This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft File: 6hcPx2y4X6R2BtbFdHydSjhZK2E.mft (raw, json) Hash identifier: SiRCugsrck1rK/v+DAXja29CXDCq5fXaoSjzBecaoJI= Subject key identifier: C5:CF:F1:E5:9D:15:E8:97:AF:C7:40:BC:99:7F:35:48:F8:76:FF:E3 Authority key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61 Certificate issuer: /CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61 Certificate serial: 019B38A0F1C8CE286C5DAB22BA950FC3B287 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft Manifest number: 080D Signing time: Fri 19 Dec 2025 22:00:30 +0000 Manifest this update: Fri 19 Dec 2025 22:00:30 +0000 Manifest next update: Sat 20 Dec 2025 22:00:30 +0000 Files and hashes: 1: 6hcPx2y4X6R2BtbFdHydSjhZK2E.crl (hash: GDxT7lrcQl09XT3kaD6tMfasRlHhW9vTda7+7VV7Yos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a0:f1:c8:ce:28:6c:5d:ab:22:ba:95:0f:c3:b2:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61 Validity Not Before: Dec 19 22:00:30 2025 GMT Not After : Dec 20 22:00:30 2025 GMT Subject: CN=c5cff1e59d15e897afc740bc997f3548f876ffe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0f:db:d0:fc:82:ea:96:4b:25:05:45:75:66: a5:ba:eb:c4:94:19:f9:fa:66:c8:4c:ef:34:66:15: 5a:3b:b5:15:bc:f3:a0:10:83:bc:13:1a:61:06:f5: 91:97:db:43:e1:71:11:0f:74:5f:2f:5e:72:ac:fa: 8a:82:ee:84:32:9c:fd:b4:fc:ff:6e:68:7d:ad:74: f3:69:1a:27:05:c7:0e:e2:89:4b:3d:43:67:e7:c2: 1b:54:19:cd:9b:01:06:14:07:f4:21:58:ab:50:cf: 52:a1:2c:f5:9d:9e:25:07:5a:e1:5d:3e:d1:16:5b: e7:48:d1:0b:a6:db:61:ee:ba:e9:3e:34:20:7b:db: b8:ea:bd:fa:64:b8:e8:6e:17:4f:bf:53:bb:2a:70: 81:1f:e1:b0:c9:31:11:59:4c:36:18:75:3b:00:e0: b2:bc:2e:ef:90:50:3a:e4:87:8a:c1:00:4c:68:72: 31:bc:56:8f:04:f5:e6:63:b1:b8:7f:00:fb:b2:50: 9e:a8:37:b4:91:0d:71:06:fa:98:0e:e3:0b:5a:18: 51:40:42:3c:e0:03:db:0e:20:45:27:d8:32:49:d4: db:62:5f:9d:0b:99:46:68:fa:05:f3:e0:15:8a:0f: b4:48:df:e3:8a:cd:af:a4:80:a0:85:06:49:1c:18: 05:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CF:F1:E5:9D:15:E8:97:AF:C7:40:BC:99:7F:35:48:F8:76:FF:E3 X509v3 Authority Key Identifier: keyid:EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:29:bc:c1:d0:1a:0a:11:3c:9a:ee:ec:17:52:da:2d:6d:8f: d0:f9:b1:40:9f:64:25:45:71:2c:dd:40:a6:91:fc:2f:0f:26: 2c:01:6e:34:ba:06:68:e4:75:b0:74:fe:d9:9d:d3:94:63:d9: da:f4:1c:eb:88:0e:25:8d:ba:09:ca:3c:27:55:2c:8e:d7:08: 6d:f4:bb:46:b9:16:1a:c8:aa:a4:18:27:be:27:23:84:eb:4b: 65:9b:0d:5c:0a:9d:b9:2c:59:d2:3e:9e:87:11:25:db:7d:c5: 79:dd:cc:17:e0:7e:d1:60:c6:79:00:a0:f3:14:01:10:30:a3: f6:31:42:2f:3e:a6:42:98:00:a9:7b:1b:65:77:35:12:c1:2f: e9:05:1f:09:02:78:36:32:f3:3f:35:2f:f5:16:a4:99:88:a8: 1a:d7:63:73:9a:69:58:b0:93:31:83:d1:8c:bd:bb:63:d5:06: d8:8c:f6:a5:19:19:f0:10:10:bb:4b:32:43:5e:8f:8d:a4:fa: 34:63:83:97:4b:66:ed:30:8d:2f:ab:9a:e6:2d:58:47:e3:04: a3:0b:71:c7:00:a2:16:25:14:5b:22:74:a4:56:5e:40:0a:f5: d9:83:6d:77:33:47:06:6c:14:be:9b:fd:ad:f4:18:de:e2:3e: 9a:6d:0a:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oPHIzihsXasiupUPw7KHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMTcwZmM3NmNiODVmYTQ3NjA2ZDZjNTc0N2M5ZDRhMzg1 OTJiNjEwHhcNMjUxMjE5MjIwMDMwWhcNMjUxMjIwMjIwMDMwWjAzMTEwLwYDVQQD EyhjNWNmZjFlNTlkMTVlODk3YWZjNzQwYmM5OTdmMzU0OGY4NzZmZmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA/b0PyC6pZLJQVFdWaluuvElBn5 +mbITO80ZhVaO7UVvPOgEIO8ExphBvWRl9tD4XERD3RfL15yrPqKgu6EMpz9tPz/ bmh9rXTzaRonBccO4olLPUNn58IbVBnNmwEGFAf0IVirUM9SoSz1nZ4lB1rhXT7R FlvnSNELptth7rrpPjQge9u46r36ZLjobhdPv1O7KnCBH+GwyTERWUw2GHU7AOCy vC7vkFA65IeKwQBMaHIxvFaPBPXmY7G4fwD7slCeqDe0kQ1xBvqYDuMLWhhRQEI8 4APbDiBFJ9gySdTbYl+dC5lGaPoF8+AVig+0SN/jis2vpICghQZJHBgFRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXP8eWdFeiXr8dAvJl/NUj4dv/jMB8GA1UdIwQY MBaAFOoXD8dsuF+kdgbWxXR8nUo4WSthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmhjUHgyeTRYNlIyQnRiRmRIeWRTamhaSzJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84NGE1MDAtYmYwMC00ZTBlLThmMzUt ZTgyODgxYjVlMmQ5LzEvNmhjUHgyeTRYNlIyQnRiRmRIeWRTamhaSzJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi84NGE1MDAtYmYwMC00ZTBlLThmMzUtZTgyODgxYjVlMmQ5 LzEvNmhjUHgyeTRYNlIyQnRiRmRIeWRTamhaSzJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSm8wdAa ChE8mu7sF1LaLW2P0PmxQJ9kJUVxLN1AppH8Lw8mLAFuNLoGaOR1sHT+2Z3TlGPZ 2vQc64gOJY26Cco8J1UsjtcIbfS7RrkWGsiqpBgnvicjhOtLZZsNXAqduSxZ0j6e hxEl233Fed3MF+B+0WDGeQCg8xQBEDCj9jFCLz6mQpgAqXsbZXc1EsEv6QUfCQJ4 NjLzPzUv9RakmYioGtdjc5ppWLCTMYPRjL27Y9UG2Iz2pRkZ8BAQu0syQ16PjaT6 NGODl0tm7TCNL6ua5i1YR+MEowtxxwCiFiUUWyJ0pFZeQAr12YNtdzNHBmwUvpv9 rfQY3uI+mm0KJQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:35:47 2025 by rpki-client