This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft File: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft (raw, json) Hash identifier: 6R12UxdQ2VEIucfL6kR7Mg6CCFVUn5TamjMec+5pB2c= Subject key identifier: 6E:CD:0D:1C:B4:AD:B2:31:5E:72:9C:76:02:F0:6B:4C:30:0F:0F:4A Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84 Certificate issuer: /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84 Certificate serial: 019B318D1794A4871EB42DD7AFA42B727948 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft Manifest number: 07A9 Signing time: Thu 18 Dec 2025 13:01:28 +0000 Manifest this update: Thu 18 Dec 2025 13:01:28 +0000 Manifest next update: Fri 19 Dec 2025 13:01:28 +0000 Files and hashes: 1: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl (hash: 0qErhb98pyEGhhKabUF8opbvBtJNXeIAEu3sLOs1388=) 2: ObpPyrV6nY3VTY_MJsA9gywrfek.roa (hash: 07jwwjcg4kll9zheibcZqtF5uLcKvWgF1fQLeGthDhs=) 3: pWlJ1Zyagt-EAsBQLPfXMgXtTKU.roa (hash: /iFO5Q2CWXoYbsdsqiARGyGI0bzDMxUuOB7fdJEKKMw=) 4: rMVByUHiw-CJF8yDvID9Hv00TsU.roa (hash: W4FOiMzNAns/15Ks3q0b2X4cmgwlITeZp0cOOWz/tew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8d:17:94:a4:87:1e:b4:2d:d7:af:a4:2b:72:79:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84 Validity Not Before: Dec 18 13:01:28 2025 GMT Not After : Dec 19 13:01:28 2025 GMT Subject: CN=6ecd0d1cb4adb2315e729c7602f06b4c300f0f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c7:ff:9e:ca:ae:27:6b:3f:06:96:02:5b:8e: 69:b3:64:78:2c:0c:8f:38:06:72:13:fc:41:7f:66: 76:07:69:f7:36:f0:5d:53:75:2e:46:f1:3a:7c:4f: dd:1c:29:26:e4:9f:e3:91:30:1c:46:cb:5d:a9:f7: 28:20:a4:79:58:99:e1:16:09:32:f8:b0:53:66:23: f9:3f:7d:dd:aa:f8:7c:1d:5d:6b:37:c0:93:6e:91: 6b:fc:a7:fa:2f:34:fd:dd:30:0b:13:0f:28:1e:02: 56:15:3f:22:5e:c8:28:8d:cd:79:ad:b0:2d:dc:1a: 52:30:b9:5c:75:af:8b:c7:a3:06:73:80:d8:15:f2: a0:ce:c8:aa:8e:6c:e2:4d:71:ba:05:92:bd:0b:75: 3d:02:88:54:7e:96:ba:a5:b8:0d:79:5f:5f:5a:9a: 86:99:cc:81:60:61:e4:60:3b:6a:63:48:30:7f:36: 3b:e0:5e:7a:60:d4:9c:05:41:f1:26:a2:f0:78:6c: c2:e6:e6:90:e1:ad:d1:62:43:e1:22:dc:ff:f4:3e: bc:bc:d2:08:39:db:16:b1:fa:16:03:74:e8:0d:24: 0b:7e:92:06:29:07:f7:e4:c2:b8:e6:df:c1:98:2b: df:84:51:b1:e4:38:73:52:64:31:20:e2:24:6b:20: b4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CD:0D:1C:B4:AD:B2:31:5E:72:9C:76:02:F0:6B:4C:30:0F:0F:4A X509v3 Authority Key Identifier: keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:af:1c:08:e6:80:90:20:ab:f9:0a:ba:bc:82:5b:dd:26:a0: 