This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft File: a6TjY5dLLvkOywU0CvXa9rJBYMs.mft (raw, json) Hash identifier: PFhWWAchPc7QFWdKBbjwSDI2wunxqxMQ7Udc/IoLvvs= Subject key identifier: 22:CC:61:0C:5F:D8:B6:33:86:BC:25:EC:DD:77:94:9F:37:9B:FC:C1 Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB Certificate issuer: /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb Certificate serial: 019B2175069D353849E668D67C790CBFCDEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft Manifest number: 0CC3 Signing time: Mon 15 Dec 2025 10:01:16 +0000 Manifest this update: Mon 15 Dec 2025 10:01:16 +0000 Manifest next update: Tue 16 Dec 2025 10:01:16 +0000 Files and hashes: 1: 6m7j2x5GGq7W52qf5FgsTL2uZFM.roa (hash: yw3o2fOj27y6FNYr5DEC0pNcsBL8VcXlNTgJH2EfiEg=) 2: a6TjY5dLLvkOywU0CvXa9rJBYMs.crl (hash: wLHzgL0x1LGGi55VvvBgNbXZPLoRdZUAeM0HtPqNPlc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:06:9d:35:38:49:e6:68:d6:7c:79:0c:bf:cd:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb Validity Not Before: Dec 15 10:01:16 2025 GMT Not After : Dec 16 10:01:16 2025 GMT Subject: CN=22cc610c5fd8b63386bc25ecdd77949f379bfcc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0c:65:f7:0d:dd:49:bc:65:be:7a:03:c5:95: 3f:a6:fc:05:3f:ea:a8:d6:89:09:f9:66:43:a0:2f: f2:c8:5f:98:9c:b9:82:17:d4:6f:c9:8d:cf:5e:30: 57:8e:93:62:83:de:11:c3:f5:b1:bb:57:ae:d2:6c: a8:fb:0e:b3:bb:6a:ba:64:1d:6d:e6:f3:e4:90:12: 6c:ce:0f:94:1a:b4:6b:8f:56:0d:04:c6:64:30:85: cd:f9:43:10:10:bd:fc:06:88:e9:bf:cf:25:9c:05: 4c:5f:8c:72:b2:ce:33:90:a4:c2:52:98:0f:3a:cd: 20:f1:e2:2e:89:2d:31:d5:4b:7f:ed:81:a3:4a:97: 7c:24:3f:39:c7:0c:98:25:98:2a:35:1b:e6:b2:72: 5d:9e:01:30:41:a0:fc:df:1e:69:9f:ce:e4:0a:1c: f0:c2:ec:1e:b3:37:00:4a:47:ee:33:df:31:35:dc: 28:28:6e:64:a8:61:28:58:71:fc:de:34:39:e1:b4: 9c:ff:70:05:2d:f9:37:3a:3f:3e:08:c8:77:8b:1a: cf:ca:15:ce:d6:a2:42:81:35:8f:f5:51:82:56:bd: 2d:c1:e6:63:ae:f6:a0:12:6d:d4:6d:3a:aa:7c:06: 0c:64:cb:f9:ab:c7:94:a0:4e:ca:89:ca:3b:05:6c: 88:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CC:61:0C:5F:D8:B6:33:86:BC:25:EC:DD:77:94:9F:37:9B:FC:C1 X509v3 Authority Key Identifier: keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:78:0b:e1:a4:17:3a:60:4b:4f:b7:ea:b7:9e:6a:43:d8:e3: 01:18:d9:cc:81:48:9e:22:fc:4e:f8:07:c6:25:15:e1:ff:5e: 