This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft File: b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft (raw, json) Hash identifier: gTBIzQU4Zm9on4D0WmFpXcpf8Bggk+AKdldjmA7cT0g= Subject key identifier: 89:7A:A7:7E:1B:25:FC:DB:F8:FE:55:66:B2:D6:6B:DE:1E:C0:C9:21 Authority key identifier: 6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77 Certificate issuer: /CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177 Certificate serial: 019B3231DA2FB89EFFE1200B32601BB4B8EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft Manifest number: 16C6 Signing time: Thu 18 Dec 2025 16:01:26 +0000 Manifest this update: Thu 18 Dec 2025 16:01:26 +0000 Manifest next update: Fri 19 Dec 2025 16:01:26 +0000 Files and hashes: 1: 9eMR4FNJDVauWkWIUPQVpbQ5CXg.roa (hash: u33y8H6nVy03TdakAVCKdnmWlusbHupRimP8Gevy98g=) 2: b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl (hash: y1nJhxTDU4r/gLMIyHEkt+e/GYThblSqb2yDZur0cKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:da:2f:b8:9e:ff:e1:20:0b:32:60:1b:b4:b8:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177 Validity Not Before: Dec 18 16:01:26 2025 GMT Not After : Dec 19 16:01:26 2025 GMT Subject: CN=897aa77e1b25fcdbf8fe5566b2d66bde1ec0c921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7f:dd:7a:8a:c9:3f:9c:f4:35:86:0a:8a:3c: ea:47:50:a8:04:7f:70:82:ad:4f:e0:30:6f:1d:4b: 4b:96:23:a0:81:32:ba:72:3b:8f:34:60:03:69:c5: db:b5:e4:7e:8b:8a:34:6e:61:ce:b4:ae:44:88:8e: ad:5b:57:33:16:2b:d0:b6:71:47:8d:d0:43:b6:5d: d7:04:e4:3e:00:25:7d:d2:32:13:08:e1:cd:22:10: 5f:9f:ee:81:59:b4:ba:d5:5e:17:69:b5:15:a9:ae: 35:17:58:e2:a7:fd:be:bb:ac:12:6f:99:b0:fd:be: 12:52:eb:d2:28:2f:e7:ce:b8:fa:75:33:d0:fd:b9: 7b:c5:26:5a:cd:7d:b9:37:1d:24:ad:69:17:d1:e8: cf:9a:ba:44:f7:b5:0e:24:e6:0c:b3:0c:5a:a1:ce: 46:9d:22:a6:51:19:da:9a:60:15:5f:35:d2:c9:88: 24:77:5f:d6:6c:66:b9:4e:6e:fc:ed:0a:e3:fd:fa: f3:c3:bd:f4:ec:f9:fe:9e:23:7f:28:3c:f1:65:e2: 34:1f:86:8a:48:e5:62:10:bd:28:e2:9a:a9:d9:a8: f0:18:fd:88:6c:9b:dd:a2:4c:eb:19:c7:3a:c0:21: 57:37:23:a2:53:d2:6a:3e:46:fc:06:db:40:c7:dc: 26:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7A:A7:7E:1B:25:FC:DB:F8:FE:55:66:B2:D6:6B:DE:1E:C0:C9:21 X509v3 Authority Key Identifier: keyid:6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:73:f7:1d:d5:93:f8:e9:44:0b:9d:be:83:70:4b:4f:f6:cd: b6:85:6a:c7:78:59:36:79:35:bc:43:6e:7f:da:0b:91:dd:ba: