This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json) Hash identifier: M3X3DNNO0luWusQ/AvQKzI5tkjE195oWR6BFTMy7l74= Subject key identifier: 7C:37:28:E4:C0:83:AE:A5:DD:DC:32:AC:19:C2:E0:08:4E:AB:DA:B2 Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef Certificate serial: 019B42809179EEA06F5F63558F8C1A1BC881 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft Manifest number: 15CF Signing time: Sun 21 Dec 2025 20:01:20 +0000 Manifest this update: Sun 21 Dec 2025 20:01:20 +0000 Manifest next update: Mon 22 Dec 2025 20:01:20 +0000 Files and hashes: 1: 0UzsGme_k2nP3xmC23x_NIyPI4I.roa (hash: 9GCcsHrAPMsxEip94efAnxBNP67TuW3l3gu24kwBziA=) 2: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: nFJnIhUJvDI29r0RbE3DhbThtTXZGnuqh6XVml/o1Ok=) 3: QhX-bY8Pyu0IVpXlU-objdMMYgU.roa (hash: AtV/TPeQmqPYNR6TwwiivnQLG1K0ZguaxSrJsKzoymM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:91:79:ee:a0:6f:5f:63:55:8f:8c:1a:1b:c8:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef Validity Not Before: Dec 21 20:01:20 2025 GMT Not After : Dec 22 20:01:20 2025 GMT Subject: CN=7c3728e4c083aea5dddc32ac19c2e0084eabdab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b5:88:72:51:38:7e:c8:1a:91:aa:5c:39:1c: 37:b2:51:8d:1b:8f:6d:ec:95:ef:f6:9c:f7:c4:15: c8:19:e2:26:a1:a1:97:d8:16:49:16:43:73:52:9c: 06:70:ac:8c:cf:19:ec:13:a4:35:ea:b6:d4:33:b7: 6e:1f:23:da:99:51:fd:84:bd:ba:91:6c:76:30:78: 4a:d6:66:4d:b1:63:77:b5:ed:44:f7:3a:09:ce:2e: 73:99:44:ad:e6:fb:cb:56:e6:0f:38:44:4a:c5:40: c7:fc:43:59:a0:d6:b7:e2:52:47:1d:61:4d:d8:e5: d2:e2:c7:2f:b8:2c:01:9e:41:59:af:cd:46:af:a8: 15:3b:e1:47:6b:d8:63:77:56:0d:cc:12:63:56:cd: 33:b9:43:1a:4d:3f:a2:a1:bb:ba:9d:43:43:bb:85: 66:fd:34:02:88:a5:af:3c:4a:62:b7:31:46:b4:f4: de:0e:a8:c6:1b:bc:68:eb:cf:15:13:2d:a9:17:a8: 92:ca:eb:cf:b1:e1:5e:11:5b:05:bd:8e:c7:fe:10: ae:80:f6:0f:02:57:a2:e2:e5:44:ed:38:90:d4:83: 79:fc:f6:8e:91:e9:95:ae:50:fb:77:88:dc:9d:78: ab:c5:74:ea:89:ca:66:43:25:55:ec:0a:ab:79:18: a0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:37:28:E4:C0:83:AE:A5:DD:DC:32:AC:19:C2:E0:08:4E:AB:DA:B2 X509v3 Authority Key Identifier: keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:28:0a:34:92:7f:7b:62:3f:4b:90:ee:b3:a2:4c:6f:d4:0f: 33:74:1a:3d:12:cc:52:06:c4:42:0f:6c:2d:12:f0:fe:eb:98: 1f:15:13:57:4a:ff:a6:f6:38:42:8e:1a:e5:57:bd:94:d1:8a: 8b:25:13:80:d0:63:e5:9e:03:c5:0e:e9:38:e5:8b:05:fa:bb: c6:a8:75:a8:67:d7:06:15:7d:3b:3c:17:0e:d2:06:2c:3f:94: 0c:52:59:ff:ac:8e:c4:8a:ad:d4:89:19:c6:7e:7b:e8:ac:6f: 8b:d7:e7:04:1c:ac:eb:b7:3e:5d:94:f9:40:c7:ec:84:ec:8f: 54:51:ac:b5:10:86:74:2a:2d:19:1d:9c:bc:80:53:69:10:30: 6c:41:0d:08:13:ac:43:0a:de:2a:33:a2:9b:6c:74:65:7e:2a: b2:91:61:29:b5:96:e2:90:09:ca:80:29:0c:90:07:24:31:1f: e7:5d:c9:bd:b6:78:c7:63:87:4c:da:ea:44:e8:c5:3b:6b:18: 9f:73:6f:b4:03:be:88:26:e2:6b:5f:73:1a:f2:a3:d1:a3:f4: 5c:9d:40:3c:3d:f1:e9:e9:7d:7a:91:d6:6a:3d:50:d4:88:0f: b7:c1:9c:b8:77:65:19:eb:ec:04:98:b9:18:cd:82:92:6d:40: c9:04:7a:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgJF57qBvX2NVj4waG8iBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYjQ3NmY2NzdjZDBjMzI5OGQyODExZTYwZjQ4ZTFiMjli M2FmZWYwHhcNMjUxMjIxMjAwMTIwWhcNMjUxMjIyMjAwMTIwWjAzMTEwLwYDVQQD Eyg3YzM3MjhlNGMwODNhZWE1ZGRkYzMyYWMxOWMyZTAwODRlYWJkYWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rWIclE4fsgakapcORw3slGNG49t 7JXv9pz3xBXIGeImoaGX2BZJFkNzUpwGcKyMzxnsE6Q16rbUM7duHyPamVH9hL26 kWx2MHhK1mZNsWN3te1E9zoJzi5zmUSt5vvLVuYPOERKxUDH/ENZoNa34lJHHWFN 2OXS4scvuCwBnkFZr81Gr6gVO+FHa9hjd1YNzBJjVs0zuUMaTT+iobu6nUNDu4Vm /TQCiKWvPEpitzFGtPTeDqjGG7xo688VEy2pF6iSyuvPseFeEVsFvY7H/hCugPYP Alei4uVE7TiQ1IN5/PaOkemVrlD7d4jcnXirxXTqicpmQyVV7AqreRigaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHw3KOTAg66l3dwyrBnC4AhOq9qyMB8GA1UdIwQY MBaAFOq0dvZ3zQwymNKBHmD0jhsps6/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82NTdhOTItNjIyMC00NDI1LTg4OTkt MDdmMTk1MGQ4ODk0LzEvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi82NTdhOTItNjIyMC00NDI1LTg4OTktMDdmMTk1MGQ4ODk0 LzEvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEigKNJJ/ e2I/S5Dus6JMb9QPM3QaPRLMUgbEQg9sLRLw/uuYHxUTV0r/pvY4Qo4a5Ve9lNGK iyUTgNBj5Z4DxQ7pOOWLBfq7xqh1qGfXBhV9OzwXDtIGLD+UDFJZ/6yOxIqt1IkZ xn576Kxvi9fnBBys67c+XZT5QMfshOyPVFGstRCGdCotGR2cvIBTaRAwbEENCBOs QwreKjOim2x0ZX4qspFhKbWW4pAJyoApDJAHJDEf513JvbZ4x2OHTNrqROjFO2sY n3NvtAO+iCbia19zGvKj0aP0XJ1APD3x6el9epHWaj1Q1IgPt8GcuHdlGevsBJi5 GM2Ckm1AyQR6qA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:24:01 2025 by rpki-client