This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft File: 6P36cUAM43C3X3N3gEhXTkYnQxs.mft (raw, json) Hash identifier: 1ljnuguWNM/dWF56RK33VX7OC6ohk1Lb0/VIo+FsoDI= Subject key identifier: 1B:76:4F:3C:F6:B1:9F:09:E1:0A:04:CE:43:E3:2D:F9:45:15:91:28 Authority key identifier: E8:FD:FA:71:40:0C:E3:70:B7:5F:73:77:80:48:57:4E:46:27:43:1B Certificate issuer: /CN=e8fdfa71400ce370b75f73778048574e4627431b Certificate serial: 019B50051B5A3A54AAA27FAE9FA7CE72A60E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft Manifest number: 0430 Signing time: Wed 24 Dec 2025 11:01:10 +0000 Manifest this update: Wed 24 Dec 2025 11:01:10 +0000 Manifest next update: Thu 25 Dec 2025 11:01:10 +0000 Files and hashes: 1: 6P36cUAM43C3X3N3gEhXTkYnQxs.crl (hash: BhyVQz1JjUZ/MaMSVRyXWT4+Nnr+wbVcNDYLOTCp1vs=) 2: SFK2b_vmIkLWDU_i-BkLji71FEk.roa (hash: P/e3nZJRHwq7a4VZvWLqRGgl5JZQml0sLv8iElODBF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.crl rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:05:1b:5a:3a:54:aa:a2:7f:ae:9f:a7:ce:72:a6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8fdfa71400ce370b75f73778048574e4627431b Validity Not Before: Dec 24 11:01:10 2025 GMT Not After : Dec 25 11:01:10 2025 GMT Subject: CN=1b764f3cf6b19f09e10a04ce43e32df945159128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9f:51:c3:0e:1f:ea:1e:7f:2f:6e:1f:db:e9: 05:f8:0d:9a:e0:03:6a:2b:67:bb:bf:0c:c2:a7:cb: d1:7a:2b:0e:a6:4b:98:af:17:68:e2:3d:aa:01:5a: fb:fc:8b:58:5e:ec:d1:79:93:20:99:79:a5:3d:41: 74:62:64:dd:86:63:e7:b9:f0:09:13:6c:18:d9:a2: 26:58:32:ae:c5:42:fa:32:3f:70:b2:a4:d9:bb:39: 89:8a:28:a5:76:da:01:05:cf:73:de:8a:56:30:eb: a7:b5:0c:af:ae:31:2c:3d:50:57:4a:d9:6e:31:1a: 23:20:5e:2d:38:bb:5f:d0:0a:ff:91:71:f7:89:30: ea:1b:34:73:bc:81:f1:8b:e0:91:fd:c3:55:61:ca: 02:4b:a7:3f:74:30:b3:7c:b3:9a:97:03:69:e4:2a: 1a:4f:5a:96:cc:fb:06:e9:d9:95:06:6b:b5:0c:62: d7:9c:f1:e5:5b:ee:2b:64:1b:99:1d:e7:49:5e:87: 2b:93:91:c8:3f:46:22:3c:27:b2:2d:71:9e:8b:b9: 8a:e1:b7:bd:b4:e5:84:1d:fd:a7:9d:b4:f5:d5:8d: a5:98:2f:3b:9d:55:d8:50:95:82:2c:7d:e6:56:ad: 31:33:00:62:5d:62:cf:5a:be:a6:34:db:34:27:d4: bb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:76:4F:3C:F6:B1:9F:09:E1:0A:04:CE:43:E3:2D:F9:45:15:91:28 X509v3 Authority Key Identifier: keyid:E8:FD:FA:71:40:0C:E3:70:B7:5F:73:77:80:48:57:4E:46:27:43:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:51:21:ca:2e:79:77:77:13:10:5f:fa:8a:b3:42:2c:55:a9: 