a0:0e:f7:67:12:7c:a3:72:9f:06:b9:03:23:40:2c:86:5d:b9: 7d:1c:1f:12:1d:2a:61:ee:a4:d4:ce:18:05:94:b1:89:64:b4: f2:1c:55:7c:e6:17:a6:7c:00:5d:0e:cd:5f:a1:73:a4:2c:30: de:34:88:b9:0e:cd:cb:85:e1:70:31:0d:fb:6e:ed:e2:da:6c: 07:35:11:84:e8:a2:04:0f:3c:3a:23:2e:8f:76:2d:25:ff:e3: bc:10:ab:26:4e:fe:47:b7:c6:07:bd:4e:e1:e9:34:e4:e2:23: 45:7a:10:d4:0b:b9:5d:f1:41:ea:24:ee:81:10:62:45:2e:7f: 5f:38:be:c0:8b:7e:75:9a:14:07:67:ef:6c:6c:a7:37:62:42: 7d:fd:59:fb:53:55:a1:b2:02:77:b0:a1:a0:52:74:c5:c1:3d: 6b:3a:99:d8:dc:99:8c:ad:dd:36:17:45:e3:53:52:96:7d:9e: 92:32:fe:07:7c:ec:81:6a:86:ac:dc:67:e6:7e:94:c0:1e:6e: 06:49:ad:1c:f7:31:e5:bd:95:12:e0:05:15:a4:3f:ed:2a:92: 17:79:32:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMdovuJ7/4SALMmAbtLjqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYTQ4ZTk2MTk3NDI2ZTRjNWVlYjQyM2UwZmQ5YzJlOTUy YzQxNzcwHhcNMjUxMjE4MTYwMTI2WhcNMjUxMjE5MTYwMTI2WjAzMTEwLwYDVQQD Eyg4OTdhYTc3ZTFiMjVmY2RiZjhmZTU1NjZiMmQ2NmJkZTFlYzBjOTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n/deorJP5z0NYYKijzqR1CoBH9w gq1P4DBvHUtLliOggTK6cjuPNGADacXbteR+i4o0bmHOtK5EiI6tW1czFivQtnFH jdBDtl3XBOQ+ACV90jITCOHNIhBfn+6BWbS61V4XabUVqa41F1jip/2+u6wSb5mw /b4SUuvSKC/nzrj6dTPQ/bl7xSZazX25Nx0krWkX0ejPmrpE97UOJOYMswxaoc5G nSKmURnammAVXzXSyYgkd1/WbGa5Tm787Qrj/frzw7307Pn+niN/KDzxZeI0H4aK SOViEL0o4pqp2ajwGP2IbJvdokzrGcc6wCFXNyOiU9JqPkb8BttAx9wmWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIl6p34bJfzb+P5VZrLWa94ewMkhMB8GA1UdIwQY MBaAFG+kjpYZdCbkxe60I+D9nC6VLEF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZTT2xobDBKdVRGN3JRajRQMmNMcFVzUVhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84YzViYzctNTVmYS00MDQ0LTg4ZGEt NjgxODVmZGI5MDAzLzEvYjZTT2xobDBKdVRGN3JRajRQMmNMcFVzUVhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC84YzViYzctNTVmYS00MDQ0LTg4ZGEtNjgxODVmZGI5MDAz LzEvYjZTT2xobDBKdVRGN3JRajRQMmNMcFVzUVhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHP3HdWT +OlEC52+g3BLT/bNtoVqx3hZNnk1vENuf9oLkd26oA73ZxJ8o3KfBrkDI0Ashl25 fRwfEh0qYe6k1M4YBZSxiWS08hxVfOYXpnwAXQ7NX6FzpCww3jSIuQ7Ny4XhcDEN +27t4tpsBzURhOiiBA88OiMuj3YtJf/jvBCrJk7+R7fGB71O4ek05OIjRXoQ1Au5 XfFB6iTugRBiRS5/Xzi+wIt+dZoUB2fvbGynN2JCff1Z+1NVobICd7ChoFJ0xcE9 azqZ2NyZjK3dNhdF41NSln2ekjL+B3zsgWqGrNxn5n6UwB5uBkmtHPcx5b2VEuAF FaQ/7SqSF3kyIA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:05:44 2025 by rpki-client