This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft File: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft (raw, json) Hash identifier: XR20Mo214mffxia3vMwHoS/4GY3FBALXvE5160K2Qfc= Subject key identifier: D9:48:20:9F:C1:65:A3:81:AF:FB:A0:70:93:61:13:0B:07:0E:4F:1E Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC Certificate issuer: /CN=e97656f22015589ff7cc66056867f605d81449bc Certificate serial: 019B3946114933E9438CC38E007038B12C84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 01:00:51 +0000 Manifest this update: Sat 20 Dec 2025 01:00:51 +0000 Manifest next update: Sun 21 Dec 2025 01:00:51 +0000 Files and hashes: 1: 46IkgipDtz-gl4yWGt7SVQgrM2Y.roa (hash: xd1tjAJC9B4oABZm0yY50qZfUkL+C2aunMu/YZc9css=) 2: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl (hash: Ydt2Y6/sAdKD+tpMSg2hCT1fUtHPaJzVFDk5pSkP90Y=) 3: TJ9h-OeDoNwLJy-bpo2ooNFoYYY.roa (hash: uSX/ck6PKaNlZa7GifLSaPti7K35d8cXLGS+lgOUDKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:11:49:33:e9:43:8c:c3:8e:00:70:38:b1:2c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc Validity Not Before: Dec 20 01:00:51 2025 GMT Not After : Dec 21 01:00:51 2025 GMT Subject: CN=d948209fc165a381affba0709361130b070e4f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d0:f2:e7:86:cf:93:8b:35:0a:cf:52:a5:6f: da:0b:a5:39:98:6d:b5:98:cd:5a:3b:93:fe:c3:69: b8:52:1c:97:5d:18:62:fd:bd:25:b9:62:9e:40:24: 8a:24:c9:31:46:4c:a5:98:b8:b6:3d:4f:bd:80:cf: a9:34:12:68:e5:eb:0e:4f:51:9e:db:62:21:ea:19: 2b:4a:f9:35:7f:d6:22:54:21:dd:2e:db:b4:32:af: bf:4c:c0:99:0f:89:e6:90:5e:40:59:f6:84:56:8c: 45:53:9b:2c:e3:58:d6:5d:e8:99:e7:41:f3:01:fc: 76:da:2a:e0:64:65:1d:ad:80:49:dd:25:83:f0:6a: 6f:71:06:5d:d3:47:21:f5:0e:14:d0:77:c4:9d:95: 43:97:69:e0:fb:b6:ca:96:c2:20:40:c7:1c:44:28: be:7c:e2:1b:28:70:48:74:8f:ac:69:0d:99:a7:88: 49:da:06:ca:9f:b9:d5:73:50:f7:2c:12:00:7a:4a: 65:05:b2:c2:f3:77:51:1b:21:39:68:b4:cb:8d:12: ed:32:69:ff:9d:de:60:ab:de:bd:92:66:e8:6c:28: 3e:ce:75:ea:0d:62:2d:e9:62:ca:76:5b:4f:88:22: 89:5a:07:20:3f:ec:36:78:ad:b2:32:00:74:8d:8d: 6b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:48:20:9F:C1:65:A3:81:AF:FB:A0:70:93:61:13:0B:07:0E:4F:1E X509v3 Authority Key Identifier: keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9d:aa:8e:41:f4:ad:6c:95:78:8e:b9:4f:4b:b6:2d:72:3a: 1d:5d:aa:c9:61:43:ad:58:c6:9d:09:c8:e2:37:4d:a0:e2:0b: 0e:71:2a:df:c3:f4:e8:54:fd:bd:1d:a3:97:22:ca:10:0f:03: d6:ab:c9:57:93:71:49:b1:2f:45:39:09:1d:de:91:bc:73:b6: 17:fb:26:78:6e:b9:64:2d:db:f1:93:0d:79:ac:7f:99:39:ed: 48:9c:dd:bc:2d:1e:92:a6:6a:97:16:ba:8a:48:49:92:e8:ea: c8:c0:16:fe:65:24:25:12:2a:33:f7:da:10:83:1b:ee:8e:bf: f2:50:83:3c:b0:fa:39:41:66:f8:b3:e4:38:61:cf:11:f1:56: 56:a9:86:82:3e:1d:e6:6b:8e:19:fc:a6:d3:78:6d:37:87:96: 2e:2a:2c:34:25:54:cc:d9:ba:d2:55:f9:fd:ce:1e:82:d5:e4: 51:b9:13:ac:60:ff:49:91:11:d0:b2:d6:52:3d:ca:eb:df:a8: 09:a3:cc:b4:25:b7:d2:80:89:3e:44:31:10:2f:0c:3b:07:80: e3:f7:36:62:af:ba:13:4b:d4:11:9c:24:3b:72:f0:7e:25:76: ad:ec:5b:89:44:6a:d4:4f:f7:51:6c:59:9a:dc:86:55:8b:ff: 07:40:e5:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RhFJM+lDjMOOAHA4sSyEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzY1NmYyMjAxNTU4OWZmN2NjNjYwNTY4NjdmNjA1ZDgx NDQ5YmMwHhcNMjUxMjIwMDEwMDUxWhcNMjUxMjIxMDEwMDUxWjAzMTEwLwYDVQQD EyhkOTQ4MjA5ZmMxNjVhMzgxYWZmYmEwNzA5MzYxMTMwYjA3MGU0ZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutDy54bPk4s1Cs9SpW/aC6U5mG21 mM1aO5P+w2m4UhyXXRhi/b0luWKeQCSKJMkxRkylmLi2PU+9gM+pNBJo5esOT1Ge 22Ih6hkrSvk1f9YiVCHdLtu0Mq+/TMCZD4nmkF5AWfaEVoxFU5ss41jWXeiZ50Hz Afx22irgZGUdrYBJ3SWD8GpvcQZd00ch9Q4U0HfEnZVDl2ng+7bKlsIgQMccRCi+ fOIbKHBIdI+saQ2Zp4hJ2gbKn7nVc1D3LBIAekplBbLC83dRGyE5aLTLjRLtMmn/ nd5gq969kmbobCg+znXqDWIt6WLKdltPiCKJWgcgP+w2eK2yMgB0jY1rWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlIIJ/BZaOBr/ugcJNhEwsHDk8eMB8GA1UdIwQY MBaAFOl2VvIgFVif98xmBWhn9gXYFEm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84ZmEwNTEtNDM1Ny00ZDMxLTg1Mzct NjgxMmJhYmM1YThiLzEvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84ZmEwNTEtNDM1Ny00ZDMxLTg1MzctNjgxMmJhYmM1YThi LzEvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjp2qjkH0 rWyVeI65T0u2LXI6HV2qyWFDrVjGnQnI4jdNoOILDnEq38P06FT9vR2jlyLKEA8D 1qvJV5NxSbEvRTkJHd6RvHO2F/smeG65ZC3b8ZMNeax/mTntSJzdvC0ekqZqlxa6 ikhJkujqyMAW/mUkJRIqM/faEIMb7o6/8lCDPLD6OUFm+LPkOGHPEfFWVqmGgj4d 5muOGfym03htN4eWLiosNCVUzNm60lX5/c4egtXkUbkTrGD/SZER0LLWUj3K69+o CaPMtCW30oCJPkQxEC8MOweA4/c2Yq+6E0vUEZwkO3LwfiV2rexbiURq1E/3UWxZ mtyGVYv/B0DlPg== -----END CERTIFICATE-----Generated at Sat Dec 20 03:18:08 2025 by rpki-client