This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft File: 6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft (raw, json) Hash identifier: w6TcItJdvQ8dgRL/nO8JrgtApof3dSh+DPEgyoZgC7c= Subject key identifier: A1:EC:72:6C:33:6A:2A:A2:3F:7F:C9:03:8C:66:CA:D2:CD:28:A1:16 Authority key identifier: E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00 Certificate issuer: /CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00 Certificate serial: 019B11261BF39BD479561F6AF5299CBF225E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft Manifest number: 07C5 Signing time: Fri 12 Dec 2025 06:01:08 +0000 Manifest this update: Fri 12 Dec 2025 06:01:08 +0000 Manifest next update: Sat 13 Dec 2025 06:01:08 +0000 Files and hashes: 1: 4pppDVsEzxWcpvOQRzSfsEfJ_j4.roa (hash: QqOmQPrrioYAbFdEx9jvAv4IzYIgXNG6tw4Mnvbd0vE=) 2: 6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl (hash: snrwBJeUSc9TtW2c5lln3XYfaZOinQS1EZ/EBMke+2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:26:1b:f3:9b:d4:79:56:1f:6a:f5:29:9c:bf:22:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00 Validity Not Before: Dec 12 06:01:08 2025 GMT Not After : Dec 13 06:01:08 2025 GMT Subject: CN=a1ec726c336a2aa23f7fc9038c66cad2cd28a116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d9:30:53:9c:c0:4f:4e:4a:a5:db:10:31:69: 4f:ed:1a:c7:16:ac:b5:85:5c:1a:8c:91:e9:ec:90: 2e:cb:a4:65:c4:08:79:6b:e7:b7:3a:93:38:a4:ed: 7e:08:03:5e:38:58:16:57:3e:47:bd:eb:94:ed:6b: 74:82:c3:04:f9:8a:11:fe:0a:2f:8a:a6:2d:16:4d: 9f:ab:ab:7f:be:b2:c9:83:1e:98:82:e2:a4:8d:9b: 8b:f6:4f:7a:dc:4e:15:75:1e:d8:42:e6:ae:58:0c: 6c:bb:e1:5f:bc:56:1c:5e:b6:84:00:21:42:13:ed: e8:78:8e:c1:d3:ce:73:00:d2:26:04:0c:f8:b9:1b: ca:f1:4c:95:4c:d8:8a:64:ef:94:fa:bb:2a:92:28: 4e:14:73:98:93:21:f2:03:b5:1e:53:3f:51:33:df: f1:fe:ce:ed:3e:9e:0b:d8:54:e6:a8:6b:15:24:c9: 2c:2a:4e:6e:eb:ba:6c:8d:1d:57:72:71:05:9a:48: fd:6a:c5:8b:cb:18:62:3d:96:59:06:42:9c:33:1e: 3c:54:55:77:11:d6:ad:c5:a6:27:2e:13:bb:c8:9e: 03:40:8a:50:c4:c2:23:ff:4a:d0:b3:86:2e:90:80: c1:20:75:4a:64:b6:d2:e8:a8:0f:ed:74:15:a7:2e: 3d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EC:72:6C:33:6A:2A:A2:3F:7F:C9:03:8C:66:CA:D2:CD:28:A1:16 X509v3 Authority Key Identifier: keyid:E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:17:1d:4a:61:ca:1a:f8:bb:16:74:62:e3:80:b0:b1:ae:a4: c8:6f:64:8b:2d:7d:9c:5b:84:ca:02:36:53:d4:1a:56:26:21: a1:8e:8f:09:32:22:e2:de:d8:3b:d4:86:11:85:fe:81:93:30: 8b:fd:56:58:1f:e5:ca:21:ce:df:47:cc:af:2d:49:83:7a:ea: a9:23:60:8a:47:e3:48:f9:24:bd:ca:ba:96:c7:27:0b:02:bb: 41:d5:ae:db:47:94:22:f1:af:0b:c8:d6:bf:99:22:8d:15:5b: 46:49:a8:a0:08:5b:a0:df:5b:36:7d:64:bf:84:e2:76:34:6d: 89:33:d2:6e:af:01:b7:a1:c9:ed:cd:d5:6c:cb:a2:41:13:f3: 01:b5:3c:04:28:c3:d5:62:e8:0c:3d:f5:fc:9f:15:97:d7:c2: a3:e8:52:2d:2f:1f:6c:11:86:6b:5f:9a:ce:35:74:27:91:00: 99:61:d1:9c:24:da:aa:a1:3c:3c:99:01:7e:8e:dc:05:12:01: 07:fd:61:02:9c:b1:19:f5:da:6a:96:a1:55:f6:94:49:df:12: 42:e0:ef:bb:cc:60:35:dd:70:86:39:9b:d8:8d:bc:3a:a6:7c: b8:00:f0:1b:88:81:fb:ed:6e:cd:63:03:ac:bd:b7:a7:ba:ec: 2d:91:5a:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJhvzm9R5Vh9q9SmcvyJeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Y2JiZmYyMThhNDM3ZGY4ZjgwYTk4Y2QyZmFlYjljMjQx OGZkMDAwHhcNMjUxMjEyMDYwMTA4WhcNMjUxMjEzMDYwMTA4WjAzMTEwLwYDVQQD EyhhMWVjNzI2YzMzNmEyYWEyM2Y3ZmM5MDM4YzY2Y2FkMmNkMjhhMTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdkwU5zAT05KpdsQMWlP7RrHFqy1 hVwajJHp7JAuy6RlxAh5a+e3OpM4pO1+CANeOFgWVz5HveuU7Wt0gsME+YoR/gov iqYtFk2fq6t/vrLJgx6YguKkjZuL9k963E4VdR7YQuauWAxsu+FfvFYcXraEACFC E+3oeI7B085zANImBAz4uRvK8UyVTNiKZO+U+rsqkihOFHOYkyHyA7UeUz9RM9/x /s7tPp4L2FTmqGsVJMksKk5u67psjR1XcnEFmkj9asWLyxhiPZZZBkKcMx48VFV3 EdatxaYnLhO7yJ4DQIpQxMIj/0rQs4YukIDBIHVKZLbS6KgP7XQVpy49wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHscmwzaiqiP3/JA4xmytLNKKEWMB8GA1UdIwQY MBaAFOjLv/IYpDffj4CpjNL665wkGP0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xZmQ2YmMtNTdlMi00ZjUwLTk4Yjct Y2M3NjM1ZGU2ZTdhLzEvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8xZmQ2YmMtNTdlMi00ZjUwLTk4YjctY2M3NjM1ZGU2ZTdh LzEvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtRcdSmHK Gvi7FnRi44Cwsa6kyG9kiy19nFuEygI2U9QaViYhoY6PCTIi4t7YO9SGEYX+gZMw i/1WWB/lyiHO30fMry1Jg3rqqSNgikfjSPkkvcq6lscnCwK7QdWu20eUIvGvC8jW v5kijRVbRkmooAhboN9bNn1kv4TidjRtiTPSbq8Bt6HJ7c3VbMuiQRPzAbU8BCjD 1WLoDD31/J8Vl9fCo+hSLS8fbBGGa1+azjV0J5EAmWHRnCTaqqE8PJkBfo7cBRIB B/1hApyxGfXaapahVfaUSd8SQuDvu8xgNd1whjmb2I28OqZ8uADwG4iB++1uzWMD rL23p7rsLZFamA== -----END CERTIFICATE-----Generated at Fri Dec 12 09:27:42 2025 by rpki-client