This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft File: 6Ed60hy3iRQzE8QLGfjMACPeiKY.mft (raw, json) Hash identifier: 5ET0wBAvP3hD3XYY2Wc3+xB6y2I8TjAAvMuYAqGR0XA= Subject key identifier: 54:45:88:DA:D1:E6:26:72:8D:39:8B:27:5D:C8:A3:B2:E7:F4:E7:73 Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6 Certificate issuer: /CN=e8477ad21cb789143313c40b19f8cc0023de88a6 Certificate serial: 019B0F379FA8749BB424994EA56768787086 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft Manifest number: 0236 Signing time: Thu 11 Dec 2025 21:01:02 +0000 Manifest this update: Thu 11 Dec 2025 21:01:02 +0000 Manifest next update: Fri 12 Dec 2025 21:01:02 +0000 Files and hashes: 1: 2M47-6eKALJ6FmiVAowRa7gLSUI.roa (hash: sTE5YWztn/a2MX2OSX/0Yz9OgI3CBWwdi/QI1zYZYUk=) 2: 6Ed60hy3iRQzE8QLGfjMACPeiKY.crl (hash: RXjycm9OfRBmpNJpGT2nEh+vZaO/v3MTpbIZV4VuE9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:9f:a8:74:9b:b4:24:99:4e:a5:67:68:78:70:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6 Validity Not Before: Dec 11 21:01:02 2025 GMT Not After : Dec 12 21:01:02 2025 GMT Subject: CN=544588dad1e626728d398b275dc8a3b2e7f4e773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1c:64:7b:18:7e:9d:31:ef:d0:aa:c2:aa:20: 68:07:71:f0:37:97:bb:f9:6b:8c:79:20:9d:10:39: 68:84:e9:35:10:c7:75:13:23:bf:55:c5:4f:cd:c4: f8:2d:23:6a:aa:0a:54:88:dc:0a:c3:df:3e:a6:b0: f2:a5:0f:84:d2:d8:f9:54:d8:26:35:e6:5c:46:8a: 5b:15:59:24:10:36:cd:c4:a0:60:a9:fc:ae:18:11: f4:60:4c:d3:b1:d3:fe:0c:8f:aa:7b:0f:22:0b:28: 7a:d3:51:8d:ad:a8:5a:30:64:47:dd:de:3b:a8:a7: 5c:a9:23:3a:f1:92:da:2c:aa:c4:d8:62:f5:30:5d: 7f:b6:7c:2e:b7:ac:bc:d5:db:4b:32:a2:ef:0b:a5: 6a:18:69:5f:bd:f6:60:8a:d8:87:f3:1a:3b:90:e3: 3e:a0:ba:be:4a:13:ad:d4:1c:4f:78:45:b2:7d:32: 46:1d:80:f6:4c:39:1b:0b:22:60:a9:79:66:26:3c: a0:17:57:6c:26:37:ac:7d:aa:9c:55:49:ce:a5:cb: 58:4c:14:fb:03:31:8d:a8:7a:55:51:aa:b4:3a:8d: 35:d9:72:61:50:19:4a:82:06:5a:d6:7d:40:36:45: e6:31:f8:e9:97:ed:c5:2d:23:6f:bb:97:13:80:a0: e7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:45:88:DA:D1:E6:26:72:8D:39:8B:27:5D:C8:A3:B2:E7:F4:E7:73 X509v3 Authority Key Identifier: keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:91:29:c6:0a:ce:b5:73:86:5e:c0:23:63:b0:44:2c:02:c7: ce:a5:a5:da:58:39:18:07:e3:9d:86:a7:c7:fc:b1:8a:b6:bc: ed:b8:29:ee:7c:d2:dc:a3:bb:8c:f8:2f:25:0f:c8:a0:32:70: 9e:a2:29:6a:2e:51:ad:98:60:02:a0:07:4b:79:6c:6f:d8:e1: 26:a6:75:7d:f6:07:7b:70:a4:0f:db:76:75:64:05:2b:c1:ff: 53:69:f3:27:af:5e:60:89:9f:9e:be:f6:f4:44:c0:42:f2:b5: 85:20:a0:81:60:d1:38:83:17:45:65:b7:af:79:73:65:63:8b: 31:4c:9b:9b:61:79:da:5b:ed:82:81:c2:96:aa:d1:72:85:9c: 59:f0:b8:13:29:48:18:32:9d:d8:20:dd:20:3d:c5:c2:2d:2d: d5:91:ec:0a:b0:02:2e:fb:9a:60:12:72:49:a7:d5:6d:b0:d4: f7:6d:d4:7a:61:b4:30:4b:aa:84:16:62:df:4c:bf:06:47:89: f3:e3:9e:e4:d8:9f:bf:22:05:09:a9:76:ec:fb:f0:f1:0c:66: 24:3b:63:c3:36:04:3f:90:7e:3e:41:bc:9b:aa:2f:a8:78:60: 2e:24:19:94:a0:06:1b:56:a0:bd:ba:0c:6e:b6:fe:0d:54:50: a4:35:48:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN5+odJu0JJlOpWdoeHCGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDc3YWQyMWNiNzg5MTQzMzEzYzQwYjE5ZjhjYzAwMjNk ZTg4YTYwHhcNMjUxMjExMjEwMTAyWhcNMjUxMjEyMjEwMTAyWjAzMTEwLwYDVQQD Eyg1NDQ1ODhkYWQxZTYyNjcyOGQzOThiMjc1ZGM4YTNiMmU3ZjRlNzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBxkexh+nTHv0KrCqiBoB3HwN5e7 +WuMeSCdEDlohOk1EMd1EyO/VcVPzcT4LSNqqgpUiNwKw98+prDypQ+E0tj5VNgm NeZcRopbFVkkEDbNxKBgqfyuGBH0YEzTsdP+DI+qew8iCyh601GNrahaMGRH3d47 qKdcqSM68ZLaLKrE2GL1MF1/tnwut6y81dtLMqLvC6VqGGlfvfZgitiH8xo7kOM+ oLq+ShOt1BxPeEWyfTJGHYD2TDkbCyJgqXlmJjygF1dsJjesfaqcVUnOpctYTBT7 AzGNqHpVUaq0Oo012XJhUBlKggZa1n1ANkXmMfjpl+3FLSNvu5cTgKDnvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRFiNrR5iZyjTmLJ13Io7Ln9OdzMB8GA1UdIwQY MBaAFOhHetIct4kUMxPECxn4zAAj3oimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAt NjA0NTg0ODk1OTI1LzEvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAtNjA0NTg0ODk1OTI1 LzEvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJEpxgrO tXOGXsAjY7BELALHzqWl2lg5GAfjnYanx/yxira87bgp7nzS3KO7jPgvJQ/IoDJw nqIpai5RrZhgAqAHS3lsb9jhJqZ1ffYHe3CkD9t2dWQFK8H/U2nzJ69eYImfnr72 9ETAQvK1hSCggWDROIMXRWW3r3lzZWOLMUybm2F52lvtgoHClqrRcoWcWfC4EylI GDKd2CDdID3Fwi0t1ZHsCrACLvuaYBJySafVbbDU923UemG0MEuqhBZi30y/BkeJ 8+Oe5NifvyIFCal27Pvw8QxmJDtjwzYEP5B+PkG8m6ovqHhgLiQZlKAGG1agvboM brb+DVRQpDVI+g== -----END CERTIFICATE-----Generated at Thu Dec 11 22:14:07 2025 by rpki-client