This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft File: 6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json) Hash identifier: kG+sBMKRvtoD3kbQLS06rCNbMythu/yxLdvCrBZ4/MI= Subject key identifier: 1C:EC:05:D4:5E:CB:21:2B:40:C9:37:4E:E8:8B:4B:BB:14:04:1A:1D Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92 Certificate issuer: /CN=eb153da3c24ce1236e20c46861635dc8efb56a92 Certificate serial: 019B2107234719E6AC357D46878645062F81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft Manifest number: 0E60 Signing time: Mon 15 Dec 2025 08:01:14 +0000 Manifest this update: Mon 15 Dec 2025 08:01:14 +0000 Manifest next update: Tue 16 Dec 2025 08:01:14 +0000 Files and hashes: 1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: UjLgaF7O/r7F8io8dObORh1PsCgG8eFGO5JPKkjCJeQ=) 2: ipmJ5LQmK4ddp63lgFVAIAYopkE.roa (hash: YVYb+vZufn7OkrWKbNACiC73zlWWGlO/lMGiNA3e8zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:07:23:47:19:e6:ac:35:7d:46:87:86:45:06:2f:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92 Validity Not Before: Dec 15 08:01:14 2025 GMT Not After : Dec 16 08:01:14 2025 GMT Subject: CN=1cec05d45ecb212b40c9374ee88b4bbb14041a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:63:2d:08:38:06:a2:92:b4:8e:5b:8a:1d:82: 98:3b:b5:e2:af:51:49:80:67:ca:51:02:94:ae:1a: c9:02:67:28:52:a1:71:25:6e:e9:05:50:8f:30:e2: 92:28:a0:88:c8:5e:da:cb:8c:d8:d6:5e:69:75:3b: 84:24:ee:2e:1e:6f:ba:e8:6f:5d:98:d2:0a:c6:da: 05:44:f2:53:af:df:e8:26:79:16:f2:03:2a:bc:44: 9c:4c:38:df:4a:3e:99:90:25:9d:5e:08:d5:42:b1: ad:df:ed:71:01:30:e4:b0:80:0c:68:89:27:31:eb: 93:89:36:c8:af:a5:3d:3f:22:f0:c8:91:5d:fe:33: 22:aa:b4:0f:12:7c:7a:8f:7c:d8:29:7e:e9:57:a6: 93:0e:28:14:0c:b0:c9:4b:a6:d4:50:d9:f2:99:dc: 57:14:b2:d7:53:46:8c:a3:fe:9b:b9:81:0f:b0:6e: 5d:3d:de:89:64:fc:55:51:cd:01:b8:43:b2:e9:a7: be:cf:38:f6:d7:fe:08:b9:cf:be:2f:64:63:c5:d3: 3c:21:bd:69:a3:c7:9b:21:fa:bc:4f:58:bf:40:21: 5e:dd:34:1b:4f:13:37:ad:87:50:d6:2b:82:72:95: a8:46:df:d3:59:06:f4:dc:9f:5f:3c:65:4c:e7:db: 61:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EC:05:D4:5E:CB:21:2B:40:C9:37:4E:E8:8B:4B:BB:14:04:1A:1D X509v3 Authority Key Identifier: keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:0b:c3:1a:62:08:0e:18:ab:dc:a5:14:30:06:03:31:7b:3c: c5:ca:7c:53:1e:4b:e4:3d:dc:1c:4e:30:10:98:a3:d5:d9:75: 5f:83:fc:5f:07:59:df:24:0b:12:83:34:bb:8f:f7:f0:32:1d: 15:fa:1a:de:3a:97:4f:46:b4:cf:15:63:e3:32:6b:6c:dc:5f: dc:94:57:40:13:4c:91:ae:de:c6:aa:fc:e9:53:e5:ae:58:6f: 98:e1:c1:5c:d3:96:59:09:1d:98:dc:ac:c7:1d:24:69:34:65: 44:01:08:f5:10:6c:86:8f:fe:95:91:de:b7:fe:5b:11:46:52: e4:88:06:06:ba:f6:c4:ec:cf:f6:76:b2:6c:51:9e:3a:2d:d9: b6:8b:a5:22:e3:6f:a0:3a:dc:3b:ff:67:41:57:a1:72:7b:cb: 52:c9:ac:66:a7:55:f4:ce:b7:9e:2f:f3:da:8c:f5:27:08:3e: 36:f1:a5:c8:ab:24:d3:ca:0f:ac:a4:d9:1d:08:90:03:f9:7f: f7:a7:34:6d:d8:56:27:d1:ef:9e:81:35:75:1d:66:c4:e0:12: 27:e2:89:ef:82:51:a1:a0:a3:03:0c:d6:55:59:52:b3:25:63: 62:66:fc:cc:63:20:3f:28:5a:a6:66:f1:db:d5:08:f3:4f:37: a8:3f:c3:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshByNHGeasNX1Gh4ZFBi+BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMTUzZGEzYzI0Y2UxMjM2ZTIwYzQ2ODYxNjM1ZGM4ZWZi NTZhOTIwHhcNMjUxMjE1MDgwMTE0WhcNMjUxMjE2MDgwMTE0WjAzMTEwLwYDVQQD EygxY2VjMDVkNDVlY2IyMTJiNDBjOTM3NGVlODhiNGJiYjE0MDQxYTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2MtCDgGopK0jluKHYKYO7Xir1FJ gGfKUQKUrhrJAmcoUqFxJW7pBVCPMOKSKKCIyF7ay4zY1l5pdTuEJO4uHm+66G9d mNIKxtoFRPJTr9/oJnkW8gMqvEScTDjfSj6ZkCWdXgjVQrGt3+1xATDksIAMaIkn MeuTiTbIr6U9PyLwyJFd/jMiqrQPEnx6j3zYKX7pV6aTDigUDLDJS6bUUNnymdxX FLLXU0aMo/6buYEPsG5dPd6JZPxVUc0BuEOy6ae+zzj21/4Iuc++L2RjxdM8Ib1p o8ebIfq8T1i/QCFe3TQbTxM3rYdQ1iuCcpWoRt/TWQb03J9fPGVM59thXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzsBdReyyErQMk3TuiLS7sUBBodMB8GA1UdIwQY MBaAFOsVPaPCTOEjbiDEaGFjXcjvtWqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80YmIwNjctYzM2NS00NTJlLWE5M2Ut MzlkYTFhZThiNzMxLzEvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80YmIwNjctYzM2NS00NTJlLWE5M2UtMzlkYTFhZThiNzMx LzEvNnhVOW84Sk00U051SU1Sb1lXTmR5Ty0xYXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAvDGmII Dhir3KUUMAYDMXs8xcp8Ux5L5D3cHE4wEJij1dl1X4P8XwdZ3yQLEoM0u4/38DId Ffoa3jqXT0a0zxVj4zJrbNxf3JRXQBNMka7exqr86VPlrlhvmOHBXNOWWQkdmNys xx0kaTRlRAEI9RBsho/+lZHet/5bEUZS5IgGBrr2xOzP9naybFGeOi3ZtoulIuNv oDrcO/9nQVehcnvLUsmsZqdV9M63ni/z2oz1Jwg+NvGlyKsk08oPrKTZHQiQA/l/ 96c0bdhWJ9HvnoE1dR1mxOASJ+KJ74JRoaCjAwzWVVlSsyVjYmb8zGMgPyhapmbx 29UI8083qD/DFg== -----END CERTIFICATE-----Generated at Mon Dec 15 14:41:21 2025 by rpki-client