This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft File: 6bEyD7wk1vQ2bLZPz17S17G2vfc.mft (raw, json) Hash identifier: 1qmlyDdWBp7wYDYVlbvpKtUFrXaG+lWYtAqoqIF03bM= Subject key identifier: 7A:DD:4E:0C:F9:9A:E6:DD:E7:B4:A6:4C:7D:8F:29:EC:C6:FD:A6:D6 Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7 Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7 Certificate serial: 019AF1646799F0079922C80BEB44E0C98F0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft Manifest number: 17CF Signing time: Sat 06 Dec 2025 02:01:20 +0000 Manifest this update: Sat 06 Dec 2025 02:01:20 +0000 Manifest next update: Sun 07 Dec 2025 02:01:20 +0000 Files and hashes: 1: 1-LSqW5hWhZ_ns3sg9lrsjl1Eu3U.roa (hash: MBho8bjmHwJRrjsA/doj43g562fHvB1HibUzPwveASs=) 2: 6bEyD7wk1vQ2bLZPz17S17G2vfc.crl (hash: i3kUn5ZfYNdPPnJb4of+LDLNgzx9Qw94tOh399q+qFk=) 3: TE5fERJgHgtYxUJy4wePwz5mU_w.roa (hash: OE1lv0k4N/61BtYex08ZD3aXtpKmdMMTc1Zc1Tz9A/I=) 4: _bY7rYNZRg-QNDBCAnYTCw6GXYo.roa (hash: 0NwXyZNn6uDgNg9vQ76uqxzPkJoLbzwrWdJoP5HynXs=) 5: aTgUhMPQnjx2xjYwnwJ2gz-I7rs.roa (hash: B9eu7QuJTduRZceQo5fFEV1A6fHWCByz1rCSN6+BTS8=) 6: icpbYI2uxA1b82qTrMRbv5qsWVs.roa (hash: zWuEcTKWewUNm8kg2GFxVZw5vFrT/oZVdmxi/tEQES4=) 7: qyau8X0_p_R5G5UjJ9R5hhByR60.roa (hash: hN7rF1+0mFFIPxT3mneLl4qNERLNSsd/HuIXg9Ud9Ys=) 8: rpwes63u5l-fzh9QtF8dj62e05Y.roa (hash: vKBSmYXSCIselOzDajcpQZs25AiBZGmbgun9F0ytzDA=) 9: zXLZgOznbeWyf_N1JnlIcyffF6M.roa (hash: GpFbBkssI7iKvY9iZ7bM0NgFLkd9zFizZTUXDM83c5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:67:99:f0:07:99:22:c8:0b:eb:44:e0:c9:8f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7 Validity Not Before: Dec 6 02:01:20 2025 GMT Not After : Dec 7 02:01:20 2025 GMT Subject: CN=7add4e0cf99ae6dde7b4a64c7d8f29ecc6fda6d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:2b:fc:81:dc:e1:a1:37:6e:44:91:f8:89: ae:40:4b:8e:0b:d0:c2:8b:ec:60:19:04:4e:df:bf: 71:bb:80:8e:7e:52:10:0d:21:12:dd:12:ad:d2:87: 0e:27:d7:ac:da:10:55:79:b6:68:0f:ee:2d:a6:db: 90:06:14:a6:73:90:95:39:bb:e6:84:e6:c5:35:83: 97:74:ce:c6:75:5c:ba:40:54:61:34:de:c5:5c:ed: fe:49:07:3e:4d:b7:f5:8a:20:70:c4:c1:ee:07:98: b6:7a:30:db:e7:47:53:f0:9a:d5:40:34:82:50:ac: f2:70:7e:88:56:98:3d:58:06:b8:a0:47:8d:b3:25: 3c:31:60:2b:a9:34:56:ba:5a:ad:0d:09:d5:1a:fb: 4d:63:be:a5:ff:a5:9b:41:1a:f7:d8:33:e7:a5:c1: be:94:a7:24:86:6b:8e:f3:91:4f:e4:0b:53:cb:6f: 0d:83:c4:5d:91:d1:2c:51:a0:cd:33:56:e5:93:7e: 8b:13:de:aa:a0:b1:bb:f7:0f:fc:01:5e:45:50:2e: ce:2c:11:f8:28:d0:d4:e7:aa:76:61:a4:c3:5f:99: 