2c:5b:ee:62:4e:c3:5f:a9:ab:e5:3d:d4:85:0e:f9:8b:d0:c2: f0:39:25:c6:c5:b4:26:1a:a6:c7:6a:46:dd:35:11:db:99:ae: 05:5b:11:9a:6f:4a:bb:b8:73:cc:cf:14:bd:24:89:80:80:5a: 3d:17:fb:12:69:e0:3c:c0:dc:17:d0:83:d8:05:ee:38:dc:05: 26:d1:69:3f:b2:29:a3:bb:5f:16:66:89:55:e4:d2:eb:e7:68: 3b:6c:26:ce:a3:3c:8b:ff:90:48:e9:81:1b:c1:f4:a0:a9:f9: fa:1f:43:58:ab:3c:f7:33:60:19:54:5c:87:17:4a:8c:f4:6d: eb:38:10:8e:c4:35:03:77:57:bc:ba:75:32:a8:35:0b:dc:bb: c1:d0:34:b8:d8:cc:9a:06:13:d8:f3:d6:92:47:89:0f:67:22: 50:55:29:27:59:d5:a8:58:3e:c4:52:88:d3:9c:72:7d:15:6a: ac:71:09:f6:03:2d:66:8d:71:48:88:73:4c:26:9a:10:ae:6d: 1b:90:fc:d2:aa:6a:61:0f:0b:ae:76:5c:2f:58:2a:2a:a2:ca: c1:8b:7f:7f:39:c5:3d:0e:e4:79:fd:a1:d1:c3:12:dc:62:04: 13:55:81:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQBRtaOlSqon+un6fOcqYOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZmRmYTcxNDAwY2UzNzBiNzVmNzM3NzgwNDg1NzRlNDYy NzQzMWIwHhcNMjUxMjI0MTEwMTEwWhcNMjUxMjI1MTEwMTEwWjAzMTEwLwYDVQQD EygxYjc2NGYzY2Y2YjE5ZjA5ZTEwYTA0Y2U0M2UzMmRmOTQ1MTU5MTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ9Rww4f6h5/L24f2+kF+A2a4ANq K2e7vwzCp8vReisOpkuYrxdo4j2qAVr7/ItYXuzReZMgmXmlPUF0YmTdhmPnufAJ E2wY2aImWDKuxUL6Mj9wsqTZuzmJiiildtoBBc9z3opWMOuntQyvrjEsPVBXStlu MRojIF4tOLtf0Ar/kXH3iTDqGzRzvIHxi+CR/cNVYcoCS6c/dDCzfLOalwNp5Coa T1qWzPsG6dmVBmu1DGLXnPHlW+4rZBuZHedJXocrk5HIP0YiPCeyLXGei7mK4be9 tOWEHf2nnbT11Y2lmC87nVXYUJWCLH3mVq0xMwBiXWLPWr6mNNs0J9S7JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBt2Tzz2sZ8J4QoEzkPjLflFFZEoMB8GA1UdIwQY MBaAFOj9+nFADONwt19zd4BIV05GJ0MbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlAzNmNVQU00M0MzWDNOM2dFaFhUa1luUXhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81NWJlNzUtMGUwYS00MTNlLTg5Y2Mt Mzc4YTNlN2JjMDgzLzEvNlAzNmNVQU00M0MzWDNOM2dFaFhUa1luUXhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81NWJlNzUtMGUwYS00MTNlLTg5Y2MtMzc4YTNlN2JjMDgz LzEvNlAzNmNVQU00M0MzWDNOM2dFaFhUa1luUXhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlEhyi55 d3cTEF/6irNCLFWpLFvuYk7DX6mr5T3UhQ75i9DC8DklxsW0Jhqmx2pG3TUR25mu BVsRmm9Ku7hzzM8UvSSJgIBaPRf7EmngPMDcF9CD2AXuONwFJtFpP7Ipo7tfFmaJ VeTS6+doO2wmzqM8i/+QSOmBG8H0oKn5+h9DWKs89zNgGVRchxdKjPRt6zgQjsQ1 A3dXvLp1Mqg1C9y7wdA0uNjMmgYT2PPWkkeJD2ciUFUpJ1nVqFg+xFKI05xyfRVq rHEJ9gMtZo1xSIhzTCaaEK5tG5D80qpqYQ8LrnZcL1gqKqLKwYt/fznFPQ7kef2h 0cMS3GIEE1WB4Q== -----END CERTIFICATE-----Generated at Wed Dec 24 13:22:28 2025 by rpki-client