:42:fb:24:ac:29:2b: 4d:1b:60:bd:62:9b:11:3a:a9:80:6e:12:7c:47:a9: 8c:c6:54:c9:e7:20:c2:74:69:ea:5c:36:00:47:ff: af:c9:8d:1f:c1:cb:17:fe:ef:5e:ba:54:94:9f:c0: 78:db:7f:6d:ff:ce:f6:55:8d:b5:d7:b7:6b:23:1e: 23:cb:29:d0:99:4e:62:9a:19:fe:11:55:9f:22:63: af:86:ec:f5:e3:70:ee:ff:2a:a1:0d:37:e7:ca:69: 8b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:99:36:20:5C:55:67:BF:1C:B4:01:A9:C0:19:0B:25:D4:73:F6:37 X509v3 Authority Key Identifier: keyid:6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:08:a2:2c:05:fb:38:0d:d0:6d:fd:21:2f:2c:d0:04:cd:c7: f4:fb:77:2b:93:e8:9a:4c:f7:83:36:2c:d6:c8:30:5d:5a:d6: 5a:13:34:bc:46:f1:f4:f7:4b:cd:19:74:c6:d1:b5:2e:36:a5: eb:c1:1b:52:92:41:1c:c7:e8:4e:3f:a1:b8:80:0d:e4:12:c4: 22:53:f0:32:a7:09:79:83:b8:b3:77:d0:d5:ad:c3:02:62:16: f0:58:2d:65:9c:bf:ee:5c:72:f2:06:73:69:5a:2d:69:87:bd: d4:7c:21:34:83:88:76:50:ea:93:d9:9d:58:a7:b8:e2:eb:7a: e0:78:85:18:0a:e8:a5:bc:49:ea:90:0f:07:47:f3:76:38:8b: 6c:99:6e:96:cd:d6:17:1c:9c:5d:e7:0e:66:7e:9a:5d:81:7c: c4:7e:e9:3c:1d:9e:cf:89:19:58:20:7f:54:f0:27:ef:b4:ce: 4a:e7:3e:31:e6:15:19:56:8a:57:c0:09:fa:19:7d:15:b4:a5: 23:22:68:7f:e0:05:16:b1:13:72:4f:74:b7:fd:e7:a2:c7:33: 53:b0:21:90:1f:92:c4:ce:be:0c:4a:32:7e:38:17:bb:b0:8b: 11:fb:d8:2e:da:88:20:1d:5b:cb:ed:9b:25:00:fd:72:52:7a: b5:67:44:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I0RwDf5nrOvDlMS+bebnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYTEwNGY2YTg5NzhiYjE2Y2QwNTMxNGY5OGE3ODZlMGQw ZDk1NjQwHhcNMjUxMjIwMTkwMTE5WhcNMjUxMjIxMTkwMTE5WjAzMTEwLwYDVQQD EyhiNTk5MzYyMDVjNTU2N2JmMWNiNDAxYTljMDE5MGIyNWQ0NzNmNjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKb9qimTMYs2QczfG9P1tD68wqaL d2tSxyqD1febzz0tNHtzca5epmA9Da52qijPzJJKWl+2OQ94wGyDULzg0Pr2sCSI 9LXwiJV3aVvg0lOETi4jE26xXzDjFmeoHgiqLnWe36O1TUc8YC7VOQO5oqmo5miT HtehFPjCAU6DTAMTlwuxxEkSRrMV7/S9o+kkEe0bjSP0+qpAer+NNe9C+ySsKStN G2C9YpsROqmAbhJ8R6mMxlTJ5yDCdGnqXDYAR/+vyY0fwcsX/u9eulSUn8B4239t /872VY2117drIx4jyynQmU5imhn+EVWfImOvhuz143Du/yqhDTfnymmLVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWZNiBcVWe/HLQBqcAZCyXUc/Y3MB8GA1UdIwQY MBaAFG+hBPaol4uxbNBTFPmKeG4NDZVkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZFRTlxaVhpN0ZzMEZNVS1ZcDRiZzBObFdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85ZGQ1ZTMtNTc2Zi00NGExLWE1Y2Mt NjUwOWNiNWYyN2Y4LzEvYjZFRTlxaVhpN0ZzMEZNVS1ZcDRiZzBObFdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy85ZGQ1ZTMtNTc2Zi00NGExLWE1Y2MtNjUwOWNiNWYyN2Y4 LzEvYjZFRTlxaVhpN0ZzMEZNVS1ZcDRiZzBObFdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgiiLAX7 OA3Qbf0hLyzQBM3H9Pt3K5Pomkz3gzYs1sgwXVrWWhM0vEbx9PdLzRl0xtG1Ljal 68EbUpJBHMfoTj+huIAN5BLEIlPwMqcJeYO4s3fQ1a3DAmIW8FgtZZy/7lxy8gZz aVotaYe91HwhNIOIdlDqk9mdWKe44ut64HiFGAropbxJ6pAPB0fzdjiLbJluls3W FxycXecOZn6aXYF8xH7pPB2ez4kZWCB/VPAn77TOSuc+MeYVGVaKV8AJ+hl9FbSl IyJof+AFFrETck90t/3nosczU7AhkB+SxM6+DEoyfjgXu7CLEfvYLtqIIB1by+2b JQD9clJ6tWdE2Q== -----END CERTIFICATE-----Generated at Sun Dec 21 01:14:35 2025 by rpki-client