This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft File: 6WS8XQrZ6gXijILnaP8U0ddNL-s.mft (raw, json) Hash identifier: /84CRUVHsDTbQRRoxtbtyl489ePLp2ngW0JVbxAz10M= Subject key identifier: 71:4C:59:EC:5A:C6:26:2C:29:28:0A:3B:52:B5:A0:35:33:8C:05:FF Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB Certificate issuer: /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb Certificate serial: 019AF12D86789CC4D1C3646B4AFA19A10A48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft Manifest number: 08DB Signing time: Sat 06 Dec 2025 01:01:23 +0000 Manifest this update: Sat 06 Dec 2025 01:01:23 +0000 Manifest next update: Sun 07 Dec 2025 01:01:23 +0000 Files and hashes: 1: 47Z2HtdwofFjyVEFI9qNr2a-tVU.roa (hash: DNKD/o+eynRMlQCW6kVsQCccIBeiYPf64PT1npjPvG4=) 2: 6WS8XQrZ6gXijILnaP8U0ddNL-s.crl (hash: 6VRTJzoTTNpWDIDr4deeDI1PhO1rHP7BAsPZzi9aG0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:86:78:9c:c4:d1:c3:64:6b:4a:fa:19:a1:0a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb Validity Not Before: Dec 6 01:01:23 2025 GMT Not After : Dec 7 01:01:23 2025 GMT Subject: CN=714c59ec5ac6262c29280a3b52b5a035338c05ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9c:18:42:ac:98:65:07:46:06:ab:65:5a:68: d6:c1:a4:9f:c6:0a:d8:07:9f:81:96:3f:fd:ca:a7: 8c:4a:e8:fa:93:85:2e:6e:2c:9a:02:1f:51:3d:82: 25:c8:a8:c3:d4:79:54:98:64:9e:fb:60:49:67:66: 61:5c:27:34:cb:29:ee:3f:28:9a:87:bc:95:2c:74: 9a:26:9d:b6:b3:db:4c:d5:9d:1b:32:27:f5:66:db: a8:77:d4:16:bf:9f:f5:55:cf:bd:9d:ff:20:cd:e4: 72:9d:58:93:50:5a:8d:57:8a:60:d8:fc:83:db:ea: 17:8b:b9:1b:ca:1d:25:b4:e1:5c:93:6d:c3:4f:d0: 47:18:52:2a:5e:db:6f:f9:55:9e:72:a4:6a:9a:fd: 38:ad:17:6f:88:01:65:e4:da:e4:8c:c7:09:85:54: f9:d4:d5:d4:7e:0e:51:d6:ca:0f:a5:0d:94:00:a4: 20:1d:ae:5f:3e:03:45:46:af:f9:db:a0:0d:fb:81: d9:f8:27:71:a4:93:93:d0:bc:71:82:bf:81:1b:00: d8:91:81:04:86:9b:60:0c:f2:bd:98:93:73:70:e5: c5:e1:49:29:77:5b:2f:97:2e:53:5f:78:80:5f:df: 64:d3:26:ba:dc:f6:b7:e5:a2:b0:4a:33:e2:36:39: 8b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4C:59:EC:5A:C6:26:2C:29:28:0A:3B:52:B5:A0:35:33:8C:05:FF X509v3 Authority Key Identifier: keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:aa:a4:dd:03:f4:5f:a3:c1:84:21:4d:a1:56:6b:20:45:ad: bf:32:d9:cb:4a:17:5c:13:db:e9:b5:60:16:d3:b2:a8:3d:1b: 