This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft File: 6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft (raw, json) Hash identifier: n9iEXbb1SV6vXaCc4luViz06qfhvzA87TZVP9U3JWCk= Subject key identifier: 4B:C0:0E:8E:7B:B7:C4:4C:D2:2E:FE:39:1D:BC:26:E7:84:96:FD:FD Authority key identifier: E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3 Certificate issuer: /CN=e87244897c7917b791e100d4680339c4a3593fc3 Certificate serial: 019B5A517E6E8DD8A9E22B81AD3E6CB31A4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 11:00:48 +0000 Manifest this update: Fri 26 Dec 2025 11:00:48 +0000 Manifest next update: Sat 27 Dec 2025 11:00:48 +0000 Files and hashes: 1: 6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl (hash: 71dwrXyYOUbtYyb9/CPrQkTw6FbDIhLpQXAWgzwTe0o=) 2: bnk0ln2aj6MfWOT6o9kQMXhL3ow.roa (hash: nUC34YHIv92VX7i6tmE4A0fGDBK2kzWYfNC+d/UuSnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:7e:6e:8d:d8:a9:e2:2b:81:ad:3e:6c:b3:1a:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e87244897c7917b791e100d4680339c4a3593fc3 Validity Not Before: Dec 26 11:00:48 2025 GMT Not After : Dec 27 11:00:48 2025 GMT Subject: CN=4bc00e8e7bb7c44cd22efe391dbc26e78496fdfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:ab:c8:c2:1d:5d:ed:26:9e:4e:23:7b:cf: 24:8a:12:fe:6f:e8:cf:04:b0:eb:67:45:6d:61:6a: 89:31:2e:57:0c:da:fc:d2:b2:1b:d5:b5:46:1a:83: c8:5a:42:16:43:7d:71:94:7a:09:f9:cb:b5:51:f1: d5:14:a5:f6:7b:91:a2:99:03:d6:4e:65:84:20:5a: ff:ed:e9:f7:45:16:a3:14:ed:58:a2:35:7b:56:9d: 99:63:4b:d5:a0:86:83:8a:5e:b7:d3:2c:e6:d3:c1: 4d:fd:86:7e:70:a9:c5:8d:61:c0:60:51:2f:01:e6: f2:1f:1f:2f:b1:55:df:8b:32:a1:0d:f3:a7:22:3f: e8:a1:6f:47:2a:11:d7:59:19:56:26:c9:c4:98:99: 18:79:36:aa:6c:39:eb:81:c1:73:4c:96:9d:95:f7: 31:74:cd:6e:87:fa:71:92:78:62:63:81:3a:63:77: c2:1d:50:01:67:0a:05:44:47:7c:87:21:19:f5:08: 90:df:50:36:3c:27:ac:6d:f0:19:49:f1:57:02:eb: 41:fb:a7:7b:bd:cb:41:80:28:61:9f:f9:66:df:0b: 4a:f6:a7:fa:87:85:3f:a0:f9:0b:b6:2f:42:50:33: d3:e2:d2:bd:eb:84:b1:3f:94:63:26:bc:af:9b:f2: 2c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C0:0E:8E:7B:B7:C4:4C:D2:2E:FE:39:1D:BC:26:E7:84:96:FD:FD X509v3 Authority Key Identifier: keyid:E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:60:b5:10:41:25:33:a8:99:2c:df:d9:1e:42:c7:b6:ab:67: ec:b5:56:0c:12:10:88:ac:fb:05:78:74:9d:97:92:ee:3d:8e: 