This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/i6on-cLve_SAmtQq5YkQG3PpiSc.mft File: i6on-cLve_SAmtQq5YkQG3PpiSc.mft (raw, json) Hash identifier: +4I10lqi0OT0PN67oHP8tlWkf3HW9ZU+oY+YLDE4b2c= Subject key identifier: F8:75:55:1D:64:03:66:99:58:E4:6E:89:06:B5:94:CC:1B:5D:F7:43 Authority key identifier: 8B:AA:27:F9:C2:EF:7B:F4:80:9A:D4:2A:E5:89:10:1B:73:E9:89:27 Certificate issuer: /CN=8baa27f9c2ef7bf4809ad42ae589101b73e98927 Certificate serial: 019AF0BF4152846CAEE6D4AE584BE7CC7713 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6on-cLve_SAmtQq5YkQG3PpiSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/i6on-cLve_SAmtQq5YkQG3PpiSc.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:00:57 +0000 Manifest this update: Fri 05 Dec 2025 23:00:57 +0000 Manifest next update: Sat 06 Dec 2025 23:00:57 +0000 Files and hashes: 1: OelWgxZyI7_ZRF_-XMf7bZooL5I.roa (hash: BifitWmmIOb4eZWcf2Qlsgv0SmjFwvoJThXaToiSZVg=) 2: i6on-cLve_SAmtQq5YkQG3PpiSc.crl (hash: qyiqVEcxT/RUfN5dDN8wfyh+eMB9Jk4YHgH/AW2Gv64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/i6on-cLve_SAmtQq5YkQG3PpiSc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/i6on-cLve_SAmtQq5YkQG3PpiSc.mft rsync://rpki.ripe.net/repository/DEFAULT/i6on-cLve_SAmtQq5YkQG3PpiSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:41:52:84:6c:ae:e6:d4:ae:58:4b:e7:cc:77:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8baa27f9c2ef7bf4809ad42ae589101b73e98927 Validity Not Before: Dec 5 23:00:57 2025 GMT Not After : Dec 6 23:00:57 2025 GMT Subject: CN=f875551d6403669958e46e8906b594cc1b5df743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:b1:02:1b:74:3d:49:67:7b:8e:d0:eb:18: e8:e4:2d:c0:ac:b5:9d:0e:d9:f7:1f:d6:67:a3:08: 9d:90:67:2f:56:cd:ce:c6:4c:c5:df:e3:c2:de:59: a9:27:f5:68:3e:34:b2:82:e5:c2:af:2c:02:b6:88: be:0e:83:7a:32:48:d8:50:7a:c7:6b:57:3d:63:e9: d4:29:15:b5:eb:7d:f2:86:97:48:5c:c8:2f:c1:5c: 76:a1:a4:bb:c0:df:90:f1:65:39:2c:38:59:8f:6e: 85:f7:8a:d0:21:ce:6a:4b:8a:11:cf:1d:79:42:6b: 78:20:e4:42:66:57:28:24:d3:98:81:95:43:a9:3f: 8c:aa:0a:81:f9:aa:4a:77:ac:e7:78:8c:60:b5:55: 94:1e:44:4e:b7:6e:b1:78:b9:6b:35:0e:cc:ce:35: 86:72:88:ed:97:d7:1f:0a:1f:8a:83:de:6b:2a:f7: e0:cd:97:7f:29:09:d7:db:63:f9:fd:69:31:a8:25: cc:ec:fa:41:cc:a7:8c:18:36:fd:e7:9f:32:d1:a9: 04:39:08:fb:0e:28:58:40:16:10:10:5f:c1:f0:ca: 86:20:31:a6:a9:b7:83:0a:a4:a8:5d:98:74:7d:42: 9c:33:d9:fa:f5:de:4b:34:61:93:c5:97:dd:97:df: 49:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:75:55:1D:64:03:66:99:58:E4:6E:89:06:B5:94:CC:1B:5D:F7:43 X509v3 Authority Key Identifier: