This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft File: 6vl4jJlRMNcOrEbAayJmctJdQYU.mft (raw, json) Hash identifier: WRjPs/SD5SvFMLkXP8FBingRT2WFf0mBgkGJ1nhBenY= Subject key identifier: 47:41:F0:DC:53:54:4A:59:41:0B:41:A9:EC:98:50:62:57:C5:80:22 Authority key identifier: EA:F9:78:8C:99:51:30:D7:0E:AC:46:C0:6B:22:66:72:D2:5D:41:85 Certificate issuer: /CN=eaf9788c995130d70eac46c06b226672d25d4185 Certificate serial: 019B597712CB1B2CAD6679FA29C64169D908 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft Manifest number: 0CDE Signing time: Fri 26 Dec 2025 07:02:14 +0000 Manifest this update: Fri 26 Dec 2025 07:02:14 +0000 Manifest next update: Sat 27 Dec 2025 07:02:14 +0000 Files and hashes: 1: 6vl4jJlRMNcOrEbAayJmctJdQYU.crl (hash: WY0lyfdbYQW7k3EgnXvTSXdfAhcIRHzGwTfrRVDDVG0=) 2: CQQ3Z2zA6nIR1Bc5302cbzfvf2Q.roa (hash: fqcNc1mJfaykXu7IOGpmWN0xqLSHMqYySIqnsZGy/CM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft rsync://rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:12:cb:1b:2c:ad:66:79:fa:29:c6:41:69:d9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf9788c995130d70eac46c06b226672d25d4185 Validity Not Before: Dec 26 07:02:14 2025 GMT Not After : Dec 27 07:02:14 2025 GMT Subject: CN=4741f0dc53544a59410b41a9ec98506257c58022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:78:ec:c6:28:3c:c5:26:d9:01:22:3c:99:b7: 45:3b:3c:e6:fb:4c:2f:9e:53:2e:84:e6:7d:b2:9a: 8d:62:f8:fa:bb:59:56:4d:31:86:d2:97:d7:3f:ca: 48:26:f5:50:4f:18:57:f8:cf:9e:f3:48:0b:04:66: 3a:45:e0:54:69:84:46:d4:22:4a:57:b0:8e:4e:54: 98:7d:76:b8:fb:78:a8:0f:96:cc:08:23:5f:16:44: 7e:e7:f1:73:a5:c9:03:f2:55:2d:af:ac:c7:7a:b5: 81:8e:ae:73:21:0c:96:d9:7f:7c:a9:d8:d9:47:31: bd:45:3d:83:bf:5a:3b:c9:c0:6a:ef:cf:e6:17:0c: b1:65:16:38:6f:ba:e8:60:81:b2:0a:61:c9:46:7a: 8a:3e:69:b7:fb:76:97:cf:aa:10:cf:dc:69:30:5b: 38:e4:9b:3d:3e:1f:37:05:17:98:9d:a5:de:ec:c7: 55:6d:3c:c2:0f:aa:d5:be:31:6b:cd:7a:17:57:28: 9a:f4:96:38:03:df:3b:38:37:7d:04:9f:90:77:a3: f5:30:a4:d3:ed:4b:5e:f1:fc:d2:ea:39:a4:b6:cb: 47:d8:1f:45:45:d6:43:c1:91:b7:db:6c:b3:c0:2d: 18:4d:77:2a:5c:66:b1:13:2b:ae:cc:e6:14:bf:26: be:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:41:F0:DC:53:54:4A:59:41:0B:41:A9:EC:98:50:62:57:C5:80:22 X509v3 Authority Key Identifier: keyid:EA:F9:78:8C:99:51:30:D7:0E:AC:46:C0:6B:22:66:72:D2:5D:41:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:2f:5e:a1:f9:ee:9a:f4:06:99:5d:cf:f0:b8:2a:ba:00:39: