This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.mft File: 6u-o-3F64LhsHl1nA1DSxzuefE4.mft (raw, json) Hash identifier: I3TS4vzu+MoNsiZccdlCJTI2Clsd+T6xwNk/VHUQyOs= Subject key identifier: 83:69:7F:A2:06:82:DB:D0:7E:AE:5B:A9:0F:06:C4:3E:B3:27:C5:72 Authority key identifier: EA:EF:A8:FB:71:7A:E0:B8:6C:1E:5D:67:03:50:D2:C7:3B:9E:7C:4E Certificate issuer: /CN=eaefa8fb717ae0b86c1e5d670350d2c73b9e7c4e Certificate serial: 019B597752436FD986A2B9360867F39D6C83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6u-o-3F64LhsHl1nA1DSxzuefE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.mft Manifest number: 89 Signing time: Fri 26 Dec 2025 07:02:30 +0000 Manifest this update: Fri 26 Dec 2025 07:02:30 +0000 Manifest next update: Sat 27 Dec 2025 07:02:30 +0000 Files and hashes: 1: 6u-o-3F64LhsHl1nA1DSxzuefE4.crl (hash: Qrkt1hm6i9pPvDYGMOLeJUpbnsEOpf82gNbcfGujVa8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.crl rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.mft rsync://rpki.ripe.net/repository/DEFAULT/6u-o-3F64LhsHl1nA1DSxzuefE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:52:43:6f:d9:86:a2:b9:36:08:67:f3:9d:6c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaefa8fb717ae0b86c1e5d670350d2c73b9e7c4e Validity Not Before: Dec 26 07:02:30 2025 GMT Not After : Dec 27 07:02:30 2025 GMT Subject: CN=83697fa20682dbd07eae5ba90f06c43eb327c572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:72:36:c4:f1:e0:43:7f:bb:75:60:e8:c8:3b: 80:f2:ed:b8:7b:98:45:3e:a8:86:3e:8d:43:07:96: 09:5b:26:03:25:e7:96:ef:c6:48:ad:f0:1c:d6:95: 3c:b3:65:3d:e8:ef:20:bc:24:eb:63:b1:53:9a:70: f4:07:f8:55:7e:63:a8:c5:06:c1:39:5a:77:4e:46: 4b:b6:b0:4d:be:1e:87:ac:8f:5b:8e:1b:d0:cc:82: c2:29:cc:09:b3:cc:48:3b:7a:38:e9:0d:bc:74:8f: 2d:a7:85:7b:1d:4e:e8:b2:7e:9f:94:57:75:56:7f: 48:85:25:e2:32:4d:73:cd:ec:e5:fc:fc:4a:cf:a5: 1f:6d:0c:4d:63:4c:4c:e7:37:3a:e8:16:09:eb:88: 0b:c7:a0:04:4e:ef:91:f7:5b:84:2a:af:2f:ff:77: 54:e8:68:09:95:03:05:4a:9a:82:14:e1:c1:cb:a7: 9d:d0:33:bf:2c:01:61:60:0b:c3:73:fa:05:5c:b0: 29:5b:22:68:c5:e7:fa:5a:5a:b3:1a:2c:e8:4c:c0: ba:e7:a1:49:16:2f:9a:41:b2:a5:38:46:65:2b:fd: fb:b3:f7:db:f8:7d:69:18:91:42:0d:49:e3:92:3c: 4a:b2:d1:59:95:a2:f4:15:03:5a:36:52:4e:6b:ae: 33:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:69:7F:A2:06:82:DB:D0:7E:AE:5B:A9:0F:06:C4:3E:B3:27:C5:72 X509v3 Authority Key Identifier: keyid:EA:EF:A8:FB:71:7A:E0:B8:6C:1E:5D:67:03:50:D2:C7:3B:9E:7C:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6u-o-3F64LhsHl1nA1DSxzuefE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:68:c4:f3:79:93:4e:8b:fa:2d:80:f2:90:fa:81:be:ff:94: 