88:29:b9:67:7f:3c:60:05:c9:54:35:8b:b9:f1:e3:99:4c:a2: c3:a3:d9:13:84:6f:4d:6e:e0:2c:57:ea:ae:79:b3:57:ec:18: 28:33:8b:34:5e:69:2d:55:30:6d:d7:ba:4e:52:f2:90:39:65: 91:bd:60:32:cb:ea:36:cd:b8:ca:b3:9a:79:87:eb:90:a9:60: cb:0d:3f:b8:56:9f:0e:50:9b:b0:3b:29:79:df:6f:43:7f:f9: f1:16:0a:f9:b7:72:91:b8:2a:e5:7f:28:7a:97:7c:10:da:a6: 9e:eb:78:45:f9:a9:10:f0:2d:a6:45:1e:18:8a:6d:bc:9c:6e: 98:d6:be:6f:38:0f:c3:56:51:a1:ed:96:61:8d:c2:68:51:f7: 11:69:40:1a:63:fe:70:54:57:fe:03:52:81:57:d3:36:b8:59: 3d:88:8d:d1:ca:1a:da:0f:55:ff:de:a6:05:a9:fc:c0:e4:21: ef:2f:c7:3d:67:32:5b:25:6a:f5:2a:e1:95:43:4f:a5:ed:e0: e9:ed:ec:bf:99:68:af:7c:f5:70:8b:78:01:bd:34:5c:27:eb: ee:2c:b8:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYZ4nMTRw2RrSvoZoQpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NjRiYzVkMGFkOWVhMDVlMjhjODJlNzY4ZmYxNGQxZDc0 ZDJmZWIwHhcNMjUxMjA2MDEwMTIzWhcNMjUxMjA3MDEwMTIzWjAzMTEwLwYDVQQD Eyg3MTRjNTllYzVhYzYyNjJjMjkyODBhM2I1MmI1YTAzNTMzOGMwNWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZwYQqyYZQdGBqtlWmjWwaSfxgrY B5+Blj/9yqeMSuj6k4UubiyaAh9RPYIlyKjD1HlUmGSe+2BJZ2ZhXCc0yynuPyia h7yVLHSaJp22s9tM1Z0bMif1Ztuod9QWv5/1Vc+9nf8gzeRynViTUFqNV4pg2PyD 2+oXi7kbyh0ltOFck23DT9BHGFIqXttv+VWecqRqmv04rRdviAFl5NrkjMcJhVT5 1NXUfg5R1soPpQ2UAKQgHa5fPgNFRq/526AN+4HZ+CdxpJOT0Lxxgr+BGwDYkYEE hptgDPK9mJNzcOXF4Ukpd1svly5TX3iAX99k0ya63Pa35aKwSjPiNjmL9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFMWexaxiYsKSgKO1K1oDUzjAX/MB8GA1UdIwQY MBaAFOlkvF0K2eoF4oyC52j/FNHXTS/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNldTOFhRclo2Z1hpaklMbmFQOFUwZGROTC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xYzhjYmEtNzQ5MS00NTQ2LTk5NTMt NTg5OWE3NGJlMmFlLzEvNldTOFhRclo2Z1hpaklMbmFQOFUwZGROTC1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xYzhjYmEtNzQ5MS00NTQ2LTk5NTMtNTg5OWE3NGJlMmFl LzEvNldTOFhRclo2Z1hpaklMbmFQOFUwZGROTC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKqk3QP0 X6PBhCFNoVZrIEWtvzLZy0oXXBPb6bVgFtOyqD0biCm5Z388YAXJVDWLufHjmUyi w6PZE4RvTW7gLFfqrnmzV+wYKDOLNF5pLVUwbde6TlLykDllkb1gMsvqNs24yrOa eYfrkKlgyw0/uFafDlCbsDsped9vQ3/58RYK+bdykbgq5X8oepd8ENqmnut4Rfmp EPAtpkUeGIptvJxumNa+bzgPw1ZRoe2WYY3CaFH3EWlAGmP+cFRX/gNSgVfTNrhZ PYiN0coa2g9V/96mBan8wOQh7y/HPWcyWyVq9SrhlUNPpe3g6e3sv5lor3z1cIt4 Ab00XCfr7iy4Nw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:00 2025 by rpki-client