This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft File: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft (raw, json) Hash identifier: btiAVZUVvjTc7pBLt8oQg1VhcWC+m6gwnY4aCHhz4T4= Subject key identifier: EE:88:E6:62:BC:19:02:83:02:BB:99:37:92:25:D6:56:0E:56:0F:A3 Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A Certificate issuer: /CN=ea51769ce8672c56d1652bf90a5aefca819b488a Certificate serial: 019B6CC569208C8E84483435BE086B56389B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft Manifest number: 17A1 Signing time: Tue 30 Dec 2025 01:00:35 +0000 Manifest this update: Tue 30 Dec 2025 01:00:35 +0000 Manifest next update: Wed 31 Dec 2025 01:00:35 +0000 Files and hashes: 1: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl (hash: 48PHF/xCNNQpshGXTw7bXAPqkmKtasuW55Ku4bWYR9E=) 2: zLngmWEw_D0Bxeb-kcPWwP9gp_U.roa (hash: Sf54rTElSlunUVvFtUXJDy0FrQ/XeLhMeCRG3/nN1oE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:69:20:8c:8e:84:48:34:35:be:08:6b:56:38:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a Validity Not Before: Dec 30 01:00:35 2025 GMT Not After : Dec 31 01:00:35 2025 GMT Subject: CN=ee88e662bc19028302bb99379225d6560e560fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1f:37:18:2b:31:c4:29:6c:d8:5b:7e:33:f3: 90:09:c4:4a:b4:bc:c8:4d:b7:b7:c2:f4:a1:14:09: c3:28:f3:ac:6b:95:b7:1c:93:27:d9:72:71:e0:eb: 72:8d:3a:de:ac:12:51:45:39:45:50:5b:fb:21:9d: f7:aa:cf:7b:a2:75:d8:50:eb:b3:e9:01:4d:4c:f6: e4:85:a5:65:35:81:a1:b1:9e:7c:82:6f:2d:cd:16: da:59:32:04:28:f8:d5:dc:19:30:fb:fa:e5:b7:a1: 7a:75:55:c4:ce:83:6e:91:e9:d6:4c:d7:d0:86:6a: 2d:98:39:dd:7c:aa:56:8c:64:08:a2:4b:c2:36:cd: ca:3e:67:59:a3:59:26:09:57:47:b0:56:02:88:8e: 64:be:f5:44:b5:d7:ad:48:fa:09:90:76:bf:a5:b5: cc:3e:d9:59:4e:16:7e:e9:c6:7f:a3:71:ed:df:5b: aa:5e:6c:67:ed:8a:5b:11:0f:c1:54:01:2e:c6:bf: 19:51:4b:dd:a0:d5:c5:c4:3b:eb:48:35:04:10:44: aa:85:7c:3e:30:6f:65:86:63:03:f6:8d:00:c7:07: 4d:32:7d:e0:bf:79:7f:c7:19:57:75:c9:69:9b:0f: a8:e4:53:03:98:f2:83:3b:83:02:01:33:54:ec:96: 4c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:88:E6:62:BC:19:02:83:02:BB:99:37:92:25:D6:56:0E:56:0F:A3 X509v3 Authority Key Identifier: keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e6:cf:0f:39:62:03:35:e5:71:a4:88:f0:a5:27:db:65:fa: 4a:23:c2:e0:99:89:ba:66:3a:8e:cd:a8:81:3d:41:52:26:37: 