This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft File: 6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft (raw, json) Hash identifier: /32Qr+JGBAyFENGXHfyl+lDlhXCm79LWK1+VQ1nJrBY= Subject key identifier: E3:F7:58:7C:1C:FA:27:CE:3E:F0:7F:6C:3E:56:6E:11:B0:5C:C5:23 Authority key identifier: E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59 Certificate issuer: /CN=e979403cd68c98df738e31062903a0b322600b59 Certificate serial: 019B42B7B9D4CAE6F3E7A96E27DAB56E6077 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft Manifest number: 0333 Signing time: Sun 21 Dec 2025 21:01:35 +0000 Manifest this update: Sun 21 Dec 2025 21:01:35 +0000 Manifest next update: Mon 22 Dec 2025 21:01:35 +0000 Files and hashes: 1: 6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl (hash: ifEZYWQ60lzSfycVvWkb2G84p9WF1viL4RF0nTnL9+M=) 2: F2xZ9QgRce67ga9Jmar4OMuLjGo.roa (hash: bnt8ZsENPOXky7xH9NrByc19Ki/WFnxkHvhWkRdi1JQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:b9:d4:ca:e6:f3:e7:a9:6e:27:da:b5:6e:60:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e979403cd68c98df738e31062903a0b322600b59 Validity Not Before: Dec 21 21:01:35 2025 GMT Not After : Dec 22 21:01:35 2025 GMT Subject: CN=e3f7587c1cfa27ce3ef07f6c3e566e11b05cc523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:80:61:8d:1d:e0:2a:8c:a5:88:7a:07:82:62: d9:cd:c9:d5:fc:d0:6b:9c:2f:56:81:b1:1b:fc:49: 85:41:59:bc:ad:10:45:9e:76:7f:12:a4:86:a8:2e: 62:46:95:e3:65:2c:87:4b:e3:7b:71:07:5f:35:4d: 67:b0:9f:e1:0e:1c:05:4d:6d:7e:84:87:6d:b1:be: aa:48:a6:39:0f:e1:50:ae:c3:ad:2a:50:3c:c6:5a: 9c:7f:94:00:3c:d0:60:56:10:c7:a8:86:b7:88:6c: ae:ad:3e:45:6d:7e:15:b9:8c:d5:66:67:a1:6f:80: 12:4b:b4:82:f6:df:78:93:09:8d:6d:6f:3b:49:24: 0b:d7:1b:94:df:94:00:91:a5:ab:96:42:20:1c:90: 1f:d5:e5:98:e7:c6:5b:82:75:9f:25:ca:7a:5a:46: 61:88:6a:14:e4:b0:eb:6f:72:d8:03:a0:56:53:7d: fe:d5:40:08:1a:fa:89:59:f7:46:88:bd:d5:f1:ec: 8b:86:32:52:6f:1f:30:b7:9b:3a:ed:2b:3c:b5:fd: 3e:aa:f3:1b:10:2f:b4:a5:31:aa:58:d5:6a:d9:2f: 12:f9:0a:02:5e:bd:cf:4a:7d:5d:1b:25:7e:0e:cd: e2:54:97:c5:c0:22:50:1d:bf:b8:95:b3:71:77:c7: e9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F7:58:7C:1C:FA:27:CE:3E:F0:7F:6C:3E:56:6E:11:B0:5C:C5:23 X509v3 Authority Key Identifier: