This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft File: 6W790RLajZdctZOq0f6IQNbwiuM.mft (raw, json) Hash identifier: oLHRCZhhC8IVxniyLNb8P7bC3ahr9B/A5714TROdg8M= Subject key identifier: 25:95:9F:FB:09:46:36:42:32:62:BE:8C:73:DD:B6:31:8B:E2:56:FF Authority key identifier: E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3 Certificate issuer: /CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3 Certificate serial: 019B5AF68ADC59A801C7D8DD1F69D3AC39F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft Manifest number: 0360 Signing time: Fri 26 Dec 2025 14:01:05 +0000 Manifest this update: Fri 26 Dec 2025 14:01:05 +0000 Manifest next update: Sat 27 Dec 2025 14:01:05 +0000 Files and hashes: 1: 6W790RLajZdctZOq0f6IQNbwiuM.crl (hash: qFRNU6yxxt5vVCCmHEdj592LDjYeX+HKnfSoty+qwt0=) 2: Nn9zvns-9MxxIXjn8JIbpmV34s8.roa (hash: 7A6j8hAQUIpmUDd+lagtKalWuiGm1he97we0iFCchhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:8a:dc:59:a8:01:c7:d8:dd:1f:69:d3:ac:39:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3 Validity Not Before: Dec 26 14:01:05 2025 GMT Not After : Dec 27 14:01:05 2025 GMT Subject: CN=25959ffb094636423262be8c73ddb6318be256ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f2:62:d4:b7:0f:f7:3b:c1:fa:8a:cd:65:58: dd:98:ec:b2:83:c6:81:ab:d9:2a:6c:1a:2e:dd:1a: 58:d5:fa:ad:a4:ca:e0:be:db:32:16:07:43:15:7d: 6b:b2:e2:bd:66:f0:63:5c:2e:59:19:13:b8:0b:37: 74:7b:53:67:b0:9a:a7:4c:77:a7:fe:52:4e:c6:40: 2f:7c:2e:51:c7:cf:ce:ca:8a:1f:89:bc:d4:b6:51: 64:06:b3:6d:b5:25:87:cd:b7:35:9f:0d:26:38:12: be:e8:83:e7:37:8d:2b:2e:ec:dc:1d:a9:69:10:03: ca:c5:bd:c8:5b:c2:4d:a5:fe:28:a4:d2:48:83:12: 77:8a:37:41:14:42:b1:85:df:96:64:28:bb:ab:61: 9c:ec:ea:08:8e:84:73:e8:ad:ba:e1:fd:cc:01:ab: dd:a9:fe:6a:27:85:d1:57:d8:06:a3:f1:cf:bf:86: b6:00:0f:bb:0a:5f:74:27:21:6b:4e:80:76:d9:07: 41:14:c3:15:40:e9:d2:73:6a:81:a3:b0:66:63:a9: 87:44:4c:09:e3:d2:48:b0:1d:94:2e:10:18:6a:9e: ce:df:75:a1:b3:5e:6f:1d:3c:53:36:fa:7e:7a:92: bb:33:82:a9:7e:3e:5c:be:5b:15:73:6f:e1:c9:b1: ca:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:95:9F:FB:09:46:36:42:32:62:BE:8C:73:DD:B6:31:8B:E2:56:FF X509v3 Authority Key Identifier: keyid:E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:15:89:98:a8:1d:13:8f:36:07:52:a6:b2:a2:3d:f2:af:8b: 44:52:92:ae:70:1d:f1:6d:2c:45:72:7e:a8:1a:f8:7e:a5:38: 