This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft File: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json) Hash identifier: r3YYbRHqMqbV8SV0p9RJ3IldYybgXjjL4E09IRu2PyU= Subject key identifier: 67:2F:EF:41:C2:8A:4D:38:40:AC:D9:84:CB:3A:5D:C2:0F:01:5A:39 Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40 Certificate issuer: /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40 Certificate serial: 019B59E44C0ED88C502912F605676EE0680C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 09:01:32 +0000 Manifest this update: Fri 26 Dec 2025 09:01:32 +0000 Manifest next update: Sat 27 Dec 2025 09:01:32 +0000 Files and hashes: 1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: AYYUes6vBO0FSmdEIwA0ZNu2lZM5PjuqpQZVRh16qUI=) 2: GK0Bp6TP9K4-qwdEgsDkQHad0Jw.roa (hash: vbPhg+vd0Vmphw6uDH8Qj3C//m4qsvwfSx93uUcGgb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:4c:0e:d8:8c:50:29:12:f6:05:67:6e:e0:68:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40 Validity Not Before: Dec 26 09:01:32 2025 GMT Not After : Dec 27 09:01:32 2025 GMT Subject: CN=672fef41c28a4d3840acd984cb3a5dc20f015a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:93:98:80:9f:3d:e1:96:a9:19:92:9b:b9: 00:b6:e0:7c:a1:09:de:e9:be:fa:fe:d0:53:b5:4c: 52:1b:ff:15:77:f3:ed:0b:a4:65:03:cd:3a:42:cb: 38:81:01:29:0f:4d:88:2b:f1:97:c3:e2:f6:ec:9d: 40:09:d5:85:ae:8d:25:f8:17:cd:17:56:a7:f9:7f: 85:f6:a6:e0:7e:1f:79:6f:90:d7:09:47:9b:d1:12: e6:89:9e:f5:f7:69:77:5a:41:4a:6e:e7:82:7f:e8: 7e:b5:3c:6a:04:e3:4c:5f:ea:c5:36:fa:a9:c1:2a: f7:9c:6e:00:98:84:42:7b:62:3a:4c:4f:80:c8:83: 12:4a:af:3c:6c:5d:25:41:bc:98:21:2d:0d:7b:54: 53:42:f1:72:31:82:65:c2:35:a0:23:9d:86:9a:e8: ff:01:b9:f7:e4:9f:1a:3b:66:0d:0c:2d:3b:ff:bc: 88:70:97:92:a3:5a:fb:c0:40:91:82:e5:d1:9e:92: 30:65:cd:42:3f:7a:cf:32:3d:fd:a3:15:e6:30:b9: 91:c5:14:cd:31:26:b7:2f:2e:68:d5:a5:cb:e9:40: 47:96:82:d8:45:23:1c:5e:8c:a6:3c:93:73:97:fa: 97:51:ac:b1:00:e3:8e:80:6a:5c:3c:99:95:33:51: 7c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2F:EF:41:C2:8A:4D:38:40:AC:D9:84:CB:3A:5D:C2:0F:01:5A:39 X509v3 Authority Key Identifier: keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a8:cd:71:88:91:2e:08:0a:dc:8f:d4:96:95:d5:32:09:48: 04:eb:32:fe:b1:22:66:50:e0:c4:85:88:a9:d2:d5:ad:76:fb: 6d:bc:3b:26:02:16:84:b8:aa:75:b8:b2:c8:14:8d:0c:89:28: 2f:45:68:b3:45:d5:84:24:25:35:11:52:fb:4e:d3:dd:6d:fc: 8a:00:7c:e9:fd:49:ff:01:9d:a8:d2:1d:77:32:ec:8d:fe:f7: a3:1a:b7:3c:61:d1:c8:5a:09:94:3f:b2:80:59:bd:3b:fe:c0: 81:1b:88:4d:bb:d3:84:6f:09:25:1c:13:a2:fe:98:ee:10:77: 4f:21:54:1a:3c:80:d2:52:f1:f7:35:0b:1f:cf:fd:dc:be:7c: 5f:10:e0:0d:1e:47:6f:63:28:6c:f0:ed:45:e3:4c:8d:cd:c4: 97:fe:6b:79:7b:47:e5:79:5f:b7:29:8f:c2:7b:4c:b4:3e:06: 52:ff:4d:ed:26:dc:67:9a:53:3b:79:82:dc:f5:28:c9:65:ed: d1:13:3e:a8:15:02:11:ee:1f:24:ee:7b:8b:dc:08:3e:ba:7c: 3b:2b:5c:75:59:4d:87:1a:0d:e6:5a:42:ad:fa:ba:99:fc:bc: b4:03:ce:13:73:8f:b7:61:5a:33:7b:34:95:9a:93:6b:7c:99: f2:fe:7a:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5EwO2IxQKRL2BWdu4GgMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YzNlNjQ1MmE2M2Y4ZTQ3YTI1N2U1M2MxYThmZmE3NWY5 MWVhNDAwHhcNMjUxMjI2MDkwMTMyWhcNMjUxMjI3MDkwMTMyWjAzMTEwLwYDVQQD Eyg2NzJmZWY0MWMyOGE0ZDM4NDBhY2Q5ODRjYjNhNWRjMjBmMDE1YTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/GTmICfPeGWqRmSm7kAtuB8oQne 6b76/tBTtUxSG/8Vd/PtC6RlA806Qss4gQEpD02IK/GXw+L27J1ACdWFro0l+BfN F1an+X+F9qbgfh95b5DXCUeb0RLmiZ7192l3WkFKbueCf+h+tTxqBONMX+rFNvqp wSr3nG4AmIRCe2I6TE+AyIMSSq88bF0lQbyYIS0Ne1RTQvFyMYJlwjWgI52Gmuj/ Abn35J8aO2YNDC07/7yIcJeSo1r7wECRguXRnpIwZc1CP3rPMj39oxXmMLmRxRTN MSa3Ly5o1aXL6UBHloLYRSMcXoymPJNzl/qXUayxAOOOgGpcPJmVM1F8PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcv70HCik04QKzZhMs6XcIPAVo5MB8GA1UdIwQY MBaAFOjD5kUqY/jkeiV+U8Go/6dfkepAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kYjQ2NTgtNDI3NS00M2JhLTlkYTkt NmQ4MTBiMGFkYTBhLzEvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kYjQ2NTgtNDI3NS00M2JhLTlkYTktNmQ4MTBiMGFkYTBh LzEvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqjNcYiR LggK3I/UlpXVMglIBOsy/rEiZlDgxIWIqdLVrXb7bbw7JgIWhLiqdbiyyBSNDIko L0Vos0XVhCQlNRFS+07T3W38igB86f1J/wGdqNIddzLsjf73oxq3PGHRyFoJlD+y gFm9O/7AgRuITbvThG8JJRwTov6Y7hB3TyFUGjyA0lLx9zULH8/93L58XxDgDR5H b2MobPDtReNMjc3El/5reXtH5XlftymPwntMtD4GUv9N7SbcZ5pTO3mC3PUoyWXt 0RM+qBUCEe4fJO57i9wIPrp8OytcdVlNhxoN5lpCrfq6mfy8tAPOE3OPt2FaM3s0 lZqTa3yZ8v56zA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:24 2025 by rpki-client