57:26:11:24:7b:14:59:76:db:e4:3a:10:b7:39:e4:c8:6c:b2: 62:82:f8:03:ca:9f:00:92:0a:aa:d7:02:36:03:f3:16:9b:74: d4:0f:e1:c0:0b:d6:52:bb:ed:34:f7:96:36:01:8e:7e:9b:82: 61:ad:bf:b9:e6:18:b1:2b:3a:29:2a:c1:d5:d3:89:17:db:c2: df:e5:ca:f9:ed:d4:26:6e:54:73:2e:da:f0:8b:aa:e3:02:ec: 71:99:50:20:67:6f:e4:03:a1:f6:d6:19:31:63:a7:8d:0b:9f: db:6c:c5:fd:fd:86:69:76:6b:c4:f1:05:bc:ec:95:d3:47:bf: 52:b6:78:08:73:44:a2:d0:e7:ca:56:6d:81:9a:12:ff:1c:6c: 2b:7d:0b:f0:0f:fb:45:e8:0c:1f:81:6e:11:8a:a6:1b:0e:93: cf:28:7a:20:3c:b1:f9:f6:9f:61:17:78:21:3d:c8:d0:ff:af: 24:64:d4:6a:50:1c:f1:ac:80:08:ef:f0:8c:54:84:55:dc:5e: 24:a8:9b:3b:08:c8:8b:dc:f9:b9:43:80:7b:ad:bf:6b:b5:b5: dc:20:76:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxWkgjI6ESDQ1vghrVjibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTE3NjljZTg2NzJjNTZkMTY1MmJmOTBhNWFlZmNhODE5 YjQ4OGEwHhcNMjUxMjMwMDEwMDM1WhcNMjUxMjMxMDEwMDM1WjAzMTEwLwYDVQQD EyhlZTg4ZTY2MmJjMTkwMjgzMDJiYjk5Mzc5MjI1ZDY1NjBlNTYwZmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3h83GCsxxCls2Ft+M/OQCcRKtLzI Tbe3wvShFAnDKPOsa5W3HJMn2XJx4OtyjTrerBJRRTlFUFv7IZ33qs97onXYUOuz 6QFNTPbkhaVlNYGhsZ58gm8tzRbaWTIEKPjV3Bkw+/rlt6F6dVXEzoNukenWTNfQ hmotmDndfKpWjGQIokvCNs3KPmdZo1kmCVdHsFYCiI5kvvVEtdetSPoJkHa/pbXM PtlZThZ+6cZ/o3Ht31uqXmxn7YpbEQ/BVAEuxr8ZUUvdoNXFxDvrSDUEEESqhXw+ MG9lhmMD9o0AxwdNMn3gv3l/xxlXdclpmw+o5FMDmPKDO4MCATNU7JZM3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6I5mK8GQKDAruZN5Il1lYOVg+jMB8GA1UdIwQY MBaAFOpRdpzoZyxW0WUr+Qpa78qBm0iKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxGMm5PaG5MRmJSWlN2NUNscnZ5b0diU0lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kYmY4YmUtNjhhMi00YjNkLTk3ZGIt ODJlMmQ1ZWU5YzkwLzEvNmxGMm5PaG5MRmJSWlN2NUNscnZ5b0diU0lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9kYmY4YmUtNjhhMi00YjNkLTk3ZGItODJlMmQ1ZWU5Yzkw LzEvNmxGMm5PaG5MRmJSWlN2NUNscnZ5b0diU0lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGubPDzli AzXlcaSI8KUn22X6SiPC4JmJumY6js2ogT1BUiY3VyYRJHsUWXbb5DoQtznkyGyy YoL4A8qfAJIKqtcCNgPzFpt01A/hwAvWUrvtNPeWNgGOfpuCYa2/ueYYsSs6KSrB 1dOJF9vC3+XK+e3UJm5Ucy7a8Iuq4wLscZlQIGdv5AOh9tYZMWOnjQuf22zF/f2G aXZrxPEFvOyV00e/UrZ4CHNEotDnylZtgZoS/xxsK30L8A/7RegMH4FuEYqmGw6T zyh6IDyx+fafYRd4IT3I0P+vJGTUalAc8ayACO/wjFSEVdxeJKibOwjIi9z5uUOA e62/a7W13CB2LQ== -----END CERTIFICATE-----Generated at Tue Dec 30 06:20:56 2025 by rpki-client