This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft File: 6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft (raw, json) Hash identifier: Dhi5Ddbyg1DBx61BwQeVQkU0big5UD5bz5fqnnuu3ys= Subject key identifier: 6F:EA:2A:E5:4B:EC:99:AE:1B:1B:DB:E4:57:F7:19:20:46:22:B0:86 Authority key identifier: E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA Certificate issuer: /CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea Certificate serial: 019B35696B625EAD0B9DF7A2D441D8C7C730 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft Manifest number: 1047 Signing time: Fri 19 Dec 2025 07:00:59 +0000 Manifest this update: Fri 19 Dec 2025 07:00:59 +0000 Manifest next update: Sat 20 Dec 2025 07:00:59 +0000 Files and hashes: 1: 0IRtpKWzk8HJphT_ihghX52o_pQ.roa (hash: hQ8UcdaXM+7M8W7AcOjTNRV8pYkTm524u6CkYGZP1Ds=) 2: 6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl (hash: 0krbtg7j2UG2WbgcUHb/aTZ6xYO7aT15plPGxko9P5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:6b:62:5e:ad:0b:9d:f7:a2:d4:41:d8:c7:c7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea Validity Not Before: Dec 19 07:00:59 2025 GMT Not After : Dec 20 07:00:59 2025 GMT Subject: CN=6fea2ae54bec99ae1b1bdbe457f719204622b086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:35:0d:5b:a5:85:8a:ab:66:9d:4c:1f:0c:c9: f2:0d:25:9c:e6:2c:06:9e:74:7d:3f:60:23:0c:2e: 40:3e:0f:3d:b6:03:93:af:08:f9:f9:9d:e8:95:c7: 37:8d:6a:9e:e2:55:06:cb:49:08:70:2a:a8:f6:95: 9a:ac:a3:a8:f8:7a:67:f5:d0:c8:4a:1f:20:8e:00: 2d:ba:89:41:88:e7:09:99:ac:e8:a8:33:83:71:4f: 53:4d:79:23:10:45:63:a7:ca:b7:67:8a:f7:a9:ff: 06:18:63:97:30:5b:e8:e7:70:81:6b:4f:24:c1:b6: 09:b6:b9:e8:76:06:68:17:43:36:e2:d3:bf:f8:77: 70:fa:8a:80:a2:08:29:00:e3:27:aa:67:53:3e:59: bb:df:e5:0b:f1:d7:c6:cb:f7:45:2f:26:95:12:0e: ad:a1:e4:af:f5:e2:e4:81:0e:48:4e:1c:d9:dc:e8: 2e:a5:d8:5b:ac:42:fa:44:ca:9b:b0:49:d4:ab:d6: 32:73:4f:b0:4c:2e:f7:80:91:0f:c6:93:d7:55:3e: 71:27:0f:36:c2:2e:82:a2:ab:33:f7:41:59:7f:b1: fe:10:a3:0a:30:f3:33:9a:58:fb:94:58:7e:19:1a: 8a:ae:73:d5:91:a9:74:90:b8:23:14:48:b5:8a:e9: 00:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EA:2A:E5:4B:EC:99:AE:1B:1B:DB:E4:57:F7:19:20:46:22:B0:86 X509v3 Authority Key Identifier: keyid:E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:3a:7d:50:4c:45:a2:d5:20:03:28:f6:aa:99:b7:d8:a8:13: 89:0e:f8:02:82:4f:71:d0:09:87:1c:0f:6b:6a:a9:84:b9:db: 