This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft File: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft (raw, json) Hash identifier: xLICKYMp5EV2cs5FIgfkdXLKFfei467BrtDqwRkN+IE= Subject key identifier: B0:38:71:F0:1A:66:29:11:1A:5A:B4:C1:DF:61:62:60:69:F4:2A:37 Authority key identifier: E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24 Certificate issuer: /CN=e847e88749704294552fef54886111ed0586ec24 Certificate serial: 019B2852FC2E2D3418E7FAFD207037265CC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft Manifest number: 050D Signing time: Tue 16 Dec 2025 18:01:25 +0000 Manifest this update: Tue 16 Dec 2025 18:01:25 +0000 Manifest next update: Wed 17 Dec 2025 18:01:25 +0000 Files and hashes: 1: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl (hash: JjznkA07hcybs2karcBD3VFovpPajY7NnqmtcY7g6vU=) 2: fcrIgsFTuq19FBKqvOpJqv38n8M.roa (hash: NL7GdVXSlx1fCyZ9yJikitlzZCSr51QpP5vN2zoZyfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:fc:2e:2d:34:18:e7:fa:fd:20:70:37:26:5c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e847e88749704294552fef54886111ed0586ec24 Validity Not Before: Dec 16 18:01:25 2025 GMT Not After : Dec 17 18:01:25 2025 GMT Subject: CN=b03871f01a6629111a5ab4c1df61626069f42a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4d:3f:4d:fa:30:f3:b2:51:93:7b:6f:48:73: 8a:11:f4:a3:28:ac:17:a1:d2:e6:ba:ef:ad:85:df: cd:68:09:e9:a1:7e:bf:84:ef:a3:2f:35:e1:0e:34: 5e:71:13:2b:0e:57:b0:14:5c:ce:04:c0:12:20:97: 9a:be:a2:02:8f:81:2e:73:fb:c9:1f:0b:3c:96:3b: a8:04:d9:82:da:c6:ef:bd:12:d1:d5:73:e2:5a:e2: 20:5e:ae:35:16:cd:32:98:01:87:6a:6d:0f:31:05: 90:bb:c7:69:7d:c6:9f:91:fa:0b:44:99:b9:93:ee: d3:0a:83:b2:3e:f4:da:1e:de:99:9b:e1:3e:3e:33: d5:4b:14:5e:cb:e3:09:76:7e:82:a4:50:18:7f:41: 55:3e:9c:5d:b4:e0:7a:e1:8f:52:30:f9:34:56:25: 25:9a:1a:48:f8:a1:83:23:37:7c:bf:7d:4b:5c:eb: c8:60:ef:48:15:82:50:14:a8:f7:9d:ef:d9:cd:93: c3:29:2f:9b:b1:a7:c9:e1:9d:68:87:57:de:f8:6a: e2:01:bf:48:07:d7:21:68:07:af:64:c8:30:45:c9: 9b:b5:ac:4d:b9:e0:41:a5:00:0d:ac:5e:48:9c:51: 52:37:65:d1:67:7d:1a:7e:48:bb:a2:be:97:90:d8: ef:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:38:71:F0:1A:66:29:11:1A:5A:B4:C1:DF:61:62:60:69:F4:2A:37 X509v3 Authority Key Identifier: keyid:E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a0:60:e8:91:80:d2:91:ac:b1:b0:00:a2:ca:db:38:12:fa: 