This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft File: S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json) Hash identifier: +1t8RKeDOdfIWYQLFF7HYQpZ/RQd05LZT7zCoOcWQDw= Subject key identifier: 12:AE:20:82:E6:DF:00:C3:F3:48:8D:F4:09:CF:08:15:AA:A8:1C:40 Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E Certificate issuer: /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e Certificate serial: 019B0F375C8430F0B51C79B5DDD3D3689F00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft Manifest number: 0EA9 Signing time: Thu 11 Dec 2025 21:00:44 +0000 Manifest this update: Thu 11 Dec 2025 21:00:44 +0000 Manifest next update: Fri 12 Dec 2025 21:00:44 +0000 Files and hashes: 1: 07VM5GQDyy0wcSk66eg9Nc4GYr0.roa (hash: tZR04Bh0g3Sbqjc1Ej/IqbvRwZJEdNyq0qHOrpzegq8=) 2: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: LSib+YyRCcYhP5rPUBefh7oNa21sfVLVjqyf3pC7Enw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:5c:84:30:f0:b5:1c:79:b5:dd:d3:d3:68:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e Validity Not Before: Dec 11 21:00:44 2025 GMT Not After : Dec 12 21:00:44 2025 GMT Subject: CN=12ae2082e6df00c3f3488df409cf0815aaa81c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:9d:1b:a1:e4:d6:7a:ea:ba:bf:6e:84:8f: 33:f8:4f:bd:e4:c3:19:2c:9c:b2:63:25:19:ea:12: 5b:13:81:02:0b:4d:1f:bb:18:ba:cd:1e:d0:a9:2f: c1:a6:a5:60:a5:d4:e9:63:f8:02:3f:d4:f7:b3:f4: 89:51:77:8e:46:5b:bf:7c:b1:99:76:8c:e6:3a:14: e2:69:44:62:7f:f7:01:80:63:6e:6a:0e:50:64:89: 8a:e0:98:cd:13:6c:e5:e0:c6:fe:2c:17:bf:5b:82: 81:cb:aa:16:8d:44:a6:2d:37:81:1f:d2:52:0e:f9: 04:b0:b9:73:00:e6:76:5d:11:37:12:da:4f:21:07: d2:b2:04:48:03:23:4d:5c:c2:5e:0e:1f:b5:3d:61: 3e:ac:d0:50:63:9b:7b:83:f2:38:8c:ca:35:39:8b: 6d:15:48:e0:94:92:71:cd:2c:f8:50:de:b0:71:b2: 38:37:3d:ee:7c:03:34:45:b1:84:5b:25:9b:ab:61: 27:78:5f:e1:ad:2a:6b:11:3a:5c:89:64:f8:ec:29: ec:90:dd:44:45:ca:8c:1d:cf:98:e5:33:7e:b1:89: 05:a4:8f:da:5f:f6:c5:21:e3:3a:a4:9a:d8:74:ba: aa:42:4f:09:a6:4e:4b:50:8b:aa:ae:29:1e:77:af: 6b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AE:20:82:E6:DF:00:C3:F3:48:8D:F4:09:CF:08:15:AA:A8:1C:40 X509v3 Authority Key Identifier: keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:a1:00:dd:ad:ba:7c:56:10:d3:96:50:07:27:d6:ae:00:0c: 33:e3:b8:d4:bf:ae:65:c4:f9:8f:07:82:dc:13:4b:d4:88:ad: e7:13:b5:bf:a0:8d:8a:06:02:85:19:52:82:09:27:59:54:26: 6c:a9:66:fb:59:dd:4b:21:99:90:38:72:0d:98:9e:1d:19:f2: 01:76:91:1d:96:86:51:f6:e8:30:38:cd:6c:90:28:1c:79:e9: 69:6e:42:78:06:17:52:f3:d0:8a:3c:6c:e0:41:a6:02:5e:8b: 0e:b5:03:24:5c:4e:ab:dd:5e:ef:08:ba:8d:8e:1b:3c:bd:9e: 45:e0:60:07:d4:4b:ac:e3:3d:3b:6c:f8:7a:01:bf:27:b9:66: e0:44:48:62:9f:7a:01:d0:53:3f:e9:86:c7:d9:66:ea:93:11: 5f:04:50:9a:4d:dd:94:85:e7:53:cf:52:12:f6:75:f0:31:85: 14:6f:2f:64:09:d2:c4:19:39:55:df:8a:6f:0b:4f:96:f6:92: 8f:fb:1a:aa:24:d8:eb:60:78:53:1b:d6:47:63:41:c6:5c:e8: f6:21:3a:21:68:55:f5:9e:7e:25:0d:a8:9b:1b:4c:3b:f2:c9: df:54:36:33:c4:77:08:ba:37:9e:40:58:c4:1e:f7:30:fe:15: 58:87:c0:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN1yEMPC1HHm13dPTaJ8AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYWZmNDhhZDExNDViMTAwYzc4M2ZiN2FmYjZmMzAyOGJk OGYzNGUwHhcNMjUxMjExMjEwMDQ0WhcNMjUxMjEyMjEwMDQ0WjAzMTEwLwYDVQQD EygxMmFlMjA4MmU2ZGYwMGMzZjM0ODhkZjQwOWNmMDgxNWFhYTgxYzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRGdG6Hk1nrqur9uhI8z+E+95MMZ LJyyYyUZ6hJbE4ECC00fuxi6zR7QqS/BpqVgpdTpY/gCP9T3s/SJUXeORlu/fLGZ dozmOhTiaURif/cBgGNuag5QZImK4JjNE2zl4Mb+LBe/W4KBy6oWjUSmLTeBH9JS DvkEsLlzAOZ2XRE3EtpPIQfSsgRIAyNNXMJeDh+1PWE+rNBQY5t7g/I4jMo1OYtt FUjglJJxzSz4UN6wcbI4Nz3ufAM0RbGEWyWbq2EneF/hrSprETpciWT47CnskN1E RcqMHc+Y5TN+sYkFpI/aX/bFIeM6pJrYdLqqQk8Jpk5LUIuqriked69rtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKuIILm3wDD80iN9AnPCBWqqBxAMB8GA1UdIwQY MBaAFEuv9IrRFFsQDHg/t6+28wKL2PNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMt YmZlYjdjZWEyMDlkLzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMtYmZlYjdjZWEyMDlk LzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKEA3a26 fFYQ05ZQByfWrgAMM+O41L+uZcT5jweC3BNL1Iit5xO1v6CNigYChRlSggknWVQm bKlm+1ndSyGZkDhyDZieHRnyAXaRHZaGUfboMDjNbJAoHHnpaW5CeAYXUvPQijxs 4EGmAl6LDrUDJFxOq91e7wi6jY4bPL2eReBgB9RLrOM9O2z4egG/J7lm4ERIYp96 AdBTP+mGx9lm6pMRXwRQmk3dlIXnU89SEvZ18DGFFG8vZAnSxBk5Vd+KbwtPlvaS j/saqiTY62B4UxvWR2NBxlzo9iE6IWhV9Z5+JQ2omxtMO/LJ31Q2M8R3CLo3nkBY xB73MP4VWIfA7g== -----END CERTIFICATE-----Generated at Fri Dec 12 00:01:25 2025 by rpki-client