This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft File: 6x3AD9LB4-qvzszBtLofj9CkqYw.mft (raw, json) Hash identifier: kgN9+OQtaM2VPzEER+Y7zPmnWEq8aC545ExLwmytFT0= Subject key identifier: 54:32:43:87:D7:BB:F7:98:A5:2D:BF:E0:CA:17:27:CB:0C:D4:D6:6F Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C Certificate issuer: /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c Certificate serial: 019B40FFA7527059CC2F94ECE0004E8E9DA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 13:00:54 +0000 Manifest this update: Sun 21 Dec 2025 13:00:54 +0000 Manifest next update: Mon 22 Dec 2025 13:00:54 +0000 Files and hashes: 1: 6x3AD9LB4-qvzszBtLofj9CkqYw.crl (hash: 1jHiD0hjFwPFkXupCfTX83cxpdtFtBx940NUpemZ2VU=) 2: Om5FJ2saBdYhhGOS3f3FISumZqg.roa (hash: Fu3JRt/JCmRX1P55XNbPmEdky96U0142N0aVN3A+m0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:a7:52:70:59:cc:2f:94:ec:e0:00:4e:8e:9d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c Validity Not Before: Dec 21 13:00:54 2025 GMT Not After : Dec 22 13:00:54 2025 GMT Subject: CN=54324387d7bbf798a52dbfe0ca1727cb0cd4d66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:99:ee:5c:ed:42:55:5e:c9:4b:f3:64:17:19: 88:49:fb:2e:a8:f2:0a:3e:f9:d0:30:94:75:0d:79: 14:f3:3c:e2:d7:1c:22:36:87:0e:0b:ab:2a:ed:a6: 34:e7:1f:1d:4f:a6:96:00:da:11:91:79:c6:7a:38: 0f:57:63:ee:b2:3f:17:66:d3:03:d8:ec:4e:e1:52: d4:ff:89:e4:ea:f5:af:19:26:9c:ba:aa:30:e7:f0: 18:23:9c:5c:a0:6c:82:e1:2e:89:a9:e4:13:b1:5d: 33:0b:ae:a9:f5:c2:3d:7a:34:a9:a3:63:0b:e7:1d: 53:c7:4c:20:2f:f8:c9:8f:a3:1a:d1:6c:39:22:df: fc:0a:74:b3:62:e3:7f:d7:5a:21:04:7c:37:a5:f4: 67:91:54:7e:68:b8:3f:90:62:6b:14:65:1f:46:17: 2e:92:54:93:a1:c7:4b:66:11:e0:56:b8:a5:fb:80: 33:b2:1b:91:d8:7c:81:6b:ad:4c:45:dc:c4:ca:15: f1:43:c5:da:02:0e:a4:e5:93:fe:4b:1c:96:65:4f: 68:d1:5e:65:ec:f0:df:e3:aa:b0:5e:e2:75:2b:79: 21:9f:dc:6a:ba:02:de:e8:be:af:70:87:31:52:ce: c7:fe:2d:74:1c:1b:1d:f4:5e:e9:3f:34:a3:54:60: 5c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:32:43:87:D7:BB:F7:98:A5:2D:BF:E0:CA:17:27:CB:0C:D4:D6:6F X509v3 Authority Key Identifier: keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:5f:eb:c4:4d:c5:09:74:ca:9e:66:dd:e3:d4:1b:bc:51:ed: 52:9e:fd:22:c4:93:3c:2f:92:3f:03:7a:b6:01:f7:18:93:27: f1:fe:70:fb:d7:ef:56:91:3a:24:f2:1a:e8:35:74:ef:09:01: 5e:4e:0b:4b:72:45:f2:b9:95:05:c8:94:ca:f5:72:82:66:bc: 1a:fe:4e:0b:78:69:7d:51:c8:09:08:b0:b9:d8:7f:3b:e5:8f: ad:5a:09:57:fc:51:c1:c5:7d:d1:a9:38:85:18:03:56:90:01: e9:72:70:02:8a:38:7c:c1:fe:b6:81:d0:6d:06:24:b8:da:a9: 98:b1:7f:75:04:0b:04:cb:ec:c9:97:5c:fa:48:20:e6:bd:d2: 1a:01:fa:6a:99:40:dc:da:73:62:e0:74:1a:c8:2a:6f:23:4f: 8d:16:f1:bc:bb:5a:30:c3:0a:9f:cf:df:f9:ef:b3:a6:af:f3: 5f:fb:2e:8f:25:cb:e1:2f:62:c2:e5:09:37:e4:98:a9:9d:86: 5b:3a:b1:cd:cd:f3:a5:98:22:32:08:ac:9c:c3:99:17:14:39: ff:80:77:61:83:d3:2f:6f:e7:e0:11:d1:34:ad:03:92:5c:38: b9:f1:05:87:3f:4c:f7:4d:7e:37:64:16:43:56:e3:56:f1:6e: 00:ea:fa:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/6dScFnML5Ts4ABOjp2oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMWRjMDBmZDJjMWUzZWFhZmNlY2NjMWI0YmExZjhmZDBh NGE5OGMwHhcNMjUxMjIxMTMwMDU0WhcNMjUxMjIyMTMwMDU0WjAzMTEwLwYDVQQD Eyg1NDMyNDM4N2Q3YmJmNzk4YTUyZGJmZTBjYTE3MjdjYjBjZDRkNjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJnuXO1CVV7JS/NkFxmISfsuqPIK PvnQMJR1DXkU8zzi1xwiNocOC6sq7aY05x8dT6aWANoRkXnGejgPV2Pusj8XZtMD 2OxO4VLU/4nk6vWvGSacuqow5/AYI5xcoGyC4S6JqeQTsV0zC66p9cI9ejSpo2ML 5x1Tx0wgL/jJj6Ma0Ww5It/8CnSzYuN/11ohBHw3pfRnkVR+aLg/kGJrFGUfRhcu klSTocdLZhHgVril+4AzshuR2HyBa61MRdzEyhXxQ8XaAg6k5ZP+SxyWZU9o0V5l 7PDf46qwXuJ1K3khn9xqugLe6L6vcIcxUs7H/i10HBsd9F7pPzSjVGBcKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQyQ4fXu/eYpS2/4MoXJ8sM1NZvMB8GA1UdIwQY MBaAFOsdwA/SwePqr87MwbS6H4/QpKmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81YWI1ODUtYjI5Yi00ZTcxLTgwMzgt OTBlMjFkZjAxZTkxLzEvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS81YWI1ODUtYjI5Yi00ZTcxLTgwMzgtOTBlMjFkZjAxZTkx LzEvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAV/rxE3F CXTKnmbd49QbvFHtUp79IsSTPC+SPwN6tgH3GJMn8f5w+9fvVpE6JPIa6DV07wkB Xk4LS3JF8rmVBciUyvVygma8Gv5OC3hpfVHICQiwudh/O+WPrVoJV/xRwcV90ak4 hRgDVpAB6XJwAoo4fMH+toHQbQYkuNqpmLF/dQQLBMvsyZdc+kgg5r3SGgH6aplA 3NpzYuB0GsgqbyNPjRbxvLtaMMMKn8/f+e+zpq/zX/sujyXL4S9iwuUJN+SYqZ2G Wzqxzc3zpZgiMgisnMOZFxQ5/4B3YYPTL2/n4BHRNK0Dklw4ufEFhz9M901+N2QW Q1bjVvFuAOr62Q== -----END CERTIFICATE-----Generated at Sun Dec 21 23:02:39 2025 by rpki-client