6e:5e:16:0d:22:b1:3b:06:18:35:f0:11:64:74:78:ee:5f:66: eb:dd:83:9b:be:bd:ae:db:ef:c6:63:ea:05:f4:18:22:61:47: b2:75:89:50:fe:94:f3:b5:a6:b8:78:a2:d2:be:66:e7:77:37: c9:5a:ce:92:39:5a:05:c4:d9:84:4c:cf:98:0a:65:66:75:71: ce:18:b6:da:11:4b:51:13:2a:6c:8a:4d:ee:94:68:cb:bc:64: f6:01:c4:07:69:69:74:e7:13:03:d2:22:e3:c9:7f:36:76:84: 55:77:49:d8:e0:2f:69:e7:19:d5:59:d6:99:9c:6e:2e:f9:67: c3:59:4e:61:aa:be:eb:96:ee:d6:fe:9c:1b:40:b5:52:64:72: 6f:7b:53:3a:6e:c0:fd:0a:cb:16:9e:2f:39:3d:fb:e6:18:df: 3c:fa:88:70:c8:93:36:85:dd:f3:3f:47:06:50:76:8c:ad:42: 2b:82:a4:83:c7:84:02:a5:f8:02:90:65:0b:ed:b2:9b:4d:20: e7:f9:f3:1f:f5:3c:32:e1:1c:f2:e0:1a:af:38:4d:5f:68:2a: bc:d7:6f:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdQadNThJ5mjWfHkMv83vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYTRlMzYzOTc0YjJlZjkwZWNiMDUzNDBhZjVkYWY2YjI0 MTYwY2IwHhcNMjUxMjE1MTAwMTE2WhcNMjUxMjE2MTAwMTE2WjAzMTEwLwYDVQQD EygyMmNjNjEwYzVmZDhiNjMzODZiYzI1ZWNkZDc3OTQ5ZjM3OWJmY2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwxl9w3dSbxlvnoDxZU/pvwFP+qo 1okJ+WZDoC/yyF+YnLmCF9RvyY3PXjBXjpNig94Rw/Wxu1eu0myo+w6zu2q6ZB1t 5vPkkBJszg+UGrRrj1YNBMZkMIXN+UMQEL38Bojpv88lnAVMX4xyss4zkKTCUpgP Os0g8eIuiS0x1Ut/7YGjSpd8JD85xwyYJZgqNRvmsnJdngEwQaD83x5pn87kChzw wuweszcASkfuM98xNdwoKG5kqGEoWHH83jQ54bSc/3AFLfk3Oj8+CMh3ixrPyhXO 1qJCgTWP9VGCVr0tweZjrvagEm3UbTqqfAYMZMv5q8eUoE7Kico7BWyIlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLMYQxf2LYzhrwl7N13lJ83m/zBMB8GA1UdIwQY MBaAFGuk42OXSy75DssFNAr12vayQWDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTZUalk1ZExMdmtPeXdVMEN2WGE5ckpCWU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi84YTQ5NWQtYzQzNS00MmRjLTkxMjMt ZWNkN2ZlZTdjMWIwLzEvYTZUalk1ZExMdmtPeXdVMEN2WGE5ckpCWU1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi84YTQ5NWQtYzQzNS00MmRjLTkxMjMtZWNkN2ZlZTdjMWIw LzEvYTZUalk1ZExMdmtPeXdVMEN2WGE5ckpCWU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5HgL4aQX OmBLT7fqt55qQ9jjARjZzIFIniL8TvgHxiUV4f9ebl4WDSKxOwYYNfARZHR47l9m 692Dm769rtvvxmPqBfQYImFHsnWJUP6U87WmuHii0r5m53c3yVrOkjlaBcTZhEzP mAplZnVxzhi22hFLURMqbIpN7pRoy7xk9gHEB2lpdOcTA9Ii48l/NnaEVXdJ2OAv aecZ1VnWmZxuLvlnw1lOYaq+65bu1v6cG0C1UmRyb3tTOm7A/QrLFp4vOT375hjf PPqIcMiTNoXd8z9HBlB2jK1CK4Kkg8eEAqX4ApBlC+2ym00g5/nzH/U8MuEc8uAa rzhNX2gqvNdvCw== -----END CERTIFICATE-----Generated at Mon Dec 15 16:56:35 2025 by rpki-client