This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft File: 6-MkxP_wckDusfAOY-Y198uQL5g.mft (raw, json) Hash identifier: cwiExdlMKK+IdK/oHZFyNTL5E9nzlhaojfkwPSlaMvg= Subject key identifier: 6E:51:65:51:FD:97:4A:8F:89:EB:03:28:2A:76:AD:67:BE:9F:76:0F Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98 Certificate issuer: /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98 Certificate serial: 019B397D6FD86389631D0E6A445405241F11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft Manifest number: 0EBD Signing time: Sat 20 Dec 2025 02:01:20 +0000 Manifest this update: Sat 20 Dec 2025 02:01:20 +0000 Manifest next update: Sun 21 Dec 2025 02:01:20 +0000 Files and hashes: 1: 6-MkxP_wckDusfAOY-Y198uQL5g.crl (hash: nilHrXGu2C7aFsJH9AP+fQ3n6YXG727bTHT6h2M8FXY=) 2: DFaeiuG21JQh7LgP1wreIhkJwBQ.roa (hash: wxSUZZvHSXnKRZev5eL/xbvmkg1KjmEbGMojvHEIEo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:6f:d8:63:89:63:1d:0e:6a:44:54:05:24:1f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98 Validity Not Before: Dec 20 02:01:20 2025 GMT Not After : Dec 21 02:01:20 2025 GMT Subject: CN=6e516551fd974a8f89eb03282a76ad67be9f760f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:4c:92:1c:b2:df:cf:f0:ae:cd:25:d0:bd: 3b:d2:e3:51:cd:ec:bb:5a:95:3a:20:fb:90:d7:9f: e1:e5:ec:d5:33:35:8e:25:2b:6f:46:0a:a8:92:0d: 35:8d:eb:dd:dd:f0:03:44:90:da:26:0c:ed:e1:db: c9:af:cb:1b:a6:2d:48:11:6b:01:bd:4a:6f:1a:f2: c6:cb:ea:77:ec:4e:6c:75:b3:6f:16:83:fa:3e:4f: 6e:23:19:84:a6:bf:87:c8:5e:7e:c9:26:43:04:27: 26:ee:94:65:eb:8d:5c:39:9c:98:2f:31:e2:f1:50: 22:73:b6:ef:d3:51:13:5b:c0:6d:37:f7:5c:a5:74: 5f:e0:02:c4:37:07:19:11:6f:0d:90:83:46:cd:01: 40:6a:42:c9:9a:7c:91:98:44:8d:f4:bd:c9:92:20: f4:63:48:af:11:cf:84:4c:33:3a:f9:1e:20:81:f5: 41:48:1c:e7:f6:d9:48:ce:08:94:2c:bc:1b:d0:ba: 25:58:7a:c1:57:30:30:a3:8a:1f:a9:50:3a:29:86: f7:d8:3d:42:19:34:a5:73:9e:3f:b7:5f:7d:19:74: da:5b:54:a1:70:cf:03:06:b5:a8:36:a5:30:07:23: 84:b8:8f:3b:6c:49:80:8c:27:f2:3a:12:dd:54:00: 24:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:51:65:51:FD:97:4A:8F:89:EB:03:28:2A:76:AD:67:BE:9F:76:0F X509v3 Authority Key Identifier: keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:bb:02:06:de:9b:91:42:72:19:a1:e1:56:95:95:5d:ae:9b: a6:bc:99:43:bf:99:9a:b4:d3:33:cd:c5:60:8b:17:5c:a3:9f: 20:b8:fd:67:be:ff:25:db:60:86:b7:e1:bc:16:3e:be:fb:09: 8d:47:47:85:8e:30:bd:e6:a2:84:26:5e:c7:e8:f3:fc:e5:fe: 1a:4c:79:d5:08:a0:ac:62:ac:ce:aa:f3:d6:a5:ee:01:62:22: 5c:18:3e:09:37:cb:29:ef:af:98:05:02:54:b7:85:73:04:a1: aa:12:e6:6e:27:cc:ea:43:31:14:99:74:bd:0d:ba:5b:fb:88: f1:41:e6:36:52:9d:16:f0:c6:ce:5a:f3:ad:e5:9c:16:e3:61: e5:a4:14:3f:ae:2e:b0:9d:cd:b0:6d:ca:29:96:56:79:b1:b0: fa:8c:34:33:e1:8a:a0:ba:fb:09:7f:16:6a:ba:9d:54:b5:bf: 49:20:1f:34:ab:62:f9:4b:3b:aa:bf:06:df:d2:cf:65:1a:f5: 1b:2c:87:ae:51:9b:37:af:a4:aa:84:7e:1f:7d:cc:84:3e:bd: 36:ab:bd:75:f8:40:63:bf:64:09:68:7b:22:3c:00:df:18:d0: 6a:e8:14:d5:78:27:ec:23:19:a7:ce:11:88:81:62:3b:b0:1c: b2:36:54:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fW/YY4ljHQ5qRFQFJB8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZTMyNGM0ZmZmMDcyNDBlZWIxZjAwZTYzZTYzNWY3Y2I5 MDJmOTgwHhcNMjUxMjIwMDIwMTIwWhcNMjUxMjIxMDIwMTIwWjAzMTEwLwYDVQQD Eyg2ZTUxNjU1MWZkOTc0YThmODllYjAzMjgyYTc2YWQ2N2JlOWY3NjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwpMkhyy38/wrs0l0L070uNRzey7 WpU6IPuQ15/h5ezVMzWOJStvRgqokg01jevd3fADRJDaJgzt4dvJr8sbpi1IEWsB vUpvGvLGy+p37E5sdbNvFoP6Pk9uIxmEpr+HyF5+ySZDBCcm7pRl641cOZyYLzHi 8VAic7bv01ETW8BtN/dcpXRf4ALENwcZEW8NkINGzQFAakLJmnyRmESN9L3JkiD0 Y0ivEc+ETDM6+R4ggfVBSBzn9tlIzgiULLwb0LolWHrBVzAwo4ofqVA6KYb32D1C GTSlc54/t199GXTaW1ShcM8DBrWoNqUwByOEuI87bEmAjCfyOhLdVAAk2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5RZVH9l0qPiesDKCp2rWe+n3YPMB8GA1UdIwQY MBaAFOvjJMT/8HJA7rHwDmPmNffLkC+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lYWZlZmUtNzg3ZC00YjJkLWI1MzAt OGFmMDVhZTMxOTJjLzEvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lYWZlZmUtNzg3ZC00YjJkLWI1MzAtOGFmMDVhZTMxOTJj LzEvNi1Na3hQX3dja0R1c2ZBT1ktWTE5OHVRTDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7sCBt6b kUJyGaHhVpWVXa6bpryZQ7+ZmrTTM83FYIsXXKOfILj9Z77/JdtghrfhvBY+vvsJ jUdHhY4wveaihCZex+jz/OX+Gkx51QigrGKszqrz1qXuAWIiXBg+CTfLKe+vmAUC VLeFcwShqhLmbifM6kMxFJl0vQ26W/uI8UHmNlKdFvDGzlrzreWcFuNh5aQUP64u sJ3NsG3KKZZWebGw+ow0M+GKoLr7CX8WarqdVLW/SSAfNKti+Us7qr8G39LPZRr1 GyyHrlGbN6+kqoR+H33MhD69Nqu9dfhAY79kCWh7IjwA3xjQaugU1Xgn7CMZp84R iIFiO7AcsjZUxg== -----END CERTIFICATE-----Generated at Sat Dec 20 05:32:36 2025 by rpki-client