This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft File: b6rlVhP8iVhve9beDtygl7hhWmo.mft (raw, json) Hash identifier: fF666ew2Pzt/8jcF9cBB8CgnVcqDC69NdyGawakn5x0= Subject key identifier: 83:5F:0D:8C:FA:0F:73:6C:33:B7:CA:7F:2E:7F:DD:43:09:56:CA:C3 Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A Certificate issuer: /CN=6faae55613fc89586f7bd6de0edca097b8615a6a Certificate serial: 019B33E8EAD01149AB5D4A385E7009C315B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft Manifest number: 0AEE Signing time: Fri 19 Dec 2025 00:01:00 +0000 Manifest this update: Fri 19 Dec 2025 00:01:00 +0000 Manifest next update: Sat 20 Dec 2025 00:01:00 +0000 Files and hashes: 1: aOtm6U59mShACrUP4z50hrZCIxk.roa (hash: 8fQIVCesiryqBUIZoQ97a4j4i55DYNAa5i2DNRlMQ5M=) 2: b6rlVhP8iVhve9beDtygl7hhWmo.crl (hash: KMKIOMZXI8s1n5Bxl13t+b2RzT57L0IwmnRPlYCHPnA=) 3: y4zgX7Lvz7a-J26BXsPiVoxb_IM.roa (hash: NtJpJ4/+lfRrM4AtabmrS2+ljg+xewyFLniZOgVUMdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:ea:d0:11:49:ab:5d:4a:38:5e:70:09:c3:15:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a Validity Not Before: Dec 19 00:01:00 2025 GMT Not After : Dec 20 00:01:00 2025 GMT Subject: CN=835f0d8cfa0f736c33b7ca7f2e7fdd430956cac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:47:92:7c:11:d1:3e:04:25:d8:c4:0c:2f:98: 2f:1a:83:ee:bb:cd:2b:b6:dc:e1:53:d3:20:fa:d9: 26:8e:1c:89:87:cd:ab:23:a3:ee:52:30:56:f8:b1: 26:89:74:cd:f6:83:73:7c:d8:79:f3:5b:66:f9:aa: a1:fd:90:10:f4:5b:2d:6b:09:e2:31:78:7f:f5:c6: bd:fe:11:10:54:10:e0:fb:a1:30:41:a2:ae:15:29: 3b:52:09:9c:12:74:42:67:fb:52:3b:3c:9d:e0:6f: e2:ce:fd:3e:29:37:79:60:cb:fd:be:e5:45:02:58: ad:b6:7a:91:e1:45:d7:2b:78:70:3c:30:0f:33:90: f2:93:78:ed:0b:ed:08:e1:80:70:82:f9:dd:26:71: a6:f4:54:51:13:9a:f7:13:87:c4:7d:c2:ec:58:86: 5d:9d:45:28:a6:a7:34:55:bf:22:cd:74:46:7e:b0: b4:72:b5:62:29:a0:ed:a5:d0:57:be:91:1c:52:ae: 5b:ef:9d:f9:ef:6f:66:24:e5:a1:2b:7e:7a:c5:7f: 30:aa:ad:40:19:5b:82:54:55:93:d2:8d:c5:25:25: c6:dc:06:9e:3a:6a:22:e9:0e:b6:6a:88:99:86:49: b2:ff:98:1f:9c:7f:0c:8f:86:06:25:dd:d6:9b:11: 94:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5F:0D:8C:FA:0F:73:6C:33:B7:CA:7F:2E:7F:DD:43:09:56:CA:C3 X509v3 Authority Key Identifier: keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:74:ac:aa:35:4e:b8:d0:f1:0a:cf:5e:df:d7:c4:de:bc:20: 7e:94:8b:fc:b0:30:a8:e8:a7:73:f3:1d:1a:c4:2b:fa:a8:00: