This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft File: 6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json) Hash identifier: SOsowKYqTB1OxZBb7nZpqMc4wsY6469Nw7clvDEpWtc= Subject key identifier: C7:27:76:18:6F:B2:B2:91:86:A0:F4:E6:98:24:BC:EC:8B:C3:04:CB Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8 Certificate issuer: /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8 Certificate serial: 019B35D75505C3A9FF456C4E1B0932B43E85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft Manifest number: 0ADB Signing time: Fri 19 Dec 2025 09:01:02 +0000 Manifest this update: Fri 19 Dec 2025 09:01:02 +0000 Manifest next update: Sat 20 Dec 2025 09:01:02 +0000 Files and hashes: 1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: keHvjb4fRU3WWhBSxOx4bsRBx/7Q6maBU+IkiM46P1A=) 2: vDzT1MfGHy3qiiGgUF2NvHG69NY.roa (hash: /QoWZln+ZcMlohGoxqm79B+9B4Oq5GX6wiGGVl8wkGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:55:05:c3:a9:ff:45:6c:4e:1b:09:32:b4:3e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8 Validity Not Before: Dec 19 09:01:02 2025 GMT Not After : Dec 20 09:01:02 2025 GMT Subject: CN=c72776186fb2b29186a0f4e69824bcec8bc304cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:64:26:3f:50:a9:bb:bc:25:f5:01:b2:ce:45: 93:61:7b:37:20:c5:4b:4c:67:e1:db:55:0f:32:20: ee:9f:e1:1a:5f:3f:66:5a:e7:1e:79:29:70:24:76: 36:18:f9:d3:88:36:ab:cb:97:33:d6:55:42:5d:bf: 5c:f0:54:ba:48:38:75:00:03:0a:15:eb:22:c9:b1: 3f:48:b8:79:a1:d9:5b:52:b8:22:63:55:2b:2d:03: 8d:53:19:6a:c0:75:d7:9c:9b:7b:f9:c0:1e:81:68: d6:42:4e:ff:7f:46:41:a2:57:00:61:c1:9a:dd:30: f6:fe:ac:26:0a:d1:89:ec:db:0d:fc:2d:1d:35:0a: 0d:34:98:d2:05:f7:61:e2:63:12:7b:f3:d9:5d:0b: 77:7d:42:79:d2:53:c2:e4:e1:6b:14:0f:ce:63:4b: 8c:f6:b8:3b:f0:c1:78:60:a2:04:31:cd:fd:b8:14: 09:c7:a8:e4:3a:b0:aa:32:46:0c:0c:ef:47:55:64: cc:66:df:38:cc:0c:71:07:33:4f:5f:ab:9a:e4:53: e9:78:03:20:20:82:f8:c3:26:20:15:88:fb:23:bc: 53:c4:9e:41:2a:b7:83:7d:e4:4d:91:cf:15:02:c1: 58:e2:d1:24:5c:22:62:92:31:83:ba:2c:5a:e8:28: 6b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:27:76:18:6F:B2:B2:91:86:A0:F4:E6:98:24:BC:EC:8B:C3:04:CB X509v3 Authority Key Identifier: keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:69:1e:e6:62:22:64:d3:7c:f4:e7:34:26:76:70:b2:44:d3: 5d:26:c2:78:3d:04:05:69:ff:13:a6:af:89:a4:7f:df:f6:48: 01:62:dd:65:6f:f2:17:17:7b:6f:fd:e5:8a:4f:89:aa:5c:19: f8:2b:70:98:72:f5:fb:71:a8:60:d4:5d:1d:4b:40:8c:d4:8d: 42:73:0b:48:6e:64:b9:37:e4:29:cc:00:75:b5:16:b9:db:3c: 71:2a:f2:72:b5:05:f9:06:00:6b:4d:fc:1e:1d:77:a5:83:e2: 4b:37:4d:4f:dc:59:75:ea:bf:f4:35:e2:2f:05:c0:68:4d:ba: ed:c6:2f:64:ba:c6:ae:25:88:05:56:0c:65:ce:fc:3a:cc:7c: 96:c1:e4:04:b7:e3:2f:29:80:2d:12:ef:39:eb:7e:83:cf:01: e7:b9:c6:de:cd:83:a1:8c:0a:96:47:33:3d:f7:9e:75:83:6c: 36:ef:8d:41:ed:68:0c:28:08:e0:f8:0a:b2:dc:76:1c:ea:d4: ce:b1:8a:ea:38:67:d1:eb:cb:ef:e3:db:a2:51:01:b9:e7:3c: 53:71:11:43:18:69:31:3f:4d:3b:2c:27:7e:e5:a7:f1:29:0a: a3:ef:c5:0d:30:14:c6:79:f2:2e:ef:63:67:38:d4:c8:09:c9: fd:17:85:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs111UFw6n/RWxOGwkytD6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5OTQwNWVlOGY1ZDhlNzY0ZTkwYmQ2NmJkZDFlODlhYzEy ODA5ZTgwHhcNMjUxMjE5MDkwMTAyWhcNMjUxMjIwMDkwMTAyWjAzMTEwLwYDVQQD EyhjNzI3NzYxODZmYjJiMjkxODZhMGY0ZTY5ODI0YmNlYzhiYzMwNGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GQmP1Cpu7wl9QGyzkWTYXs3IMVL TGfh21UPMiDun+EaXz9mWuceeSlwJHY2GPnTiDary5cz1lVCXb9c8FS6SDh1AAMK FesiybE/SLh5odlbUrgiY1UrLQONUxlqwHXXnJt7+cAegWjWQk7/f0ZBolcAYcGa 3TD2/qwmCtGJ7NsN/C0dNQoNNJjSBfdh4mMSe/PZXQt3fUJ50lPC5OFrFA/OY0uM 9rg78MF4YKIEMc39uBQJx6jkOrCqMkYMDO9HVWTMZt84zAxxBzNPX6ua5FPpeAMg IIL4wyYgFYj7I7xTxJ5BKreDfeRNkc8VAsFY4tEkXCJikjGDuixa6ChrSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcndhhvsrKRhqD05pgkvOyLwwTLMB8GA1UdIwQY MBaAFOmUBe6PXY52TpC9Zr3R6JrBKAnoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlpRRjdvOWRqblpPa0wxbXZkSG9tc0VvQ2VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xYjkyMDItNDg2OS00ZDQ1LTk1MjEt ZWIxMWI0OTU0ZjMzLzEvNlpRRjdvOWRqblpPa0wxbXZkSG9tc0VvQ2VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8xYjkyMDItNDg2OS00ZDQ1LTk1MjEtZWIxMWI0OTU0ZjMz LzEvNlpRRjdvOWRqblpPa0wxbXZkSG9tc0VvQ2VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGke5mIi ZNN89Oc0JnZwskTTXSbCeD0EBWn/E6aviaR/3/ZIAWLdZW/yFxd7b/3lik+JqlwZ +CtwmHL1+3GoYNRdHUtAjNSNQnMLSG5kuTfkKcwAdbUWuds8cSrycrUF+QYAa038 Hh13pYPiSzdNT9xZdeq/9DXiLwXAaE267cYvZLrGriWIBVYMZc78Osx8lsHkBLfj LymALRLvOet+g88B57nG3s2DoYwKlkczPfeedYNsNu+NQe1oDCgI4PgKstx2HOrU zrGK6jhn0evL7+PbolEBuec8U3ERQxhpMT9NOywnfuWn8SkKo+/FDTAUxnnyLu9j ZzjUyAnJ/ReFug== -----END CERTIFICATE-----Generated at Fri Dec 19 10:35:54 2025 by rpki-client