This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft File: 6-T90XLfhZdWyoUd3eE2cPSBfuA.mft (raw, json) Hash identifier: 9k/iw4dhlqCaEnT364UdS8H50VUKPAQE3QqEIWooblI= Subject key identifier: 74:3E:EB:58:99:CA:D7:AA:5B:8C:DC:58:6E:D9:E5:F2:B6:01:47:39 Authority key identifier: EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0 Certificate issuer: /CN=ebe4fdd172df859756ca851ddde13670f4817ee0 Certificate serial: 019B0DB6A2908014832DA302A29D1DA2BB56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 14:00:31 +0000 Manifest this update: Thu 11 Dec 2025 14:00:31 +0000 Manifest next update: Fri 12 Dec 2025 14:00:31 +0000 Files and hashes: 1: 6-T90XLfhZdWyoUd3eE2cPSBfuA.crl (hash: 3e4ef59evCiYpg3+/XtqdAyEXksAueOJ1x2KszoPmzs=) 2: Z9aXtfZOLHLUJRH7QqPi1mqGj3U.roa (hash: pwgtrLZ9ZWVWEXXmTENsA08mvoGu1JfrrcaBMhazJW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:a2:90:80:14:83:2d:a3:02:a2:9d:1d:a2:bb:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebe4fdd172df859756ca851ddde13670f4817ee0 Validity Not Before: Dec 11 14:00:31 2025 GMT Not After : Dec 12 14:00:31 2025 GMT Subject: CN=743eeb5899cad7aa5b8cdc586ed9e5f2b6014739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:79:20:45:66:ae:e7:d5:54:6e:2a:c3:1d:01: cd:31:38:ea:fd:e3:52:f6:1e:8a:43:27:c9:f0:db: 5e:6d:5b:80:13:e7:c9:09:bf:33:81:b7:51:b3:d9: d7:1d:25:58:d2:7f:2f:c6:52:48:2a:c6:5f:26:42: 19:97:51:16:57:b4:8f:04:b9:b2:e0:19:ef:a2:26: da:c2:47:4b:19:24:9f:5a:89:58:cc:6e:cc:89:d3: e6:e8:fb:a4:97:9c:92:09:4c:54:71:cb:71:ce:26: 2d:00:ee:d7:8a:b7:de:5b:c5:ab:4f:80:28:1f:6a: 5e:c5:79:c4:c3:06:2a:b7:0d:97:bc:cc:02:d9:11: 9f:a5:47:5a:89:5d:1d:eb:ed:ee:2a:7e:34:3b:b8: bc:dd:30:a8:70:bc:7b:59:ba:0d:0d:05:2c:32:50: 5a:7e:ed:04:47:33:d5:97:b5:21:83:3f:aa:9a:be: d8:00:cf:94:da:84:1d:0f:55:c3:fc:3c:9f:14:fe: 4b:47:67:5c:21:eb:5d:bf:87:73:d6:dc:db:93:be: 6d:2c:e6:95:b0:fe:29:0c:71:04:60:c2:50:0b:a0: 93:5e:70:17:8a:7b:61:58:6d:f6:14:fe:c7:88:d6: 9e:e8:f0:c3:72:4c:43:fa:b3:1f:4e:e1:54:00:01: 87:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3E:EB:58:99:CA:D7:AA:5B:8C:DC:58:6E:D9:E5:F2:B6:01:47:39 X509v3 Authority Key Identifier: keyid:EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:2d:0a:a6:7d:b8:c8:c8:a2:ea:5e:13:44:b3:36:04:58:b3: e0:80:3a:2d:79:d4:56:ee:a7:20:a7:44:a4:e7:6a:27:e2:76: e1:ef:51:fc:c1:3e:a0:5e:df:a8:0e:c1:a6:04:ef:45:9c:6e: 4d:32:5b:51:92:4d:0d:0a:5a:94:51:5a:6f:b0:17:35:79:22: 1b:ae:e6:e1:be:e4:5b:3e:47:0f:76:4b:ae:29:9e:d0:69:79: 8c:9d:9e:56:78:5a:f7:37:2d:6a:db:f4:66:3b:93:e2:84:64: 7a:31:27:8c:b5:97:df:a7:fa:b4:46:4c:30:47:c4:f2:86:40: ec:d9:91:39:a6:54:a2:ea:0e:da:ce:11:cb:d1:8c:a0:78:c0: 81:6b:c9:47:60:92:21:9a:da:1e:5b:1e:e9:f5:05:c5:c9:34: 7b:d1:28:b8:47:61:bc:ca:51:28:b6:2b:51:a5:28:6f:f1:4e: a4:47:88:a9:f8:9d:68:eb:1e:eb:fe:22:f6:a4:1b:f9:cb:97: 51:60:de:d1:11:25:ad:78:67:83:71:1a:06:f7:4d:2c:13:11: db:a2:fa:8f:07:75:ee:3b:88:31:dc:c4:75:eb:63:1e:f2:9f: de:55:6d:b9:0a:e8:84:c2:9c:35:85:27:38:7b:ff:5e:ca:6d: da:dc:0f:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtqKQgBSDLaMCop0dortWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZTRmZGQxNzJkZjg1OTc1NmNhODUxZGRkZTEzNjcwZjQ4 MTdlZTAwHhcNMjUxMjExMTQwMDMxWhcNMjUxMjEyMTQwMDMxWjAzMTEwLwYDVQQD Eyg3NDNlZWI1ODk5Y2FkN2FhNWI4Y2RjNTg2ZWQ5ZTVmMmI2MDE0NzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3kgRWau59VUbirDHQHNMTjq/eNS 9h6KQyfJ8NtebVuAE+fJCb8zgbdRs9nXHSVY0n8vxlJIKsZfJkIZl1EWV7SPBLmy 4BnvoibawkdLGSSfWolYzG7MidPm6Pukl5ySCUxUcctxziYtAO7XirfeW8WrT4Ao H2pexXnEwwYqtw2XvMwC2RGfpUdaiV0d6+3uKn40O7i83TCocLx7WboNDQUsMlBa fu0ERzPVl7Uhgz+qmr7YAM+U2oQdD1XD/DyfFP5LR2dcIetdv4dz1tzbk75tLOaV sP4pDHEEYMJQC6CTXnAXinthWG32FP7HiNae6PDDckxD+rMfTuFUAAGHRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQ+61iZyteqW4zcWG7Z5fK2AUc5MB8GA1UdIwQY MBaAFOvk/dFy34WXVsqFHd3hNnD0gX7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hNTk2OWYtYzAxNi00NTMzLTljYmEt Njk2NzAzNzM2NjIxLzEvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9hNTk2OWYtYzAxNi00NTMzLTljYmEtNjk2NzAzNzM2NjIx LzEvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANC0Kpn24 yMii6l4TRLM2BFiz4IA6LXnUVu6nIKdEpOdqJ+J24e9R/ME+oF7fqA7BpgTvRZxu TTJbUZJNDQpalFFab7AXNXkiG67m4b7kWz5HD3ZLrime0Gl5jJ2eVnha9zctatv0 ZjuT4oRkejEnjLWX36f6tEZMMEfE8oZA7NmROaZUouoO2s4Ry9GMoHjAgWvJR2CS IZraHlse6fUFxck0e9EouEdhvMpRKLYrUaUob/FOpEeIqfidaOse6/4i9qQb+cuX UWDe0RElrXhng3EaBvdNLBMR26L6jwd17juIMdzEdetjHvKf3lVtuQrohMKcNYUn OHv/Xspt2twPcw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:16:06 2025 by rpki-client