This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft File: 6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json) Hash identifier: AvCdaSJm71LhhQpPjVCjy6NRwq+ZIVuzBsY1YAM4QZc= Subject key identifier: 7A:44:43:8C:76:B4:35:5A:F7:06:20:92:9B:2A:6E:7E:71:C4:30:2D Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92 Certificate issuer: /CN=eb153da3c24ce1236e20c46861635dc8efb56a92 Certificate serial: 019AF49BDF56E1BA065ED7729E13744CAB28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft Manifest number: 0E49 Signing time: Sat 06 Dec 2025 17:00:47 +0000 Manifest this update: Sat 06 Dec 2025 17:00:47 +0000 Manifest next update: Sun 07 Dec 2025 17:00:47 +0000 Files and hashes: 1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: WhYPd14x08ByXSuduLtY6n/fB6RSjfUBA+qLDkTToDI=) 2: ipmJ5LQmK4ddp63lgFVAIAYopkE.roa (hash: YVYb+vZufn7OkrWKbNACiC73zlWWGlO/lMGiNA3e8zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:df:56:e1:ba:06:5e:d7:72:9e:13:74:4c:ab:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92 Validity Not Before: Dec 6 17:00:47 2025 GMT Not After : Dec 7 17:00:47 2025 GMT Subject: CN=7a44438c76b4355af70620929b2a6e7e71c4302d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:90:a8:7f:05:ee:2e:22:2c:4f:08:28:5d: c3:0a:52:e6:2a:59:fb:ac:2c:51:79:9a:69:d1:bf: d2:33:c6:23:63:bc:81:0e:39:33:60:5c:6d:e0:86: 12:52:e1:99:bb:09:6f:1c:46:28:0e:32:e0:9d:19: b3:b6:db:4e:a6:e6:72:54:70:ca:c0:07:14:69:46: dc:2f:49:21:0b:10:4d:cc:60:41:4f:46:bc:b5:ce: 88:06:75:9e:1c:69:e4:62:6a:1d:55:5d:5e:ec:8e: d3:a3:09:23:d5:2c:a6:50:0a:d0:c7:9f:aa:8e:27: 0d:59:85:5b:f0:e6:17:04:cf:e9:94:81:39:8c:4a: 27:47:97:d0:48:05:03:ca:b1:7e:17:23:3c:78:8d: ef:bf:ff:68:8b:52:2a:6c:00:88:c0:4e:c2:bb:2b: 6e:bc:4d:d3:dc:07:c9:c7:66:c0:79:d7:10:f5:ae: 90:c5:58:32:88:32:f3:01:d5:e3:83:af:55:0e:3a: 9e:9e:ac:7d:78:23:b4:89:a5:cd:c6:bb:42:b8:b0: 78:e6:be:dc:99:7f:12:c3:11:38:0e:fa:47:12:3f: e6:e3:a4:cc:ca:20:f6:9c:bc:82:3f:ce:19:ed:8a: 08:5a:c7:0b:11:ce:23:8a:db:18:63:f2:d9:9a:45: 5a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:44:43:8C:76:B4:35:5A:F7:06:20:92:9B:2A:6E:7E:71:C4:30:2D X509v3 Authority Key Identifier: keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:36:e4:68:a5:92:38:db:8e:30:99:d9:27:aa:98:49:29:c8: 7a:1d:95:45:ce:03:47:d5:68:29:67:e9:d4:12:8a:47:80:8a: 42:d5:fb:91:f6:a0:84:cb:f9:10:46:46:82:97:9f:24:47:ca: 60:08:ac:9b:32:56:aa:50:95:3a:8d:89:c3:97:df:f9:19:49: ec:fd:3a:82:3e:f1:a2:6b:5c:4a:0b:1f:02:2c:42:da:33:44: 30:3d:3f:a2:7c:f0:eb:bd:f7:50:c9:bc:28:f0:9f:56:1f:8c: 42:22:a4:87:2a:1e:1d:4a:d9:49:29:f3:1b:65:a4:ca:d5:6f: 8e:98:66:be:3a:e5:79:92:a9:1c:73:42:0a:05:0c:d2:14:31: 5b:33:4d:cd:f2:1f:44:64:a5:2b:0f:45:ad:12:25:a4:8a:54: 97:ed:cd:22:d8:f0:6f:a0:15:d0:72:ed:d0:d1:13:1a:b7:b1: 61:65:04:3b:8b:b6:e0:2b:35:6f:c4:f8:c5:d6:bd:c3:34:ae: 0d:52:94:1e:5e:8f:97:e9:c2:de:bd:ad:b2:a3:42:00:fd:d3: f7:8e:51:78:fb:77:b7:19:21:be:35:7d:97:15:fa:15:e5:9e: 97:b9:6a:fc:c5:d6:f7:a3:52:d6:02:db:f9:da:18:f7:5e:27: 93:ab:ee:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m99W4boGXtdynhN0TKsoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMTUzZGEzYzI0Y2UxMjM2ZTIwYzQ2ODYxNjM1ZGM4ZWZi NTZhOTIwHhcNMjUxMjA2MTcwMDQ3WhcNMjUxMjA3MTcwMDQ3WjAzMTEwLwYDVQQD Eyg3YTQ0NDM4Yzc2YjQzNTVhZjcwNjIwOTI5YjJhNmU3ZTcxYzQzMDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/mQqH8F7i4iLE8IKF3DClLmKln7 rCxReZpp0b/SM8YjY7yBDjkzYFxt4IYSUuGZuwlvHEYoDjLgnRmztttOpuZyVHDK wAcUaUbcL0khCxBNzGBBT0a8tc6IBnWeHGnkYmodVV1e7I7Towkj1SymUArQx5+q jicNWYVb8OYXBM/plIE5jEonR5fQSAUDyrF+FyM8eI3vv/9oi1IqbACIwE7Cuytu vE3T3AfJx2bAedcQ9a6QxVgyiDLzAdXjg69VDjqenqx9eCO0iaXNxrtCuLB45r7c mX8SwxE4DvpHEj/m46TMyiD2nLyCP84Z7YoIWscLEc4jitsYY/LZmkVaFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpEQ4x2tDVa9wYgkpsqbn5xxDAtMB8GA1UdIwQY MBaAFOsVPaPCTOEjbiDEaGFjXcjvtWqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80YmIwNjctYzM2NS00NTJlLWE5M2Ut MzlkYTFhZThiNzMxLzEvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80YmIwNjctYzM2NS00NTJlLWE5M2UtMzlkYTFhZThiNzMx LzEvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDbkaKWS ONuOMJnZJ6qYSSnIeh2VRc4DR9VoKWfp1BKKR4CKQtX7kfaghMv5EEZGgpefJEfK YAismzJWqlCVOo2Jw5ff+RlJ7P06gj7xomtcSgsfAixC2jNEMD0/onzw6733UMm8 KPCfVh+MQiKkhyoeHUrZSSnzG2WkytVvjphmvjrleZKpHHNCCgUM0hQxWzNNzfIf RGSlKw9FrRIlpIpUl+3NItjwb6AV0HLt0NETGrexYWUEO4u24Cs1b8T4xda9wzSu DVKUHl6Pl+nC3r2tsqNCAP3T945RePt3txkhvjV9lxX6FeWel7lq/MXW96NS1gLb +doY914nk6vuJw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:13:15 2025 by rpki-client