This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft File: 6WR3bOxi7xOoKiFl5vjUeJDXc00.mft (raw, json) Hash identifier: +66X8hesDj5TxoYJGh1N3y+Y/nvazrCmSsC81xXdq0o= Subject key identifier: A7:6C:FF:0B:68:E3:1B:C3:36:A1:B6:91:EE:83:79:F0:AB:21:4B:DA Authority key identifier: E9:64:77:6C:EC:62:EF:13:A8:2A:21:65:E6:F8:D4:78:90:D7:73:4D Certificate issuer: /CN=e964776cec62ef13a82a2165e6f8d47890d7734d Certificate serial: 019B465CC0605BC510B50D427E9CC02F43F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft Manifest number: 0540 Signing time: Mon 22 Dec 2025 14:00:42 +0000 Manifest this update: Mon 22 Dec 2025 14:00:42 +0000 Manifest next update: Tue 23 Dec 2025 14:00:42 +0000 Files and hashes: 1: 6WR3bOxi7xOoKiFl5vjUeJDXc00.crl (hash: fhDvyAPCVbfO0Ejh1pe3NCiYR7vX60kGAXR7VWAn0Ec=) 2: gULVBnS6_qNHU7cQ0dkYMIuUayU.roa (hash: g1yDTdtovs95F32kLsCVnbkwBNkiMceKZcm5mTyCkJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.crl rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5c:c0:60:5b:c5:10:b5:0d:42:7e:9c:c0:2f:43:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e964776cec62ef13a82a2165e6f8d47890d7734d Validity Not Before: Dec 22 14:00:42 2025 GMT Not After : Dec 23 14:00:42 2025 GMT Subject: CN=a76cff0b68e31bc336a1b691ee8379f0ab214bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cb:d9:73:80:80:40:b6:9d:ea:f9:66:e6:4b: a1:34:ad:43:d4:88:c6:62:b4:1e:6b:75:d1:77:c9: 8b:87:bc:dc:94:ef:f9:29:65:23:63:40:62:a5:a9: 3d:d1:d0:0a:51:d3:80:1a:83:3d:a0:f5:7c:1f:27: 77:3c:69:62:c2:c0:13:19:f8:3e:a6:23:38:8e:c7: fe:76:a8:e1:af:77:55:eb:eb:b4:f8:2e:12:34:63: 5c:d5:de:50:53:7b:0e:e6:1d:c4:b7:cc:d6:80:28: 48:d5:ec:bf:e6:f6:54:3c:8c:05:cd:80:b2:80:a6: 50:a7:9d:5b:26:c6:69:1a:fa:da:7f:7b:cf:0a:44: 99:bc:fc:3f:08:eb:2e:34:c0:2b:1f:a8:fa:7a:f6: eb:4d:1c:c9:c4:5c:4c:cf:ba:e5:df:a9:24:e3:40: 4f:c1:4c:17:cb:74:2b:0a:12:28:63:f7:97:a6:ed: 3e:55:8c:e0:04:ba:f1:c0:a8:87:69:de:ac:cc:48: 3c:cc:3d:4a:2b:ef:dc:96:e4:6a:6c:37:24:39:34: 76:a8:79:32:21:b7:71:89:a7:94:66:b9:91:b1:cd: 65:ba:dc:ac:53:e5:79:92:de:c7:9e:23:94:0d:fd: 20:58:56:62:4e:e5:59:f4:87:3f:18:fb:52:7d:fd: fd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6C:FF:0B:68:E3:1B:C3:36:A1:B6:91:EE:83:79:F0:AB:21:4B:DA X509v3 Authority Key Identifier: keyid:E9:64:77:6C:EC:62:EF:13:A8:2A:21:65:E6:F8:D4:78:90:D7:73:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:e8:fc:be:2c:25:c3:d3:94:5a:7f:7b:fc:f2:ae:6f:cb:80: