This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft File: 6YHNH8bDLks7fJxTiwTdMKgRw8s.mft (raw, json) Hash identifier: BYOCbSmIbc50hFzVtFzsXtflLAhrqEW85FZScja0n00= Subject key identifier: BC:83:F4:F3:09:75:97:83:FA:9F:2B:01:E2:31:96:38:CA:38:E2:7C Authority key identifier: E9:81:CD:1F:C6:C3:2E:4B:3B:7C:9C:53:8B:04:DD:30:A8:11:C3:CB Certificate issuer: /CN=e981cd1fc6c32e4b3b7c9c538b04dd30a811c3cb Certificate serial: 019B31FA97557AAD4F793BB6E95EB357404D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 15:01:04 +0000 Manifest this update: Thu 18 Dec 2025 15:01:04 +0000 Manifest next update: Fri 19 Dec 2025 15:01:04 +0000 Files and hashes: 1: 6YHNH8bDLks7fJxTiwTdMKgRw8s.crl (hash: ff04NzFx67iX75sP7XnvY4+MUyp8KNakqkjIMe4BoXo=) 2: IVdjVoN4btCTyMYmCO02k9GntBE.roa (hash: a5NdeKrzfcEUiEbmiEcDr8auHl1ryaiEhNrV1p0CNFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.crl rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:97:55:7a:ad:4f:79:3b:b6:e9:5e:b3:57:40:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e981cd1fc6c32e4b3b7c9c538b04dd30a811c3cb Validity Not Before: Dec 18 15:01:04 2025 GMT Not After : Dec 19 15:01:04 2025 GMT Subject: CN=bc83f4f309759783fa9f2b01e2319638ca38e27c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b8:64:ec:4d:aa:47:f5:bc:f3:9b:dd:45:6f: 60:ce:1d:dc:fa:e0:e1:91:0e:60:61:b9:b0:23:28: 23:ef:20:d1:87:50:d2:aa:fc:05:a8:24:f6:96:fd: 87:47:1e:5d:ca:28:08:ee:8f:bd:02:5c:fd:6b:ad: e3:aa:f2:47:04:ee:ec:f1:ac:d7:76:33:e8:71:20: b3:c9:49:37:9f:ab:3d:89:98:1c:35:44:b3:6d:8f: 9e:93:18:0c:a0:c5:3e:af:0e:e6:d5:a1:19:a7:28: 9e:2a:fc:a7:f1:cf:db:16:fb:60:7b:3b:24:ef:c4: 3f:eb:5e:e4:e7:33:3a:d3:6b:5e:3d:44:94:66:98: c7:fa:74:d7:22:5c:26:86:a1:ce:88:a6:67:c7:b5: 8d:71:b0:a1:de:74:8d:02:eb:ba:d0:a9:7c:1c:02: 59:01:30:d5:a6:d6:33:5f:f5:fc:72:45:11:b2:e5: 21:45:ca:e6:c6:e2:5b:32:69:7b:bc:46:68:30:1b: 12:05:fb:16:f5:fb:4f:1f:c7:14:dd:10:94:34:95: 76:38:00:12:0a:ca:dc:27:75:20:a5:58:79:f3:cb: 7b:58:9d:a5:b4:73:6c:ba:df:14:08:01:a0:28:c9: 5a:e3:b6:4f:91:61:d9:35:91:1f:11:9c:6e:22:4b: 8e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:83:F4:F3:09:75:97:83:FA:9F:2B:01:E2:31:96:38:CA:38:E2:7C X509v3 Authority Key Identifier: keyid:E9:81:CD:1F:C6:C3:2E:4B:3B:7C:9C:53:8B:04:DD:30:A8:11:C3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:d9:45:73:b8:67:dd:62:08:95:04:19:e2:5c:11:18:61:57: