This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft File: b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft (raw, json) Hash identifier: 7tMmzd1bx2yh7O6Wi5XbDnLvl9At25Z0E0nk7yamlZE= Subject key identifier: 16:98:18:E2:09:F5:A6:26:3D:81:06:C8:CE:DD:62:34:4E:F1:CA:6B Authority key identifier: 6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02 Certificate issuer: /CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02 Certificate serial: 019AF1D1D2EBE0B7F71A27F4C4F6FA3DDBEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft Manifest number: 03E7 Signing time: Sat 06 Dec 2025 04:00:51 +0000 Manifest this update: Sat 06 Dec 2025 04:00:51 +0000 Manifest next update: Sun 07 Dec 2025 04:00:51 +0000 Files and hashes: 1: b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl (hash: hTKQEcRqu2gUEg6G+jTlESTw7BvHNpCOnpvTgkt5Gdk=) 2: he_LtNesHB3yhhLeem_GRg_44MQ.roa (hash: evnQ8oB4iSjxmSj6Kbjo2AeseAHFfPXeoG38g6RTNyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d2:eb:e0:b7:f7:1a:27:f4:c4:f6:fa:3d:db:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02 Validity Not Before: Dec 6 04:00:51 2025 GMT Not After : Dec 7 04:00:51 2025 GMT Subject: CN=169818e209f5a6263d8106c8cedd62344ef1ca6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:e3:a5:ba:73:5a:34:d1:1b:dc:8f:56:ed: c3:33:d4:2c:dd:cf:ac:82:13:da:39:9a:71:ee:29: b7:dc:95:c5:41:cb:42:5e:86:5e:66:0e:3c:0c:eb: 37:ad:4d:51:0b:c4:db:46:b7:dd:4f:8d:f7:66:1c: 60:7d:7c:15:9f:cd:bc:bb:74:95:ff:fb:ef:d9:08: 71:e4:4e:94:3a:8f:e0:f7:c1:6d:d4:77:7a:b7:a8: 6a:da:2b:d6:b2:6f:30:98:43:04:c5:fd:60:de:7b: 39:65:82:65:a3:ef:72:8f:23:23:fd:bf:75:41:14: ad:a5:f2:5b:f1:ba:f6:7a:7b:62:ef:59:79:79:1b: 8f:1d:f4:e2:ed:69:d8:04:79:8d:b1:50:c4:e9:bd: 73:25:c9:77:8b:6b:50:1d:da:30:4a:b7:f8:d5:b0: e9:9c:71:ea:0d:3f:c3:3a:12:90:f9:fa:90:11:49: ad:c2:ba:76:8f:db:a7:9c:a2:2e:40:d2:25:11:68: 92:6a:50:c2:82:23:1f:80:31:77:e8:15:a2:8a:3d: ca:b5:d4:32:03:db:2d:c7:bb:58:37:76:02:33:d5: 3e:c0:86:b5:9e:0f:e6:3b:74:92:64:35:2b:db:ce: 5a:c5:8d:9d:70:b4:0c:53:51:7d:5b:f3:82:9d:f2: 5e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:98:18:E2:09:F5:A6:26:3D:81:06:C8:CE:DD:62:34:4E:F1:CA:6B X509v3 Authority Key Identifier: keyid:6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:69:0a:a0:86:09:30:26:f8:8e:de:6c:91:2f:4a:bf:9b:ac: ae:4d:67:21:68:29:69:f7:04:14:71:27:94:68:ee:ba:52:ed: 80:81:84:75:22:23:35:01:89:65:68:70:12:4a:76:2c:66:c1: c6:a2:1f:5f:93:6f:5d:1d:ff:53:8f:54:d2:ed:c7:a0:8f:ce: 9a:e6:df:a8:e3:8b:5f:f1:23:26:81:9d:70:14:bd:5f:49:4f: 24:96:ab:34:c6:33:33:12:2f:33:76:6a:a8:6e:9b:a3:f0:3d: a5:19:2b:f3:12:a2:fc:a5:ec:00:83:27:8d:a5:04:1b:31:95: 2e:67:e4:bd:d7:9f:7d:28:63:53:0a:1f:05:b8:f9:17:7b:6b: bd:c2:fd:da:87:4b:7e:91:70:a3:54:08:fd:70:ba:cc:67:93: 77:6b:ef:28:f9:2a:c9:d5:9d:64:9d:a4:23:a4:35:ea:ff:3a: d3:63:5a:42:7c:6d:35:0e:2a:c3:7d:0b:ee:2d:6b:7e:83:df: c0:7d:3b:fd:69:e9:a5:9d:b4:98:ec:6b:0a:ca:84:f1:87:4d: 65:f6:58:92:e9:fb:06:eb:94:6d:6a:cd:0f:2d:d6:dc:18:f5: 77:b8:e5:f9:40:06:b6:23:c7:83:8f:5a:fb:5e:84:28:39:7d: aa:15:79:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dLr4Lf3Gif0xPb6PdvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzVjNDczZjliN2IwMWU5YzI0ODVjNDZiZjU2OWNjZTA4 MTZmMDIwHhcNMjUxMjA2MDQwMDUxWhcNMjUxMjA3MDQwMDUxWjAzMTEwLwYDVQQD EygxNjk4MThlMjA5ZjVhNjI2M2Q4MTA2YzhjZWRkNjIzNDRlZjFjYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJnjpbpzWjTRG9yPVu3DM9Qs3c+s ghPaOZpx7im33JXFQctCXoZeZg48DOs3rU1RC8TbRrfdT433ZhxgfXwVn828u3SV //vv2Qhx5E6UOo/g98Ft1Hd6t6hq2ivWsm8wmEMExf1g3ns5ZYJlo+9yjyMj/b91 QRStpfJb8br2enti71l5eRuPHfTi7WnYBHmNsVDE6b1zJcl3i2tQHdowSrf41bDp nHHqDT/DOhKQ+fqQEUmtwrp2j9unnKIuQNIlEWiSalDCgiMfgDF36BWiij3KtdQy A9stx7tYN3YCM9U+wIa1ng/mO3SSZDUr285axY2dcLQMU1F9W/OCnfJeCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaYGOIJ9aYmPYEGyM7dYjRO8cprMB8GA1UdIwQY MBaAFG/FxHP5t7AenCSFxGv1aczggW8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhYRWNfbTNzQjZjSklYRWFfVnB6T0NCYndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZTZhYzYtZWRlZi00OTVlLWI2YTIt OWNmMDQwNTc0NzY1LzEvYjhYRWNfbTNzQjZjSklYRWFfVnB6T0NCYndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZTZhYzYtZWRlZi00OTVlLWI2YTItOWNmMDQwNTc0NzY1 LzEvYjhYRWNfbTNzQjZjSklYRWFfVnB6T0NCYndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmkKoIYJ MCb4jt5skS9Kv5usrk1nIWgpafcEFHEnlGjuulLtgIGEdSIjNQGJZWhwEkp2LGbB xqIfX5NvXR3/U49U0u3HoI/OmubfqOOLX/EjJoGdcBS9X0lPJJarNMYzMxIvM3Zq qG6bo/A9pRkr8xKi/KXsAIMnjaUEGzGVLmfkvdeffShjUwofBbj5F3trvcL92odL fpFwo1QI/XC6zGeTd2vvKPkqydWdZJ2kI6Q16v8602NaQnxtNQ4qw30L7i1rfoPf wH07/WnppZ20mOxrCsqE8YdNZfZYkun7BuuUbWrNDy3W3Bj1d7jl+UAGtiPHg49a +16EKDl9qhV5+A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:27 2025 by rpki-client