This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft File: B6kIPgEhBVotScWTBfQ6g93l2bc.mft (raw, json) Hash identifier: OG/0nDywMqcZnSskGpKrRKGWB/URJO3FB4e5Oh9qVd0= Subject key identifier: 6B:CE:5E:65:B2:DF:65:33:5D:26:50:EC:4E:66:DB:15:79:4A:60:51 Authority key identifier: 07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7 Certificate issuer: /CN=07a9083e0121055a2d49c59305f43a83dde5d9b7 Certificate serial: 019B59760020FAE03265A1F44D69077B207E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 07:01:03 +0000 Manifest this update: Fri 26 Dec 2025 07:01:03 +0000 Manifest next update: Sat 27 Dec 2025 07:01:03 +0000 Files and hashes: 1: B6kIPgEhBVotScWTBfQ6g93l2bc.crl (hash: oLhhBnc/KkqE8g5w6+z/kddz+TJ/2T/69n6R0VIbbbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:00:20:fa:e0:32:65:a1:f4:4d:69:07:7b:20:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07a9083e0121055a2d49c59305f43a83dde5d9b7 Validity Not Before: Dec 26 07:01:03 2025 GMT Not After : Dec 27 07:01:03 2025 GMT Subject: CN=6bce5e65b2df65335d2650ec4e66db15794a6051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:7b:23:75:42:69:a4:83:00:c4:18:f3:87: ac:fe:10:0d:d1:c3:a8:65:d9:95:c2:fd:69:99:83: 8a:0f:2a:51:05:70:ce:b2:c6:7f:3c:93:d0:d6:32: d0:84:d6:9e:b4:80:4f:13:5b:cc:a7:4f:a0:58:fe: 8c:db:95:5d:87:f2:c4:ea:a3:d0:26:db:8c:17:1b: 7c:ea:d4:10:80:d8:90:3f:bf:b4:c4:2f:ed:8b:bf: e8:a8:6c:d7:9d:d0:e8:b9:5c:d9:8d:43:e5:a6:6f: fc:ee:5c:c1:d9:bc:10:10:96:05:af:a5:95:5e:68: 7f:ad:17:b2:42:68:63:e7:62:74:f6:e4:b6:c2:d0: 8d:13:63:36:f2:67:12:53:94:d2:85:96:bc:32:a1: 71:3b:ef:8e:64:bc:9f:34:af:1f:1e:37:df:67:ec: 5d:44:e9:00:9f:51:70:16:d9:1f:5f:56:8e:f2:b9: 27:99:57:50:24:0a:f9:a7:22:a7:8d:ca:12:20:08: 58:be:1a:7e:ef:f0:98:e1:ee:da:0e:64:14:2f:e3: 33:de:3f:68:44:38:1a:0b:de:6f:0a:39:f9:ca:5a: 4f:7e:9d:53:11:4c:59:a3:79:b2:61:b5:f8:70:38: da:f5:1d:80:c0:e4:4d:ab:a2:fe:00:72:4b:ae:fa: 11:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CE:5E:65:B2:DF:65:33:5D:26:50:EC:4E:66:DB:15:79:4A:60:51 X509v3 Authority Key Identifier: keyid:07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e7:35:2e:4e:ac:2a:42:17:8c:63:25:c8:73:f5:ed:cd:be: 76:1d:3f:52:40:06:97:d5:10:fb:e8:47:46:7e:d2:71:23:4c: 56:3b:0d:f1:7b:2a:78:ed:c2:66:2c:ba:f6:3a:98:42:7e:f0: 20:c6:0c:12:e2:1b:ca:19:ae:37:c0:97:f9:16:36:74:0e:9e: f8:55:fa:5a:5b:6e:31:03:cf:23:db:04:89:1d:bf:36:31:ef: 4e:8c:a2:07:6c:79:99:98:9c:51:09:46:00:e7:12:38:d2:1a: 8d:4c:46:80:5d:28:c8:1d:c7:80:48:c4:de:6c:29:ea:bc:24: c2:e1:40:f2:53:eb:34:b2:b2:d7:01:ea:98:d6:fe:fe:6a:56: 86:cd:45:d6:f0:a7:fb:86:9c:36:52:e6:c3:7e:14:9d:0b:00: 4a:f2:20:e0:ca:b9:c0:8c:13:b9:97:38:0d:25:c7:de:6b:ad: d2:bf:af:61:3b:f7:8d:eb:ae:2f:b8:16:95:27:39:72:4a:4d: 0e:41:d3:36:2c:36:02:df:09:07:bb:18:ac:b9:4b:12:2a:14: 00:1d:39:4b:c7:2c:90:a8:45:83:ce:7b:d8:55:f1:2c:d1:04: f0:ab:ff:66:9e:3b:94:9b:84:fa:66:52:e8:f9:ee:c9:67:5a: a8:ae:af:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdgAg+uAyZaH0TWkHeyB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YTkwODNlMDEyMTA1NWEyZDQ5YzU5MzA1ZjQzYTgzZGRl NWQ5YjcwHhcNMjUxMjI2MDcwMTAzWhcNMjUxMjI3MDcwMTAzWjAzMTEwLwYDVQQD Eyg2YmNlNWU2NWIyZGY2NTMzNWQyNjUwZWM0ZTY2ZGIxNTc5NGE2MDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ57I3VCaaSDAMQY84es/hAN0cOo ZdmVwv1pmYOKDypRBXDOssZ/PJPQ1jLQhNaetIBPE1vMp0+gWP6M25Vdh/LE6qPQ JtuMFxt86tQQgNiQP7+0xC/ti7/oqGzXndDouVzZjUPlpm/87lzB2bwQEJYFr6WV Xmh/rReyQmhj52J09uS2wtCNE2M28mcSU5TShZa8MqFxO++OZLyfNK8fHjffZ+xd ROkAn1FwFtkfX1aO8rknmVdQJAr5pyKnjcoSIAhYvhp+7/CY4e7aDmQUL+Mz3j9o RDgaC95vCjn5ylpPfp1TEUxZo3myYbX4cDja9R2AwORNq6L+AHJLrvoReQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvOXmWy32UzXSZQ7E5m2xV5SmBRMB8GA1UdIwQY MBaAFAepCD4BIQVaLUnFkwX0OoPd5dm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjZrSVBnRWhCVm90U2NXVEJmUTZnOTNsMmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MDBiNTMtZWI5MC00MGQyLWFjMGEt NWEwMTc4ZWNhYzI4LzEvQjZrSVBnRWhCVm90U2NXVEJmUTZnOTNsMmJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi84MDBiNTMtZWI5MC00MGQyLWFjMGEtNWEwMTc4ZWNhYzI4 LzEvQjZrSVBnRWhCVm90U2NXVEJmUTZnOTNsMmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+c1Lk6s KkIXjGMlyHP17c2+dh0/UkAGl9UQ++hHRn7ScSNMVjsN8XsqeO3CZiy69jqYQn7w IMYMEuIbyhmuN8CX+RY2dA6e+FX6WltuMQPPI9sEiR2/NjHvToyiB2x5mZicUQlG AOcSONIajUxGgF0oyB3HgEjE3mwp6rwkwuFA8lPrNLKy1wHqmNb+/mpWhs1F1vCn +4acNlLmw34UnQsASvIg4Mq5wIwTuZc4DSXH3mut0r+vYTv3jeuuL7gWlSc5ckpN DkHTNiw2At8JB7sYrLlLEioUAB05S8cskKhFg8572FXxLNEE8Kv/Zp47lJuE+mZS 6PnuyWdaqK6vfQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:02 2025 by rpki-client