27:6f:b2:2a:3b:f5:4a:3f:d0:99:18:1c:56:b0:ed:bb:56:12: 2a:25:c3:07:45:34:78:79:a7:c1:7a:37:40:3b:58:08:5f:ef: 87:b8:18:57:2f:44:83:ee:b8:68:c3:d4:b0:9a:74:c6:d7:67: fd:ad:db:89:2d:9c:e4:01:5c:20:2d:e8:3f:4a:36:7d:f4:51: 5b:62:1a:bd:ff:e0:18:91:23:94:4f:93:10:15:d9:01:2b:99: d2:6b:09:2c:6a:0e:77:b2:32:a3:1f:7a:96:5c:d8:e9:9b:a4: f4:35:c2:d4:d2:89:71:6a:c4:74:a0:3a:c4:5d:d6:8c:db:41: 94:5e:55:0f:8d:5c:a7:40:c8:c6:18:7c:71:43:1a:92:f6:94: 82:85:88:9a:8d:2b:e8:b2:22:9e:8b:a4:8d:a1:ea:da:8c:50: 08:7d:32:06:f0:ec:83:95:6a:64:11:33:dc:05:e1:ad:04:a6: 0f:54:25:0b:87:91:44:98:44:18:a6:e7:ea:01:88:2d:10:73: 41:0a:6c:9c:6f:4a:12:76:f5:64:18:9b:38:80:60:b1:f6:ff: d1:63:a8:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9orcWagBx9jdH2nTrDnyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NmVmZGQxMTJkYThkOTc1Y2I1OTNhYWQxZmU4ODQwZDZm MDhhZTMwHhcNMjUxMjI2MTQwMTA1WhcNMjUxMjI3MTQwMTA1WjAzMTEwLwYDVQQD EygyNTk1OWZmYjA5NDYzNjQyMzI2MmJlOGM3M2RkYjYzMThiZTI1NmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fJi1LcP9zvB+orNZVjdmOyyg8aB q9kqbBou3RpY1fqtpMrgvtsyFgdDFX1rsuK9ZvBjXC5ZGRO4Czd0e1NnsJqnTHen /lJOxkAvfC5Rx8/OyoofibzUtlFkBrNttSWHzbc1nw0mOBK+6IPnN40rLuzcHalp EAPKxb3IW8JNpf4opNJIgxJ3ijdBFEKxhd+WZCi7q2Gc7OoIjoRz6K264f3MAavd qf5qJ4XRV9gGo/HPv4a2AA+7Cl90JyFrToB22QdBFMMVQOnSc2qBo7BmY6mHREwJ 49JIsB2ULhAYap7O33Whs15vHTxTNvp+epK7M4Kpfj5cvlsVc2/hybHKNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWVn/sJRjZCMmK+jHPdtjGL4lb/MB8GA1UdIwQY MBaAFOlu/dES2o2XXLWTqtH+iEDW8IrjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlc3OTBSTGFqWmRjdFpPcTBmNklRTmJ3aXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wYWE5YjctMDA3My00Njg1LWFhN2It NzA3NzFiNTVjMmFiLzEvNlc3OTBSTGFqWmRjdFpPcTBmNklRTmJ3aXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wYWE5YjctMDA3My00Njg1LWFhN2ItNzA3NzFiNTVjMmFi LzEvNlc3OTBSTGFqWmRjdFpPcTBmNklRTmJ3aXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRWJmKgd E482B1KmsqI98q+LRFKSrnAd8W0sRXJ+qBr4fqU4J2+yKjv1Sj/QmRgcVrDtu1YS KiXDB0U0eHmnwXo3QDtYCF/vh7gYVy9Eg+64aMPUsJp0xtdn/a3biS2c5AFcIC3o P0o2ffRRW2Iavf/gGJEjlE+TEBXZASuZ0msJLGoOd7Iyox96llzY6Zuk9DXC1NKJ cWrEdKA6xF3WjNtBlF5VD41cp0DIxhh8cUMakvaUgoWImo0r6LIinoukjaHq2oxQ CH0yBvDsg5VqZBEz3AXhrQSmD1QlC4eRRJhEGKbn6gGILRBzQQpsnG9KEnb1ZBib OIBgsfb/0WOo2w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:27 2025 by rpki-client