This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft File: 6WS8XQrZ6gXijILnaP8U0ddNL-s.mft (raw, json) Hash identifier: pUhHEGzXyhUCJYF8cgfbBjbp/2+pqipPx/8VJq39qm0= Subject key identifier: 1E:11:55:DA:A6:9D:EB:42:6A:F6:49:80:A4:EF:0C:22:4E:18:CD:A4 Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB Certificate issuer: /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb Certificate serial: 019B36B367553BBA96AE0D9106E7F4425F64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft Manifest number: 08FF Signing time: Fri 19 Dec 2025 13:01:25 +0000 Manifest this update: Fri 19 Dec 2025 13:01:25 +0000 Manifest next update: Sat 20 Dec 2025 13:01:25 +0000 Files and hashes: 1: 47Z2HtdwofFjyVEFI9qNr2a-tVU.roa (hash: DNKD/o+eynRMlQCW6kVsQCccIBeiYPf64PT1npjPvG4=) 2: 6WS8XQrZ6gXijILnaP8U0ddNL-s.crl (hash: HFn7mxVI2cxRMDHK71Lu2xBLGpF41TJDKbD4qNZhQl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:67:55:3b:ba:96:ae:0d:91:06:e7:f4:42:5f:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb Validity Not Before: Dec 19 13:01:25 2025 GMT Not After : Dec 20 13:01:25 2025 GMT Subject: CN=1e1155daa69deb426af64980a4ef0c224e18cda4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:cd:af:bc:98:b9:4a:a2:64:ed:6c:97:9d: f1:1d:72:a5:2f:21:aa:0a:63:05:42:66:53:8d:03: 28:91:b5:13:0b:1c:8d:b1:03:ef:99:71:43:27:c0: 9b:cc:35:28:2a:b1:03:20:62:7c:c7:69:11:18:0c: 05:26:e9:33:6a:30:99:e9:dd:cf:95:d3:e2:62:88: b9:80:cf:8b:36:ce:70:03:5e:43:32:72:92:da:a7: b9:e4:15:62:f1:7b:0c:d1:3e:1a:32:fa:87:31:4c: ed:63:92:9f:86:6c:33:76:d5:32:ae:04:76:60:c7: 67:2a:76:b6:72:04:0d:cc:83:3f:97:b2:cd:52:f9: 63:93:40:63:9e:4e:24:ed:03:92:e9:a1:a8:49:91: c7:d7:d5:29:71:6d:18:c6:ae:22:e5:07:a4:29:42: 6a:a3:fe:bc:ff:39:1d:34:a7:dd:3d:ed:a8:23:a1: 58:ba:47:89:a0:ad:6e:b6:5b:65:31:ed:8a:b3:5e: fb:e0:d8:e8:a6:2b:66:4a:e1:ae:9c:05:6b:6d:da: d3:66:dc:0d:51:e8:90:0f:a3:b3:ce:20:3c:e2:06: 2c:8d:11:a5:9b:b5:ca:14:55:15:f3:82:b6:b2:c2: 0b:69:57:b4:9e:f1:a0:d9:27:ef:76:a7:55:d4:99: 3c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:11:55:DA:A6:9D:EB:42:6A:F6:49:80:A4:EF:0C:22:4E:18:CD:A4 X509v3 Authority Key Identifier: keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:07:06:a0:f5:2b:0f:9b:0c:6a:d2:7f:71:9b:72:9f:20:7a: 00:63:83:a9:02:55:bf:47:17:af:2d:ad:85:13:d4:e7:9e:d4: 