This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft File: 6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft (raw, json) Hash identifier: hnv3BwWVfi6siL4785TDueYtIWdZnmIjQcD0akAPoMQ= Subject key identifier: 12:BD:25:4E:53:3C:1B:A8:50:30:E4:4B:73:1A:FE:77:5D:E0:C5:6E Authority key identifier: EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0 Certificate issuer: /CN=eb36779b13aec780b0d437f8444ab0f443a05dd0 Certificate serial: 019B2FD552EE74639F8DB8A8D23D39397A15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft Manifest number: 1082 Signing time: Thu 18 Dec 2025 05:01:08 +0000 Manifest this update: Thu 18 Dec 2025 05:01:08 +0000 Manifest next update: Fri 19 Dec 2025 05:01:08 +0000 Files and hashes: 1: 6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl (hash: mvf8UIeYH56wEfyKxSibBwbUpiBhcIwaqC4YNVmmp1E=) 2: bbiCAC8k2CawpBPgM6fTMAmYAY0.roa (hash: FIWbsZ3JZZD2fluaVWFHhluHhUwUg7ek5YY8fTNR7Ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:52:ee:74:63:9f:8d:b8:a8:d2:3d:39:39:7a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb36779b13aec780b0d437f8444ab0f443a05dd0 Validity Not Before: Dec 18 05:01:08 2025 GMT Not After : Dec 19 05:01:08 2025 GMT Subject: CN=12bd254e533c1ba85030e44b731afe775de0c56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5c:43:41:36:b6:3d:2a:a3:00:d0:14:62:2f: b8:54:4b:3b:0c:d1:58:04:25:5e:d7:a0:0a:db:70: 34:7d:81:fd:6f:94:44:3c:ec:41:4c:69:45:df:62: c2:72:4e:e9:ac:85:27:52:bd:d4:a9:f5:38:1f:a2: ec:e2:aa:ee:7c:78:33:09:72:40:84:4d:4c:cc:7d: 8b:49:70:3f:5a:c2:43:cf:8d:36:81:93:28:ce:34: 55:83:70:ce:55:0d:a1:93:8e:45:0c:4a:2d:0f:6a: 83:ba:08:7f:46:32:12:e0:9e:88:16:02:7f:a8:dc: 06:0d:aa:e8:8a:e2:40:f8:9e:8f:4b:83:0b:d9:51: 20:84:a8:c9:7b:19:16:61:e1:97:61:7a:6a:7c:90: 81:29:bc:ba:1f:60:93:9c:4d:15:0d:48:5c:5a:62: 2c:ad:d2:e6:68:c0:dc:87:c3:3a:52:26:36:f5:70: d4:32:cc:d4:90:9b:9d:be:59:9a:2e:ac:3a:32:63: 83:26:4f:86:15:27:67:80:87:05:bb:bc:25:ee:be: 49:c2:3e:00:24:75:ab:c4:06:51:a1:71:66:35:4e: 27:13:eb:bb:65:5a:0b:f0:58:b4:46:63:8b:27:82: 32:d7:ad:7e:2b:8b:e5:cf:29:13:4d:42:d2:04:c5: 78:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BD:25:4E:53:3C:1B:A8:50:30:E4:4B:73:1A:FE:77:5D:E0:C5:6E X509v3 Authority Key Identifier: keyid:EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:24:e3:7c:3e:6d:d8:26:98:86:d6:5b:10:ec:6f:8a:c0:ba: 1c:a8:50:76:21:35:15:f9:1d:8f:10:d1:65:c4:5b:6e:23:8f: bc:8c:1d:4c:96:f6:c8:c0:71:b6:75:b2:d7:d1:86:ed:ac:99: 78:e0:11:1e:e8:fd:85:82:71:d8:db:a6:e2:6a:d7:30:1b:61: 19:6c:d6:9d:90:4f:5d:aa:e0:ec:82:30:d8:5c:c4:36:0e:19: 8d:7b:c1:e7:fe:f0:a5:56:71:c5:dd:77:fb:2e:37:be:c5:4c: 8a:99:fd:81:6b:7b:f5:17:05:a7:a0:dc:56:92:4a:43:c6:bd: 37:16:39:95:80:a0:07:25:2d:96:44:b2:d9:04:96:e9:1a:aa: 10:a7:95:24:bd:22:dc:9d:d0:8f:e7:7a:49:fe:16:c1:20:af: 93:80:59:6b:e4:7b:23:a2:c1:ab:9b:0d:eb:0a:88:21:ed:ae: 67:11:92:14:60:2f:56:6f:85:1d:79:f1:5d:ca:98:1b:e5:07: 1f:96:41:ff:0c:d5:b5:fd:a1:5d:28:ba:96:8c:1c:53:51:c3: 0c:7c:9e:c5:d4:ce:68:b5:de:e4:d7:eb:b2:7c:c5:e0:b4:c0: 0f:23:57:f0:0b:fb:e5:19:20:3f:53:f3:77:36:9b:ad:a6:9d: ee:89:3d:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1VLudGOfjbio0j05OXoVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzY3NzliMTNhZWM3ODBiMGQ0MzdmODQ0NGFiMGY0NDNh MDVkZDAwHhcNMjUxMjE4MDUwMTA4WhcNMjUxMjE5MDUwMTA4WjAzMTEwLwYDVQQD EygxMmJkMjU0ZTUzM2MxYmE4NTAzMGU0NGI3MzFhZmU3NzVkZTBjNTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlxDQTa2PSqjANAUYi+4VEs7DNFY BCVe16AK23A0fYH9b5REPOxBTGlF32LCck7prIUnUr3UqfU4H6Ls4qrufHgzCXJA hE1MzH2LSXA/WsJDz402gZMozjRVg3DOVQ2hk45FDEotD2qDugh/RjIS4J6IFgJ/ qNwGDaroiuJA+J6PS4ML2VEghKjJexkWYeGXYXpqfJCBKby6H2CTnE0VDUhcWmIs rdLmaMDch8M6UiY29XDUMszUkJudvlmaLqw6MmODJk+GFSdngIcFu7wl7r5Jwj4A JHWrxAZRoXFmNU4nE+u7ZVoL8Fi0RmOLJ4Iy161+K4vlzykTTULSBMV4GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBK9JU5TPBuoUDDkS3Ma/ndd4MVuMB8GA1UdIwQY MBaAFOs2d5sTrseAsNQ3+ERKsPRDoF3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ODY0ZmYtNjM0MS00MDA0LWFiNmQt MGYzYjljMDVkZTQ1LzEvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC85ODY0ZmYtNjM0MS00MDA0LWFiNmQtMGYzYjljMDVkZTQ1 LzEvNnpaM214T3V4NEN3MURmNFJFcXc5RU9nWGRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhiTjfD5t 2CaYhtZbEOxvisC6HKhQdiE1FfkdjxDRZcRbbiOPvIwdTJb2yMBxtnWy19GG7ayZ eOARHuj9hYJx2Num4mrXMBthGWzWnZBPXarg7IIw2FzENg4ZjXvB5/7wpVZxxd13 +y43vsVMipn9gWt79RcFp6DcVpJKQ8a9NxY5lYCgByUtlkSy2QSW6RqqEKeVJL0i 3J3Qj+d6Sf4WwSCvk4BZa+R7I6LBq5sN6wqIIe2uZxGSFGAvVm+FHXnxXcqYG+UH H5ZB/wzVtf2hXSi6lowcU1HDDHyexdTOaLXe5NfrsnzF4LTADyNX8Av75RkgP1Pz dzabraad7ok9Iw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:30:23 2025 by rpki-client