This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft File: 6-MkxP_wckDusfAOY-Y198uQL5g.mft (raw, json) Hash identifier: 6DS6H6Mfqjwn4VmCr2LhecblnWrU7Cr0xmf0Px7h0Mw= Subject key identifier: 53:70:95:36:00:22:DD:9C:12:5D:F1:E2:60:5B:A1:3A:1B:BC:98:09 Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98 Certificate issuer: /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98 Certificate serial: 019B717E3EF0CE86CB1D76548AAA5D9E998C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft Manifest number: 0EDA Signing time: Tue 30 Dec 2025 23:00:57 +0000 Manifest this update: Tue 30 Dec 2025 23:00:57 +0000 Manifest next update: Wed 31 Dec 2025 23:00:57 +0000 Files and hashes: 1: 6-MkxP_wckDusfAOY-Y198uQL5g.crl (hash: mxRDq0m5O0gtCqjQZFDtAcTdQ/WDT3VlItP/ruNsQk4=) 2: DFaeiuG21JQh7LgP1wreIhkJwBQ.roa (hash: wxSUZZvHSXnKRZev5eL/xbvmkg1KjmEbGMojvHEIEo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7e:3e:f0:ce:86:cb:1d:76:54:8a:aa:5d:9e:99:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98 Validity Not Before: Dec 30 23:00:57 2025 GMT Not After : Dec 31 23:00:57 2025 GMT Subject: CN=537095360022dd9c125df1e2605ba13a1bbc9809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:b8:fb:44:e0:41:ce:73:31:ab:2c:0d:8d: 02:ff:ac:1e:22:7b:ef:d2:86:20:96:92:fe:ef:2d: 70:cc:e5:8c:c2:af:91:9d:94:58:53:2d:10:43:7b: 99:bd:97:5f:a8:eb:a1:3a:b4:a9:eb:74:4c:da:ee: ab:0b:63:56:8c:7a:5b:4a:8e:57:b9:4d:83:25:ca: 77:e3:18:33:b2:2d:31:bf:d8:a2:52:68:8d:e4:0a: ba:39:9b:10:a9:09:f5:c3:e7:eb:e6:f4:67:7d:58: 3a:d2:4b:56:0e:68:24:89:67:05:40:8d:dd:6c:6a: d3:51:0a:47:e0:35:2b:8a:67:50:7b:04:ee:37:08: 61:aa:43:8c:98:6e:a9:bf:3e:16:94:cf:8f:39:f8: c9:e8:13:67:bd:17:d2:59:cc:f5:97:55:d4:11:08: f3:b2:f0:cb:ad:b3:16:36:64:c7:30:41:c6:14:42: 21:58:f9:6e:c9:d1:1d:1c:0c:d9:4c:70:6f:78:20: 09:0a:a4:93:f4:5c:47:d8:86:9f:8f:d3:0e:5c:a8: 5b:23:e0:1e:31:5d:50:8e:c7:3f:27:29:4f:93:aa: 54:01:f5:07:24:b5:ef:71:6d:e5:27:4b:62:2e:eb: 4d:27:85:9e:c0:67:8d:59:f2:7c:9d:2c:2d:01:c0: ed:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:70:95:36:00:22:DD:9C:12:5D:F1:E2:60:5B:A1:3A:1B:BC:98:09 X509v3 Authority Key Identifier: keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:c7:e1:95:f2:d2:0a:ed:ee:83:5b:cf:72:39:86:3f:d8:83: 4f:f4:1f:b8:fe:8d:9d:3b:5a:8e:81:f9:ad:3f:01:53:74:32: 4e:6b:36:43:9d:18:0d:2b:b3:a9:63:34:6b:ec:69:26:a3:ac: 02:79:ba:51:1e:1d:5e:62:9f:69:9e:aa:6d:21:75:d7:1e:82: 39:62:18:c9:64:d6:e1:d7:a8:5c:32:8d:20:88:10:b6:68:e8: e2:01:59:2a:80:b5:87:7d:1f:ec:02:18:fc:2d:b9:c0:dc:ec: 7c:8a:51:c4:a8:e8:8a:44:7b:56:d6:04:f1:30:05:58:70:75: 9f:70:65:39:1f:e8:5a:e0:2d:fa:e4:ec:b3:20:20:03:87:91: 74:09:b1:6a:37:26:ad:2e:26:5d:a3:39:29:10:6c:a3:8a:e4: 65:cb:b5:e2:39:e3:c9:5a:e8:6f:87:39:c5:07:28:f8:53:60: e2:8c:08:29:90:0e:4c:ad:1a:c9:e7:64:ea:a2:8f:bd:5f:02: 70:51:71:6f:3f:4b:d3:d2:84:7f:51:c9:6a:a9:0c:4d:a1:56: b5:16:a2:95:cf:4f:6a:52:c9:61:59:2f:07:3c:e8:5b:77:b0: fb:31:54:1b:41:1e:cd:ed:b6:26:77:6c:ab:22:74:72:d3:57: f6:d4:6e:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfj7wzobLHXZUiqpdnpmMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZTMyNGM0ZmZmMDcyNDBlZWIxZjAwZTYzZTYzNWY3Y2I5 MDJmOTgwHhcNMjUxMjMwMjMwMDU3WhcNMjUxMjMxMjMwMDU3WjAzMTEwLwYDVQQD Eyg1MzcwOTUzNjAwMjJkZDljMTI1ZGYxZTI2MDViYTEzYTFiYmM5ODA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7a4+0TgQc5zMassDY0C/6weInvv 0oYglpL+7y1wzOWMwq+RnZRYUy0QQ3uZvZdfqOuhOrSp63RM2u6rC2NWjHpbSo5X uU2DJcp34xgzsi0xv9iiUmiN5Aq6OZsQqQn1w+fr5vRnfVg60ktWDmgkiWcFQI3d bGrTUQpH4DUrimdQewTuNwhhqkOMmG6pvz4WlM+POfjJ6BNnvRfSWcz1l1XUEQjz svDLrbMWNmTHMEHGFEIhWPluydEdHAzZTHBveCAJCqST9FxH2Iafj9MOXKhbI+Ae MV1Qjsc/JylPk6pUAfUHJLXvcW3lJ0tiLutNJ4WewGeNWfJ8nSwtAcDtyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNwlTYAIt2cEl3x4mBboTobvJgJMB8GA1UdIwQY MBaAFOvjJMT/8HJA7rHwDmPmNffLkC+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lYWZlZmUtNzg3ZC00YjJkLWI1MzAt OGFmMDVhZTMxOTJjLzEvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lYWZlZmUtNzg3ZC00YjJkLWI1MzAtOGFmMDVhZTMxOTJj LzEvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMfhlfLS Cu3ug1vPcjmGP9iDT/QfuP6NnTtajoH5rT8BU3QyTms2Q50YDSuzqWM0a+xpJqOs Anm6UR4dXmKfaZ6qbSF11x6COWIYyWTW4deoXDKNIIgQtmjo4gFZKoC1h30f7AIY /C25wNzsfIpRxKjoikR7VtYE8TAFWHB1n3BlOR/oWuAt+uTssyAgA4eRdAmxajcm rS4mXaM5KRBso4rkZcu14jnjyVrob4c5xQco+FNg4owIKZAOTK0ayedk6qKPvV8C cFFxbz9L09KEf1HJaqkMTaFWtRailc9PalLJYVkvBzzoW3ew+zFUG0Eeze22Jnds qyJ0ctNX9tRuRA== -----END CERTIFICATE-----Generated at Wed Dec 31 02:24:58 2025 by rpki-client