This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft File: b6htHBZ2pZpGrPNzNhkumFz_Dls.mft (raw, json) Hash identifier: pL+HXXhsJV6E/BJwT6qHKIEHiA1dHjdvipsJTwnkW70= Subject key identifier: 41:78:5E:8E:76:F2:4C:E0:BD:07:1F:CB:31:94:D3:21:A2:02:69:D5 Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b Certificate serial: 019B40C89D59CD71B756C76BF16EEECC3383 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft Manifest number: 1791 Signing time: Sun 21 Dec 2025 12:00:47 +0000 Manifest this update: Sun 21 Dec 2025 12:00:47 +0000 Manifest next update: Mon 22 Dec 2025 12:00:47 +0000 Files and hashes: 1: 1-US7yaRiFFKnKqL_Az-oiKaBwo8.roa (hash: FthpX5qfWVZK7tmP9o2nAg/lcWbaiX6ztEINECGa57Q=) 2: FsdwEgiqk0tgi0Rde-JJq-MqKkc.roa (hash: pNc7mIfrGdsXcLvKWTR7Ssmi3FPFS6cjaq4FxY0o41k=) 3: IarevL5_EzIJs87Wc8QNEXezxEg.roa (hash: 3HU1Yl+/zUftCbIriX5nyjFf4lXlFXWqr+wjeiwWuSc=) 4: b6htHBZ2pZpGrPNzNhkumFz_Dls.crl (hash: XV9hj/8Vtx7D+imDrf8MRBc5ZLAvlNnhIpDhIksdBmQ=) 5: c3ob2zH8CWN1Z48MYMCCcz4DvjQ.roa (hash: v2eej8TLgNyCOcTzYSfQkKDLdsnqMKtNEWYP6ylBCUQ=) 6: gCqBeQcxeP4mgIeC8gxfXD2ihNA.roa (hash: M8yQO0ZHmNcXujVHcxJQENuFmwi7ywPsRmKiyTk43dA=) 7: j_oVR8giIGJ9TAqquqYifkLeIjM.roa (hash: 5Tkxpz+Z+2HB95vYCH8LtVhmoPXDta/4SPNsrM3AuI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:9d:59:cd:71:b7:56:c7:6b:f1:6e:ee:cc:33:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b Validity Not Before: Dec 21 12:00:47 2025 GMT Not After : Dec 22 12:00:47 2025 GMT Subject: CN=41785e8e76f24ce0bd071fcb3194d321a20269d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e6:4c:cd:75:0c:97:13:d1:99:d0:5f:ae:66: 67:5f:1d:db:ed:e4:c8:99:31:ff:8e:2d:0a:55:66: 86:74:1e:12:52:3b:6c:1c:5c:b7:ec:93:84:18:7c: a0:2f:81:ed:74:5d:65:43:59:84:84:a8:52:5c:9a: 44:a8:41:4f:2f:61:dd:be:2d:dc:46:4e:87:f7:f2: 13:04:8b:7f:77:21:aa:03:3f:af:2c:eb:c9:13:4b: c8:8c:3b:58:3e:91:e9:90:af:b1:ae:46:af:fd:9f: d5:0f:ba:12:14:5c:34:33:b2:c3:c4:40:47:97:1c: c8:b3:f6:7f:19:bc:43:39:d3:69:1a:da:23:74:59: 66:a1:f0:68:c5:56:27:8d:d6:08:6a:c9:7c:a8:b9: e8:a3:4f:35:08:96:f5:6b:92:3c:7e:6b:4f:0c:9f: 71:19:80:d8:3f:9c:ab:b5:da:0c:a5:c6:6b:68:51: cf:d4:2d:9a:99:e0:c1:ea:05:65:d7:d1:5f:90:96: 4f:4b:d4:90:e1:a9:24:84:59:42:7a:95:7b:bb:cd: 9e:cc:e1:20:4f:b0:52:36:b1:00:36:55:0c:f6:1e: 03:86:7e:cc:1b:db:b2:c4:c8:60:48:7f:b8:58:06: c7:e7:02:93:6d:0b:2a:45:a1:98:d5:da:7f:7e:27: