This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft File: 6EKkZljB0BusjUOWHGtJ54jjzMM.mft (raw, json) Hash identifier: U6BCDa4zF3qXIA/ukK53SgXwNigIF4bRj0gju97ra0Y= Subject key identifier: 0F:DF:54:86:47:32:92:D9:A5:2F:20:64:50:E8:94:33:53:62:33:74 Authority key identifier: E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3 Certificate issuer: /CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3 Certificate serial: 019B3644F3E6B044F0488E20C465454145A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 11:00:47 +0000 Manifest this update: Fri 19 Dec 2025 11:00:47 +0000 Manifest next update: Sat 20 Dec 2025 11:00:47 +0000 Files and hashes: 1: 6EKkZljB0BusjUOWHGtJ54jjzMM.crl (hash: Qca6KIwOCHLMtDAWyOro8ryLCFqhYtTFGYZF+rFCy5I=) 2: xANWJIQxy5Izrn9gOyePr5tbhgY.roa (hash: BAFdEGijvRbR7pMhm3hhAYe67gFmqJkY0ASzrXKygw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:44:f3:e6:b0:44:f0:48:8e:20:c4:65:45:41:45:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3 Validity Not Before: Dec 19 11:00:47 2025 GMT Not After : Dec 20 11:00:47 2025 GMT Subject: CN=0fdf5486473292d9a52f206450e8943353623374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:be:a3:f2:27:a6:b5:44:c1:36:c3:a1:51:5e: 38:bb:9f:a9:1a:52:35:a5:7f:25:40:54:a3:11:41: f3:79:c4:58:0f:4a:b7:9a:90:d0:04:93:ef:e0:1f: ae:ab:ca:57:02:c0:4a:b4:d2:0e:49:37:a6:4c:9f: fa:3e:26:80:00:23:5a:87:8f:f2:4d:67:60:73:ad: 89:90:c3:e4:8f:1f:7d:89:5a:31:2b:86:12:16:9e: 4f:61:6a:15:4b:d6:c9:62:18:a6:14:d2:be:4a:96: 80:70:48:20:41:55:76:81:eb:b1:9a:db:e4:0a:4e: a8:1d:ba:8a:56:0a:93:0f:57:29:e5:d1:a8:cd:58: 79:50:a7:20:1a:3b:97:36:96:56:58:01:d2:f2:e0: f0:c0:30:f9:01:4d:a5:c1:88:ab:0f:d7:43:f8:d4: db:93:61:0b:8f:38:ac:55:71:aa:76:29:de:6b:f3: dd:33:fb:d7:59:5d:d0:fe:c5:a3:23:05:55:06:86: f6:94:76:01:b3:e4:20:26:81:9a:b1:b5:dc:ac:ed: e7:cc:68:a3:51:1c:f2:93:f0:9b:85:af:5e:78:1a: e0:35:2a:be:9e:63:a2:e1:4d:c3:a4:1a:de:bc:79: 96:b1:fd:c5:dd:80:bc:ad:a1:97:77:82:d3:30:41: cc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DF:54:86:47:32:92:D9:A5:2F:20:64:50:E8:94:33:53:62:33:74 X509v3 Authority Key Identifier: keyid:E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:ec:dc:a8:e6:eb:4e:25:7b:bd:d5:2e:6c:b1:2e:3f:c9:e5: ad:dc:df:56:8c:1e:df:71:59:0d:fc:9d:40:05:9a:93:37:ca: 30:9f:f3:63:ed:d7:f8:87:ce:cb:61:34:ef:64:d1:db:fa:f9: ef:c8:63:4d:c3:6b:b9:d6:47:0f:57:ea:a8:26:a3:bc:79:a9: 36:60:ef:64:2f:a3:9f:c1:41:70:e4:45:18:4f:13:59:00:76: 96:5b:75:4d:ad:9b:49:e5:63:03:a2:e2:8d:71:d5:28:a7:77: bc:06:15:39:b8:46:6f:7e:dc:4d:52:bc:95:d8:1b:f7:ea:43: 80:09:b5:c2:7e:46:8e:94:46:94:0f:5d:fe:35:d1:39:fe:46: 3b:0d:5d:c1:8a:09:b1:43:60:30:5f:81:60:05:2d:fe:09:5a: 28:e0:d6:ea:45:fc:96:d3:55:f5:2a:a1:58:68:16:29:44:84: 68:8d:66:03:1b:b2:f9:0c:2f:61:23:be:ca:72:13:9d:f5:dc: 63:51:8d:52:c3:68:27:f1:bf:11:c5:de:eb:36:34:80:04:f1: 83:b1:fa:23:3d:ef:fd:ae:f9:a6:c1:fb:29:66:2a:92:66:b8: d7:08:0a:80:92:6c:86:a2:eb:8c:46:fc:78:0a:b8:ac:3e:7b: aa:a6:b4:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RPPmsETwSI4gxGVFQUWoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDJhNDY2NThjMWQwMWJhYzhkNDM5NjFjNmI0OWU3ODhl M2NjYzMwHhcNMjUxMjE5MTEwMDQ3WhcNMjUxMjIwMTEwMDQ3WjAzMTEwLwYDVQQD EygwZmRmNTQ4NjQ3MzI5MmQ5YTUyZjIwNjQ1MGU4OTQzMzUzNjIzMzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL6j8iemtUTBNsOhUV44u5+pGlI1 pX8lQFSjEUHzecRYD0q3mpDQBJPv4B+uq8pXAsBKtNIOSTemTJ/6PiaAACNah4/y TWdgc62JkMPkjx99iVoxK4YSFp5PYWoVS9bJYhimFNK+SpaAcEggQVV2geuxmtvk Ck6oHbqKVgqTD1cp5dGozVh5UKcgGjuXNpZWWAHS8uDwwDD5AU2lwYirD9dD+NTb k2ELjzisVXGqdinea/PdM/vXWV3Q/sWjIwVVBob2lHYBs+QgJoGasbXcrO3nzGij URzyk/Cbha9eeBrgNSq+nmOi4U3DpBrevHmWsf3F3YC8raGXd4LTMEHMxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/fVIZHMpLZpS8gZFDolDNTYjN0MB8GA1UdIwQY MBaAFOhCpGZYwdAbrI1DlhxrSeeI48zDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVLa1psakIwQnVzalVPV0hHdEo1NGpqek1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jZDA5MmUtNmJlYi00MDM3LThhNWEt ZmFlOGQ0MmFlNWU1LzEvNkVLa1psakIwQnVzalVPV0hHdEo1NGpqek1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9jZDA5MmUtNmJlYi00MDM3LThhNWEtZmFlOGQ0MmFlNWU1 LzEvNkVLa1psakIwQnVzalVPV0hHdEo1NGpqek1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+zcqObr TiV7vdUubLEuP8nlrdzfVowe33FZDfydQAWakzfKMJ/zY+3X+IfOy2E072TR2/r5 78hjTcNrudZHD1fqqCajvHmpNmDvZC+jn8FBcORFGE8TWQB2llt1Ta2bSeVjA6Li jXHVKKd3vAYVObhGb37cTVK8ldgb9+pDgAm1wn5GjpRGlA9d/jXROf5GOw1dwYoJ sUNgMF+BYAUt/glaKODW6kX8ltNV9SqhWGgWKUSEaI1mAxuy+QwvYSO+ynITnfXc Y1GNUsNoJ/G/EcXe6zY0gATxg7H6Iz3v/a75psH7KWYqkma41wgKgJJshqLrjEb8 eAq4rD57qqa0Tw== -----END CERTIFICATE-----Generated at Fri Dec 19 21:11:18 2025 by rpki-client