This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft File: 6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft (raw, json) Hash identifier: wvL3Qb7kiWDK6jJg/GGLq3wdt98lYz+JJE6utoGPNgc= Subject key identifier: 71:98:F1:62:37:F0:F7:51:B2:EB:E2:CD:C2:A6:94:F5:B1:02:0C:00 Authority key identifier: E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34 Certificate issuer: /CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34 Certificate serial: 019B59E43D7C50BB6EAE786153E16F7414A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft Manifest number: 120D Signing time: Fri 26 Dec 2025 09:01:28 +0000 Manifest this update: Fri 26 Dec 2025 09:01:28 +0000 Manifest next update: Sat 27 Dec 2025 09:01:28 +0000 Files and hashes: 1: 6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl (hash: pucbqSTGsgJsVsp4+TpPut+z5c4RtYzwMi8IN6wN9O8=) 2: syj71zZ8MwWTuavJrSv9ey-GiNY.roa (hash: OwP0pURWBASyJxlo+FTFHbY+Smo6gzpAgQ+Dz8xZ608=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:3d:7c:50:bb:6e:ae:78:61:53:e1:6f:74:14:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34 Validity Not Before: Dec 26 09:01:28 2025 GMT Not After : Dec 27 09:01:28 2025 GMT Subject: CN=7198f16237f0f751b2ebe2cdc2a694f5b1020c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3c:09:cb:1f:f0:3c:39:a5:f2:f0:a9:aa:86: 3e:cf:09:43:99:5e:b8:04:2a:4d:56:57:90:24:46: 36:18:c1:ee:b5:77:6d:a9:ba:f1:aa:4e:ab:d1:f6: 13:c7:69:a5:0b:4b:4f:b7:eb:6e:cf:1a:83:bc:c0: e0:85:30:36:b9:33:e7:47:b3:a6:5c:75:34:97:dd: c4:70:68:7c:27:51:3c:bb:d7:c6:c3:9b:15:e7:c1: 68:ea:91:ca:29:54:08:a9:5f:3f:89:1c:b5:65:df: c8:9b:af:e8:49:0d:42:1a:a9:68:7c:21:c2:ec:f1: 46:4a:d9:bc:74:07:f8:9d:5a:64:63:af:ee:90:e8: 99:21:0a:3b:90:d6:63:b5:d4:2c:02:11:1b:d6:1c: d0:91:51:7e:f1:f9:14:c6:d1:85:52:e1:6b:5a:e0: f5:cc:a5:af:8d:f4:13:59:97:f9:60:f6:5d:b8:14: 55:14:94:38:fe:0c:54:31:3c:d1:f0:93:22:de:1a: 7e:19:a1:64:5f:e8:b5:57:dc:d4:fd:cc:86:f9:6e: ac:01:7d:ed:82:c2:39:97:6e:cd:96:2c:28:9f:2c: ae:ac:1a:b4:dd:b0:94:a7:a8:c0:3c:e3:00:be:74: be:1d:48:1f:91:60:15:85:b9:4a:79:bf:99:d8:0b: 1a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:98:F1:62:37:F0:F7:51:B2:EB:E2:CD:C2:A6:94:F5:B1:02:0C:00 X509v3 Authority Key Identifier: keyid:E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:2d:0b:a6:cf:ad:b4:24:60:95:0b:cf:9b:0c:85:14:4b:74: 9a:99:de:08:07:a3:c2:71:aa:39:e4:2a:49:72:20:c2:0b:90: 