This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft File: 6-MkxP_wckDusfAOY-Y198uQL5g.mft (raw, json) Hash identifier: r4KR0mSYRIbdcOCri6S4oDNRM865tNYXAD4LJOct1ns= Subject key identifier: 86:33:65:70:F4:2D:28:3F:DE:F8:3E:06:E2:3E:A8:4F:5D:4E:41:26 Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98 Certificate issuer: /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98 Certificate serial: 019B48F050A25F41FB9A7A0C0D933C6B17EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft Manifest number: 0EC5 Signing time: Tue 23 Dec 2025 02:01:07 +0000 Manifest this update: Tue 23 Dec 2025 02:01:07 +0000 Manifest next update: Wed 24 Dec 2025 02:01:07 +0000 Files and hashes: 1: 6-MkxP_wckDusfAOY-Y198uQL5g.crl (hash: zVwhU1rgVIsJtK3F5vjZ+UCgQVc0t8EWuQmlg673iDw=) 2: DFaeiuG21JQh7LgP1wreIhkJwBQ.roa (hash: wxSUZZvHSXnKRZev5eL/xbvmkg1KjmEbGMojvHEIEo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:50:a2:5f:41:fb:9a:7a:0c:0d:93:3c:6b:17:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98 Validity Not Before: Dec 23 02:01:07 2025 GMT Not After : Dec 24 02:01:07 2025 GMT Subject: CN=86336570f42d283fdef83e06e23ea84f5d4e4126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f9:71:5e:08:bb:b8:62:4d:d4:db:2b:37:05: 6e:f6:09:02:8f:18:4d:a6:78:63:28:50:bf:22:77: 28:73:2e:87:d5:95:5e:55:23:cf:34:d5:68:48:fc: a9:c9:ec:ed:83:8e:c6:ce:ed:6e:55:14:2d:12:84: 81:e4:f6:90:59:c8:ed:43:a6:fb:35:b5:b3:04:c0: 89:c4:01:b7:f4:01:b9:4d:16:b3:07:a0:0a:33:67: 59:6e:8c:8f:e7:03:f5:b6:3d:43:c9:c3:b2:37:36: b1:62:7e:e7:e2:77:3e:c9:63:b8:09:d0:14:32:f7: d2:ff:72:2b:d5:42:84:ed:c8:c8:6d:72:96:e7:51: 4d:72:b3:8e:e9:18:40:ca:3f:8f:08:e0:90:4e:6d: 44:33:c1:4f:b9:c6:4b:f7:9c:ad:88:e7:78:69:d5: 55:2c:a2:82:6e:6b:67:a7:ad:a0:db:e8:49:5e:51: ee:eb:15:60:32:fe:0f:68:d2:82:17:00:b8:5a:70: 74:75:84:81:8a:94:7d:ad:31:c2:fe:c9:4e:ee:25: 4f:0f:53:ec:fa:b0:bf:37:b3:f3:63:78:ca:fe:30: f2:84:2a:f4:20:4f:45:19:3f:e3:5f:e6:49:63:84: be:15:20:a9:31:cb:f9:e4:96:8c:c2:9b:ec:59:4d: 6c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:33:65:70:F4:2D:28:3F:DE:F8:3E:06:E2:3E:A8:4F:5D:4E:41:26 X509v3 Authority Key Identifier: keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:05:31:0e:60:0e:01:4f:db:be:73:6e:2a:98:15:87:2c:10: 41:89:31:17:bb:ab:49:bb:f7:57:2f:04:49:72:87:a2:de:d8: 8c:79:62:c9:76:d3:f7:2f:bb:a1:54:c7:ca:b4:a4:f3:a1:d8: 17:6c:47:3a:dc:1a:54:19:99:f9:ef:ec:27:c8:01:40:3d:75: b6:80:60:22:c3:50:29:1e:c2:ce:4f:35:a8:62:4f:75:bc:35: 52:bc:d1:c3:31:7c:0f:da:be:6b:31:e7:6b:45:11:12:7c:ae: f9:9a:7b:fb:d0:fc:05:f5:f0:90:cd:68:15:05:57:b6:01:4b: c2:38:89:1f:6a:42:58:33:31:6a:68:07:95:0b:e8:78:4a:f1: 3f:f6:22:5d:c4:88:6e:b7:1d:79:f8:3a:d0:bf:fc:7e:66:4e: 31:65:99:55:db:9e:2c:91:80:43:cc:e7:ec:ca:08:f6:c2:e5: fa:d1:72:84:0a:37:78:a2:74:e1:a4:67:4c:aa:f0:b2:73:d2: 79:ec:2c:e4:1f:5b:aa:d6:a9:e9:e1:cf:e9:b8:34:f4:fd:dc: c5:7b:76:0b:ee:ae:27:67:86:3e:a9:a6:3d:12:8c:48:60:1a: 85:09:78:3a:e0:d9:bc:12:82:10:1b:90:f3:14:64:a7:2d:8b: d6:2f:7d:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8FCiX0H7mnoMDZM8axfqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZTMyNGM0ZmZmMDcyNDBlZWIxZjAwZTYzZTYzNWY3Y2I5 MDJmOTgwHhcNMjUxMjIzMDIwMTA3WhcNMjUxMjI0MDIwMTA3WjAzMTEwLwYDVQQD Eyg4NjMzNjU3MGY0MmQyODNmZGVmODNlMDZlMjNlYTg0ZjVkNGU0MTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsflxXgi7uGJN1NsrNwVu9gkCjxhN pnhjKFC/Incocy6H1ZVeVSPPNNVoSPypyeztg47Gzu1uVRQtEoSB5PaQWcjtQ6b7 NbWzBMCJxAG39AG5TRazB6AKM2dZboyP5wP1tj1DycOyNzaxYn7n4nc+yWO4CdAU MvfS/3Ir1UKE7cjIbXKW51FNcrOO6RhAyj+PCOCQTm1EM8FPucZL95ytiOd4adVV LKKCbmtnp62g2+hJXlHu6xVgMv4PaNKCFwC4WnB0dYSBipR9rTHC/slO7iVPD1Ps +rC/N7PzY3jK/jDyhCr0IE9FGT/jX+ZJY4S+FSCpMcv55JaMwpvsWU1sJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYzZXD0LSg/3vg+BuI+qE9dTkEmMB8GA1UdIwQY MBaAFOvjJMT/8HJA7rHwDmPmNffLkC+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lYWZlZmUtNzg3ZC00YjJkLWI1MzAt OGFmMDVhZTMxOTJjLzEvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lYWZlZmUtNzg3ZC00YjJkLWI1MzAtOGFmMDVhZTMxOTJj LzEvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0gUxDmAO AU/bvnNuKpgVhywQQYkxF7urSbv3Vy8ESXKHot7YjHliyXbT9y+7oVTHyrSk86HY F2xHOtwaVBmZ+e/sJ8gBQD11toBgIsNQKR7Czk81qGJPdbw1UrzRwzF8D9q+azHn a0UREnyu+Zp7+9D8BfXwkM1oFQVXtgFLwjiJH2pCWDMxamgHlQvoeErxP/YiXcSI brcdefg60L/8fmZOMWWZVdueLJGAQ8zn7MoI9sLl+tFyhAo3eKJ04aRnTKrwsnPS eews5B9bqtap6eHP6bg09P3cxXt2C+6uJ2eGPqmmPRKMSGAahQl4OuDZvBKCEBuQ 8xRkpy2L1i99yQ== -----END CERTIFICATE-----Generated at Tue Dec 23 06:37:56 2025 by rpki-client