This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft File: 6rBmxuGACj9b0uQG6aYg0qD29lM.mft (raw, json) Hash identifier: u6x+fJ3ftFkCb7u6hnrwDMscckmxBpaxzrSzN08Lfp4= Subject key identifier: FE:6A:86:94:57:09:41:93:88:28:7F:26:77:AF:CB:54:66:F5:FB:DC Authority key identifier: EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53 Certificate issuer: /CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653 Certificate serial: 019B59E3FC02D12AAA04BA504571BDB43D1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft Manifest number: 0E2B Signing time: Fri 26 Dec 2025 09:01:11 +0000 Manifest this update: Fri 26 Dec 2025 09:01:11 +0000 Manifest next update: Sat 27 Dec 2025 09:01:11 +0000 Files and hashes: 1: 6rBmxuGACj9b0uQG6aYg0qD29lM.crl (hash: aWQ6AL1022EqMaHJiDufl1yMfMZVoge/VizhEMvOYw0=) 2: 9uvjekcau3PbfLrEyZwNzBwQO7Q.roa (hash: mH0HAaOf2X0fWHcxqJaO7mLzzy3VZpb8eqMe7h725z0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:fc:02:d1:2a:aa:04:ba:50:45:71:bd:b4:3d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653 Validity Not Before: Dec 26 09:01:11 2025 GMT Not After : Dec 27 09:01:11 2025 GMT Subject: CN=fe6a86945709419388287f2677afcb5466f5fbdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:29:ef:c4:f9:98:d3:57:ea:19:d7:82:c8: c7:f9:f9:31:dd:27:3b:2a:27:fd:38:56:cb:e7:06: f8:59:f1:63:b6:60:e4:50:b4:b4:13:39:24:ab:39: 0b:87:01:43:73:f9:b0:99:cb:52:37:5e:99:da:d2: 97:ef:68:f4:c6:4b:3b:9e:af:34:52:f4:13:d1:66: af:00:0e:11:fc:03:57:bf:1c:e5:0b:1a:42:8e:0d: 81:a0:60:da:82:f1:35:12:21:b9:2c:8f:ec:5b:78: 0f:a1:43:c8:06:c3:8f:c4:9b:94:68:6d:32:8d:0b: e8:3d:6a:59:83:44:af:b2:be:12:17:1d:67:ac:d5: 9e:a6:59:3b:e5:de:fa:77:13:64:d9:2b:7d:e9:cc: 46:82:4f:f4:0d:76:95:07:46:96:03:29:f0:60:36: 40:ae:70:3d:3d:62:76:3c:e3:44:33:f1:a9:68:bd: c7:34:07:61:ab:89:5d:a4:a5:ab:98:ba:0e:70:85: cb:4d:44:ba:69:6b:62:99:77:e6:33:8f:cb:fb:88: fa:bf:2b:8a:00:eb:ab:92:3e:06:51:43:d7:b0:7e: 17:e5:2e:64:2a:af:57:33:bb:3b:e8:e0:5d:6c:f9: 13:00:37:9d:37:2b:8f:d8:b3:03:e3:42:30:70:2f: 8a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6A:86:94:57:09:41:93:88:28:7F:26:77:AF:CB:54:66:F5:FB:DC X509v3 Authority Key Identifier: keyid:EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:59:53:49:6f:14:b5:e3:ed:14:4e:b0:ce:65:62:63:c6:b3: 74:74:25:bd:46:bd:8d:95:ad:71:1f:5f:48:13:b7:2c:46:80: db:d4:17:f0:2a:95:6d:b7:2b:07:27:2f:b1:6d:38:93:29:04: fa:4b:6d:fa:f1:61:3f:01:04:ca:89:a9:85:dd:25:94:39:33: 52:e8:26:37:53:f3:39:ec:69:e0:10:30:99:3a:b1:1b:53:1e: cf:ec:d9:fe:aa:29:3c:dc:ba:4a:c8:d5:76:5a:77:77:f4:cb: 38:dd:4c:97:9f:e6:9d:3f:ff:8c:22:c8:63:cc:b8:81:2f:4e: 40:8a:28:82:71:64:9d:8e:9c:98:27:15:1f:25:f4:f9:65:d1: 15:34:bd:8d:d3:62:84:d1:bc:05:87:c0:c1:02:02:bb:1c:da: cd:ea:db:fe:1e:2f:8e:1b:86:ee:5f:b2:c6:87:ef:05:8b:a4: fa:49:19:7b:96:7f:c5:d6:44:e6:f7:21:bd:da:cf:22:c9:21: 22:52:3d:71:1f:87:9f:ae:0a:4f:4c:fa:3c:3d:c0:ae:69:88: ba:ce:97:4b:b7:5a:39:c1:cb:60:7f:fc:51:b2:72:e2:92:cf: f6:70:e0:59:17:c7:6a:09:2f:fd:e5:59:2b:ab:83:72:07:9b: 39:9a:60:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4/wC0SqqBLpQRXG9tD0eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYjA2NmM2ZTE4MDBhM2Y1YmQyZTQwNmU5YTYyMGQyYTBm NmY2NTMwHhcNMjUxMjI2MDkwMTExWhcNMjUxMjI3MDkwMTExWjAzMTEwLwYDVQQD EyhmZTZhODY5NDU3MDk0MTkzODgyODdmMjY3N2FmY2I1NDY2ZjVmYmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwgp78T5mNNX6hnXgsjH+fkx3Sc7 Kif9OFbL5wb4WfFjtmDkULS0EzkkqzkLhwFDc/mwmctSN16Z2tKX72j0xks7nq80 UvQT0WavAA4R/ANXvxzlCxpCjg2BoGDagvE1EiG5LI/sW3gPoUPIBsOPxJuUaG0y jQvoPWpZg0Svsr4SFx1nrNWeplk75d76dxNk2St96cxGgk/0DXaVB0aWAynwYDZA rnA9PWJ2PONEM/GpaL3HNAdhq4ldpKWrmLoOcIXLTUS6aWtimXfmM4/L+4j6vyuK AOurkj4GUUPXsH4X5S5kKq9XM7s76OBdbPkTADedNyuP2LMD40IwcC+K1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5qhpRXCUGTiCh/Jnevy1Rm9fvcMB8GA1UdIwQY MBaAFOqwZsbhgAo/W9LkBummINKg9vZTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85MWQ2MjktN2QxZi00NWJkLWExZTEt OTMxY2Y3OThlNDEyLzEvNnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi85MWQ2MjktN2QxZi00NWJkLWExZTEtOTMxY2Y3OThlNDEy LzEvNnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs1lTSW8U tePtFE6wzmViY8azdHQlvUa9jZWtcR9fSBO3LEaA29QX8CqVbbcrBycvsW04kykE +ktt+vFhPwEEyomphd0llDkzUugmN1PzOexp4BAwmTqxG1Mez+zZ/qopPNy6SsjV dlp3d/TLON1Ml5/mnT//jCLIY8y4gS9OQIoognFknY6cmCcVHyX0+WXRFTS9jdNi hNG8BYfAwQICuxzazerb/h4vjhuG7l+yxofvBYuk+kkZe5Z/xdZE5vchvdrPIskh IlI9cR+Hn64KT0z6PD3ArmmIus6XS7daOcHLYH/8UbJy4pLP9nDgWRfHagkv/eVZ K6uDcgebOZpgGw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:14 2025 by rpki-client