This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft File: 6Ed60hy3iRQzE8QLGfjMACPeiKY.mft (raw, json) Hash identifier: OykR2+IiOZLfKMcP2QvfMXv3fY6jV7IilskaETqpwVE= Subject key identifier: 8B:44:6C:04:A4:B9:40:68:3E:FC:6E:FF:25:64:2F:D2:8C:3F:22:CA Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6 Certificate issuer: /CN=e8477ad21cb789143313c40b19f8cc0023de88a6 Certificate serial: 019AF23F7A96968418F9CFE3B0957303C90A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft Manifest number: 0227 Signing time: Sat 06 Dec 2025 06:00:37 +0000 Manifest this update: Sat 06 Dec 2025 06:00:37 +0000 Manifest next update: Sun 07 Dec 2025 06:00:37 +0000 Files and hashes: 1: 2M47-6eKALJ6FmiVAowRa7gLSUI.roa (hash: sTE5YWztn/a2MX2OSX/0Yz9OgI3CBWwdi/QI1zYZYUk=) 2: 6Ed60hy3iRQzE8QLGfjMACPeiKY.crl (hash: dv3qkT2RdMgWnYHAjddpepkiGgW+WRBsM0L9m0nnIP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7a:96:96:84:18:f9:cf:e3:b0:95:73:03:c9:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6 Validity Not Before: Dec 6 06:00:37 2025 GMT Not After : Dec 7 06:00:37 2025 GMT Subject: CN=8b446c04a4b940683efc6eff25642fd28c3f22ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:62:43:f4:b4:15:e8:9d:95:07:ba:52:68:43: 7c:dd:78:02:29:fa:97:c1:c8:6a:0e:ad:a1:fc:b4: 07:f5:22:9f:9c:a7:92:6f:3d:71:dc:34:82:e1:1a: a7:31:eb:01:e1:88:b5:4d:7c:da:e2:f1:35:48:71: 51:e0:35:af:aa:25:b7:79:02:bf:f8:8c:c2:3f:7e: 98:6c:57:5a:d7:ac:e6:09:cd:73:45:75:77:e6:08: 77:81:1e:68:de:14:f5:e4:33:50:23:6a:6b:0b:9f: c8:1b:ca:7b:a8:76:37:51:a0:83:97:0f:d7:c2:f0: 71:26:9d:95:33:02:79:51:d5:c0:64:22:b7:54:61: b4:28:61:ad:73:0a:28:80:30:3a:14:94:85:f6:4e: e7:2a:f7:cd:3c:eb:50:22:0f:78:f5:70:4c:8e:9d: 27:57:0d:7e:55:36:08:f4:83:00:47:c2:aa:45:cf: e6:0f:03:6a:50:45:62:11:5c:63:80:d0:88:55:27: c9:29:45:95:d8:ac:ff:0b:32:c0:cf:bc:fc:df:fc: 84:e8:16:74:3c:fe:ca:aa:a9:6e:48:b0:6c:1a:e6: 0a:f2:0b:bb:26:9c:dc:6a:bf:6c:cf:ea:ae:d4:1e: 6a:30:9b:13:87:00:d7:a1:d5:01:40:46:a0:e8:6b: 48:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:44:6C:04:A4:B9:40:68:3E:FC:6E:FF:25:64:2F:D2:8C:3F:22:CA X509v3 Authority Key Identifier: keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:34:d0:c0:fa:8d:ae:b7:80:da:1e:a5:ef:bc:40:17:35:53: 22:90:0c:2c:72:9e:49:fb:1b:af:62:6a:e1:95:2a:91:1d:53: 69:a3:47:19:ca:05:71:b0:06:18:76:74:f5:8d:84:f6:92:9c: 95:f1:18:d8:b2:24:1f:e9:d7:eb:db:25:9f:59:9c:b7:43:41: e4:d2:7f:e9:c6:6a:88:19:f8:0f:f7:ef:f7:4c:0e:cf:85:ea: 56:64:91:95:f5:28:49:f8:45:2d:81:c1:30:81:70:8d:91:0c: ce:0c:e7:2f:07:4f:ca:b0:1f:90:e8:d0:c3:ef:25:b1:6f:a0: fa:f9:c1:ae:28:f7:f2:24:80:2a:e4:75:67:26:19:47:ae:72: 57:b1:6d:7a:6a:62:67:c0:3c:a9:70:fb:3b:d3:6f:d7:44:4b: 63:8a:b5:ae:ca:d4:ac:23:32:d1:2f:4a:3b:bb:16:bc:24:aa: 1b:fc:b6:9c:3f:dc:0b:72:18:d1:44:f2:b3:f6:ba:a0:fc:46: 38:fa:47:d1:2a:8a:b6:e1:9c:09:d3:5b:bf:92:1d:de:41:7e: 7a:71:78:aa:70:29:96:04:a5:3d:14:4d:d8:d2:1b:be:03:85: 25:63:4f:1b:72:7c:ec:ec:59:f0:60:3d:e3:20:4d:2a:91:4a: eb:1f:65:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3qWloQY+c/jsJVzA8kKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDc3YWQyMWNiNzg5MTQzMzEzYzQwYjE5ZjhjYzAwMjNk ZTg4YTYwHhcNMjUxMjA2MDYwMDM3WhcNMjUxMjA3MDYwMDM3WjAzMTEwLwYDVQQD Eyg4YjQ0NmMwNGE0Yjk0MDY4M2VmYzZlZmYyNTY0MmZkMjhjM2YyMmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmJD9LQV6J2VB7pSaEN83XgCKfqX wchqDq2h/LQH9SKfnKeSbz1x3DSC4RqnMesB4Yi1TXza4vE1SHFR4DWvqiW3eQK/ +IzCP36YbFda16zmCc1zRXV35gh3gR5o3hT15DNQI2prC5/IG8p7qHY3UaCDlw/X wvBxJp2VMwJ5UdXAZCK3VGG0KGGtcwoogDA6FJSF9k7nKvfNPOtQIg949XBMjp0n Vw1+VTYI9IMAR8KqRc/mDwNqUEViEVxjgNCIVSfJKUWV2Kz/CzLAz7z83/yE6BZ0 PP7KqqluSLBsGuYK8gu7Jpzcar9sz+qu1B5qMJsThwDXodUBQEag6GtI4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItEbASkuUBoPvxu/yVkL9KMPyLKMB8GA1UdIwQY MBaAFOhHetIct4kUMxPECxn4zAAj3oimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAt NjA0NTg0ODk1OTI1LzEvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAtNjA0NTg0ODk1OTI1 LzEvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDTQwPqN rreA2h6l77xAFzVTIpAMLHKeSfsbr2Jq4ZUqkR1TaaNHGcoFcbAGGHZ09Y2E9pKc lfEY2LIkH+nX69sln1mct0NB5NJ/6cZqiBn4D/fv90wOz4XqVmSRlfUoSfhFLYHB MIFwjZEMzgznLwdPyrAfkOjQw+8lsW+g+vnBrij38iSAKuR1ZyYZR65yV7Ftempi Z8A8qXD7O9Nv10RLY4q1rsrUrCMy0S9KO7sWvCSqG/y2nD/cC3IY0UTys/a6oPxG OPpH0SqKtuGcCdNbv5Id3kF+enF4qnAplgSlPRRN2NIbvgOFJWNPG3J87OxZ8GA9 4yBNKpFK6x9lgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:11 2025 by rpki-client