d4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:78:5E:8E:76:F2:4C:E0:BD:07:1F:CB:31:94:D3:21:A2:02:69:D5 X509v3 Authority Key Identifier: keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:0b:03:c7:7b:3c:fd:38:5c:97:58:bd:c9:4e:35:33:fc:a9: 3d:de:0c:22:9b:52:a4:75:1f:a3:ba:73:8b:c0:34:1e:cd:5a: 3b:b9:4b:13:3c:4a:3c:af:d8:4f:0b:84:66:9e:d5:4d:5c:ec: 7c:3b:eb:16:5b:64:83:0b:1b:d4:05:5a:ec:35:52:d6:18:1c: 28:94:94:68:f8:5e:a0:5b:ec:26:41:16:04:96:8c:7f:e0:d9: 94:3e:99:d5:2e:45:54:3d:60:21:99:d8:c1:4a:6f:b4:1a:fb: 7b:3c:7a:c6:a4:bc:78:4f:39:4c:f0:0a:b7:1f:d3:6e:00:0b: 0e:ca:4d:b0:94:85:cd:bc:55:24:77:60:41:48:49:05:63:68: 45:3e:e2:16:18:67:e3:10:26:70:11:0f:58:cf:1f:97:88:17: b6:ab:06:73:72:44:d5:08:50:4c:99:93:4a:bb:af:44:33:42: 83:cc:81:d7:7b:9e:b1:bc:1d:95:80:4f:44:d5:10:ac:2f:2d: de:9b:20:f0:d3:e6:2b:fe:5d:ed:e5:60:6d:24:cf:49:aa:03: 62:e6:03:b7:f9:dc:9c:d4:d3:30:5e:96:98:fa:67:9b:45:25: 73:b0:42:67:b5:e1:f7:42:26:50:f7:47:71:45:18:fe:ac:34: d8:cf:2b:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyJ1ZzXG3Vsdr8W7uzDODMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYTg2ZDFjMTY3NmE1OWE0NmFjZjM3MzM2MTkyZTk4NWNm ZjBlNWIwHhcNMjUxMjIxMTIwMDQ3WhcNMjUxMjIyMTIwMDQ3WjAzMTEwLwYDVQQD Eyg0MTc4NWU4ZTc2ZjI0Y2UwYmQwNzFmY2IzMTk0ZDMyMWEyMDI2OWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OZMzXUMlxPRmdBfrmZnXx3b7eTI mTH/ji0KVWaGdB4SUjtsHFy37JOEGHygL4HtdF1lQ1mEhKhSXJpEqEFPL2Hdvi3c Rk6H9/ITBIt/dyGqAz+vLOvJE0vIjDtYPpHpkK+xrkav/Z/VD7oSFFw0M7LDxEBH lxzIs/Z/GbxDOdNpGtojdFlmofBoxVYnjdYIasl8qLnoo081CJb1a5I8fmtPDJ9x GYDYP5yrtdoMpcZraFHP1C2ameDB6gVl19FfkJZPS9SQ4akkhFlCepV7u82ezOEg T7BSNrEANlUM9h4Dhn7MG9uyxMhgSH+4WAbH5wKTbQsqRaGY1dp/fifUowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEF4Xo528kzgvQcfyzGU0yGiAmnVMB8GA1UdIwQY MBaAFG+obRwWdqWaRqzzczYZLphc/w5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYt NmFhYjJiMWI5MjJjLzEvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYtNmFhYjJiMWI5MjJj LzEvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgsDx3s8 /Thcl1i9yU41M/ypPd4MIptSpHUfo7pzi8A0Hs1aO7lLEzxKPK/YTwuEZp7VTVzs fDvrFltkgwsb1AVa7DVS1hgcKJSUaPheoFvsJkEWBJaMf+DZlD6Z1S5FVD1gIZnY wUpvtBr7ezx6xqS8eE85TPAKtx/TbgALDspNsJSFzbxVJHdgQUhJBWNoRT7iFhhn 4xAmcBEPWM8fl4gXtqsGc3JE1QhQTJmTSruvRDNCg8yB13uesbwdlYBPRNUQrC8t 3psg8NPmK/5d7eVgbSTPSaoDYuYDt/ncnNTTMF6WmPpnm0Ulc7BCZ7Xh90ImUPdH cUUY/qw02M8r9Q== -----END CERTIFICATE-----Generated at Sun Dec 21 14:39:19 2025 by rpki-client