This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft File: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json) Hash identifier: ToWLHHr+9dpo5oyi4NLO1skjycBwLUjztvCJGuaGsRA= Subject key identifier: EB:0A:F1:EF:5A:74:AC:4F:96:5E:2F:7A:14:02:D6:34:22:D0:0F:A2 Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91 Certificate issuer: /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691 Certificate serial: 019AF653E2EB2B7F59F7788B9F3359080D29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft Manifest number: 16EB Signing time: Sun 07 Dec 2025 01:01:23 +0000 Manifest this update: Sun 07 Dec 2025 01:01:23 +0000 Manifest next update: Mon 08 Dec 2025 01:01:23 +0000 Files and hashes: 1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: 5Acr4xhHsy9OC2okM5v5q6BaHkAi1ZpTTLiKda6GRPQ=) 2: rvzjyC9muvr4migx_xtUIzZ2FRM.roa (hash: 2jsltHZ+YtkUSfR/OVprtu2235QmWCtb64qQWKzazWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:e2:eb:2b:7f:59:f7:78:8b:9f:33:59:08:0d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691 Validity Not Before: Dec 7 01:01:23 2025 GMT Not After : Dec 8 01:01:23 2025 GMT Subject: CN=eb0af1ef5a74ac4f965e2f7a1402d63422d00fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e6:4b:5d:5b:0c:ef:90:b6:75:72:3a:af:2b: 49:1a:2b:eb:b9:e2:e5:c6:d4:9b:d3:6a:0f:ec:53: 6d:4f:09:ec:02:94:52:19:76:e0:9d:b8:bd:5b:ad: d9:a0:18:8d:93:fd:5d:5d:de:9c:32:1c:30:3e:42: 8c:52:20:77:3a:5d:da:3f:2e:0d:ce:1d:e5:b4:3a: 37:b6:f5:f5:61:cf:00:89:c8:31:32:e1:08:0a:d9: 7e:bd:9f:a7:ff:7d:50:a1:a2:32:71:e3:e9:17:d9: dc:2f:15:92:93:b3:c9:51:a3:f5:4d:95:bc:7e:e0: 7f:94:65:e9:7d:eb:b0:32:70:35:01:7b:5e:35:c6: 1a:68:99:30:bf:96:16:ba:f2:ea:01:fd:40:03:79: bd:e5:b1:88:6b:4d:8c:a7:38:0c:92:0f:be:b4:76: c1:b8:df:95:3e:97:f6:99:ca:7c:fc:d3:02:f0:1c: 38:c1:10:fd:c4:e3:9c:a5:4d:0c:3f:21:2a:41:a5: 25:6a:c3:75:5a:0d:8d:51:a6:84:54:fd:3e:ae:7c: e7:c6:68:4a:68:7c:74:0c:8b:ed:4b:0d:62:77:55: 60:3b:c5:8b:c0:ef:1c:34:ce:3d:b0:f6:52:75:ae: 10:f6:bb:30:61:88:a4:af:15:ef:a5:8f:35:98:73: ff:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0A:F1:EF:5A:74:AC:4F:96:5E:2F:7A:14:02:D6:34:22:D0:0F:A2 X509v3 Authority Key Identifier: keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:6a:09:40:e2:72:06:c1:fc:48:52:b0:ad:ab:a1:08:0b:e1: c8:15:b3:fe:17:17:22:ed:69:7a:32:1d:ba:01:5a:9a:33:c1: 18:82:40:32:f4:93:db:68:42:d5:84:2c:0f:d5:1c:5c:75:69: 6c:ee:42:b3:85:66:f5:65:4f:52:17:77:e2:86:05:c5:58:70: 6f:6f:38:de:9b:ca:68:49:45:11:0d:af:49:c5:b2:32:ae:20: 78:a5:19:1b:31:1e:72:ee:09:bc:b2:58:72:7c:21:90:62:91: ad:f3:43:be:c9:ae:fc:54:a2:d8:6d:55:78:25:cf:5a:fa:fc: c2:fa:66:d3:4d:af:8c:49:55:50:d3:d3:0c:40:c8:40:99:5e: 6a:6a:a2:4f:d3:44:f8:8a:97:43:c4:ae:11:aa:87:63:0b:5b: 05:27:9b:ea:99:49:bd:27:b3:20:73:46:e0:75:8e:b2:92:ca: 93:2f:0a:fa:68:84:9a:3f:5a:6c:33:de:1c:6a:7c:9e:5d:31: e5:76:97:ee:3b:cf:3c:80:a8:c0:4c:6f:e3:35:45:66:dd:5a: 96:e2:3f:f3:22:cb:72:c7:dc:26:54:35:31:90:00:bb:4c:eb: 82:2c:76:04:f1:6a:ef:92:ab:a2:a6:d8:87:d8:f3:b7:8e:cf: 12:87:01:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U+LrK39Z93iLnzNZCA0pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZWQ2MDJmZDBkNDZkMzhjZGUxZTczMmM2NTJlYTk5NThl OTc2OTEwHhcNMjUxMjA3MDEwMTIzWhcNMjUxMjA4MDEwMTIzWjAzMTEwLwYDVQQD EyhlYjBhZjFlZjVhNzRhYzRmOTY1ZTJmN2ExNDAyZDYzNDIyZDAwZmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseZLXVsM75C2dXI6rytJGivrueLl xtSb02oP7FNtTwnsApRSGXbgnbi9W63ZoBiNk/1dXd6cMhwwPkKMUiB3Ol3aPy4N zh3ltDo3tvX1Yc8AicgxMuEICtl+vZ+n/31QoaIycePpF9ncLxWSk7PJUaP1TZW8 fuB/lGXpfeuwMnA1AXteNcYaaJkwv5YWuvLqAf1AA3m95bGIa02MpzgMkg++tHbB uN+VPpf2mcp8/NMC8Bw4wRD9xOOcpU0MPyEqQaUlasN1Wg2NUaaEVP0+rnznxmhK aHx0DIvtSw1id1VgO8WLwO8cNM49sPZSda4Q9rswYYikrxXvpY81mHP/1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsK8e9adKxPll4vehQC1jQi0A+iMB8GA1UdIwQY MBaAFOjtYC/Q1G04zeHnMsZS6plY6XaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk8xZ0w5RFViVGpONGVjeXhsTHFtVmpwZHBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iNjQwOWItMTYzOC00YzdhLTgxZjIt OTRmOGZiMzAwOWYyLzEvNk8xZ0w5RFViVGpONGVjeXhsTHFtVmpwZHBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9iNjQwOWItMTYzOC00YzdhLTgxZjItOTRmOGZiMzAwOWYy LzEvNk8xZ0w5RFViVGpONGVjeXhsTHFtVmpwZHBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWoJQOJy BsH8SFKwrauhCAvhyBWz/hcXIu1pejIdugFamjPBGIJAMvST22hC1YQsD9UcXHVp bO5Cs4Vm9WVPUhd34oYFxVhwb2843pvKaElFEQ2vScWyMq4geKUZGzEecu4JvLJY cnwhkGKRrfNDvsmu/FSi2G1VeCXPWvr8wvpm002vjElVUNPTDEDIQJleamqiT9NE +IqXQ8SuEaqHYwtbBSeb6plJvSezIHNG4HWOspLKky8K+miEmj9abDPeHGp8nl0x 5XaX7jvPPICowExv4zVFZt1aluI/8yLLcsfcJlQ1MZAAu0zrgix2BPFq75KroqbY h9jzt47PEocBLw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:09:52 2025 by rpki-client