This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft File: b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft (raw, json) Hash identifier: EWcSJHgFt38GuLhfRIKujyObb3v+6s4I42j0Q8hiS/s= Subject key identifier: 2F:A6:91:F9:B9:75:42:28:49:8C:69:DF:15:A2:1F:4B:25:78:19:A4 Authority key identifier: 6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77 Certificate issuer: /CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177 Certificate serial: 019AF276BE04F9DBEC87A9571153B04571E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft Manifest number: 16A5 Signing time: Sat 06 Dec 2025 07:00:59 +0000 Manifest this update: Sat 06 Dec 2025 07:00:59 +0000 Manifest next update: Sun 07 Dec 2025 07:00:59 +0000 Files and hashes: 1: 9eMR4FNJDVauWkWIUPQVpbQ5CXg.roa (hash: u33y8H6nVy03TdakAVCKdnmWlusbHupRimP8Gevy98g=) 2: b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl (hash: oOoFl9iUT0kE/YFXFlL6P+00BaKnkAJzsMJGTTOScps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:be:04:f9:db:ec:87:a9:57:11:53:b0:45:71:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177 Validity Not Before: Dec 6 07:00:59 2025 GMT Not After : Dec 7 07:00:59 2025 GMT Subject: CN=2fa691f9b9754228498c69df15a21f4b257819a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f3:64:1e:d6:91:79:76:92:b4:87:0c:f7:b9: 44:da:f1:61:db:da:c5:06:49:3d:71:57:60:8c:98: d9:13:b2:82:14:03:d6:1e:34:af:e1:d0:67:b7:ac: 3d:f7:29:11:d4:04:24:75:08:6c:03:aa:1d:26:86: 3b:0e:d8:7e:e2:fa:c0:8c:03:a3:b6:6c:8e:47:50: 8b:46:79:bc:b2:58:42:fa:e0:1b:4f:ce:b4:9a:81: eb:4d:ae:b4:da:b1:48:6e:6c:28:8c:f8:6b:3d:be: f7:54:6c:04:73:63:46:41:ca:84:61:85:36:7b:f1: e7:c4:e3:ab:9f:b4:36:10:cf:04:bd:6d:6e:53:b2: 20:5b:4f:0c:a8:92:ab:ef:81:91:0c:63:7a:8f:ee: b2:77:39:46:91:b0:4a:7c:5e:e6:7d:7d:fe:90:df: 54:4d:77:05:6c:8d:d5:b4:7c:07:8e:2b:f1:ab:4a: fc:cf:af:ca:d3:9c:e0:aa:7f:d2:c6:7d:7b:0e:91: 8f:6e:02:aa:62:eb:f5:5e:a5:10:8c:08:4f:9d:61: 85:f2:35:e0:f4:3b:70:f4:d0:83:d1:38:5c:f0:f8: 5d:94:41:a6:e6:9a:4e:ce:9f:bd:2a:65:7c:9e:70: a8:e5:40:77:35:86:fc:ed:cc:03:da:41:6e:dc:ef: 56:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A6:91:F9:B9:75:42:28:49:8C:69:DF:15:A2:1F:4B:25:78:19:A4 X509v3 Authority Key Identifier: keyid:6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:77:f4:09:a3:23:ee:7b:10:e0:46:5b:96:91:25:e2:b5:cb: 97:57:be:47:77:fc:ee:7e:d1:bc:65:08:c9:88:f6:72:56:56: f6:fe:f4:13:ce:b5:70:f7:fa:27:56:dd:25:46:a1:89:53:93: c3:31:50:cc:f7:f9:f5:10:f0:44:d8:aa:23:74:b9:8c:58:5f: 5f:76:06:76:3b:1b:69:f3:7e:a7:16:ac:ab:a1:b0:19:ce:02: c0:0c:43:df:13:ee:42:96:f9:ec:85:70:27:8c:00:c3:52:06: 7d:05:c6:89:67:16:80:bb:3b:08:4e:1a:7a:f6:64:40:71:b4: c7:2b:98:24:c5:4a:3a:62:8a:f2:72:85:2e:cc:cd:d6:78:6b: 3f:50:ed:7b:20:dc:11:be:a2:83:c0:a4:7e:1a:b6:1d:ad:61: 65:c8:a1:3c:53:fa:b9:76:a8:94:7d:c4:0a:f5:26:c1:8e:92: 62:35:d0:15:49:34:4d:2e:f8:e3:8e:38:6e:a4:6e:d1:65:86: e0:80:73:8c:a5:e9:c8:c8:af:a6:9e:b2:f0:61:3b:75:a9:1c: f9:f6:e6:c4:38:3c:20:5d:9e:dd:52:33:c1:01:1a:54:02:b3: 94:41:74:73:69:9a:30:3f:f7:6b:28:fd:d3:67:db:fa:f6:aa: 96:24:b3:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydr4E+dvsh6lXEVOwRXHpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYTQ4ZTk2MTk3NDI2ZTRjNWVlYjQyM2UwZmQ5YzJlOTUy YzQxNzcwHhcNMjUxMjA2MDcwMDU5WhcNMjUxMjA3MDcwMDU5WjAzMTEwLwYDVQQD EygyZmE2OTFmOWI5NzU0MjI4NDk4YzY5ZGYxNWEyMWY0YjI1NzgxOWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofNkHtaReXaStIcM97lE2vFh29rF Bkk9cVdgjJjZE7KCFAPWHjSv4dBnt6w99ykR1AQkdQhsA6odJoY7Dth+4vrAjAOj tmyOR1CLRnm8slhC+uAbT860moHrTa602rFIbmwojPhrPb73VGwEc2NGQcqEYYU2 e/HnxOOrn7Q2EM8EvW1uU7IgW08MqJKr74GRDGN6j+6ydzlGkbBKfF7mfX3+kN9U TXcFbI3VtHwHjivxq0r8z6/K05zgqn/Sxn17DpGPbgKqYuv1XqUQjAhPnWGF8jXg 9Dtw9NCD0Thc8PhdlEGm5ppOzp+9KmV8nnCo5UB3NYb87cwD2kFu3O9WWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+mkfm5dUIoSYxp3xWiH0sleBmkMB8GA1UdIwQY MBaAFG+kjpYZdCbkxe60I+D9nC6VLEF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZTT2xobDBKdVRGN3JRajRQMmNMcFVzUVhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84YzViYzctNTVmYS00MDQ0LTg4ZGEt NjgxODVmZGI5MDAzLzEvYjZTT2xobDBKdVRGN3JRajRQMmNMcFVzUVhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC84YzViYzctNTVmYS00MDQ0LTg4ZGEtNjgxODVmZGI5MDAz LzEvYjZTT2xobDBKdVRGN3JRajRQMmNMcFVzUVhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3f0CaMj 7nsQ4EZblpEl4rXLl1e+R3f87n7RvGUIyYj2clZW9v70E861cPf6J1bdJUahiVOT wzFQzPf59RDwRNiqI3S5jFhfX3YGdjsbafN+pxasq6GwGc4CwAxD3xPuQpb57IVw J4wAw1IGfQXGiWcWgLs7CE4aevZkQHG0xyuYJMVKOmKK8nKFLszN1nhrP1DteyDc Eb6ig8Ckfhq2Ha1hZcihPFP6uXaolH3ECvUmwY6SYjXQFUk0TS744444bqRu0WWG 4IBzjKXpyMivpp6y8GE7dakc+fbmxDg8IF2e3VIzwQEaVAKzlEF0c2maMD/3ayj9 02fb+vaqliSzZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:27 2025 by rpki-client