This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft File: 6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft (raw, json) Hash identifier: csbi1MCdcdYKQylI55EzAGejuBN9+z4HiIU+7n2E0Tc= Subject key identifier: 12:4D:05:B3:82:F4:01:79:97:AD:E7:F3:ED:CD:C7:C9:C9:B7:95:10 Authority key identifier: E9:31:36:B4:45:FB:A1:CC:C1:F4:3C:43:59:0E:9B:D9:A5:AA:51:82 Certificate issuer: /CN=e93136b445fba1ccc1f43c43590e9bd9a5aa5182 Certificate serial: 019B4A02D9C9905CD56207423250AC324BC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft Manifest number: 04DD Signing time: Tue 23 Dec 2025 07:00:59 +0000 Manifest this update: Tue 23 Dec 2025 07:00:59 +0000 Manifest next update: Wed 24 Dec 2025 07:00:59 +0000 Files and hashes: 1: 6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl (hash: A/EIGefd5tdserM4d6E17n20qsbON8uw9Kywz5N+S2g=) 2: gqtW-HTwNuaNzij_O-fG_WDDmgI.roa (hash: 64HgUSoh+cIdBaNAyauCdgl6p5QawtedcJQPBNkM8qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:02:d9:c9:90:5c:d5:62:07:42:32:50:ac:32:4b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e93136b445fba1ccc1f43c43590e9bd9a5aa5182 Validity Not Before: Dec 23 07:00:59 2025 GMT Not After : Dec 24 07:00:59 2025 GMT Subject: CN=124d05b382f4017997ade7f3edcdc7c9c9b79510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:64:25:b1:d6:8f:43:ca:56:09:17:c3:4f:8a: ab:43:2b:57:4c:6d:6d:94:87:db:64:6b:aa:bc:f5: 03:75:62:47:b8:a7:49:b7:9b:bf:3a:dd:da:43:36: bf:84:c8:9c:a4:e2:d1:7b:93:37:af:83:69:0c:bc: 10:d6:30:7f:20:19:95:06:da:b7:a5:13:5e:a6:d8: 4b:19:28:66:b0:c6:8a:f2:b8:45:3f:7b:9f:71:72: 00:86:5c:03:23:d8:9f:57:56:73:b8:65:e8:2c:1b: f3:4b:1c:b8:7a:a4:f3:04:87:f6:c7:e0:3c:53:19: b5:35:50:5a:fd:b1:f8:e9:fe:85:6d:13:8c:c9:81: d5:38:64:81:b7:0e:b4:d4:7b:aa:21:cc:3d:a0:4f: 19:ea:f4:e9:b0:b2:d7:ec:e3:dd:c3:37:ca:e8:6e: 11:17:52:78:21:ed:04:c3:57:5b:a7:8c:ef:5d:26: 04:71:f4:22:40:54:cc:6b:aa:79:d6:a5:16:da:42: b9:bb:10:3c:9a:bf:0a:b3:34:7c:28:69:62:3f:df: 39:82:22:73:8b:d4:22:45:7a:29:b8:c3:3b:a6:43: 27:4f:9b:34:61:7a:46:b7:cf:b8:ec:9b:8b:ac:f8: 56:70:46:09:21:95:91:80:36:42:73:79:3f:94:58: ee:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4D:05:B3:82:F4:01:79:97:AD:E7:F3:ED:CD:C7:C9:C9:B7:95:10 X509v3 Authority Key Identifier: keyid:E9:31:36:B4:45:FB:A1:CC:C1:F4:3C:43:59:0E:9B:D9:A5:AA:51:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:61:93:e8:11:4a:f8:d5:84:5d:07:c2:bb:c6:aa:33:5d:4f: 