This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft File: 6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json) Hash identifier: PhM7lfmxvFC/A4UdfaDFOxeroKGKUQqsfAmymJYnIlQ= Subject key identifier: F5:FD:A5:A9:D0:32:C6:8E:B0:0B:F6:09:25:62:7C:12:94:DC:AB:B1 Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92 Certificate issuer: /CN=eb153da3c24ce1236e20c46861635dc8efb56a92 Certificate serial: 019B2C9D4613B3CE5C1385355520E73811BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft Manifest number: 0E66 Signing time: Wed 17 Dec 2025 14:01:03 +0000 Manifest this update: Wed 17 Dec 2025 14:01:03 +0000 Manifest next update: Thu 18 Dec 2025 14:01:03 +0000 Files and hashes: 1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: 1UAvdJvfE/LoQMmAn0pJ5CayE0/YM9S26LDBcxk7nos=) 2: ipmJ5LQmK4ddp63lgFVAIAYopkE.roa (hash: YVYb+vZufn7OkrWKbNACiC73zlWWGlO/lMGiNA3e8zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:46:13:b3:ce:5c:13:85:35:55:20:e7:38:11:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92 Validity Not Before: Dec 17 14:01:03 2025 GMT Not After : Dec 18 14:01:03 2025 GMT Subject: CN=f5fda5a9d032c68eb00bf60925627c1294dcabb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e3:46:ab:88:41:71:4b:b9:ae:dd:20:98:f7: 9b:44:02:bd:7a:8d:33:1c:86:c1:ed:f9:5f:2e:17: d1:66:fc:b2:09:63:90:ca:cd:88:21:e9:ab:de:58: 74:8c:90:5a:00:f6:95:a9:17:99:14:56:ff:5c:45: 1b:a1:c7:86:59:45:68:7e:e2:d1:64:e0:18:0d:5b: 9b:bc:38:d5:fd:44:a9:9e:d5:ba:2c:a8:48:d1:32: 65:84:cd:e8:5e:12:b0:c7:15:32:1e:96:af:ea:7f: 35:a0:b4:c1:d3:c6:5d:aa:43:78:a1:1f:e3:2e:32: a0:1a:bb:2e:29:a3:72:78:07:61:8b:0a:0e:ca:f0: 5d:5b:33:dc:5c:fa:3c:15:4e:01:e8:ca:70:2f:0d: ec:45:23:68:41:59:ba:f9:88:9d:b9:45:d6:92:f1: e5:05:b0:13:25:ad:d6:45:ec:67:35:ef:13:a8:4d: 49:ac:d0:23:8e:31:f7:11:61:21:92:f9:a0:b9:b9: 3c:34:11:f3:8b:be:a5:64:83:a9:62:89:25:81:10: 4b:d8:c8:a9:b1:1f:a5:eb:4c:9d:49:b8:56:62:1d: 7c:e2:6e:2a:be:9f:c7:4c:8a:23:d7:38:79:4e:0d: ff:b4:74:bf:ba:2c:d0:57:4b:66:53:09:7d:4e:aa: d1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FD:A5:A9:D0:32:C6:8E:B0:0B:F6:09:25:62:7C:12:94:DC:AB:B1 X509v3 Authority Key Identifier: keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:0c:d5:17:bd:32:45:2e:5b:39:05:fc:30:60:f6:54:29:3c: 4c:0f:b0:f0:6c:87:ca:a5:c8:1c:fb:96:69:7d:42:77:69:40: a5:ac:21:c7:b1:df:43:ea:ce:85:72:25:67:9e:ed:02:da:42: a7:2b:d3:ba:01:fe:dd:f0:25:3f:05:f2:70:4d:ca:62:8e:41: f4:5f:f2:8f:1d:34:8b:df:f2:cb:d4:2a:32:fd:53:d9:d5:bc: 88:e0:0d:f5:f7:6c:9f:a9:63:ea:42:36:0b:4c:05:4e:68:f5: 1b:61:d2:53:87:d0:ce:11:c3:eb:50:33:44:1f:bd:da:55:dc: d6:42:fb:a5:e8:ce:49:17:4d:03:8b:ae:be:78:3c:c5:3d:49: c5:7b:3b:95:af:82:f8:b4:79:bd:5a:d7:78:66:38:3c:f5:ec: 1d:bb:da:d7:80:ca:7a:26:c3:1c:d5:a4:b0:68:0c:f0:38:a8: 79:73:70:97:3f:70:74:1b:68:9b:b0:c2:18:b8:4f:d6:aa:6e: 45:3b:b1:d9:20:47:ed:c3:26:cf:17:2f:43:ac:94:ba:0c:e4: f2:2c:f5:c6:3c:80:41:18:00:ef:a4:5c:db:df:92:dc:d4:73: 09:62:fc:e8:15:27:3f:62:40:78:d5:5b:45:3e:13:db:93:a6: 8a:66:30:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnUYTs85cE4U1VSDnOBG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMTUzZGEzYzI0Y2UxMjM2ZTIwYzQ2ODYxNjM1ZGM4ZWZi NTZhOTIwHhcNMjUxMjE3MTQwMTAzWhcNMjUxMjE4MTQwMTAzWjAzMTEwLwYDVQQD EyhmNWZkYTVhOWQwMzJjNjhlYjAwYmY2MDkyNTYyN2MxMjk0ZGNhYmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteNGq4hBcUu5rt0gmPebRAK9eo0z HIbB7flfLhfRZvyyCWOQys2IIemr3lh0jJBaAPaVqReZFFb/XEUboceGWUVofuLR ZOAYDVubvDjV/USpntW6LKhI0TJlhM3oXhKwxxUyHpav6n81oLTB08ZdqkN4oR/j LjKgGrsuKaNyeAdhiwoOyvBdWzPcXPo8FU4B6MpwLw3sRSNoQVm6+YiduUXWkvHl BbATJa3WRexnNe8TqE1JrNAjjjH3EWEhkvmgubk8NBHzi76lZIOpYoklgRBL2Mip sR+l60ydSbhWYh184m4qvp/HTIoj1zh5Tg3/tHS/uizQV0tmUwl9TqrRGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPX9panQMsaOsAv2CSVifBKU3KuxMB8GA1UdIwQY MBaAFOsVPaPCTOEjbiDEaGFjXcjvtWqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80YmIwNjctYzM2NS00NTJlLWE5M2Ut MzlkYTFhZThiNzMxLzEvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80YmIwNjctYzM2NS00NTJlLWE5M2UtMzlkYTFhZThiNzMx LzEvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgzVF70y RS5bOQX8MGD2VCk8TA+w8GyHyqXIHPuWaX1Cd2lApawhx7HfQ+rOhXIlZ57tAtpC pyvTugH+3fAlPwXycE3KYo5B9F/yjx00i9/yy9QqMv1T2dW8iOAN9fdsn6lj6kI2 C0wFTmj1G2HSU4fQzhHD61AzRB+92lXc1kL7pejOSRdNA4uuvng8xT1JxXs7la+C +LR5vVrXeGY4PPXsHbva14DKeibDHNWksGgM8DioeXNwlz9wdBtom7DCGLhP1qpu RTux2SBH7cMmzxcvQ6yUugzk8iz1xjyAQRgA76Rc29+S3NRzCWL86BUnP2JAeNVb RT4T25OmimYwKA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:36:26 2025 by rpki-client