cf:7a:09:a7:ba:58:be:a9:03:55:9e:9d:da:9c:b4:58:8e:26: 9f:63:5b:52:de:9a:5b:02:a7:fb:27:b9:22:0b:61:8d:98:30: 00:bb:ed:7b:4d:63:79:65:da:29:8b:f2:2c:35:93:bc:f1:ed: e7:84:2f:e8:a6:90:45:32:95:d7:1e:29:55:45:4a:9d:47:54: 23:86:4e:8e:b7:aa:7f:25:92:3f:f1:ca:c7:94:20:ad:57:9d: 57:bb:12:3f:e2:c0:a9:cb:3b:48:9f:22:b4:8e:b8:9b:6e:0a: f5:17:61:fd:28:8b:a8:6a:7d:a6:93:ea:8e:24:4a:0e:46:91: 6a:5e:dd:2d:03:b0:08:28:6f:4d:c1:9d:f8:88:2c:7c:5d:12: ef:75:d9:7b:16:5c:6e:9d:e7:73:db:9b:ed:9b:20:3d:9d:8a: 50:ca:1c:ea:cb:7b:a5:05:a9:05:a6:27:5b:11:bc:5b:18:df: 40:e2:85:fe:a5:21:24:de:4c:be:69:20:19:05:c3:27:44:57: f0:18:61:ab:a1:c7:fb:45:20:3a:08:bd:b7:78:d3:00:85:31: c0:ac:9c:42:43:c0:d7:a3:42:19:d0:f6:43:27:a3:f7:db:4c: 3f:02:85:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXMBgW8UQtQ1CfpzAL0P3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NjQ3NzZjZWM2MmVmMTNhODJhMjE2NWU2ZjhkNDc4OTBk NzczNGQwHhcNMjUxMjIyMTQwMDQyWhcNMjUxMjIzMTQwMDQyWjAzMTEwLwYDVQQD EyhhNzZjZmYwYjY4ZTMxYmMzMzZhMWI2OTFlZTgzNzlmMGFiMjE0YmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMvZc4CAQLad6vlm5kuhNK1D1IjG YrQea3XRd8mLh7zclO/5KWUjY0Bipak90dAKUdOAGoM9oPV8Hyd3PGliwsATGfg+ piM4jsf+dqjhr3dV6+u0+C4SNGNc1d5QU3sO5h3Et8zWgChI1ey/5vZUPIwFzYCy gKZQp51bJsZpGvraf3vPCkSZvPw/COsuNMArH6j6evbrTRzJxFxMz7rl36kk40BP wUwXy3QrChIoY/eXpu0+VYzgBLrxwKiHad6szEg8zD1KK+/cluRqbDckOTR2qHky IbdxiaeUZrmRsc1lutysU+V5kt7HniOUDf0gWFZiTuVZ9Ic/GPtSff39IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKds/wto4xvDNqG2ke6DefCrIUvaMB8GA1UdIwQY MBaAFOlkd2zsYu8TqCohZeb41HiQ13NNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNldSM2JPeGk3eE9vS2lGbDV2alVlSkRYYzAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ZGMzMTMtNDJiYy00Njc3LThlOTEt MTFhOWU5OTIyNTM3LzEvNldSM2JPeGk3eE9vS2lGbDV2alVlSkRYYzAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy83ZGMzMTMtNDJiYy00Njc3LThlOTEtMTFhOWU5OTIyNTM3 LzEvNldSM2JPeGk3eE9vS2lGbDV2alVlSkRYYzAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuj8viwl w9OUWn97/PKub8uAz3oJp7pYvqkDVZ6d2py0WI4mn2NbUt6aWwKn+ye5IgthjZgw ALvte01jeWXaKYvyLDWTvPHt54Qv6KaQRTKV1x4pVUVKnUdUI4ZOjreqfyWSP/HK x5QgrVedV7sSP+LAqcs7SJ8itI64m24K9Rdh/SiLqGp9ppPqjiRKDkaRal7dLQOw CChvTcGd+IgsfF0S73XZexZcbp3nc9ub7ZsgPZ2KUMoc6st7pQWpBaYnWxG8Wxjf QOKF/qUhJN5MvmkgGQXDJ0RX8Bhhq6HH+0UgOgi9t3jTAIUxwKycQkPA16NCGdD2 Qyej99tMPwKF0A== -----END CERTIFICATE-----Generated at Mon Dec 22 22:25:56 2025 by rpki-client