This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft File: 6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json) Hash identifier: bg3KyNr61ZqwZYxr3IO94mhRRwmwnyLBVydtSfc8wRY= Subject key identifier: B1:58:7F:8D:61:E3:54:85:9B:2C:4F:F9:74:EF:FF:7B:15:16:12:83 Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 019B405B4C9BE933B3413CE62A09135E3AAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft Manifest number: 1791 Signing time: Sun 21 Dec 2025 10:01:23 +0000 Manifest this update: Sun 21 Dec 2025 10:01:23 +0000 Manifest next update: Mon 22 Dec 2025 10:01:23 +0000 Files and hashes: 1: 2Jzb6w4oYzNJE4bGcrmSl7n0CO4.roa (hash: 8etDRQmlSGkqycZzchAQWOixmXQimMYOT2fju9p36fk=) 2: 425pG85CvD-WqD7G4q_XQGIKAqg.roa (hash: A277nuuzcfZvxdezgnYr9eoNlhLje+Mf+PFtPMVmfws=) 3: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: TFUBeYnRisbIQoS+nNDDbpm2Lxn6PBpPENz9ycRUa8c=) 4: 6xhDMjLWegiTNxnVw5JYv0_kcfM.roa (hash: rSZUF0buOyvvO3wABYCztQlwFfnFNw3uLkpmp4vM9pw=) 5: 7918jeDcIeSJXbD16xxGwzri6_4.roa (hash: OQCYlsdbEYMUMcdfr++Yt7VINvKQ1QgUov/whsjb0xQ=) 6: 7dXC-hkge0H4SOrjlCk1xFHWw8U.roa (hash: Fv3L9KsADEPnVWxrZ7KT3btIpKM9bZT63ylJbPal16k=) 7: B_U0Thd2hek7c5TP5isgn3nFY38.roa (hash: oQ6pviFf5arQiDT+3KFkPtsqKciLEZWlSeEkqGt55/c=) 8: IJoxcEd7VggD3on9VNdBwQ2ai4M.roa (hash: l1C0lwy47+vk4Lvd7mWl9lGXam1kddh45sEhzv6D1cA=) 9: Li9WS8jXFR2-r4mTOoCwgP_Ts9o.roa (hash: yRVJgK21z7DKohg/kc7sh2OmWee+mkk6rOMmBxFGPjU=) 10: YJZNgRJlEy3RdWs3RjwaLO4bvJA.roa (hash: 0UFTkDt8H+rkJYm49DfFVoTWb/FfDGLtDdWOpr/Q0pQ=) 11: acU8LPcjjnuwpEGnrC28mxzfjkI.roa (hash: LwbfB5h8UeIfjkLBn8DXzcf/70aOb76OSwOezLnK2PU=) 12: cYJ91ITuYXoj33vFG-jF0Fh-ajc.roa (hash: Z/p5QOfcesLJQjsnSA/ia08r7lvPlhHAViiVlSC49cw=) 13: i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa (hash: pAwH7XsKC3usAyUBQbyxSsEwXZk/zTFKfD5sKnbUUxQ=) 14: kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa (hash: z9cTYSYhBDpdjPlGOiBqYli4fbEBwTaVHKlbVFfEd+M=) 15: zlkXUyhZ4IG5yixTeX8Zlu2XIc0.roa (hash: cWgGeGhxrJ9rs3dRl4+QpI+uA8NpZSK53ZDqjWD1dvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:4c:9b:e9:33:b3:41:3c:e6:2a:09:13:5e:3a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Dec 21 10:01:23 2025 GMT Not After : Dec 22 10:01:23 2025 GMT Subject: CN=b1587f8d61e354859b2c4ff974efff7b15161283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:97:52:41:b5:e8:90:5a:81:08:a4:c9:76:ac: b2:a6:88:bb:52:cd:0e:e2:1d:8d:ca:52:10:a2:1b: 35:d7:11:41:89:49:46:60:b4:b4:70:7d:73:e2:80: 3a:98:b3:a0:cc:bc:d8:c1:71:6c:ef:89:20:28:54: 99:bc:a2:18:d7:9e:d4:4e:5c:40:90:00:b2:14:99: 3a:99:28:f0:d0:59:f2:75:e9:ed:0b:cc:e2:a3:e2: f8:23:e2:e4:11:72:31:e3:53:b5:f6:3b:f5:c4:99: 