f1:52:81:c7:0b:f5:5a:4a:e3:8a:30:17:c3:cd:86:79:5f:d3: d0:76:8d:f0:b2:6c:1b:d9:e9:4a:52:60:cd:06:d5:af:86:67: ff:77:71:27:58:6d:25:76:ce:64:9a:6c:09:76:3e:9c:07:86: 65:ea:78:dd:67:1b:53:3a:c5:d4:cc:72:d2:ff:47:88:ef:2a: a1:7f:b1:ae:1a:7e:43:13:95:9e:53:43:c7:cc:c6:2f:a4:a6: 01:16:d0:9b:00:7f:7c:21:bd:cc:ff:1a:e3:b1:2a:9d:43:81: 2c:b7:a0:d8:26:28:02:d2:17:80:21:61:1b:9d:32:e0:5c:ff: 5f:e1:8b:e8:ad:7d:46:05:5c:c9:c2:f1:be:98:1b:41:77:ae: 53:62:73:44:e3:07:5c:72:60:48:b5:c3:69:db:8b:94:8d:c5: c0:53:3c:99:98:60:7a:ed:26:22:2f:94:5b:ac:27:9f:24:c2: 38:2b:01:d5:b9:85:b6:c7:69:02:c2:2f:d8:c1:4d:3b:e7:28: fa:cb:da:87:2d:97:4f:8a:e1:08:c5:59:93:49:c9:7b:be:e1: c9:95:ec:ca:9a:d1:1b:9f:f8:69:b2:e8:22:5c:64:dc:28:70: ca:ee:8c:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+pdVeq1PeTu26V6zV0BNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ODFjZDFmYzZjMzJlNGIzYjdjOWM1MzhiMDRkZDMwYTgx MWMzY2IwHhcNMjUxMjE4MTUwMTA0WhcNMjUxMjE5MTUwMTA0WjAzMTEwLwYDVQQD EyhiYzgzZjRmMzA5NzU5NzgzZmE5ZjJiMDFlMjMxOTYzOGNhMzhlMjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbhk7E2qR/W885vdRW9gzh3c+uDh kQ5gYbmwIygj7yDRh1DSqvwFqCT2lv2HRx5dyigI7o+9Alz9a63jqvJHBO7s8azX djPocSCzyUk3n6s9iZgcNUSzbY+ekxgMoMU+rw7m1aEZpyieKvyn8c/bFvtgezsk 78Q/617k5zM602tePUSUZpjH+nTXIlwmhqHOiKZnx7WNcbCh3nSNAuu60Kl8HAJZ ATDVptYzX/X8ckURsuUhRcrmxuJbMml7vEZoMBsSBfsW9ftPH8cU3RCUNJV2OAAS CsrcJ3UgpVh588t7WJ2ltHNsut8UCAGgKMla47ZPkWHZNZEfEZxuIkuO2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyD9PMJdZeD+p8rAeIxljjKOOJ8MB8GA1UdIwQY MBaAFOmBzR/Gwy5LO3ycU4sE3TCoEcPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNllITkg4YkRMa3M3Zkp4VGl3VGRNS2dSdzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni84ZTE2Y2YtY2QzYi00MTc3LWEwNDUt MWMyOGUxY2Q1NzQ1LzEvNllITkg4YkRMa3M3Zkp4VGl3VGRNS2dSdzhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni84ZTE2Y2YtY2QzYi00MTc3LWEwNDUtMWMyOGUxY2Q1NzQ1 LzEvNllITkg4YkRMa3M3Zkp4VGl3VGRNS2dSdzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvNlFc7hn 3WIIlQQZ4lwRGGFX8VKBxwv1WkrjijAXw82GeV/T0HaN8LJsG9npSlJgzQbVr4Zn /3dxJ1htJXbOZJpsCXY+nAeGZep43WcbUzrF1Mxy0v9HiO8qoX+xrhp+QxOVnlND x8zGL6SmARbQmwB/fCG9zP8a47EqnUOBLLeg2CYoAtIXgCFhG50y4Fz/X+GL6K19 RgVcycLxvpgbQXeuU2JzROMHXHJgSLXDaduLlI3FwFM8mZhgeu0mIi+UW6wnnyTC OCsB1bmFtsdpAsIv2MFNO+co+svahy2XT4rhCMVZk0nJe77hyZXsyprRG5/4abLo Ilxk3Chwyu6MJg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:04:13 2025 by rpki-client