51:98:4b:48:8d:b4:f5:3c:f8:3a:a1:c1:78:83:8c:43:a8:48: f0:fe:df:2b:c9:30:da:4c:e6:b2:6b:82:e5:8c:a2:fa:a0:ea: 7a:c8:13:e3:ba:f6:4e:fb:af:6b:13:8e:20:5c:4c:f3:cf:2d: c0:3c:c5:2e:29:e0:7a:bb:31:30:4b:05:13:3b:43:10:54:64: b9:47:e6:b2:97:51:08:52:b6:c9:cd:b3:f7:e1:d4:dd:44:a5: 42:60:05:db:f4:2c:3d:0b:f5:0f:52:02:70:a4:76:29:3a:c5: 0a:58:cd:4e:3d:9e:5c:9e:52:f7:44:4a:1a:d5:ff:d2:a5:55: cc:11:f1:88:10:7f:51:95:d7:f9:7b:c3:1e:fb:71:9a:0c:13: 92:4e:15:65:5f:39:a0:3a:b2:9d:72:a7:64:50:4a:6d:09:11: 40:8a:23:4d:61:82:3d:28:2f:be:1e:ea:1b:80:b6:21:97:b3: f0:ec:d5:52:35:27:fa:60:f3:25:54:f4:28:05:3c:bd:a7:15: bd:41:a9:b0:a2:7e:4a:6d:0c:aa:d1:6e:7a:d1:5e:e9:a3:a1: cf:c5:14:0e:bd:c9:46:a1:ab:80:e1:5b:22:2f:1c:b2:fe:ec: fd:7b:ab:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUvwuLTQY5/r9IHA3JlzEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDdlODg3NDk3MDQyOTQ1NTJmZWY1NDg4NjExMWVkMDU4 NmVjMjQwHhcNMjUxMjE2MTgwMTI1WhcNMjUxMjE3MTgwMTI1WjAzMTEwLwYDVQQD EyhiMDM4NzFmMDFhNjYyOTExMWE1YWI0YzFkZjYxNjI2MDY5ZjQyYTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5U0/Tfow87JRk3tvSHOKEfSjKKwX odLmuu+thd/NaAnpoX6/hO+jLzXhDjRecRMrDlewFFzOBMASIJeavqICj4Euc/vJ Hws8ljuoBNmC2sbvvRLR1XPiWuIgXq41Fs0ymAGHam0PMQWQu8dpfcafkfoLRJm5 k+7TCoOyPvTaHt6Zm+E+PjPVSxRey+MJdn6CpFAYf0FVPpxdtOB64Y9SMPk0ViUl mhpI+KGDIzd8v31LXOvIYO9IFYJQFKj3ne/ZzZPDKS+bsafJ4Z1oh1fe+GriAb9I B9chaAevZMgwRcmbtaxNueBBpQANrF5InFFSN2XRZ30afki7or6XkNjv2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLA4cfAaZikRGlq0wd9hYmBp9Co3MB8GA1UdIwQY MBaAFOhH6IdJcEKUVS/vVIhhEe0FhuwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVmb2gwbHdRcFJWTC05VWlHRVI3UVdHN0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83N2Y1MzItMzk4Zi00YWQ4LWIzNDgt YmRhZDdlZjc3NmM0LzEvNkVmb2gwbHdRcFJWTC05VWlHRVI3UVdHN0NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS83N2Y1MzItMzk4Zi00YWQ4LWIzNDgtYmRhZDdlZjc3NmM0 LzEvNkVmb2gwbHdRcFJWTC05VWlHRVI3UVdHN0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqBg6JGA 0pGssbAAosrbOBL6UZhLSI209Tz4OqHBeIOMQ6hI8P7fK8kw2kzmsmuC5Yyi+qDq esgT47r2TvuvaxOOIFxM888twDzFLingersxMEsFEztDEFRkuUfmspdRCFK2yc2z 9+HU3USlQmAF2/QsPQv1D1ICcKR2KTrFCljNTj2eXJ5S90RKGtX/0qVVzBHxiBB/ UZXX+XvDHvtxmgwTkk4VZV85oDqynXKnZFBKbQkRQIojTWGCPSgvvh7qG4C2IZez 8OzVUjUn+mDzJVT0KAU8vacVvUGpsKJ+Sm0MqtFuetFe6aOhz8UUDr3JRqGrgOFb Ii8csv7s/Xur9g== -----END CERTIFICATE-----Generated at Tue Dec 16 20:25:39 2025 by rpki-client