keyid:8B:AA:27:F9:C2:EF:7B:F4:80:9A:D4:2A:E5:89:10:1B:73:E9:89:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6on-cLve_SAmtQq5YkQG3PpiSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/i6on-cLve_SAmtQq5YkQG3PpiSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/i6on-cLve_SAmtQq5YkQG3PpiSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e8:75:34:34:39:78:59:3d:e5:2e:f5:4c:00:d8:a2:e3:a7: 2a:5c:0a:cc:f7:27:ca:10:4b:07:0b:af:5b:cd:58:a1:8e:17: 59:9f:01:41:92:06:7b:29:f5:13:1b:3c:33:1c:0a:49:53:11: 72:82:a1:7c:28:13:e5:3a:8d:87:e0:e1:a5:29:ff:64:ba:17: 75:ad:60:6e:64:b8:18:7d:7a:54:3a:2e:ee:a3:0a:08:ce:4f: 5c:2e:81:70:08:36:a7:90:44:68:7a:58:76:d8:ff:37:7f:a5: d4:9d:34:a5:0e:3a:d2:fc:13:e2:f1:85:bc:95:c0:40:c1:f3: 36:1a:87:eb:9b:23:44:b0:54:4e:7a:01:5e:5f:90:df:22:e1: 4a:eb:9b:e5:58:bc:9b:f0:ee:6b:76:a4:44:5f:51:43:e8:1c: c6:16:40:95:dc:65:26:57:e0:49:dd:20:47:d8:ea:9e:b6:1b: 5a:a3:09:2a:f5:c3:a8:9f:48:2f:c2:fe:28:c0:bd:79:df:fa: cc:29:c3:4e:ee:65:5f:aa:2f:05:9d:d4:83:70:ec:ac:ae:0d: 0e:0b:68:73:7c:3b:4a:a8:06:43:4e:e0:73:f1:1a:06:c1:9c: 20:96:41:18:c3:ae:26:f8:8a:c6:ac:ba:4c:4f:6a:f3:7b:da: b7:5c:bd:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0FShGyu5tSuWEvnzHcTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWEyN2Y5YzJlZjdiZjQ4MDlhZDQyYWU1ODkxMDFiNzNl OTg5MjcwHhcNMjUxMjA1MjMwMDU3WhcNMjUxMjA2MjMwMDU3WjAzMTEwLwYDVQQD EyhmODc1NTUxZDY0MDM2Njk5NThlNDZlODkwNmI1OTRjYzFiNWRmNzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1WxAht0PUlne47Q6xjo5C3ArLWd Dtn3H9ZnowidkGcvVs3OxkzF3+PC3lmpJ/VoPjSyguXCrywCtoi+DoN6MkjYUHrH a1c9Y+nUKRW1633yhpdIXMgvwVx2oaS7wN+Q8WU5LDhZj26F94rQIc5qS4oRzx15 Qmt4IORCZlcoJNOYgZVDqT+MqgqB+apKd6zneIxgtVWUHkROt26xeLlrNQ7MzjWG cojtl9cfCh+Kg95rKvfgzZd/KQnX22P5/WkxqCXM7PpBzKeMGDb9558y0akEOQj7 DihYQBYQEF/B8MqGIDGmqbeDCqSoXZh0fUKcM9n69d5LNGGTxZfdl99J3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPh1VR1kA2aZWORuiQa1lMwbXfdDMB8GA1UdIwQY MBaAFIuqJ/nC73v0gJrUKuWJEBtz6YknMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZvbi1jTHZlX1NBbXRRcTVZa1FHM1BwaVNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jYzM2ZjktMTY2OS00OTI5LThlNjEt ZWRmZDNmODMzNDViLzEvaTZvbi1jTHZlX1NBbXRRcTVZa1FHM1BwaVNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jYzM2ZjktMTY2OS00OTI5LThlNjEtZWRmZDNmODMzNDVi LzEvaTZvbi1jTHZlX1NBbXRRcTVZa1FHM1BwaVNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeh1NDQ5 eFk95S71TADYouOnKlwKzPcnyhBLBwuvW81YoY4XWZ8BQZIGeyn1Exs8MxwKSVMR coKhfCgT5TqNh+DhpSn/ZLoXda1gbmS4GH16VDou7qMKCM5PXC6BcAg2p5BEaHpY dtj/N3+l1J00pQ460vwT4vGFvJXAQMHzNhqH65sjRLBUTnoBXl+Q3yLhSuub5Vi8 m/Dua3akRF9RQ+gcxhZAldxlJlfgSd0gR9jqnrYbWqMJKvXDqJ9IL8L+KMC9ed/6 zCnDTu5lX6ovBZ3Ug3DsrK4NDgtoc3w7SqgGQ07gc/EaBsGcIJZBGMOuJviKxqy6 TE9q83vat1y9fQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:50 2025 by rpki-client