This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft File: 6lg9YfLlemsW6ksanKJ7slDXSO8.mft (raw, json) Hash identifier: eqVL+RX0WmfSr6fcTetAE14huHe6cPm4PYSmF9R6P2Y= Subject key identifier: 0C:9D:A4:24:47:8F:8B:6C:EE:0A:32:61:88:BC:1F:FE:40:BD:9D:67 Authority key identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF Certificate issuer: /CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef Certificate serial: 019B36E9F32B876E82E18AD48065A8A83B3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 14:01:00 +0000 Manifest this update: Fri 19 Dec 2025 14:01:00 +0000 Manifest next update: Sat 20 Dec 2025 14:01:00 +0000 Files and hashes: 1: 6lg9YfLlemsW6ksanKJ7slDXSO8.crl (hash: 7MuJI8ZhxU6+NYu5dRZHNteVsUE8rZr4Y6ywPRV78nc=) 2: BDcWEX2jsziWI3BwAdwXDgVlUUs.roa (hash: ohMsIfsvhMfjPWnDhvdOtdCZBCwqZ7Awj2tCgJhUEaE=) 3: YZeqBXKQFmXRNEkSHxYTd5FtBG8.roa (hash: H2qTKciVzX2Iz/NfWeOKudVbBEab6voHC2+59WhtYSU=) 4: eIUbhEvS312QdpTsSOJbOfKRhjg.roa (hash: TDTdEPNKnFdTs1u7Iy6p2CE/KWnf5yhsocLiaVIOsqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:f3:2b:87:6e:82:e1:8a:d4:80:65:a8:a8:3b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef Validity Not Before: Dec 19 14:01:00 2025 GMT Not After : Dec 20 14:01:00 2025 GMT Subject: CN=0c9da424478f8b6cee0a326188bc1ffe40bd9d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:68:48:81:f9:5e:94:b3:66:62:b0:af:a4: 9a:38:94:0f:ad:5c:49:09:bf:6d:30:68:6c:18:c1: 92:4b:c4:d9:ad:e4:7d:d9:64:04:fb:25:8a:7a:64: 80:dc:df:36:74:b6:d1:6f:6d:27:57:60:ac:6a:55: fd:5a:f4:87:b3:fe:75:cd:75:cb:66:64:11:c4:57: fc:2c:63:e3:5d:31:4f:f6:5c:c2:5d:f1:75:5b:07: fc:36:5b:77:ad:96:c5:1f:99:31:64:22:91:f7:1a: 68:c3:e6:eb:43:c7:9d:ac:57:a8:fd:c1:df:38:16: 97:d1:4b:a0:e0:ae:a5:7e:e4:1f:e0:ea:b0:2c:1b: 66:61:fa:df:4f:d8:e6:12:44:39:48:4c:05:a8:8d: 5d:de:1f:27:96:06:cb:95:4a:11:00:c0:28:51:c3: c3:3c:11:c4:0c:2c:07:28:5c:47:06:69:af:93:a6: 7c:4d:cd:ae:74:6a:c6:9b:8c:1d:db:df:12:ea:1d: 2a:70:71:86:70:d9:cf:3e:13:99:9f:7f:3c:05:9d: 97:bb:84:91:b6:31:57:1e:90:3b:30:49:36:8c:a6: cd:af:5d:43:12:59:ff:42:16:6e:27:4f:4e:4e:8a: d4:f3:bb:ce:f3:24:f5:9e:c6:72:c9:02:2e:4c:bb: 8d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9D:A4:24:47:8F:8B:6C:EE:0A:32:61:88:BC:1F:FE:40:BD:9D:67 X509v3 Authority Key Identifier: keyid:EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a0:06:15:bc:43:63:8e:b3:0a:6b:01:26:c5:c7:2e:cf:c9: 