06:25:74:22:bc:c0:e6:da:9d:84:a6:ac:12:e7:46:cb:0a:6b: 4a:39:84:d6:85:f4:43:c7:66:51:3c:99:1e:df:85:37:6e:87: 69:b1:8c:e5:9f:41:db:85:39:2e:9f:f3:69:e8:c6:9e:4f:59: 63:61:6d:58:12:42:e9:a7:f6:3e:18:c2:c6:a9:cc:fa:08:6f: e3:2d:b4:52:1a:0e:f8:1a:fe:08:8e:91:ea:5c:ae:43:c5:21: 6d:e8:8f:04:72:7c:f6:a9:93:3b:ff:57:7d:13:88:4f:29:08: 7e:81:88:c0:79:6a:4e:dc:f0:aa:c1:df:cd:55:54:ea:67:a9: 9b:13:12:2b:3d:2d:c0:62:e2:db:af:20:8a:2d:c7:2c:3d:04: 1c:3c:b8:43:42:ab:da:45:83:c2:29:40:42:08:12:a4:e6:42: be:4d:89:df:94:96:98:7d:34:2e:9d:08:c1:98:cf:68:54:78: 40:03:d7:e2:66:9f:94:ba:c0:1e:22:a6:bf:da:82:be:f9:b1: c2:e6:15:97:21:f6:73:1f:b8:22:b1:22:1e:cb:3b:d1:99:30: 5f:77:63:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aWtiXq0Lnfei1EHYx8cwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ODI5M2FjMTY3MGNmMmUzYTRiM2RhNmM3NzcxZjhiMWU4 NGNmZWEwHhcNMjUxMjE5MDcwMDU5WhcNMjUxMjIwMDcwMDU5WjAzMTEwLwYDVQQD Eyg2ZmVhMmFlNTRiZWM5OWFlMWIxYmRiZTQ1N2Y3MTkyMDQ2MjJiMDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTUNW6WFiqtmnUwfDMnyDSWc5iwG nnR9P2AjDC5APg89tgOTrwj5+Z3olcc3jWqe4lUGy0kIcCqo9pWarKOo+Hpn9dDI Sh8gjgAtuolBiOcJmazoqDODcU9TTXkjEEVjp8q3Z4r3qf8GGGOXMFvo53CBa08k wbYJtrnodgZoF0M24tO/+Hdw+oqAoggpAOMnqmdTPlm73+UL8dfGy/dFLyaVEg6t oeSv9eLkgQ5IThzZ3OgupdhbrEL6RMqbsEnUq9Yyc0+wTC73gJEPxpPXVT5xJw82 wi6Coqsz90FZf7H+EKMKMPMzmlj7lFh+GRqKrnPVkal0kLgjFEi1iukADwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/qKuVL7JmuGxvb5Ff3GSBGIrCGMB8GA1UdIwQY MBaAFOiCk6wWcM8uOks9psd3H4sehM/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNklLVHJCWnd6eTQ2U3oybXgzY2ZpeDZFei1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mYjZlMDctYmJjMS00NDdlLWIzZmEt NTExMGY2YjU3OWJmLzEvNklLVHJCWnd6eTQ2U3oybXgzY2ZpeDZFei1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mYjZlMDctYmJjMS00NDdlLWIzZmEtNTExMGY2YjU3OWJm LzEvNklLVHJCWnd6eTQ2U3oybXgzY2ZpeDZFei1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDp9UExF otUgAyj2qpm32KgTiQ74AoJPcdAJhxwPa2qphLnbBiV0IrzA5tqdhKasEudGywpr SjmE1oX0Q8dmUTyZHt+FN26HabGM5Z9B24U5Lp/zaejGnk9ZY2FtWBJC6af2PhjC xqnM+ghv4y20UhoO+Br+CI6R6lyuQ8UhbeiPBHJ89qmTO/9XfROITykIfoGIwHlq TtzwqsHfzVVU6mepmxMSKz0twGLi268gii3HLD0EHDy4Q0Kr2kWDwilAQggSpOZC vk2J35SWmH00Lp0IwZjPaFR4QAPX4maflLrAHiKmv9qCvvmxwuYVlyH2cx+4IrEi Hss70ZkwX3djew== -----END CERTIFICATE-----Generated at Fri Dec 19 08:31:51 2025 by rpki-client