5a:37:fb:68:dc:ba:35:91:ec:51:78:27:06:50:40:c8:1c:d6: af:89:ac:ba:93:d7:e1:38:1f:62:a6:b3:6e:d5:52:2b:75:8a: 43:65:72:77:f1:98:5a:21:e1:c8:b8:bc:5b:32:c7:69:0d:ae: 58:a1:79:a4:01:d6:71:45:33:9b:a0:de:53:d0:eb:56:dd:72: 1d:22:30:6e:8b:07:6b:0c:3f:27:ec:e8:e5:3f:96:e4:32:51: ab:01:bb:7f:c2:ad:61:e4:bc:57:4b:3c:84:68:67:83:1b:ab: 87:18:82:2f:8a:69:98:2d:fb:83:45:34:da:9b:14:0a:a9:92: 32:80:bf:eb:00:5b:a3:10:4d:06:f0:d6:91:18:1c:0b:33:dc: 83:69:6e:9b:43:36:54:bd:15:11:5e:fd:a6:db:79:a7:f0:1f: 49:bf:d0:b8:8e:81:9b:e8:da:83:c7:76:1c:e8:78:19:c5:63: 75:c4:03:8d:13:1a:72:f0:ec:c9:dc:2d:9b:c9:3b:14:55:d9: 22:b4:41:01:70:34:74:d5:f9:35:5b:52:0e:e3:9a:da:bb:ee: 7f:76:15:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s2dVO7qWrg2RBuf0Ql9kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NjRiYzVkMGFkOWVhMDVlMjhjODJlNzY4ZmYxNGQxZDc0 ZDJmZWIwHhcNMjUxMjE5MTMwMTI1WhcNMjUxMjIwMTMwMTI1WjAzMTEwLwYDVQQD EygxZTExNTVkYWE2OWRlYjQyNmFmNjQ5ODBhNGVmMGMyMjRlMThjZGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3/Nr7yYuUqiZO1sl53xHXKlLyGq CmMFQmZTjQMokbUTCxyNsQPvmXFDJ8CbzDUoKrEDIGJ8x2kRGAwFJukzajCZ6d3P ldPiYoi5gM+LNs5wA15DMnKS2qe55BVi8XsM0T4aMvqHMUztY5KfhmwzdtUyrgR2 YMdnKna2cgQNzIM/l7LNUvljk0Bjnk4k7QOS6aGoSZHH19UpcW0Yxq4i5QekKUJq o/68/zkdNKfdPe2oI6FYukeJoK1utltlMe2Ks1774NjopitmSuGunAVrbdrTZtwN UeiQD6OzziA84gYsjRGlm7XKFFUV84K2ssILaVe0nvGg2SfvdqdV1Jk8FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4RVdqmnetCavZJgKTvDCJOGM2kMB8GA1UdIwQY MBaAFOlkvF0K2eoF4oyC52j/FNHXTS/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNldTOFhRclo2Z1hpaklMbmFQOFUwZGROTC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xYzhjYmEtNzQ5MS00NTQ2LTk5NTMt NTg5OWE3NGJlMmFlLzEvNldTOFhRclo2Z1hpaklMbmFQOFUwZGROTC1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xYzhjYmEtNzQ5MS00NTQ2LTk5NTMtNTg5OWE3NGJlMmFl LzEvNldTOFhRclo2Z1hpaklMbmFQOFUwZGROTC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxAcGoPUr D5sMatJ/cZtynyB6AGODqQJVv0cXry2thRPU557UWjf7aNy6NZHsUXgnBlBAyBzW r4msupPX4TgfYqazbtVSK3WKQ2Vyd/GYWiHhyLi8WzLHaQ2uWKF5pAHWcUUzm6De U9DrVt1yHSIwbosHaww/J+zo5T+W5DJRqwG7f8KtYeS8V0s8hGhngxurhxiCL4pp mC37g0U02psUCqmSMoC/6wBboxBNBvDWkRgcCzPcg2lum0M2VL0VEV79ptt5p/Af Sb/QuI6Bm+jag8d2HOh4GcVjdcQDjRMacvDsydwtm8k7FFXZIrRBAXA0dNX5NVtS DuOa2rvuf3YVZQ== -----END CERTIFICATE-----Generated at Fri Dec 19 15:24:37 2025 by rpki-client