This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/6Ff6t2FjLbO-eBpbm0hVcInv2VA.mft File: 6Ff6t2FjLbO-eBpbm0hVcInv2VA.mft (raw, json) Hash identifier: Xy1o8ZIcU2IpazypndGHrpgkDcKYEqxT8/jxyT7a7MA= Subject key identifier: BE:CA:29:14:32:CE:EB:F8:97:96:84:FE:3D:85:84:70:02:47:E1:3E Authority key identifier: E8:57:FA:B7:61:63:2D:B3:BE:78:1A:5B:9B:48:55:70:89:EF:D9:50 Certificate issuer: /CN=e857fab761632db3be781a5b9b48557089efd950 Certificate serial: 019B59E3A9A465B66500EF548F750E739596 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ff6t2FjLbO-eBpbm0hVcInv2VA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/6Ff6t2FjLbO-eBpbm0hVcInv2VA.mft Manifest number: 51 Signing time: Fri 26 Dec 2025 09:00:50 +0000 Manifest this update: Fri 26 Dec 2025 09:00:50 +0000 Manifest next update: Sat 27 Dec 2025 09:00:50 +0000 Files and hashes: 1: 6Ff6t2FjLbO-eBpbm0hVcInv2VA.crl (hash: +i2vzWtiyuwGqN0m0+QyGN4swc5i1uTHEcpYkf2GyVE=) 2: kwKu8WNUJnczIU2a8LGFs7eArbM.roa (hash: /1PW3txYeFmXRrusDGuyAEUwB+Whf+R1pF8Y6q4zLbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/6Ff6t2FjLbO-eBpbm0hVcInv2VA.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/6Ff6t2FjLbO-eBpbm0hVcInv2VA.mft rsync://rpki.ripe.net/repository/DEFAULT/6Ff6t2FjLbO-eBpbm0hVcInv2VA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:a9:a4:65:b6:65:00:ef:54:8f:75:0e:73:95:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e857fab761632db3be781a5b9b48557089efd950 Validity Not Before: Dec 26 09:00:50 2025 GMT Not After : Dec 27 09:00:50 2025 GMT Subject: CN=beca291432ceebf8979684fe3d8584700247e13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:da:4d:ca:b6:3b:62:e0:47:6f:db:90:67:10: 36:51:52:93:1e:f9:a4:2a:5d:ad:a8:e8:44:09:e5: 90:c3:ea:b7:8e:b2:03:6f:a8:10:1e:39:8d:0d:bb: c0:01:c2:59:3a:81:0b:b8:f5:23:56:dc:5f:4a:0d: 5c:76:ac:00:10:bd:a9:35:da:45:d5:eb:ff:23:34: 06:fb:e8:bb:18:24:45:63:8c:ba:c9:0b:a0:0e:e8: 95:58:64:d1:3b:93:0c:c4:22:e0:ed:cb:3d:b5:7a: ff:32:69:be:b9:6f:4e:57:fc:7f:90:c0:1c:bb:e5: dc:f3:1e:0a:e1:63:46:75:b7:69:16:d0:12:be:dd: 98:c0:7d:5b:b0:20:57:0d:c4:14:2f:a0:d2:b9:ec: e2:a9:52:73:58:64:52:0b:c2:0f:50:3d:71:d5:38: 46:cd:7a:42:d8:b8:53:09:c5:c5:05:e4:f4:30:35: 46:6f:67:87:0d:53:33:70:98:d2:37:7d:e1:07:1a: a5:9c:e0:19:bb:41:cd:7a:eb:0a:09:e7:b0:22:50: 31:8e:df:a8:cd:f7:8e:ca:d6:c8:2e:26:d9:3e:97: 04:62:67:6f:8b:b1:d1:80:1b:0f:6d:04:3b:d1:dd: 73:a5:28:da:8a:95:d8:d2:bd:ce:3f:b0:77:8c:03: f0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CA:29:14:32:CE:EB:F8:97:96:84:FE:3D:85:84:70:02:47:E1:3E X509v3 Authority Key Identifier: keyid:E8:57:FA:B7:61:63:2D:B3:BE:78:1A:5B:9B:48:55:70:89:EF:D9:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ff6t2FjLbO-eBpbm0hVcInv2VA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/6Ff6t2FjLbO-eBpbm0hVcInv2VA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/6Ff6t2FjLbO-eBpbm0hVcInv2VA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:8c:8d:7a:9f:6b:41:76:7c:02:b1:11:55:d9:87:c7:8c:6b: 09:d4:e7:8a:8e:c7:a7:79:ec:82:2e:11:a5:b9:ac:db:36:ba: 07:39:8c:f5:9f:df:b2:b9:d6:4f:cf:19:30:7b:00:d8:2f:64: 2f:96:98:da:08:f5:f2:fc:a0:7d:c9:fa:a1:b9:35:f5:a5:7a: 50:19:5c:f2:f8:11:bd:4c:b6:49:ba:6f:d9:ff:c5:85:4b:7d: ec:ff:8f:6e:fc:c0:11:9b:9a:e6:0e:97:0b:0b:a6:59:70:4c: 2a:09:72:96:e1:c9:f7:e7:70:a8:86:df:e3:a8:61:64:3a:2c: b4:82:3f:62:90:d9:39:b6:f9:bb:74:04:f9:82:a7:04:b8:80: 7c:8a:b4:25:54:46:16:3d:4a:d2:a5:34:2a:49:ac:aa:fb:e1: 1f:14:2b:1e:6c:b3:df:7a:60:68:b8:1f:23:58:b6:a3:cc:c4: f1:c5:63:e7:7f:25:97:75:51:71:3d:e1:1c:f4:70:df:b7:b7: 1c:69:02:c9:e8:8f:da:98:4f:15:68:15:59:45:30:bd:41:a3: 52:d6:36:f4:c9:bd:80:46:43:39:87:0d:63:8c:53:0a:80:fa: 8d:7b:7f:81:f1:d9:d0:17:de:85:57:47:8f:e2:83:2e:03:1d: 1d:82:92:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ46mkZbZlAO9Uj3UOc5WWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NTdmYWI3NjE2MzJkYjNiZTc4MWE1YjliNDg1NTcwODll ZmQ5NTAwHhcNMjUxMjI2MDkwMDUwWhcNMjUxMjI3MDkwMDUwWjAzMTEwLwYDVQQD EyhiZWNhMjkxNDMyY2VlYmY4OTc5Njg0ZmUzZDg1ODQ3MDAyNDdlMTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9pNyrY7YuBHb9uQZxA2UVKTHvmk Kl2tqOhECeWQw+q3jrIDb6gQHjmNDbvAAcJZOoELuPUjVtxfSg1cdqwAEL2pNdpF 1ev/IzQG++i7GCRFY4y6yQugDuiVWGTRO5MMxCLg7cs9tXr/Mmm+uW9OV/x/kMAc u+Xc8x4K4WNGdbdpFtASvt2YwH1bsCBXDcQUL6DSueziqVJzWGRSC8IPUD1x1ThG zXpC2LhTCcXFBeT0MDVGb2eHDVMzcJjSN33hBxqlnOAZu0HNeusKCeewIlAxjt+o zfeOytbILibZPpcEYmdvi7HRgBsPbQQ70d1zpSjaipXY0r3OP7B3jAPw/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7KKRQyzuv4l5aE/j2FhHACR+E+MB8GA1UdIwQY MBaAFOhX+rdhYy2zvngaW5tIVXCJ79lQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkZmNnQyRmpMYk8tZUJwYm0waFZjSW52MlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iMDgxZTMtODA5Ni00MzE4LWJlZGEt ODI1NTI2ZDYwN2M3LzEvNkZmNnQyRmpMYk8tZUJwYm0waFZjSW52MlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9iMDgxZTMtODA5Ni00MzE4LWJlZGEtODI1NTI2ZDYwN2M3 LzEvNkZmNnQyRmpMYk8tZUJwYm0waFZjSW52MlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIyNep9r QXZ8ArERVdmHx4xrCdTnio7Hp3nsgi4Rpbms2za6BzmM9Z/fsrnWT88ZMHsA2C9k L5aY2gj18vygfcn6obk19aV6UBlc8vgRvUy2Sbpv2f/FhUt97P+PbvzAEZua5g6X CwumWXBMKglyluHJ9+dwqIbf46hhZDostII/YpDZObb5u3QE+YKnBLiAfIq0JVRG Fj1K0qU0KkmsqvvhHxQrHmyz33pgaLgfI1i2o8zE8cVj538ll3VRcT3hHPRw37e3 HGkCyeiP2phPFWgVWUUwvUGjUtY29Mm9gEZDOYcNY4xTCoD6jXt/gfHZ0BfehVdH j+KDLgMdHYKSMA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:27 2025 by rpki-client