16:7a:42:6b:6b:2d:85:35:79:88:81:a8:45:e9:7c: 69:68:d1:f4:a8:e0:ad:0e:ac:3b:bf:80:b8:cd:1b: b1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DD:4E:0C:F9:9A:E6:DD:E7:B4:A6:4C:7D:8F:29:EC:C6:FD:A6:D6 X509v3 Authority Key Identifier: keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e1:e6:d3:22:db:fd:1a:b9:1c:f5:a8:a7:66:2b:0f:45:8d: 86:8f:07:ac:a6:6c:33:16:79:98:75:cd:71:f7:da:f7:3d:09: 51:da:75:78:f3:6d:5e:ed:3e:c3:7e:ed:b8:5e:e1:07:dd:b7: c4:bf:02:81:00:22:62:23:0f:35:74:d0:6f:98:d6:05:f4:3e: db:c8:c9:c7:f5:40:74:6e:02:66:fb:b5:68:01:e4:b3:07:d9: 09:16:3c:26:34:ce:c6:86:57:41:b0:e1:3c:e3:95:b4:da:25: e1:38:f7:6b:0b:66:05:e2:67:8a:6f:34:7d:a9:88:e2:b0:29: 73:f4:14:fa:42:a8:73:a1:ff:d2:f8:1d:26:97:2c:7d:ef:31: d8:97:b6:37:ef:58:a9:1b:90:bf:75:1d:f4:83:4d:b2:1c:e7: 5e:f4:20:88:57:94:56:95:35:ea:18:a4:95:ca:42:12:c5:28: 66:9b:d0:59:af:7f:f1:59:1d:f5:2b:cf:d7:75:d4:c9:46:59: 1d:41:b8:cc:a2:d4:3e:19:1c:3d:c6:14:bf:11:03:c2:c6:8e: ed:6b:3c:3a:e2:5c:82:3d:55:52:f7:5c:50:91:32:16:23:ce: 12:7a:8d:a4:50:5e:f7:53:e0:26:31:2a:63:5d:11:7e:d5:d0: af:ca:d6:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGeZ8AeZIsgL60TgyY8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YjEzMjBmYmMyNGQ2ZjQzNjZjYjY0ZmNmNWVkMmQ3YjFi NmJkZjcwHhcNMjUxMjA2MDIwMTIwWhcNMjUxMjA3MDIwMTIwWjAzMTEwLwYDVQQD Eyg3YWRkNGUwY2Y5OWFlNmRkZTdiNGE2NGM3ZDhmMjllY2M2ZmRhNmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/Qr/IHc4aE3bkSR+ImuQEuOC9DC i+xgGQRO379xu4COflIQDSES3RKt0ocOJ9es2hBVebZoD+4tptuQBhSmc5CVObvm hObFNYOXdM7GdVy6QFRhNN7FXO3+SQc+Tbf1iiBwxMHuB5i2ejDb50dT8JrVQDSC UKzycH6IVpg9WAa4oEeNsyU8MWArqTRWulqtDQnVGvtNY76l/6WbQRr32DPnpcG+ lKckhmuO85FP5AtTy28Ng8RdkdEsUaDNM1blk36LE96qoLG79w/8AV5FUC7OLBH4 KNDU56p2YaTDX5kWekJray2FNXmIgahF6XxpaNH0qOCtDqw7v4C4zRuxrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHrdTgz5mubd57SmTH2PKezG/abWMB8GA1UdIwQY MBaAFOmxMg+8JNb0Nmy2T89e0textr33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUt ZDNlMjgwMGJkNjQwLzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUtZDNlMjgwMGJkNjQw LzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjeHm0yLb /Rq5HPWop2YrD0WNho8HrKZsMxZ5mHXNcffa9z0JUdp1ePNtXu0+w37tuF7hB923 xL8CgQAiYiMPNXTQb5jWBfQ+28jJx/VAdG4CZvu1aAHkswfZCRY8JjTOxoZXQbDh POOVtNol4Tj3awtmBeJnim80famI4rApc/QU+kKoc6H/0vgdJpcsfe8x2Je2N+9Y qRuQv3Ud9INNshznXvQgiFeUVpU16hiklcpCEsUoZpvQWa9/8Vkd9SvP13XUyUZZ HUG4zKLUPhkcPcYUvxEDwsaO7Ws8OuJcgj1VUvdcUJEyFiPOEnqNpFBe91PgJjEq Y10RftXQr8rWcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:31 2025 by rpki-client