This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json) Hash identifier: 9ZURCpzygOY+nAhBii1XQN2IHtzvMPF9kY6iJ2vKSww= Subject key identifier: 70:4C:06:5C:11:BB:34:A9:05:0A:C2:8E:64:2A:26:32:C6:FA:46:05 Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf Certificate serial: 019B115C929EB54995C86AEFBDCC8D48B6E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft Manifest number: 178C Signing time: Fri 12 Dec 2025 07:00:38 +0000 Manifest this update: Fri 12 Dec 2025 07:00:38 +0000 Manifest next update: Sat 13 Dec 2025 07:00:38 +0000 Files and hashes: 1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: qeH/ivUVdhUPdigfBCD8Oqng8eo49vKM+av+C19hGBY=) 2: CgTYr4EhLa24IM21Hqih4Qqwlhs.roa (hash: L3KclJobQeVHsKxlYqzQz1I9Nwx/XkKtDyzqL3uEzCQ=) 3: JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa (hash: AF4y3k0K4M29JKvnm3WAi9rM2wiDZSTI7KiQY/+WwGQ=) 4: LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa (hash: 4NroWDI/8Q2pwsJ7z2O+ja04jrPKvPKyJQ0j1cEhZ+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:92:9e:b5:49:95:c8:6a:ef:bd:cc:8d:48:b6:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf Validity Not Before: Dec 12 07:00:38 2025 GMT Not After : Dec 13 07:00:38 2025 GMT Subject: CN=704c065c11bb34a9050ac28e642a2632c6fa4605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2f:b8:13:ec:e7:9e:d6:d3:f2:0e:f9:97:17: a0:49:f8:08:13:88:5e:65:7e:a0:77:83:f5:b1:11: 5c:e1:d9:20:1f:3c:73:93:92:a5:9e:12:d6:ad:9f: 14:2f:24:e3:15:13:42:c7:df:6f:59:25:46:30:07: 0e:90:3d:ff:e4:26:e9:e3:a3:07:dc:67:cd:ca:17: 6b:a0:15:b4:06:8f:e9:80:d9:8d:44:3c:a5:a2:34: 5e:dc:1c:ca:19:2b:8f:e0:64:49:9a:14:5e:7c:6f: bc:09:68:60:86:bb:68:b4:e9:2b:2c:2a:94:b1:90: c9:0a:28:2e:2a:2e:24:de:75:a1:e3:ac:3b:c1:5f: 7b:cf:b0:15:49:90:11:0a:3e:ae:84:10:06:bf:78: 12:20:82:bc:4e:99:c5:61:4e:65:c1:91:f0:bc:99: 2c:b3:91:9e:d0:5a:ca:4c:67:65:48:e7:fc:64:58: c0:fc:ca:c6:c4:62:29:b7:92:4e:9a:52:59:1f:25: 32:43:b1:4b:2c:07:e7:c7:37:41:8d:85:52:40:8f: e9:6c:c4:5e:99:02:06:69:1b:32:fd:86:98:86:d1: 20:ba:f4:86:5a:7b:b8:79:d2:91:ba:0d:1b:21:b2: 92:58:e7:33:c9:5e:fd:07:57:a4:bc:1f:22:c5:24: 0a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4C:06:5C:11:BB:34:A9:05:0A:C2:8E:64:2A:26:32:C6:FA:46:05 X509v3 Authority Key Identifier: keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b5:de:a3:d5:20:b7:f1:ac:ce:77:39:b8:c2:29:22:8f:63: c5:36:98:5c:3d:f4:91:a5:1e:1b:c0:0b:71:1e:1f:aa:88:c5: 38:a8:e3:6a:24:e1:00:f4:e9:17:2f:98:d0:4b:3c:08:9e:2e: a8:52:a3:b0:ac:0d:1e:f6:a1:33:12:aa:cb:6e:84:23:bd:a5: 35:f2:c7:a7:42:3b:e7:e5:c0:a9:61:16:58:6c:a9:6d:80:b9: ff:d0:d7:92:ec:23:3c:88:f5:0c:aa:75:c9:c0:77:c1:79:cc: ec:c8:75:3e:82:3b:11:01:9d:3d:6b:7b:15:0c:0e:f1:d7:7b: 05:d2:df:0b:8f:a1:bb:ad:ca:f7:4a:f3:9d:f7:07:ba:54:9e: b5:bd:e5:47:ca:a8:f5:51:82:d0:ed:9d:5f:de:cc:47:92:ff: d4:c4:36:04:ec:db:f9:21:42:77:9b:e9:38:ed:04:89:86:a7: c9:d5:af:98:a0:5d:9b:83:75:f3:9f:3d:7f:b8:59:47:e3:e8: c2:f5:13:b0:2c:57:29:f5:26:db:35:7f:60:d0:6b:c8:e1:85: 75:e6:58:90:26:79:4d:af:00:cf:83:1b:74:30:25:2b:c1:71: 83:56:16:26:9f:23:ae:1b:d4:fc:bc:02:8a:fa:61:24:42:93: bf:fc:d0:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXJKetUmVyGrvvcyNSLbmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YTg1MWRkYWU1YTY0Y2MzODgyNTM5NWJlOWE1MDdkYTk1 YWI3Y2YwHhcNMjUxMjEyMDcwMDM4WhcNMjUxMjEzMDcwMDM4WjAzMTEwLwYDVQQD Eyg3MDRjMDY1YzExYmIzNGE5MDUwYWMyOGU2NDJhMjYzMmM2ZmE0NjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi+4E+znntbT8g75lxegSfgIE4he ZX6gd4P1sRFc4dkgHzxzk5KlnhLWrZ8ULyTjFRNCx99vWSVGMAcOkD3/5Cbp46MH 3GfNyhdroBW0Bo/pgNmNRDylojRe3BzKGSuP4GRJmhRefG+8CWhghrtotOkrLCqU sZDJCiguKi4k3nWh46w7wV97z7AVSZARCj6uhBAGv3gSIIK8TpnFYU5lwZHwvJks s5Ge0FrKTGdlSOf8ZFjA/MrGxGIpt5JOmlJZHyUyQ7FLLAfnxzdBjYVSQI/pbMRe mQIGaRsy/YaYhtEguvSGWnu4edKRug0bIbKSWOczyV79B1ekvB8ixSQKOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBMBlwRuzSpBQrCjmQqJjLG+kYFMB8GA1UdIwQY MBaAFOioUd2uWmTMOIJTlb6aUH2pWrfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zNjM4ZDctM2VjMy00NTk1LWE2MzEt MTEwYzg3OGRjZDI5LzEvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zNjM4ZDctM2VjMy00NTk1LWE2MzEtMTEwYzg3OGRjZDI5 LzEvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrXeo9Ug t/Gsznc5uMIpIo9jxTaYXD30kaUeG8ALcR4fqojFOKjjaiThAPTpFy+Y0Es8CJ4u qFKjsKwNHvahMxKqy26EI72lNfLHp0I75+XAqWEWWGypbYC5/9DXkuwjPIj1DKp1 ycB3wXnM7Mh1PoI7EQGdPWt7FQwO8dd7BdLfC4+hu63K90rznfcHulSetb3lR8qo 9VGC0O2dX97MR5L/1MQ2BOzb+SFCd5vpOO0EiYanydWvmKBdm4N18589f7hZR+Po wvUTsCxXKfUm2zV/YNBryOGFdeZYkCZ5Ta8Az4MbdDAlK8Fxg1YWJp8jrhvU/LwC ivphJEKTv/zQ9A== -----END CERTIFICATE-----Generated at Fri Dec 12 10:12:41 2025 by rpki-client