This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft File: 6MC119fK9-9NNVXA2Q6V17-G5gY.mft (raw, json) Hash identifier: Gay4+/SLGt/He2tc9uEM6JT9TnUNPfXo8pcgSrBCJr8= Subject key identifier: 16:66:96:1E:7D:46:6B:FE:06:12:7B:E3:BA:31:16:EB:04:F6:AF:8E Authority key identifier: E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06 Certificate issuer: /CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606 Certificate serial: 019B3F7EEA62E9EC47042FDC6ED82E21680E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft Manifest number: 060A Signing time: Sun 21 Dec 2025 06:00:40 +0000 Manifest this update: Sun 21 Dec 2025 06:00:40 +0000 Manifest next update: Mon 22 Dec 2025 06:00:40 +0000 Files and hashes: 1: 6MC119fK9-9NNVXA2Q6V17-G5gY.crl (hash: zFHe5z3ZYn4X+zYcOnjDy3BTBLVUFFVdJCocMhYGmAw=) 2: zLqJ2jk1gnb1U6_xEyeO1kXar2w.roa (hash: f9xXsOCbyfrGDmPeAHiz1i2Ip8aFRkb7BmV8Krt70eA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:ea:62:e9:ec:47:04:2f:dc:6e:d8:2e:21:68:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606 Validity Not Before: Dec 21 06:00:40 2025 GMT Not After : Dec 22 06:00:40 2025 GMT Subject: CN=1666961e7d466bfe06127be3ba3116eb04f6af8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cf:8b:64:82:0f:1f:2a:24:49:cd:7f:ab:26: 08:bf:fb:60:a3:13:35:ef:f3:59:9b:b7:01:c3:a6: 9b:87:f2:db:9b:d5:b8:cd:3c:95:00:24:1b:42:c5: dd:f5:fe:d7:11:12:32:8d:28:29:dd:a9:b0:e6:89: 46:57:a9:67:56:cd:c3:46:70:75:4e:8a:28:2d:e8: 7d:f6:5f:23:97:b8:61:db:d2:54:1e:4d:5e:3e:b2: d4:0c:d0:47:22:fa:3e:ac:b4:2e:e3:38:a3:11:b4: 0d:1f:5d:71:7d:09:1e:58:0f:cc:13:14:35:bc:15: 5b:52:45:69:f2:fa:44:5f:11:37:c1:f1:51:99:f2: 69:3a:ca:b7:a7:de:cc:87:e8:f9:f9:59:dc:8e:df: 2b:2e:0e:59:ee:59:41:38:1b:54:83:f0:f7:e4:af: e5:79:aa:3f:74:11:f5:4d:f5:04:0b:71:f0:f4:71: e5:68:50:15:99:e7:8f:00:7a:3b:1b:b8:06:7e:9b: 78:60:c6:3f:80:47:11:56:0e:df:bb:89:2c:7a:25: 8f:b6:a6:a5:4e:0c:b4:d7:5d:e9:8c:07:f5:83:05: 97:ca:39:a9:ae:19:13:97:fd:20:da:c9:7e:82:e9: fc:d2:41:00:fc:af:61:2a:77:bb:d2:49:c6:6d:cd: c9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:66:96:1E:7D:46:6B:FE:06:12:7B:E3:BA:31:16:EB:04:F6:AF:8E X509v3 Authority Key Identifier: keyid:E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:4a:6b:d1:e3:c3:bb:a1:90:0f:64:16:dc:0b:cb:93:86:7a: c9:6c:46:59:c3:0b:c9:fb:17:37:64:6a:6b:ff:ac:29:34:1c: 