This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft File: 6Is19ZnvHCbySYP5Fafq7GeXx_o.mft (raw, json) Hash identifier: KFOpIs3uc4+ZsH3UnmoKcuzfXQ2Khoai5KKhUZREoXk= Subject key identifier: BE:5B:55:6E:2A:07:F5:EA:B5:1B:E1:CE:A7:70:FD:99:22:96:A5:25 Authority key identifier: E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA Certificate issuer: /CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa Certificate serial: 019B213D9977AA12B47F83B7D733D84DC441 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft Manifest number: 138F Signing time: Mon 15 Dec 2025 09:00:43 +0000 Manifest this update: Mon 15 Dec 2025 09:00:43 +0000 Manifest next update: Tue 16 Dec 2025 09:00:43 +0000 Files and hashes: 1: 6Is19ZnvHCbySYP5Fafq7GeXx_o.crl (hash: WZv0DuG486bKb4Q59QzfiwvOHLJj4ACxnckXWRvVeI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:3d:99:77:aa:12:b4:7f:83:b7:d7:33:d8:4d:c4:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa Validity Not Before: Dec 15 09:00:43 2025 GMT Not After : Dec 16 09:00:43 2025 GMT Subject: CN=be5b556e2a07f5eab51be1cea770fd992296a525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:47:69:76:fa:13:85:e1:89:99:fe:fb:5c:b3: 1d:e5:68:16:f8:bb:99:4c:30:7e:ea:47:1e:2f:4c: be:2f:26:ac:ed:eb:76:e7:84:4f:1e:67:75:ce:eb: e9:c5:d8:fa:b1:fd:8b:cf:5f:f4:05:fd:d9:e1:c8: d1:82:71:c6:35:8a:eb:4b:76:33:e5:c2:18:17:5b: 82:8f:70:7e:7e:f7:2b:e2:9e:cf:2c:92:06:bd:e3: 1d:9a:d5:e9:07:2c:83:ca:6c:fb:09:85:ea:0a:b9: 53:e0:f9:e3:d8:cf:34:eb:22:d9:92:10:a7:7c:04: d3:b2:29:75:8f:7e:4f:3f:f3:7c:6b:76:52:5b:73: 62:c2:f5:25:16:46:b4:84:78:dd:d8:dc:40:8c:b1: 35:ff:ec:f1:84:cf:1b:c6:53:97:cf:d2:1a:5e:31: 16:05:5c:20:46:6f:33:4a:4a:f1:e3:b3:66:ae:ea: d6:25:23:f2:51:55:a5:17:b2:58:28:1b:ea:cb:c6: 6c:14:d6:74:4c:a7:1f:12:96:7b:97:c0:89:89:0e: 74:69:e5:ab:bc:06:8d:ba:b9:33:67:37:68:1c:66: 48:54:e8:5f:5f:b3:1e:5a:8d:e1:7a:03:b7:95:f7: 72:24:80:f9:01:a7:4a:05:26:fb:0f:5f:4a:58:96: 9c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5B:55:6E:2A:07:F5:EA:B5:1B:E1:CE:A7:70:FD:99:22:96:A5:25 X509v3 Authority Key Identifier: keyid:E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:de:ae:34:78:c3:cf:2d:fa:6d:04:8c:de:6d:2a:d7:e3:7c: e8:1f:a7:32:cc:21:38:b2:ab:57:3d:db:6c:c4:32:99:ac:a7: b5:d4:87:92:18:22:aa:cc:5d:73:2f:32:29:52:eb:4b:a4:cd: 73:0d:bc:c9:95:0c:95:e2:03:98:f5:0a:56:42:54:a3:f5:60: 0a:22:74:ff:81:28:04:42:80:9b:0d:cf:37:d5:03:79:8a:97: 94:b6:b3:3d:60:3f:df:01:7a:94:c6:13:d2:1a:68:e3:78:64: a0:e7:e6:6c:1a:d5:62:83:72:cf:15:27:5d:19:35:b9:68:27: 94:2f:9e:a6:28:b6:7e:e9:b7:d7:7a:00:0f:df:04:71:65:70: 79:34:c7:c3:8f:14:33:bd:74:c3:94:8b:6b:ab:73:c2:b8:eb: 21:79:51:01:93:c1:82:06:22:e1:7c:d9:ab:51:59:9c:17:7d: 19:83:4a:da:cd:64:1b:21:06:2c:24:cf:9f:ff:a7:b4:70:4a: cc:ed:52:96:fd:a0:65:fa:cc:ce:4c:b7:e1:37:98:6d:6a:21: 2a:dd:57:96:b2:43:aa:4a:77:c1:16:8d:c5:6d:4a:85:63:19: c5:a4:da:43:b3:54:5a:84:11:39:d1:85:72:89:36:3f:02:70: 5c:ca:34:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshPZl3qhK0f4O31zPYTcRBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4OGIzNWY1OTllZjFjMjZmMjQ5ODNmOTE1YTdlYWVjNjc5 N2M3ZmEwHhcNMjUxMjE1MDkwMDQzWhcNMjUxMjE2MDkwMDQzWjAzMTEwLwYDVQQD EyhiZTViNTU2ZTJhMDdmNWVhYjUxYmUxY2VhNzcwZmQ5OTIyOTZhNTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40dpdvoTheGJmf77XLMd5WgW+LuZ TDB+6kceL0y+Lyas7et254RPHmd1zuvpxdj6sf2Lz1/0Bf3Z4cjRgnHGNYrrS3Yz 5cIYF1uCj3B+fvcr4p7PLJIGveMdmtXpByyDymz7CYXqCrlT4Pnj2M806yLZkhCn fATTsil1j35PP/N8a3ZSW3NiwvUlFka0hHjd2NxAjLE1/+zxhM8bxlOXz9IaXjEW BVwgRm8zSkrx47NmrurWJSPyUVWlF7JYKBvqy8ZsFNZ0TKcfEpZ7l8CJiQ50aeWr vAaNurkzZzdoHGZIVOhfX7MeWo3hegO3lfdyJID5AadKBSb7D19KWJacJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5bVW4qB/XqtRvhzqdw/ZkilqUlMB8GA1UdIwQY MBaAFOiLNfWZ7xwm8kmD+RWn6uxnl8f6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNklzMTlabnZIQ2J5U1lQNUZhZnE3R2VYeF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMTE5NzctMjZiYS00ZGE4LWIwNjIt NzcwNTk1MzYzZTY1LzEvNklzMTlabnZIQ2J5U1lQNUZhZnE3R2VYeF9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zMTE5NzctMjZiYS00ZGE4LWIwNjItNzcwNTk1MzYzZTY1 LzEvNklzMTlabnZIQ2J5U1lQNUZhZnE3R2VYeF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVN6uNHjD zy36bQSM3m0q1+N86B+nMswhOLKrVz3bbMQymayntdSHkhgiqsxdcy8yKVLrS6TN cw28yZUMleIDmPUKVkJUo/VgCiJ0/4EoBEKAmw3PN9UDeYqXlLazPWA/3wF6lMYT 0hpo43hkoOfmbBrVYoNyzxUnXRk1uWgnlC+epii2fum313oAD98EcWVweTTHw48U M710w5SLa6tzwrjrIXlRAZPBggYi4XzZq1FZnBd9GYNK2s1kGyEGLCTPn/+ntHBK zO1Slv2gZfrMzky34TeYbWohKt1XlrJDqkp3wRaNxW1KhWMZxaTaQ7NUWoQROdGF cok2PwJwXMo0nQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:18:38 2025 by rpki-client