This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft File: 6x3AD9LB4-qvzszBtLofj9CkqYw.mft (raw, json) Hash identifier: 6qY22T1451ItBaiIdd1u8rh8/go55/UdiLhJdxteA0Y= Subject key identifier: 85:B7:0C:92:89:0C:97:E6:6A:69:DA:49:2D:31:9D:17:C5:9C:82:F9 Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C Certificate issuer: /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c Certificate serial: 019B3D22E9BA09E017D440C6BD4F7B258ED5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 19:00:56 +0000 Manifest this update: Sat 20 Dec 2025 19:00:56 +0000 Manifest next update: Sun 21 Dec 2025 19:00:56 +0000 Files and hashes: 1: 6x3AD9LB4-qvzszBtLofj9CkqYw.crl (hash: mhlZHYMoE3N6oIxjI/h7Q8lezrE4r0FwoyezGtI0QVQ=) 2: Om5FJ2saBdYhhGOS3f3FISumZqg.roa (hash: Fu3JRt/JCmRX1P55XNbPmEdky96U0142N0aVN3A+m0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:e9:ba:09:e0:17:d4:40:c6:bd:4f:7b:25:8e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c Validity Not Before: Dec 20 19:00:56 2025 GMT Not After : Dec 21 19:00:56 2025 GMT Subject: CN=85b70c92890c97e66a69da492d319d17c59c82f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:04:06:9a:5c:47:43:64:04:36:1e:16:52:82: 3a:b2:c0:c8:a4:e4:e3:ee:4a:14:80:06:bf:73:cb: a1:e5:b2:47:8b:7a:b9:93:e5:bb:84:25:22:b8:26: 0b:95:dc:53:14:c8:e5:b9:4c:76:a1:a2:ca:e9:01: fb:cf:5a:30:ee:76:d5:af:38:f9:16:73:04:5f:26: b9:b2:95:41:ed:1c:e1:bc:32:89:06:7b:88:83:80: 07:cc:a3:09:16:fb:dd:86:d0:85:f3:b7:e2:19:10: fe:83:ff:d4:41:fd:36:3b:10:17:87:2e:61:dd:01: 5f:3d:76:de:b0:25:c2:12:bf:eb:1b:cb:3d:80:4f: 80:ee:b4:7e:b1:f8:fc:04:05:37:85:c3:e9:ab:a9: a1:e9:c6:a3:ac:d7:86:d0:c7:7c:9e:59:e2:ab:cf: b5:d3:7f:08:75:b1:ed:cc:71:4b:01:d6:24:32:7b: 81:d4:f4:f6:25:ef:7e:35:44:18:9e:07:0b:1a:54: 51:48:c2:75:94:4e:36:4d:0f:21:80:7c:e4:55:42: f9:19:1a:27:d3:9f:9a:39:e5:19:83:3a:f6:c5:2e: 89:5a:70:21:3c:0e:d6:0f:8c:0d:23:a7:54:37:97: b6:a3:67:f6:4c:11:18:36:2e:91:14:20:5e:ac:a0: e1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B7:0C:92:89:0C:97:E6:6A:69:DA:49:2D:31:9D:17:C5:9C:82:F9 X509v3 Authority Key Identifier: keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a7:bc:fd:15:e9:5d:66:05:08:31:82:bb:4c:72:54:c7:03: 6b:1f:0d:c9:19:72:00:74:4d:92:2d:b6:37:05:a7:67:58:04: 9e:79:fd:1b:8e:95:1a:d1:5e:94:98:1c:6b:a0:60:4a:cd:81: 66:8e:4c:f0:c0:fa:58:55:66:5d:bc:3f:68:f0:6d:ac:7e:32: 89:6f:f5:74:f9:a9:ed:58:88:e6:bd:bd:7a:2b:c0:9d:44:e4: 44:26:71:01:49:0e:7f:ad:d5:dc:99:22:1b:4d:40:24:f5:26: b0:4c:85:e9:bd:e7:2c:18:14:26:c6:8e:90:94:8f:d7:75:69: 22:3a:98:cc:ca:4d:41:7f:35:c8:a1:e6:2e:a8:8e:32:ea:68: 42:9f:cc:4b:5f:46:de:52:e2:d6:23:d3:37:5a:da:99:63:14: e8:24:b9:69:2a:b5:ff:f6:68:2a:0b:36:ba:c4:c9:1d:df:27: 2e:fd:88:e7:4c:3a:8f:47:d8:48:aa:7c:e9:d2:47:87:bd:ed: b0:0a:72:06:66:b2:b4:c2:d0:2e:17:e5:c4:6e:0b:ff:e8:2d: 16:f7:87:8e:f3:19:07:fb:59:a2:09:63:1d:7a:08:d5:b8:cd: 17:8d:f0:4f:0e:c4:45:b4:a3:4d:29:50:0b:48:6b:23:d0:a5: f0:86:00:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Ium6CeAX1EDGvU97JY7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMWRjMDBmZDJjMWUzZWFhZmNlY2NjMWI0YmExZjhmZDBh NGE5OGMwHhcNMjUxMjIwMTkwMDU2WhcNMjUxMjIxMTkwMDU2WjAzMTEwLwYDVQQD Eyg4NWI3MGM5Mjg5MGM5N2U2NmE2OWRhNDkyZDMxOWQxN2M1OWM4MmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQQGmlxHQ2QENh4WUoI6ssDIpOTj 7koUgAa/c8uh5bJHi3q5k+W7hCUiuCYLldxTFMjluUx2oaLK6QH7z1ow7nbVrzj5 FnMEXya5spVB7RzhvDKJBnuIg4AHzKMJFvvdhtCF87fiGRD+g//UQf02OxAXhy5h 3QFfPXbesCXCEr/rG8s9gE+A7rR+sfj8BAU3hcPpq6mh6cajrNeG0Md8nlniq8+1 038IdbHtzHFLAdYkMnuB1PT2Je9+NUQYngcLGlRRSMJ1lE42TQ8hgHzkVUL5GRon 05+aOeUZgzr2xS6JWnAhPA7WD4wNI6dUN5e2o2f2TBEYNi6RFCBerKDh2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIW3DJKJDJfmamnaSS0xnRfFnIL5MB8GA1UdIwQY MBaAFOsdwA/SwePqr87MwbS6H4/QpKmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81YWI1ODUtYjI5Yi00ZTcxLTgwMzgt OTBlMjFkZjAxZTkxLzEvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS81YWI1ODUtYjI5Yi00ZTcxLTgwMzgtOTBlMjFkZjAxZTkx LzEvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6e8/RXp XWYFCDGCu0xyVMcDax8NyRlyAHRNki22NwWnZ1gEnnn9G46VGtFelJgca6BgSs2B Zo5M8MD6WFVmXbw/aPBtrH4yiW/1dPmp7ViI5r29eivAnUTkRCZxAUkOf63V3Jki G01AJPUmsEyF6b3nLBgUJsaOkJSP13VpIjqYzMpNQX81yKHmLqiOMupoQp/MS19G 3lLi1iPTN1ramWMU6CS5aSq1//ZoKgs2usTJHd8nLv2I50w6j0fYSKp86dJHh73t sApyBmaytMLQLhflxG4L/+gtFveHjvMZB/tZogljHXoI1bjNF43wTw7ERbSjTSlQ C0hrI9Cl8IYA+g== -----END CERTIFICATE-----Generated at Sun Dec 21 02:25:18 2025 by rpki-client