This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft File: 6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft (raw, json) Hash identifier: njQ7Ur4VlQOIlQwRm9m+UdxVGajelBJarEXjH2wtOgg= Subject key identifier: 82:9E:18:56:30:36:DF:6A:89:69:21:CC:3A:F6:76:07:E5:3A:E1:23 Authority key identifier: E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8 Certificate issuer: /CN=e930b76e721f5d834ed53e49284d9790339211c8 Certificate serial: 019B1BAB4B09DFF972D6C46C918B41FA43CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft Manifest number: 0240 Signing time: Sun 14 Dec 2025 07:02:49 +0000 Manifest this update: Sun 14 Dec 2025 07:02:49 +0000 Manifest next update: Mon 15 Dec 2025 07:02:49 +0000 Files and hashes: 1: 6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl (hash: SfJGzS932KXbQl6JNQeJl/HWxeGkM1Akao4LhSihpmM=) 2: xQC18Di_ctqtLNxYWbMtSnGwz5c.roa (hash: KunZ5Y32qy4l7Ei6v6cWQmt4QYuY/vwQLNAYzWY5uXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:ab:4b:09:df:f9:72:d6:c4:6c:91:8b:41:fa:43:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e930b76e721f5d834ed53e49284d9790339211c8 Validity Not Before: Dec 14 07:02:49 2025 GMT Not After : Dec 15 07:02:49 2025 GMT Subject: CN=829e18563036df6a896921cc3af67607e53ae123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:04:bd:57:d9:92:af:fd:5f:d2:46:3d:2b:4d: 07:ba:29:4f:cf:45:39:5b:61:cb:ba:51:de:56:b1: c5:33:4c:0e:b1:b2:c0:ec:d6:ff:e8:82:84:ad:8d: fd:f7:65:37:a0:ff:e0:1a:7e:be:c5:59:35:2d:a2: da:3a:09:43:e6:f9:4f:31:e5:d8:d7:c6:6f:b4:47: b4:b9:75:c3:4d:20:f4:de:09:61:17:5c:a8:5c:b4: d6:14:e4:d7:bb:2b:54:ef:1b:66:9c:33:a5:b7:6f: da:05:17:d1:c8:85:f0:29:11:b8:ba:a5:4e:22:e7: 1b:31:45:cc:47:b3:f7:16:5c:2d:7f:cd:de:8b:7c: f3:ff:00:dc:0d:2b:b8:80:37:9f:68:68:72:ae:ae: 14:a9:e5:b3:1a:ac:93:b5:03:9d:13:6a:fa:2a:9f: 9b:87:79:08:ba:31:a3:16:04:13:12:cb:8a:6f:59: 91:5c:59:9d:f3:75:f2:e2:48:61:e7:a4:e6:6c:c8: 6f:09:cc:3d:99:7b:db:b2:bc:87:16:e4:94:0f:9a: 79:38:60:4d:15:ff:8c:a5:7a:74:a2:0e:b3:ff:61: 4b:b8:32:c0:6d:1a:2e:32:3c:8f:16:dd:02:e7:22: 89:bf:1c:17:60:18:b8:34:4e:8d:0c:df:40:8f:39: 17:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9E:18:56:30:36:DF:6A:89:69:21:CC:3A:F6:76:07:E5:3A:E1:23 X509v3 Authority Key Identifier: keyid:E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:1f:43:3d:80:c0:0c:38:08:5e:e8:8e:a6:8e:0f:bb:0c:de: 48:3c:29:2f:c7:8f:7c:2c:51:3d:a4:41:ed:2f:30:ab:8f:d6: 34:4e:b0:95:c2:38:e5:4d:6c:41:a1:a6:0b:0b:88:cd:f6:38: b1:60:e4:f9:1e:79:e4:36:71:65:d0:ad:df:98:ee:b3:c1:ae: 4d:9c:d6:1c:4e:41:2a:df:07:6f:3f:fa:cd:40:55:bc:96:71: 18:c2:97:a1:c9:a8:fb:eb:ef:be:01:19:80:c3:8f:dc:7a:39: da:8d:7e:74:42:28:48:71:bf:3b:ab:c9:1f:20:f7:01:c5:db: f6:f9:eb:d7:b7:98:73:04:df:35:2e:a7:f0:88:fe:6a:58:37: 5b:14:8e:6c:9a:67:87:9a:04:d1:20:13:36:8a:d1:3d:33:42: 12:e7:87:e0:43:2a:c5:ed:1c:99:1e:54:8f:73:99:6b:f5:c5: be:08:76:3c:85:9e:70:6d:5f:e7:76:48:42:a7:96:2f:62:90: a4:61:d1:dc:85:3e:9b:84:32:6c:82:de:81:c1:00:4c:6e:5b: fc:9b:34:bf:20:cb:69:2e:13:45:84:d6:8a:a6:ab:b9:54:a7: 0a:0e:9f:43:84:db:bd:35:7f:80:ba:c7:81:63:45:c1:08:1f: f3:8b:a5:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbq0sJ3/ly1sRskYtB+kPOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MzBiNzZlNzIxZjVkODM0ZWQ1M2U0OTI4NGQ5NzkwMzM5 MjExYzgwHhcNMjUxMjE0MDcwMjQ5WhcNMjUxMjE1MDcwMjQ5WjAzMTEwLwYDVQQD Eyg4MjllMTg1NjMwMzZkZjZhODk2OTIxY2MzYWY2NzYwN2U1M2FlMTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQS9V9mSr/1f0kY9K00HuilPz0U5 W2HLulHeVrHFM0wOsbLA7Nb/6IKErY3992U3oP/gGn6+xVk1LaLaOglD5vlPMeXY 18ZvtEe0uXXDTSD03glhF1yoXLTWFOTXuytU7xtmnDOlt2/aBRfRyIXwKRG4uqVO IucbMUXMR7P3Flwtf83ei3zz/wDcDSu4gDefaGhyrq4UqeWzGqyTtQOdE2r6Kp+b h3kIujGjFgQTEsuKb1mRXFmd83Xy4khh56TmbMhvCcw9mXvbsryHFuSUD5p5OGBN Ff+MpXp0og6z/2FLuDLAbRouMjyPFt0C5yKJvxwXYBi4NE6NDN9AjzkXKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKeGFYwNt9qiWkhzDr2dgflOuEjMB8GA1UdIwQY MBaAFOkwt25yH12DTtU+SShNl5AzkhHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hOWRiMjMtYTY3Yy00ZjhiLThhZGYt NzA1MjJkODE0ZTBjLzEvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hOWRiMjMtYTY3Yy00ZjhiLThhZGYtNzA1MjJkODE0ZTBj LzEvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiB9DPYDA DDgIXuiOpo4PuwzeSDwpL8ePfCxRPaRB7S8wq4/WNE6wlcI45U1sQaGmCwuIzfY4 sWDk+R555DZxZdCt35jus8GuTZzWHE5BKt8Hbz/6zUBVvJZxGMKXocmo++vvvgEZ gMOP3Ho52o1+dEIoSHG/O6vJHyD3AcXb9vnr17eYcwTfNS6n8Ij+alg3WxSObJpn h5oE0SATNorRPTNCEueH4EMqxe0cmR5Uj3OZa/XFvgh2PIWecG1f53ZIQqeWL2KQ pGHR3IU+m4QybILegcEATG5b/Js0vyDLaS4TRYTWiqaruVSnCg6fQ4TbvTV/gLrH gWNFwQgf84ulHA== -----END CERTIFICATE-----Generated at Sun Dec 14 14:03:29 2025 by rpki-client