This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft File: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json) Hash identifier: KpVQZnkGSTyYiSvy2iTpyKotfJVGDSaPMB3Fv0kYxbs= Subject key identifier: 09:28:BF:FC:01:3B:E5:9C:BA:22:F9:45:83:DE:90:61:68:DA:29:91 Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED Certificate issuer: /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed Certificate serial: 019B2287BE50AFA3D3ED0AE9C64429732BB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft Manifest number: 0E70 Signing time: Mon 15 Dec 2025 15:01:20 +0000 Manifest this update: Mon 15 Dec 2025 15:01:20 +0000 Manifest next update: Tue 16 Dec 2025 15:01:20 +0000 Files and hashes: 1: 534vF5sjkwJDGuUSMSbyeoXyx-w.roa (hash: yaE3+RBNj5kJXWkdpo0vdtCXgmh99gzWa0o0cozuQ7M=) 2: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: Ga1lxXvJfXbvi/6gHC2OH+RgXxJUrQmK86qSjEH36ZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:be:50:af:a3:d3:ed:0a:e9:c6:44:29:73:2b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed Validity Not Before: Dec 15 15:01:20 2025 GMT Not After : Dec 16 15:01:20 2025 GMT Subject: CN=0928bffc013be59cba22f94583de906168da2991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:07:27:32:01:63:ea:8d:6a:8d:28:84:2a: 52:27:d5:be:b0:d6:32:ae:87:6d:c7:d5:d6:46:77: 85:62:51:b3:06:f9:b1:46:0e:39:a3:a9:c9:a3:db: 2b:6c:92:59:8b:e7:aa:67:34:44:c4:9a:48:af:1e: 8d:aa:b3:8b:99:55:8e:8b:2e:41:31:59:56:74:2a: 44:18:28:fb:22:f2:3f:f7:3b:88:cb:4d:9c:86:ae: d2:88:a6:e3:c0:1a:d6:71:c5:5d:86:d9:1c:6d:fd: d5:b0:e3:39:13:56:45:1a:55:32:05:6d:47:6f:63: 7c:05:7c:04:9b:14:c7:9e:ed:eb:77:6b:6b:8e:1d: 5e:80:3b:9d:77:d7:05:b3:bb:23:4e:b4:f2:f0:70: 3f:b5:14:05:f1:7e:8f:3e:81:3c:c4:34:3b:55:5b: 31:c9:6d:b9:f8:2a:71:ab:19:fb:be:fe:d4:f2:4c: 06:5b:3a:07:de:5b:6c:38:74:0a:33:4c:77:ab:cf: c2:0a:a4:8a:05:94:43:8a:6a:d3:10:b4:d4:8d:4a: d8:34:9c:fa:be:d4:1c:e5:8b:b2:4f:07:7e:ba:16: e3:69:a4:d4:3d:b7:33:15:c6:59:b4:b9:ce:2d:ce: 65:c9:14:85:77:ed:0f:ed:4f:79:82:82:29:25:49: 41:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:28:BF:FC:01:3B:E5:9C:BA:22:F9:45:83:DE:90:61:68:DA:29:91 X509v3 Authority Key Identifier: keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:e0:3b:8e:25:d1:11:2a:ab:ea:fe:68:18:3c:77:da:d4:6f: c4:24:5a:3d:be:ba:8c:8b:3b:b7:2a:38:9d:54:44:b9:a1:bf: 3f:8a:49:2d:1e:16:29:3f:ea:da:03:58:4c:36:b3:27:02:24: 4e:16:83:f0:c9:21:be:50:41:17:90:1a:0e:87:42:6b:80:99: b9:60:6a:0e:e2:e6:b3:e6:59:55:18:df:ca:5d:8f:d4:d2:40: 09:6c:0c:00:12:fa:54:7a:7e:1c:55:48:f8:b8:bb:f4:d7:1c: 9b:e9:48:36:88:56:b0:e1:75:9c:4d:6e:f6:75:53:94:cc:aa: ce:83:75:bb:65:a9:d0:76:63:3f:79:e9:0e:51:8a:3a:1f:1d: 9b:91:b7:c4:8d:bc:97:ab:eb:b9:34:30:98:cb:18:96:b2:25: 34:75:93:18:59:2d:a0:a4:8e:07:cd:c2:b7:22:d2:dc:62:06: 07:09:fc:61:61:5a:b6:b4:9e:7a:70:e6:ad:7e:ea:b2:28:59: 8d:a9:7f:d2:6d:77:5b:2f:db:1a:ff:05:8d:17:31:6a:66:9e: 13:4f:b6:44:1c:14:64:10:ef:51:c4:65:ca:ae:44:5f:9d:3b: 6d:18:47:7d:6f:2a:c5:5a:26:a9:a1:a2:6d:cc:82:5b:38:70: f9:e6:5f:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih75Qr6PT7QrpxkQpcyu2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNzUwM2I4M2ZhMDlhNzViY2I5MTA3NTQwMGY4MzA3YTY2 N2I4ZWQwHhcNMjUxMjE1MTUwMTIwWhcNMjUxMjE2MTUwMTIwWjAzMTEwLwYDVQQD EygwOTI4YmZmYzAxM2JlNTljYmEyMmY5NDU4M2RlOTA2MTY4ZGEyOTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQcHJzIBY+qNao0ohCpSJ9W+sNYy rodtx9XWRneFYlGzBvmxRg45o6nJo9srbJJZi+eqZzRExJpIrx6NqrOLmVWOiy5B MVlWdCpEGCj7IvI/9zuIy02chq7SiKbjwBrWccVdhtkcbf3VsOM5E1ZFGlUyBW1H b2N8BXwEmxTHnu3rd2trjh1egDudd9cFs7sjTrTy8HA/tRQF8X6PPoE8xDQ7VVsx yW25+Cpxqxn7vv7U8kwGWzoH3ltsOHQKM0x3q8/CCqSKBZRDimrTELTUjUrYNJz6 vtQc5YuyTwd+uhbjaaTUPbczFcZZtLnOLc5lyRSFd+0P7U95goIpJUlBpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkov/wBO+WcuiL5RYPekGFo2imRMB8GA1UdIwQY MBaAFOp1A7g/oJp1vLkQdUAPgwemZ7jtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jNDIxNjAtZDZmNC00ODJjLWJmNjIt NjIxNDBiMjAyZWI0LzEvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jNDIxNjAtZDZmNC00ODJjLWJmNjItNjIxNDBiMjAyZWI0 LzEvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWeA7jiXR ESqr6v5oGDx32tRvxCRaPb66jIs7tyo4nVREuaG/P4pJLR4WKT/q2gNYTDazJwIk ThaD8MkhvlBBF5AaDodCa4CZuWBqDuLms+ZZVRjfyl2P1NJACWwMABL6VHp+HFVI +Li79Nccm+lINohWsOF1nE1u9nVTlMyqzoN1u2Wp0HZjP3npDlGKOh8dm5G3xI28 l6vruTQwmMsYlrIlNHWTGFktoKSOB83CtyLS3GIGBwn8YWFatrSeenDmrX7qsihZ jal/0m13Wy/bGv8FjRcxamaeE0+2RBwUZBDvUcRlyq5EX507bRhHfW8qxVomqaGi bcyCWzhw+eZfkw== -----END CERTIFICATE-----Generated at Tue Dec 16 00:49:37 2025 by rpki-client