keyid:E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:3d:0a:a6:d9:0d:c1:21:f4:0c:94:be:7e:2d:40:09:76:a9: 81:2d:8d:41:b9:4c:b5:f0:1c:1b:9c:ea:60:a1:0a:49:94:35: 20:51:ac:2f:de:57:25:aa:a1:92:06:b0:7d:79:1e:df:f6:81: 54:8b:df:5f:0b:a4:df:f3:b1:df:d2:6f:1c:42:9a:bd:9d:d8: e7:22:1f:82:97:1e:d1:fa:18:43:b5:98:06:1d:21:82:cc:7f: 84:90:48:a8:df:47:db:a5:27:3c:43:ac:cd:cf:fc:16:d3:fe: 09:33:6d:ba:95:ab:62:8a:8a:e3:d8:67:fe:7a:20:05:fe:af: ff:46:d9:12:ee:84:8e:8a:45:f1:ba:e6:62:39:11:56:52:45: b5:09:05:d5:23:6a:93:db:75:ea:03:04:1a:8f:f4:86:34:1d: 69:c7:7b:c8:10:d0:8e:2c:1a:23:63:06:b0:8e:fe:30:c1:70: e7:65:2f:c4:3c:2e:9d:8c:42:3b:fc:34:6a:3d:5e:e3:74:f5: f6:b3:d5:c9:76:b4:d0:8a:84:da:44:ae:5a:57:72:0d:07:87: fe:d3:34:84:f2:4f:84:bf:a3:89:f8:6f:d0:b1:e0:df:e6:9d: 69:bc:1e:ee:08:72:c4:f2:e0:23:b3:10:6c:4c:e8:4d:ee:63: 17:fa:f3:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt7nUyubz56luJ9q1bmB3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5Nzk0MDNjZDY4Yzk4ZGY3MzhlMzEwNjI5MDNhMGIzMjI2 MDBiNTkwHhcNMjUxMjIxMjEwMTM1WhcNMjUxMjIyMjEwMTM1WjAzMTEwLwYDVQQD EyhlM2Y3NTg3YzFjZmEyN2NlM2VmMDdmNmMzZTU2NmUxMWIwNWNjNTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oBhjR3gKoyliHoHgmLZzcnV/NBr nC9WgbEb/EmFQVm8rRBFnnZ/EqSGqC5iRpXjZSyHS+N7cQdfNU1nsJ/hDhwFTW1+ hIdtsb6qSKY5D+FQrsOtKlA8xlqcf5QAPNBgVhDHqIa3iGyurT5FbX4VuYzVZmeh b4ASS7SC9t94kwmNbW87SSQL1xuU35QAkaWrlkIgHJAf1eWY58ZbgnWfJcp6WkZh iGoU5LDrb3LYA6BWU33+1UAIGvqJWfdGiL3V8eyLhjJSbx8wt5s67Ss8tf0+qvMb EC+0pTGqWNVq2S8S+QoCXr3PSn1dGyV+Ds3iVJfFwCJQHb+4lbNxd8fpxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOP3WHwc+ifOPvB/bD5WbhGwXMUjMB8GA1UdIwQY MBaAFOl5QDzWjJjfc44xBikDoLMiYAtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMDNhOGYtMzY3Zi00Y2ZhLTlhNzgt ZTgxNjIxYjYxZDY1LzEvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMDNhOGYtMzY3Zi00Y2ZhLTlhNzgtZTgxNjIxYjYxZDY1 LzEvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiz0KptkN wSH0DJS+fi1ACXapgS2NQblMtfAcG5zqYKEKSZQ1IFGsL95XJaqhkgawfXke3/aB VIvfXwuk3/Ox39JvHEKavZ3Y5yIfgpce0foYQ7WYBh0hgsx/hJBIqN9H26UnPEOs zc/8FtP+CTNtupWrYoqK49hn/nogBf6v/0bZEu6EjopF8brmYjkRVlJFtQkF1SNq k9t16gMEGo/0hjQdacd7yBDQjiwaI2MGsI7+MMFw52UvxDwunYxCO/w0aj1e43T1 9rPVyXa00IqE2kSuWldyDQeH/tM0hPJPhL+jifhv0LHg3+adabwe7ghyxPLgI7MQ bEzoTe5jF/rzvQ== -----END CERTIFICATE-----Generated at Mon Dec 22 05:35:15 2025 by rpki-client