96:d3:a7:35:8a:de:a1:90:7d:20:31:61:53:7c:37:14:c7:d8: a3:ae:43:4d:72:18:0e:de:aa:22:19:61:91:74:26:d9:34:df: 8c:bf:ce:e5:e8:ef:6d:b7:ce:a8:34:43:ab:d3:c8:b7:14:06: e0:29:6f:1a:8d:d6:5c:8b:af:65:4a:54:3e:be:72:78:1e:9d: 46:de:c9:e6:bd:c8:42:74:91:67:3d:a2:6b:12:28:5e:aa:f6: 1c:51:6f:90:ca:4f:ae:bd:32:95:32:a3:76:68:17:bc:5c:80: c5:51:49:47:0c:8a:5b:d4:17:d5:d9:b3:01:43:fd:d4:2e:4f: 77:7e:14:4c:92:73:87:ba:a1:10:93:f7:25:5b:76:7f:63:1b: 8e:af:13:9b:ae:fd:32:a8:de:8c:33:dc:a1:1f:de:49:62:03: 49:9a:5c:40:f5:93:5d:43:56:5f:0e:80:31:e6:58:66:08:3f: 51:b8:88:db:64:75:7e:7b:6b:63:34:5e:fa:24:c4:56:44:e5: 08:6a:d0:93:f8:f2:19:2c:94:f0:c5:6c:e6:48:4d:c6:d7:73: 19:9e:68:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5D18ULturnhhU+FvdBSgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDE4Nzk4NGZhYWVmZjhmYTFkMGQ0OGFlZDdjMGNmZDgw MGRlMzQwHhcNMjUxMjI2MDkwMTI4WhcNMjUxMjI3MDkwMTI4WjAzMTEwLwYDVQQD Eyg3MTk4ZjE2MjM3ZjBmNzUxYjJlYmUyY2RjMmE2OTRmNWIxMDIwYzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjwJyx/wPDml8vCpqoY+zwlDmV64 BCpNVleQJEY2GMHutXdtqbrxqk6r0fYTx2mlC0tPt+tuzxqDvMDghTA2uTPnR7Om XHU0l93EcGh8J1E8u9fGw5sV58Fo6pHKKVQIqV8/iRy1Zd/Im6/oSQ1CGqlofCHC 7PFGStm8dAf4nVpkY6/ukOiZIQo7kNZjtdQsAhEb1hzQkVF+8fkUxtGFUuFrWuD1 zKWvjfQTWZf5YPZduBRVFJQ4/gxUMTzR8JMi3hp+GaFkX+i1V9zU/cyG+W6sAX3t gsI5l27NliwonyyurBq03bCUp6jAPOMAvnS+HUgfkWAVhblKeb+Z2AsaNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGY8WI38PdRsuvizcKmlPWxAgwAMB8GA1UdIwQY MBaAFOhBh5hPqu/4+h0NSK7XwM/YAN40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVHSG1FLXE3X2o2SFExSXJ0ZkF6OWdBM2pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81ZGYyMzEtMjY4NC00ZjEzLWFiNmYt ZWEzMDJhZDE4YWQ2LzEvNkVHSG1FLXE3X2o2SFExSXJ0ZkF6OWdBM2pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS81ZGYyMzEtMjY4NC00ZjEzLWFiNmYtZWEzMDJhZDE4YWQ2 LzEvNkVHSG1FLXE3X2o2SFExSXJ0ZkF6OWdBM2pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAly0Lps+t tCRglQvPmwyFFEt0mpneCAejwnGqOeQqSXIgwguQltOnNYreoZB9IDFhU3w3FMfY o65DTXIYDt6qIhlhkXQm2TTfjL/O5ejvbbfOqDRDq9PItxQG4ClvGo3WXIuvZUpU Pr5yeB6dRt7J5r3IQnSRZz2iaxIoXqr2HFFvkMpPrr0ylTKjdmgXvFyAxVFJRwyK W9QX1dmzAUP91C5Pd34UTJJzh7qhEJP3JVt2f2Mbjq8Tm679MqjejDPcoR/eSWID SZpcQPWTXUNWXw6AMeZYZgg/UbiI22R1fntrYzRe+iTEVkTlCGrQk/jyGSyU8MVs 5khNxtdzGZ5ofw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:24 2025 by rpki-client