7b:a7:61:1e:b1:85:17:52:ea:b0:7c:cd:cf:c8:fa:a0:1b:86: 6d:e6:75:da:f0:53:c7:f8:98:e7:e9:23:7c:5b:b8:6f:76:2d: 7b:5b:e3:66:1f:c2:68:43:6d:a4:0f:f3:cb:19:d1:e2:da:3b: 24:fd:1e:ab:41:fe:8c:d2:a6:1d:27:82:06:a5:2f:22:9e:98: ce:ee:ba:ff:87:45:7e:ce:67:ce:63:0f:c9:bb:e0:4b:3a:21: e6:cf:3a:31:f8:aa:fd:93:0e:b8:f7:30:bd:5e:f7:61:05:70: 17:a0:9e:ca:66:b9:65:eb:51:20:e5:cd:3a:3f:0d:39:82:fe: 53:5a:2e:9c:4a:4e:3e:24:26:41:ad:f4:ae:c3:48:ef:31:2a: f6:4b:e7:11:70:8a:b4:85:a8:80:75:df:37:7f:e2:75:75:13: c8:f4:0a:eb:ed:55:87:22:16:58:f6:21:0b:f3:f7:cf:78:9f: fe:56:26:1e:61:1e:d9:69:a9:3f:b0:42:55:b7:ee:77:80:ec: 69:a4:ab:fb:45:0a:d4:ae:ea:77:92:65:93:17:cd:fe:c7:0d: 8d:26:ea:39:e9:0e:15:f3:8d:e9:b8:b4:82:ad:33:60:98:30: c0:6e:fd:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26fMrh26C4YrUgGWoqDs/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTgzZDYxZjJlNTdhNmIxNmVhNGIxYTljYTI3YmIyNTBk NzQ4ZWYwHhcNMjUxMjE5MTQwMTAwWhcNMjUxMjIwMTQwMTAwWjAzMTEwLwYDVQQD EygwYzlkYTQyNDQ3OGY4YjZjZWUwYTMyNjE4OGJjMWZmZTQwYmQ5ZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtixoSIH5XpSzZmKwr6SaOJQPrVxJ Cb9tMGhsGMGSS8TZreR92WQE+yWKemSA3N82dLbRb20nV2CsalX9WvSHs/51zXXL ZmQRxFf8LGPjXTFP9lzCXfF1Wwf8Nlt3rZbFH5kxZCKR9xpow+brQ8edrFeo/cHf OBaX0Uug4K6lfuQf4OqwLBtmYfrfT9jmEkQ5SEwFqI1d3h8nlgbLlUoRAMAoUcPD PBHEDCwHKFxHBmmvk6Z8Tc2udGrGm4wd298S6h0qcHGGcNnPPhOZn388BZ2Xu4SR tjFXHpA7MEk2jKbNr11DEln/QhZuJ09OTorU87vO8yT1nsZyyQIuTLuNWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAydpCRHj4ts7goyYYi8H/5AvZ1nMB8GA1UdIwQY MBaAFOpYPWHy5XprFupLGpyie7JQ10jvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxnOVlmTGxlbXNXNmtzYW5LSjdzbERYU084LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ZjUxMjgtN2NiYS00OWM1LTliMjUt OTljMWIwY2ZjM2E4LzEvNmxnOVlmTGxlbXNXNmtzYW5LSjdzbERYU084Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82ZjUxMjgtN2NiYS00OWM1LTliMjUtOTljMWIwY2ZjM2E4 LzEvNmxnOVlmTGxlbXNXNmtzYW5LSjdzbERYU084LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaAGFbxD Y46zCmsBJsXHLs/Je6dhHrGFF1LqsHzNz8j6oBuGbeZ12vBTx/iY5+kjfFu4b3Yt e1vjZh/CaENtpA/zyxnR4to7JP0eq0H+jNKmHSeCBqUvIp6Yzu66/4dFfs5nzmMP ybvgSzoh5s86Mfiq/ZMOuPcwvV73YQVwF6Ceyma5ZetRIOXNOj8NOYL+U1ounEpO PiQmQa30rsNI7zEq9kvnEXCKtIWogHXfN3/idXUTyPQK6+1VhyIWWPYhC/P3z3if /lYmHmEe2WmpP7BCVbfud4DsaaSr+0UK1K7qd5JlkxfN/scNjSbqOekOFfON6bi0 gq0zYJgwwG79Uw== -----END CERTIFICATE-----Generated at Fri Dec 19 16:13:38 2025 by rpki-client