This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft File: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft (raw, json) Hash identifier: QcH+3s+t1rUXCBR/noRu+pA9acIj9BaeteDgMHPRxtg= Subject key identifier: E4:1B:B9:68:B9:3E:D9:4B:19:C3:46:0B:28:8B:4A:4B:9B:A9:7C:40 Authority key identifier: E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1 Certificate issuer: /CN=e96a769beca3b1932955158135596365c43c83b1 Certificate serial: 019B3833D56224CBA25B4421DD85CDB5F249 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft Manifest number: 0F00 Signing time: Fri 19 Dec 2025 20:01:19 +0000 Manifest this update: Fri 19 Dec 2025 20:01:19 +0000 Manifest next update: Sat 20 Dec 2025 20:01:19 +0000 Files and hashes: 1: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl (hash: /NS4qDeb2+LflbEpl+6Dn6m646fLyTWPPC676zv8sNo=) 2: Qt-NHTWPG9Blnlp9KwVRBT4_TNs.roa (hash: iMKB/O68vIbAIcl8B86g//4tQCSnWahP5EtY42n7PM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:d5:62:24:cb:a2:5b:44:21:dd:85:cd:b5:f2:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96a769beca3b1932955158135596365c43c83b1 Validity Not Before: Dec 19 20:01:19 2025 GMT Not After : Dec 20 20:01:19 2025 GMT Subject: CN=e41bb968b93ed94b19c3460b288b4a4b9ba97c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5a:78:35:7f:96:88:43:34:2f:ec:e6:2e:99: 11:b0:21:95:f8:09:8a:d5:2e:15:c4:a9:76:34:82: be:d7:14:4e:d2:24:fa:4c:fb:71:5f:ea:c6:96:0f: 85:66:c9:af:52:7e:46:33:38:1e:95:d9:0f:f1:23: bc:e8:78:b3:d3:34:f6:1b:ba:70:c5:f5:3f:bb:42: d8:e8:b5:72:52:2a:65:25:2f:58:86:5f:e9:3d:cf: a2:f3:10:b8:b5:ae:0e:58:99:c1:88:b5:9a:46:c1: be:b5:2c:eb:49:c2:d1:cd:ce:a8:73:5d:37:b4:ea: 10:49:d7:3e:f2:ce:be:e3:0a:e5:09:1e:37:4b:ca: 24:d3:01:9d:e1:7f:54:8d:60:3f:d3:f1:a2:85:24: e1:08:23:ff:37:f5:e9:e6:e5:57:41:af:30:f3:78: e2:3b:47:11:42:dd:c1:ea:84:f3:c4:cd:ba:e5:c9: 89:78:e5:80:5a:dc:7e:a2:fe:f7:70:b9:b1:89:26: 25:a1:50:76:e2:5b:62:58:35:7a:58:33:94:f9:b7: bf:53:42:2c:fe:30:ab:ba:80:ad:6d:ca:15:64:60: 41:1b:95:3e:23:54:89:07:c4:86:ff:d5:e8:80:1a: 47:d1:9c:56:d5:f2:9c:7b:0e:70:aa:d0:8a:5d:8e: 60:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1B:B9:68:B9:3E:D9:4B:19:C3:46:0B:28:8B:4A:4B:9B:A9:7C:40 X509v3 Authority Key Identifier: keyid:E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:33:3b:fa:9e:e4:9f:77:d4:51:1d:4a:fd:3e:74:eb:98:3b: 