cf:a8:93:dd:0b:79:94:75:17:e6:ba:af:64:37:98:bd:50:17: 23:51:5a:bb:6c:82:db:6e:3e:48:fa:8c:d7:a2:98:6b:71:18: 84:a7:da:03:b7:af:f7:88:aa:ce:27:bc:33:8e:37:f7:bb:6e: 39:48:cf:36:b6:10:7e:fb:b3:32:4e:9a:4e:91:42:17:3f:27: 37:e1:3a:b3:8d:e6:49:6a:21:54:2a:0b:bb:bb:62:aa:5d:4e: f2:59:7d:e5:49:47:98:ab:51:2f:eb:73:1b:87:f5:08:20:99: 28:73:28:8b:77:86:fc:5d:32:34:68:ff:ce:34:fc:c7:da:9f: db:fe:5d:c6:0d:75:1a:2e:71:2c:3f:e4:af:72:f8:3e:7d:15: 12:5a:01:77:ac:35:09:40:41:95:12:e0:92:b0:96:58:2e:a7: d3:ec:99:78:8d:34:4b:1d:b6:b1:c8:0d:42:3a:57:03:1a:d2: 58:75:a7:40:49:b2:6d:53:ec:62:67:03:9d:04:e9:16:03:37: 7f:56:31:a1:91:af:57:e1:c0:ab:39:3d:eb:5b:bc:ab:bc:79: 5a:18:6e:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6OrQEUmrXUo4XnAJwxW0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYWFlNTU2MTNmYzg5NTg2ZjdiZDZkZTBlZGNhMDk3Yjg2 MTVhNmEwHhcNMjUxMjE5MDAwMTAwWhcNMjUxMjIwMDAwMTAwWjAzMTEwLwYDVQQD Eyg4MzVmMGQ4Y2ZhMGY3MzZjMzNiN2NhN2YyZTdmZGQ0MzA5NTZjYWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EeSfBHRPgQl2MQML5gvGoPuu80r ttzhU9Mg+tkmjhyJh82rI6PuUjBW+LEmiXTN9oNzfNh581tm+aqh/ZAQ9Fstawni MXh/9ca9/hEQVBDg+6EwQaKuFSk7UgmcEnRCZ/tSOzyd4G/izv0+KTd5YMv9vuVF AlittnqR4UXXK3hwPDAPM5Dyk3jtC+0I4YBwgvndJnGm9FRRE5r3E4fEfcLsWIZd nUUopqc0Vb8izXRGfrC0crViKaDtpdBXvpEcUq5b7535729mJOWhK356xX8wqq1A GVuCVFWT0o3FJSXG3AaeOmoi6Q62aoiZhkmy/5gfnH8Mj4YGJd3WmxGUNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINfDYz6D3NsM7fKfy5/3UMJVsrDMB8GA1UdIwQY MBaAFG+q5VYT/IlYb3vW3g7coJe4YVpqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZybFZoUDhpVmh2ZTliZUR0eWdsN2hoV21vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81Nzg4OWEtNTBkZi00YWJmLTgxZTUt MWIxMjY0MWY0OTNiLzEvYjZybFZoUDhpVmh2ZTliZUR0eWdsN2hoV21vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi81Nzg4OWEtNTBkZi00YWJmLTgxZTUtMWIxMjY0MWY0OTNi LzEvYjZybFZoUDhpVmh2ZTliZUR0eWdsN2hoV21vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXSsqjVO uNDxCs9e39fE3rwgfpSL/LAwqOinc/MdGsQr+qgAz6iT3Qt5lHUX5rqvZDeYvVAX I1Fau2yC224+SPqM16KYa3EYhKfaA7ev94iqzie8M44397tuOUjPNrYQfvuzMk6a TpFCFz8nN+E6s43mSWohVCoLu7tiql1O8ll95UlHmKtRL+tzG4f1CCCZKHMoi3eG /F0yNGj/zjT8x9qf2/5dxg11Gi5xLD/kr3L4Pn0VEloBd6w1CUBBlRLgkrCWWC6n 0+yZeI00Sx22scgNQjpXAxrSWHWnQEmybVPsYmcDnQTpFgM3f1YxoZGvV+HAqzk9 61u8q7x5WhhuUQ== -----END CERTIFICATE-----Generated at Fri Dec 19 03:21:20 2025 by rpki-client