56:6c:1c:d9:37:ab:c8:d6:11:bd:d8:d9:3e:19:e5:69:47:da: f9:0c:29:2f:08:39:35:ef:0a:d9:16:cb:be:24:d2:d4:72:3d: 00:2e:f8:cd:1d:42:cb:7b:3c:31:7d:6e:ba:4d:73:3e:2b:a9: 07:e7:e0:9e:00:3c:4e:3c:a7:a4:d8:cb:25:ed:50:f2:38:ad: f4:f1:3b:78:e7:ba:b7:ba:d7:b8:c4:3a:0b:b2:dd:d8:f6:c3: 88:39:a6:08:10:67:63:fe:8a:4a:23:c8:7d:5f:d3:28:2e:bd: f1:fe:05:cb:c7:e3:a3:df:60:75:d9:11:35:b6:a0:60:02:02: 6a:a1:dc:7c:7e:f8:96:35:e9:6f:a3:2b:cb:5b:af:9e:04:ce: 07:2d:0e:e9:88:fc:00:70:d0:d3:10:73:17:29:18:04:68:18: f3:67:22:f7:ab:93:56:0e:e9:9c:f3:ad:13:81:af:c1:2f:c8: 86:ad:dc:1f:56:45:97:74:da:48:95:ea:1b:64:9f:91:93:9f: ea:c8:e6:1e:0c:ba:92:70:1c:8c:ae:4a:1f:bc:ff:5b:20:15: 24:a8:57:96:41:7e:3f:36:98:b2:8e:36:2b:58:31:4d:1b:8c: fb:66:86:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjReUpIcetC3Xr6QrcnlIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYTljN2JkZjJiODJlMzQzZWM0MjY2N2Q2ZWVkZTRiODA2 MTBjODQwHhcNMjUxMjE4MTMwMTI4WhcNMjUxMjE5MTMwMTI4WjAzMTEwLwYDVQQD Eyg2ZWNkMGQxY2I0YWRiMjMxNWU3MjljNzYwMmYwNmI0YzMwMGYwZjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMf/nsquJ2s/BpYCW45ps2R4LAyP OAZyE/xBf2Z2B2n3NvBdU3UuRvE6fE/dHCkm5J/jkTAcRstdqfcoIKR5WJnhFgky +LBTZiP5P33dqvh8HV1rN8CTbpFr/Kf6LzT93TALEw8oHgJWFT8iXsgojc15rbAt 3BpSMLlcda+Lx6MGc4DYFfKgzsiqjmziTXG6BZK9C3U9AohUfpa6pbgNeV9fWpqG mcyBYGHkYDtqY0gwfzY74F56YNScBUHxJqLweGzC5uaQ4a3RYkPhItz/9D68vNII OdsWsfoWA3ToDSQLfpIGKQf35MK45t/BmCvfhFGx5DhzUmQxIOIkayC0+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7NDRy0rbIxXnKcdgLwa0wwDw9KMB8GA1UdIwQY MBaAFDOpx73yuC40PsQmZ9bu3kuAYQyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTZuSHZmSzRMalEteENabjF1N2VTNEJoRElRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8yZjY1OTUtZDNkMS00M2VhLWE0YTMt YWIzYjdjM2U4MjE1LzEvTTZuSHZmSzRMalEteENabjF1N2VTNEJoRElRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8yZjY1OTUtZDNkMS00M2VhLWE0YTMtYWIzYjdjM2U4MjE1 LzEvTTZuSHZmSzRMalEteENabjF1N2VTNEJoRElRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARK8cCOaA kCCr+Qq6vIJb3SagVmwc2TeryNYRvdjZPhnlaUfa+QwpLwg5Ne8K2RbLviTS1HI9 AC74zR1Cy3s8MX1uuk1zPiupB+fgngA8TjynpNjLJe1Q8jit9PE7eOe6t7rXuMQ6 C7Ld2PbDiDmmCBBnY/6KSiPIfV/TKC698f4Fy8fjo99gddkRNbagYAICaqHcfH74 ljXpb6Mry1uvngTOBy0O6Yj8AHDQ0xBzFykYBGgY82ci96uTVg7pnPOtE4GvwS/I hq3cH1ZFl3TaSJXqG2SfkZOf6sjmHgy6knAcjK5KH7z/WyAVJKhXlkF+PzaYso42 K1gxTRuM+2aGqQ== -----END CERTIFICATE-----Generated at Thu Dec 18 16:17:56 2025 by rpki-client