07:93:af:b2:ff:7c:e3:40:e4:96:93:7c:22:91:c0:4d:f3:0c: 19:c0:0d:59:ea:c0:1e:80:10:76:d2:90:f7:6c:02:fd:65:25: 1d:8e:48:4c:4b:15:f3:24:d9:18:fd:83:5f:8b:50:00:57:be: 53:8d:98:fe:25:52:2d:b9:b9:97:03:42:77:b8:1f:30:59:9f: 38:57:0e:fa:52:3b:b6:5f:e9:3b:61:68:20:c8:68:cc:b2:d6: 14:18:de:89:72:a5:90:62:3d:e8:9c:22:bd:36:d0:e5:94:b7: 4f:3d:1e:b5:11:71:60:b5:c7:b4:e1:fc:5c:71:8f:de:ed:14: 65:e1:08:56:a9:54:a4:0b:ca:c6:55:a4:14:df:46:60:74:73: 43:78:4b:bb:df:dd:90:6d:b9:cd:e3:7b:8b:49:61:8e:4b:48: ea:7b:16:2b:16:b1:33:d9:79:5a:9b:f3:90:c6:c8:55:76:e5: d5:f0:45:91:8e:8d:a3:f2:22:2f:6d:a9:22:46:75:71:82:d4: 51:13:59:51:e6:18:4d:ca:31:3b:4c:ec:38:54:25:c7:87:17: 12:be:89:f3:23:ca:95:8e:69:a9:b8:30:40:fe:c5:94:bc:c8: 40:e7:75:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M9ViJMuiW0Qh3YXNtfJJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NmE3NjliZWNhM2IxOTMyOTU1MTU4MTM1NTk2MzY1YzQz YzgzYjEwHhcNMjUxMjE5MjAwMTE5WhcNMjUxMjIwMjAwMTE5WjAzMTEwLwYDVQQD EyhlNDFiYjk2OGI5M2VkOTRiMTljMzQ2MGIyODhiNGE0YjliYTk3YzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1p4NX+WiEM0L+zmLpkRsCGV+AmK 1S4VxKl2NIK+1xRO0iT6TPtxX+rGlg+FZsmvUn5GMzgeldkP8SO86Hiz0zT2G7pw xfU/u0LY6LVyUiplJS9Yhl/pPc+i8xC4ta4OWJnBiLWaRsG+tSzrScLRzc6oc103 tOoQSdc+8s6+4wrlCR43S8ok0wGd4X9UjWA/0/GihSThCCP/N/Xp5uVXQa8w83ji O0cRQt3B6oTzxM265cmJeOWAWtx+ov73cLmxiSYloVB24ltiWDV6WDOU+be/U0Is /jCruoCtbcoVZGBBG5U+I1SJB8SG/9XogBpH0ZxW1fKcew5wqtCKXY5gZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQbuWi5PtlLGcNGCyiLSkubqXxAMB8GA1UdIwQY MBaAFOlqdpvso7GTKVUVgTVZY2XEPIOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNldwMm0teWpzWk1wVlJXQk5WbGpaY1E4ZzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jYWU5MWItOWUwZS00ZDVjLWFmYzQt NTUxMThmOGJkNWYyLzEvNldwMm0teWpzWk1wVlJXQk5WbGpaY1E4ZzdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9jYWU5MWItOWUwZS00ZDVjLWFmYzQtNTUxMThmOGJkNWYy LzEvNldwMm0teWpzWk1wVlJXQk5WbGpaY1E4ZzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTM7+p7k n3fUUR1K/T5065g7B5Ovsv9840DklpN8IpHATfMMGcANWerAHoAQdtKQ92wC/WUl HY5ITEsV8yTZGP2DX4tQAFe+U42Y/iVSLbm5lwNCd7gfMFmfOFcO+lI7tl/pO2Fo IMhozLLWFBjeiXKlkGI96JwivTbQ5ZS3Tz0etRFxYLXHtOH8XHGP3u0UZeEIVqlU pAvKxlWkFN9GYHRzQ3hLu9/dkG25zeN7i0lhjktI6nsWKxaxM9l5WpvzkMbIVXbl 1fBFkY6No/IiL22pIkZ1cYLUURNZUeYYTcoxO0zsOFQlx4cXEr6J8yPKlY5pqbgw QP7FlLzIQOd1CA== -----END CERTIFICATE-----Generated at Sat Dec 20 00:14:02 2025 by rpki-client