This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json) Hash identifier: l23w0J/r9Lnv/YArwCeijVbFkWjLH1HUQ01UWNtdypY= Subject key identifier: DD:67:7F:F7:91:0C:8E:51:15:C1:24:9F:4A:0F:47:6C:1E:71:2D:5F Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33 Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533 Certificate serial: 019B3C7F3E0F89DAC1870723159ABAB9459A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 16:02:10 +0000 Manifest this update: Sat 20 Dec 2025 16:02:10 +0000 Manifest next update: Sun 21 Dec 2025 16:02:10 +0000 Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: BqVJ2o2ZSuywMBHVdDaPc+P7sVKFYXfGdL1wYAWn2yc=) 2: r6T3XlH0NydhUiVntY08YEEt0HY.roa (hash: j+28xx5Rq8KrtlCf807KmCTOzzUVWhkp01bXOIcVWSo=) 3: wPTagVR3pNusa3J3LbaZykmYrdM.roa (hash: k0uAisbBEgTj7/x2tEyMYhIzPLODPGtJvKxV+pOGuVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:3e:0f:89:da:c1:87:07:23:15:9a:ba:b9:45:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533 Validity Not Before: Dec 20 16:02:10 2025 GMT Not After : Dec 21 16:02:10 2025 GMT Subject: CN=dd677ff7910c8e5115c1249f4a0f476c1e712d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:1d:7e:49:70:c0:60:f7:d3:f0:6a:f6:bd: f3:97:24:3b:cc:14:43:2f:8e:ce:cd:8b:7f:0c:0b: bb:60:a9:3e:3b:8d:f7:ca:68:50:0a:19:d3:49:4c: 1f:b0:d9:e8:02:f1:4f:ba:ec:d3:08:bf:0a:5c:0a: 24:27:10:cf:2c:89:48:0b:21:51:ef:36:48:5d:5d: f9:e1:15:e7:50:c7:cc:35:a7:de:be:a6:52:00:ec: 1d:40:83:7c:04:3d:d9:86:6c:1d:eb:ac:7c:a1:4c: fe:18:a0:34:69:90:85:9b:47:86:08:4d:b9:54:5b: 1c:b0:0e:0b:a9:7a:3f:d2:0e:04:39:31:6d:21:dd: 68:fc:29:c8:16:61:d4:f2:2d:cc:1c:18:dd:d4:9b: 75:7c:34:fa:d9:27:49:e4:22:7c:8a:ef:15:a9:26: 1b:0f:f9:c7:3f:39:14:72:c7:1b:5e:fb:d7:fe:cf: 2f:f8:de:97:43:05:e8:7e:1b:fe:22:ec:83:c0:20: 93:d6:58:de:f3:97:2d:07:25:07:66:43:ae:d7:b1: 86:e1:14:4c:23:97:15:87:2a:38:e3:94:1f:91:9e: 81:2a:77:c9:dd:77:db:ee:bc:b2:2b:e8:79:09:d8: 76:b8:2a:32:b5:52:43:5b:b6:6e:6d:1e:b3:49:09: 82:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:67:7F:F7:91:0C:8E:51:15:C1:24:9F:4A:0F:47:6C:1E:71:2D:5F X509v3 Authority Key Identifier: keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:23:14:1c:84:fc:2b:f8:22:c3:05:92:df:f6:45:46:3c:db: 9d:4f:34:1b:0a:65:ea:37:3f:d9:fc:62:23:c9:1c:77:4e:84: 6f:95:23:ba:cd:00:76:02:21:e5:74:d2:58:3c:c8:de:b4:5a: ef:dd:34:76:ed:60:e2:c5:3d:c9:33:51:37:6b:f8:05:b6:f2: 30:f3:04:59:0a:8f:17:9c:58:c2:e6:a7:19:09:1c:52:36:47: 7a:18:96:2b:42:a6:ce:a7:74:2f:d6:1d:2a:a7:7c:6c:e2:cd: 51:03:49:f6:05:c9:7f:cc:b2:03:12:d2:09:f3:07:87:70:9e: 8e:7d:83:b8:cf:26:13:a9:e9:43:b7:c1:38:74:30:fd:ed:ef: d4:f0:9d:03:15:4b:56:37:9d:a5:40:c1:9e:00:44:d0:22:28: a6:85:93:39:6e:18:f2:69:16:8f:91:1f:b8:3c:f6:94:55:2b: 69:e7:9e:e8:33:89:54:a6:32:2f:57:04:dc:eb:ac:06:c2:41: e7:ef:24:07:0f:f8:ba:fc:68:b3:b5:99:a5:5c:33:cb:89:cd: d7:be:de:35:31:73:cb:2b:7a:c9:b2:ba:8e:71:64:6f:14:c9: 3a:e1:17:c0:b3:f7:d3:f9:99:3b:9e:ec:d5:bf:be:7b:8d:e9: 84:ae:b1:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fz4PidrBhwcjFZq6uUWaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzU5MmYxZWI0MWQ2Yzg5M2NkMGRkNzJiNjNmYzM0ZWU1 NTM1MzMwHhcNMjUxMjIwMTYwMjEwWhcNMjUxMjIxMTYwMjEwWjAzMTEwLwYDVQQD EyhkZDY3N2ZmNzkxMGM4ZTUxMTVjMTI0OWY0YTBmNDc2YzFlNzEyZDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqMdfklwwGD30/Bq9r3zlyQ7zBRD L47OzYt/DAu7YKk+O433ymhQChnTSUwfsNnoAvFPuuzTCL8KXAokJxDPLIlICyFR 7zZIXV354RXnUMfMNafevqZSAOwdQIN8BD3Zhmwd66x8oUz+GKA0aZCFm0eGCE25 VFscsA4LqXo/0g4EOTFtId1o/CnIFmHU8i3MHBjd1Jt1fDT62SdJ5CJ8iu8VqSYb D/nHPzkUcscbXvvX/s8v+N6XQwXofhv+IuyDwCCT1lje85ctByUHZkOu17GG4RRM I5cVhyo445QfkZ6BKnfJ3Xfb7ryyK+h5Cdh2uCoytVJDW7ZubR6zSQmCtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1nf/eRDI5RFcEkn0oPR2wecS1fMB8GA1UdIwQY MBaAFOl1kvHrQdbIk80N1ytj/DTuVTUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80MjIxN2UtZWFkMC00NmJlLThhZDAt MDVmOTBhZDI0ZjNlLzEvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80MjIxN2UtZWFkMC00NmJlLThhZDAtMDVmOTBhZDI0ZjNl LzEvNlhXUzhldEIxc2lUelEzWEsyUDhOTzVWTlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciMUHIT8 K/giwwWS3/ZFRjzbnU80Gwpl6jc/2fxiI8kcd06Eb5Ujus0AdgIh5XTSWDzI3rRa 7900du1g4sU9yTNRN2v4BbbyMPMEWQqPF5xYwuanGQkcUjZHehiWK0Kmzqd0L9Yd Kqd8bOLNUQNJ9gXJf8yyAxLSCfMHh3Cejn2DuM8mE6npQ7fBOHQw/e3v1PCdAxVL VjedpUDBngBE0CIopoWTOW4Y8mkWj5EfuDz2lFUraeee6DOJVKYyL1cE3OusBsJB 5+8kBw/4uvxos7WZpVwzy4nN177eNTFzyyt6ybK6jnFkbxTJOuEXwLP30/mZO57s 1b++e43phK6xdg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:11:34 2025 by rpki-client