2b:32:ea:a7:8d:e0:7f:94:f0:3f:ba:66:57:14:f7: 2b:73:df:00:09:84:1c:4c:db:3f:b7:69:3e:bf:74: 43:5e:35:05:e2:ef:b0:45:6a:31:fd:ed:fb:b0:03: 71:d6:6d:12:9c:75:36:2a:df:af:6a:b3:5a:7c:41: 78:c6:c3:a6:86:ad:1a:f2:6a:a6:60:2e:e3:79:cc: ca:61:c8:3b:7e:9c:4e:fc:fe:8a:c8:43:4b:1d:6e: 59:99:3d:27:f6:ae:46:22:71:af:04:18:91:ca:49: 83:bf:1d:c9:4c:7c:da:01:b3:4f:78:54:45:75:eb: 2f:41:1f:6e:5c:f0:2f:79:3e:0e:9c:f6:9f:21:f5: b4:a0:94:84:07:e6:71:31:3f:67:ac:db:4e:9e:93: e8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:58:7F:8D:61:E3:54:85:9B:2C:4F:F9:74:EF:FF:7B:15:16:12:83 X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b3:bb:9f:b2:3a:b2:ae:67:0c:19:03:9b:cd:98:56:33:e2: 02:2b:03:1c:e2:e2:c3:62:1e:5d:16:74:a3:03:e8:0e:dd:52: fe:70:e7:6c:36:8d:b5:f9:9c:81:21:8a:4b:b5:5c:c8:0d:02: bf:16:78:de:5a:e2:15:85:8c:9b:7b:2e:dd:59:85:e1:0d:81: 7c:f8:e9:cd:6f:48:b4:e3:26:0d:a1:83:73:b7:bd:37:8b:88: 20:5a:e0:1c:22:7c:5a:9a:c3:08:6f:e8:50:b7:07:59:cc:1e: 5c:0b:b6:cc:57:db:05:4c:04:5c:dd:86:9a:05:a5:45:54:76: 7d:ff:33:c6:c3:b8:e5:18:48:c1:68:4a:e5:5a:d4:e3:76:35: 1f:16:fc:bb:3f:7d:dc:0e:6b:f9:a0:ce:c2:b4:cc:97:07:fe: 73:9f:06:fb:a3:06:a1:76:a4:62:15:92:fa:ec:ed:8d:84:b9: ea:1a:21:04:7a:09:82:f6:c1:96:8c:8c:20:a2:63:48:b7:3e: ad:b3:7a:c5:3a:5a:0e:a9:fa:bc:71:d4:b1:e3:34:36:fd:ba: 59:7a:5b:91:9f:1a:55:b8:4d:ef:c3:cd:ee:3d:fc:ab:f9:db: 64:97:6a:30:c5:26:72:4d:44:47:aa:b9:d8:ce:43:69:0d:56: b1:d0:e5:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW0yb6TOzQTzmKgkTXjqsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjUxMjIxMTAwMTIzWhcNMjUxMjIyMTAwMTIzWjAzMTEwLwYDVQQD EyhiMTU4N2Y4ZDYxZTM1NDg1OWIyYzRmZjk3NGVmZmY3YjE1MTYxMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5dSQbXokFqBCKTJdqyypoi7Us0O 4h2NylIQohs11xFBiUlGYLS0cH1z4oA6mLOgzLzYwXFs74kgKFSZvKIY157UTlxA kACyFJk6mSjw0FnydentC8zio+L4I+LkEXIx41O19jv1xJkrMuqnjeB/lPA/umZX FPcrc98ACYQcTNs/t2k+v3RDXjUF4u+wRWox/e37sANx1m0SnHU2Kt+varNafEF4 xsOmhq0a8mqmYC7jeczKYcg7fpxO/P6KyENLHW5ZmT0n9q5GInGvBBiRykmDvx3J THzaAbNPeFRFdesvQR9uXPAveT4OnPafIfW0oJSEB+ZxMT9nrNtOnpPoCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFYf41h41SFmyxP+XTv/3sVFhKDMB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrO7n7I6 sq5nDBkDm82YVjPiAisDHOLiw2IeXRZ0owPoDt1S/nDnbDaNtfmcgSGKS7VcyA0C vxZ43lriFYWMm3su3VmF4Q2BfPjpzW9ItOMmDaGDc7e9N4uIIFrgHCJ8WprDCG/o ULcHWcweXAu2zFfbBUwEXN2GmgWlRVR2ff8zxsO45RhIwWhK5VrU43Y1Hxb8uz99 3A5r+aDOwrTMlwf+c58G+6MGoXakYhWS+uztjYS56hohBHoJgvbBloyMIKJjSLc+ rbN6xTpaDqn6vHHUseM0Nv26WXpbkZ8aVbhN78PN7j38q/nbZJdqMMUmck1ER6q5 2M5DaQ1WsdDlzA== -----END CERTIFICATE-----Generated at Sun Dec 21 17:31:03 2025 by rpki-client