e4:a3:60:32:c3:9c:d9:c3:bd:eb:41:bd:b4:36:f4:9e:a6:47: 53:84:eb:85:94:15:5e:1d:97:71:b1:69:11:46:c2:b6:2b:23: ab:a9:a5:35:22:ec:a3:1c:84:04:9b:45:7e:4c:28:5d:ad:82: 0e:06:16:72:a9:7e:a5:82:d5:6c:e6:cc:69:9f:7a:e7:5b:39: c6:95:e1:31:a7:83:dd:b2:78:7c:21:7b:ad:29:f0:a3:42:f4: d0:68:2a:45:b9:fa:39:6d:71:86:83:b1:1a:00:a5:b6:90:4d: 07:76:bc:a9:45:68:35:58:fc:d7:3b:5b:17:23:31:4a:74:d1: 58:a6:20:ef:7e:11:b3:f8:49:7f:f8:48:28:06:b9:99:3f:e7: ce:a7:b4:28:fc:d2:b0:9c:8b:5d:f9:7a:ca:be:a0:a5:94:48: d3:53:76:63:d1:d5:74:d7:31:aa:7e:72:6a:4d:c1:e8:e5:79: df:74:b8:0a:19:be:0a:38:06:5a:80:ca:7e:85:05:14:e7:97: 15:e8:7a:75:f2:e8:c4:f2:ae:ee:58:52:c3:36:1a:8c:56:a5: f8:63:37:c2:e8:02:05:88:9c:ab:c0:30:79:36:40:f6:c6:f0: 1c:72:04:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdxLLGyytZnn6KcZBadkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhZjk3ODhjOTk1MTMwZDcwZWFjNDZjMDZiMjI2NjcyZDI1 ZDQxODUwHhcNMjUxMjI2MDcwMjE0WhcNMjUxMjI3MDcwMjE0WjAzMTEwLwYDVQQD Eyg0NzQxZjBkYzUzNTQ0YTU5NDEwYjQxYTllYzk4NTA2MjU3YzU4MDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnjsxig8xSbZASI8mbdFOzzm+0wv nlMuhOZ9spqNYvj6u1lWTTGG0pfXP8pIJvVQTxhX+M+e80gLBGY6ReBUaYRG1CJK V7COTlSYfXa4+3ioD5bMCCNfFkR+5/FzpckD8lUtr6zHerWBjq5zIQyW2X98qdjZ RzG9RT2Dv1o7ycBq78/mFwyxZRY4b7roYIGyCmHJRnqKPmm3+3aXz6oQz9xpMFs4 5Js9Ph83BReYnaXe7MdVbTzCD6rVvjFrzXoXVyia9JY4A987ODd9BJ+Qd6P1MKTT 7Ute8fzS6jmktstH2B9FRdZDwZG322yzwC0YTXcqXGaxEyuuzOYUvya+2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdB8NxTVEpZQQtBqeyYUGJXxYAiMB8GA1UdIwQY MBaAFOr5eIyZUTDXDqxGwGsiZnLSXUGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnZsNGpKbFJNTmNPckViQWF5Sm1jdEpkUVlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81NTk2YjAtYThhNy00NWIwLWIyNDUt MGZlN2EwZWU2YmQzLzEvNnZsNGpKbFJNTmNPckViQWF5Sm1jdEpkUVlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy81NTk2YjAtYThhNy00NWIwLWIyNDUtMGZlN2EwZWU2YmQz LzEvNnZsNGpKbFJNTmNPckViQWF5Sm1jdEpkUVlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZS9eofnu mvQGmV3P8LgqugA55KNgMsOc2cO960G9tDb0nqZHU4TrhZQVXh2XcbFpEUbCtisj q6mlNSLsoxyEBJtFfkwoXa2CDgYWcql+pYLVbObMaZ9651s5xpXhMaeD3bJ4fCF7 rSnwo0L00GgqRbn6OW1xhoOxGgCltpBNB3a8qUVoNVj81ztbFyMxSnTRWKYg734R s/hJf/hIKAa5mT/nzqe0KPzSsJyLXfl6yr6gpZRI01N2Y9HVdNcxqn5yak3B6OV5 33S4Chm+CjgGWoDKfoUFFOeXFeh6dfLoxPKu7lhSwzYajFal+GM3wugCBYicq8Aw eTZA9sbwHHIEHg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:54 2025 by rpki-client