9b:14:b9:d6:9f:f0:82:a4:ab:b3:31:e2:46:c9:57:d1:62:d3: ff:74:d9:b9:c0:4e:91:1d:7c:32:2e:af:8b:c3:61:cc:b5:e9: 8e:55:9d:17:bf:30:c4:02:ac:71:ef:e5:df:6d:f9:e1:55:11: ba:d8:65:96:ce:d2:34:0f:1d:29:5b:a4:e8:85:6c:7a:de:5c: d6:db:22:56:63:a2:b8:9a:15:d7:f0:f9:a9:10:67:50:a4:83: d5:88:d0:94:ad:8e:1c:1f:89:8b:1a:d3:04:da:16:f7:8e:9c: 9d:01:63:1f:ea:2f:d8:8c:dc:1d:50:36:de:0f:a1:0f:1f:a9: 6d:9e:60:32:5f:5d:66:54:0c:08:0b:0b:2a:f9:47:ac:44:6f: c2:99:cc:5e:72:94:00:ce:a1:a0:21:ef:85:74:c3:44:0a:9c: b2:cf:32:0f:70:b6:84:2a:31:57:59:f2:50:a8:43:01:d4:da: 18:04:14:eb:5b:7c:3e:0d:1d:19:4e:f1:25:74:3b:05:62:48: a9:23:6c:58:f4:d4:8a:38:14:01:a7:da:ee:de:b5:b8:7a:07: 68:a2:c5:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fupi6exHBC/cbtguIWgOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YzBiNWQ3ZDdjYWY3ZWY0ZDM1NTVjMGQ5MGU5NWQ3YmY4 NmU2MDYwHhcNMjUxMjIxMDYwMDQwWhcNMjUxMjIyMDYwMDQwWjAzMTEwLwYDVQQD EygxNjY2OTYxZTdkNDY2YmZlMDYxMjdiZTNiYTMxMTZlYjA0ZjZhZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68+LZIIPHyokSc1/qyYIv/tgoxM1 7/NZm7cBw6abh/Lbm9W4zTyVACQbQsXd9f7XERIyjSgp3amw5olGV6lnVs3DRnB1 ToooLeh99l8jl7hh29JUHk1ePrLUDNBHIvo+rLQu4zijEbQNH11xfQkeWA/MExQ1 vBVbUkVp8vpEXxE3wfFRmfJpOsq3p97Mh+j5+Vncjt8rLg5Z7llBOBtUg/D35K/l eao/dBH1TfUEC3Hw9HHlaFAVmeePAHo7G7gGfpt4YMY/gEcRVg7fu4kseiWPtqal Tgy0113pjAf1gwWXyjmprhkTl/0g2sl+gun80kEA/K9hKne70knGbc3JdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZmlh59Rmv+BhJ747oxFusE9q+OMB8GA1UdIwQY MBaAFOjAtdfXyvfvTTVVwNkOlde/huYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk1DMTE5Zks5LTlOTlZYQTJRNlYxNy1HNWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jNDczMWMtYThmZS00YTBiLTk5MWEt MzU4MjBmNTFjNTc4LzEvNk1DMTE5Zks5LTlOTlZYQTJRNlYxNy1HNWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9jNDczMWMtYThmZS00YTBiLTk5MWEtMzU4MjBmNTFjNTc4 LzEvNk1DMTE5Zks5LTlOTlZYQTJRNlYxNy1HNWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkpr0ePD u6GQD2QW3AvLk4Z6yWxGWcMLyfsXN2Rqa/+sKTQcmxS51p/wgqSrszHiRslX0WLT /3TZucBOkR18Mi6vi8NhzLXpjlWdF78wxAKsce/l32354VURuthlls7SNA8dKVuk 6IVset5c1tsiVmOiuJoV1/D5qRBnUKSD1YjQlK2OHB+JixrTBNoW946cnQFjH+ov 2IzcHVA23g+hDx+pbZ5gMl9dZlQMCAsLKvlHrERvwpnMXnKUAM6hoCHvhXTDRAqc ss8yD3C2hCoxV1nyUKhDAdTaGAQU61t8Pg0dGU7xJXQ7BWJIqSNsWPTUijgUAafa 7t61uHoHaKLF1A== -----END CERTIFICATE-----Generated at Sun Dec 21 14:16:15 2025 by rpki-client