94:0b:84:5e:b3:00:d6:59:96:1a:65:ee:0f:b5:e2:68:d9:fa: e4:b7:9f:6d:75:8c:73:35:f5:83:04:8a:c8:a6:bb:f5:41:fe: e6:e3:e2:3d:0b:fd:46:37:17:a7:7c:4b:96:e4:29:40:d2:71: 1a:bb:36:2b:0d:57:83:ce:9e:58:d5:af:11:22:ec:c4:90:c1: e3:a0:7e:c1:6b:62:12:f7:60:5b:d7:f7:03:6b:fc:22:86:45: 2d:ed:00:23:0b:a0:78:ce:79:17:d1:43:6b:8f:54:d9:4f:93: c3:5f:24:6b:c7:19:9d:91:b6:6e:7b:d0:75:5b:db:5a:fd:a5: 1b:ca:47:d0:9d:d3:b8:62:c5:5d:7f:17:44:33:16:8b:6e:d1: 1b:b6:24:f4:e1:fb:d5:7f:06:1d:00:5e:4c:3a:5c:8e:c2:d4: 9a:21:16:74:17:99:81:c5:59:59:e5:d4:a4:ec:e2:fd:71:f0: e5:2a:58:b1:b3:38:38:6c:4e:13:cd:c4:ec:ba:8f:63:9b:a1: 26:e0:e8:09:31:46:f1:97:4b:54:29:e1:4e:ae:28:b6:5b:96: 02:e9:b2:f8:31:49:07:7d:34:6c:8e:ba:eb:20:47:a6:20:97: 3c:34:a6:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAtnJkFzVYgdCMlCsMkvJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MzEzNmI0NDVmYmExY2NjMWY0M2M0MzU5MGU5YmQ5YTVh YTUxODIwHhcNMjUxMjIzMDcwMDU5WhcNMjUxMjI0MDcwMDU5WjAzMTEwLwYDVQQD EygxMjRkMDViMzgyZjQwMTc5OTdhZGU3ZjNlZGNkYzdjOWM5Yjc5NTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2QlsdaPQ8pWCRfDT4qrQytXTG1t lIfbZGuqvPUDdWJHuKdJt5u/Ot3aQza/hMicpOLRe5M3r4NpDLwQ1jB/IBmVBtq3 pRNepthLGShmsMaK8rhFP3ufcXIAhlwDI9ifV1ZzuGXoLBvzSxy4eqTzBIf2x+A8 Uxm1NVBa/bH46f6FbROMyYHVOGSBtw601HuqIcw9oE8Z6vTpsLLX7OPdwzfK6G4R F1J4Ie0Ew1dbp4zvXSYEcfQiQFTMa6p51qUW2kK5uxA8mr8KszR8KGliP985giJz i9QiRXopuMM7pkMnT5s0YXpGt8+47JuLrPhWcEYJIZWRgDZCc3k/lFjuOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJNBbOC9AF5l63n8+3Nx8nJt5UQMB8GA1UdIwQY MBaAFOkxNrRF+6HMwfQ8Q1kOm9mlqlGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlRFMnRFWDdvY3pCOUR4RFdRNmIyYVdxVVlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kYjFhNDctYjI2NC00ZDI2LTllNjAt ZTcyNmQwZDk4MDUyLzEvNlRFMnRFWDdvY3pCOUR4RFdRNmIyYVdxVVlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kYjFhNDctYjI2NC00ZDI2LTllNjAtZTcyNmQwZDk4MDUy LzEvNlRFMnRFWDdvY3pCOUR4RFdRNmIyYVdxVVlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamGT6BFK +NWEXQfCu8aqM11PlAuEXrMA1lmWGmXuD7XiaNn65LefbXWMczX1gwSKyKa79UH+ 5uPiPQv9RjcXp3xLluQpQNJxGrs2Kw1Xg86eWNWvESLsxJDB46B+wWtiEvdgW9f3 A2v8IoZFLe0AIwugeM55F9FDa49U2U+Tw18ka8cZnZG2bnvQdVvbWv2lG8pH0J3T uGLFXX8XRDMWi27RG7Yk9OH71X8GHQBeTDpcjsLUmiEWdBeZgcVZWeXUpOzi/XHw 5SpYsbM4OGxOE83E7LqPY5uhJuDoCTFG8ZdLVCnhTq4otluWAumy+DFJB300bI66 6yBHpiCXPDSmDQ== -----END CERTIFICATE-----Generated at Tue Dec 23 15:25:07 2025 by rpki-client