15:1c:b4:f8:8d:da:6c:51:7f:aa:37:72:64:96:e2:00:71:37: c7:9f:d1:9b:28:61:4c:fe:a6:0c:76:9a:6a:39:b7:d6:67:db: fb:75:50:f4:0d:a6:ac:c5:1c:c8:10:90:10:d2:43:63:77:a4: 11:f6:74:de:69:72:8f:4b:4c:8c:e3:ad:19:82:3b:48:2f:5b: f6:b4:8b:93:52:56:68:99:f7:d2:b3:72:cf:e9:fb:b5:d7:d6: bf:8f:4b:69:c7:69:60:1c:12:95:09:7d:48:fe:f4:3a:e4:94: 13:ae:ba:b1:a9:f5:c0:98:c6:ad:ee:c4:4f:db:fe:85:f9:da: 33:09:f4:9b:c8:04:94:11:c2:65:fe:01:16:4b:a9:e4:cb:aa: fc:94:30:70:64:f8:ec:54:0b:c9:0b:9e:89:94:96:b2:77:8a: 28:2d:d4:96:cd:4e:4e:4f:7e:32:a6:1b:04:df:37:df:c0:ee: 5d:92:2e:f7:f3:02:3a:d2:e6:cc:20:bc:9f:f4:06:2b:a8:3e: 83:91:e7:8d:8a:2a:61:13:ad:db:4f:ba:0f:fe:ce:a5:af:fd: 6c:09:ff:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUX5ujdip4iuBrT5ssxpLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NzI0NDg5N2M3OTE3Yjc5MWUxMDBkNDY4MDMzOWM0YTM1 OTNmYzMwHhcNMjUxMjI2MTEwMDQ4WhcNMjUxMjI3MTEwMDQ4WjAzMTEwLwYDVQQD Eyg0YmMwMGU4ZTdiYjdjNDRjZDIyZWZlMzkxZGJjMjZlNzg0OTZmZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQyryMIdXe0mnk4je88kihL+b+jP BLDrZ0VtYWqJMS5XDNr80rIb1bVGGoPIWkIWQ31xlHoJ+cu1UfHVFKX2e5GimQPW TmWEIFr/7en3RRajFO1YojV7Vp2ZY0vVoIaDil630yzm08FN/YZ+cKnFjWHAYFEv AebyHx8vsVXfizKhDfOnIj/ooW9HKhHXWRlWJsnEmJkYeTaqbDnrgcFzTJadlfcx dM1uh/pxknhiY4E6Y3fCHVABZwoFREd8hyEZ9QiQ31A2PCesbfAZSfFXAutB+6d7 vctBgChhn/lm3wtK9qf6h4U/oPkLti9CUDPT4tK964SxP5RjJryvm/Is6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvADo57t8RM0i7+OR28JueElv39MB8GA1UdIwQY MBaAFOhyRIl8eRe3keEA1GgDOcSjWT/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkhKRWlYeDVGN2VSNFFEVWFBTTV4S05aUDhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDU5N2YtZWUxYy00NjJiLWFiODQt ZWJlNTllMjc0ODQwLzEvNkhKRWlYeDVGN2VSNFFEVWFBTTV4S05aUDhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDU5N2YtZWUxYy00NjJiLWFiODQtZWJlNTllMjc0ODQw LzEvNkhKRWlYeDVGN2VSNFFEVWFBTTV4S05aUDhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWC1EEEl M6iZLN/ZHkLHtqtn7LVWDBIQiKz7BXh0nZeS7j2OFRy0+I3abFF/qjdyZJbiAHE3 x5/RmyhhTP6mDHaaajm31mfb+3VQ9A2mrMUcyBCQENJDY3ekEfZ03mlyj0tMjOOt GYI7SC9b9rSLk1JWaJn30rNyz+n7tdfWv49LacdpYBwSlQl9SP70OuSUE666san1 wJjGre7ET9v+hfnaMwn0m8gElBHCZf4BFkup5Muq/JQwcGT47FQLyQueiZSWsneK KC3Uls1OTk9+MqYbBN8338DuXZIu9/MCOtLmzCC8n/QGK6g+g5HnjYoqYROt20+6 D/7Opa/9bAn//g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:54 2025 by rpki-client