79:fd:3c:36:59:30:88:c6:92:4d:a9:df:e9:6e:e8:b8:ce:30: a2:60:c7:43:a9:fb:54:4b:05:68:ff:24:cf:86:41:37:e5:5f: f5:71:4c:4d:f4:dd:03:49:37:28:c8:05:69:f3:36:c4:af:60: 10:39:eb:f4:65:1f:59:1f:22:c8:87:16:89:17:52:44:a7:4b: 2f:4a:4e:1a:0d:f7:b4:b1:ba:bb:a0:f4:4a:e2:b5:b2:64:43: c4:4b:dc:25:2d:78:04:9d:07:2d:68:f1:2c:c8:f0:57:25:d4: 08:98:ac:48:c2:58:47:12:c3:d5:88:08:fd:3d:30:22:eb:a5: 23:7b:b2:af:fb:5d:e3:61:77:63:85:59:90:1f:f4:ff:4b:ce: fc:82:80:0e:1e:60:ea:fb:52:9e:60:ca:3e:49:e5:b3:dc:7a: fb:ae:a7:cb:f4:7d:55:eb:6b:d0:4a:d9:04:c5:71:6a:75:74: 29:2c:a5:ac:2c:3f:b3:93:85:31:b3:97:f2:7b:26:dc:21:d2: 7e:7e:e7:17:0a:0b:be:e8:24:ba:ab:d4:8c:03:2b:6a:b8:29: be:37:da:57:a5:c6:b9:66:d5:cb:a0:67:7f:51:fc:00:e0:00: 61:61:ce:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd1JDb9mGork2CGfznWyDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhZWZhOGZiNzE3YWUwYjg2YzFlNWQ2NzAzNTBkMmM3M2I5 ZTdjNGUwHhcNMjUxMjI2MDcwMjMwWhcNMjUxMjI3MDcwMjMwWjAzMTEwLwYDVQQD Eyg4MzY5N2ZhMjA2ODJkYmQwN2VhZTViYTkwZjA2YzQzZWIzMjdjNTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXI2xPHgQ3+7dWDoyDuA8u24e5hF PqiGPo1DB5YJWyYDJeeW78ZIrfAc1pU8s2U96O8gvCTrY7FTmnD0B/hVfmOoxQbB OVp3TkZLtrBNvh6HrI9bjhvQzILCKcwJs8xIO3o46Q28dI8tp4V7HU7osn6flFd1 Vn9IhSXiMk1zzezl/PxKz6UfbQxNY0xM5zc66BYJ64gLx6AETu+R91uEKq8v/3dU 6GgJlQMFSpqCFOHBy6ed0DO/LAFhYAvDc/oFXLApWyJoxef6WlqzGizoTMC656FJ Fi+aQbKlOEZlK/37s/fb+H1pGJFCDUnjkjxKstFZlaL0FQNaNlJOa64zWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINpf6IGgtvQfq5bqQ8GxD6zJ8VyMB8GA1UdIwQY MBaAFOrvqPtxeuC4bB5dZwNQ0sc7nnxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnUtby0zRjY0TGhzSGwxbkExRFN4enVlZkU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lNzZmMTUtNjg1My00ZGZiLWI2YmYt MzQ0YmJiNzI0MjQ5LzEvNnUtby0zRjY0TGhzSGwxbkExRFN4enVlZkU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9lNzZmMTUtNjg1My00ZGZiLWI2YmYtMzQ0YmJiNzI0MjQ5 LzEvNnUtby0zRjY0TGhzSGwxbkExRFN4enVlZkU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmjE83mT Tov6LYDykPqBvv+Uef08NlkwiMaSTanf6W7ouM4womDHQ6n7VEsFaP8kz4ZBN+Vf 9XFMTfTdA0k3KMgFafM2xK9gEDnr9GUfWR8iyIcWiRdSRKdLL0pOGg33tLG6u6D0 SuK1smRDxEvcJS14BJ0HLWjxLMjwVyXUCJisSMJYRxLD1YgI/T0wIuulI3uyr/td 42F3Y4VZkB/0/0vO/IKADh5g6vtSnmDKPknls9x6+66ny/R9Vetr0ErZBMVxanV0 KSylrCw/s5OFMbOX8nsm3CHSfn7nFwoLvugkuqvUjAMrargpvjfaV6XGuWbVy6Bn f1H8AOAAYWHOrA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:05 2025 by rpki-client