This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft File: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft (raw, json) Hash identifier: gplstJ+bMh9yWvrrWgdQbMKt/3YyVqVotXTTKNyJqXQ= Subject key identifier: A3:DB:5B:7B:1C:9A:33:06:8F:2A:16:99:40:22:9E:6B:92:EA:33:7A Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC Certificate issuer: /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc Certificate serial: 019B0E931965CF5C34F3988E3A69D43BDDA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft Manifest number: 0E51 Signing time: Thu 11 Dec 2025 18:01:19 +0000 Manifest this update: Thu 11 Dec 2025 18:01:19 +0000 Manifest next update: Fri 12 Dec 2025 18:01:19 +0000 Files and hashes: 1: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl (hash: Wsm/T29z07zp0iSyiHBKfM9CRIGRAU2ypO0hd4mfMPc=) 2: DXb8g5-PypIL6EwTwBa5JTnxBKo.roa (hash: tOPfESlkZC7S5BHJvSJ7lgd26XQAVlBllx5t/n2Rb7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:19:65:cf:5c:34:f3:98:8e:3a:69:d4:3b:dd:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc Validity Not Before: Dec 11 18:01:19 2025 GMT Not After : Dec 12 18:01:19 2025 GMT Subject: CN=a3db5b7b1c9a33068f2a169940229e6b92ea337a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f3:5c:85:57:20:8b:6f:52:8c:7a:f7:cd:e2: 62:65:7c:3c:9d:6d:90:f1:76:4b:70:ea:85:69:d8: a4:0e:08:6c:4a:15:0a:d9:dc:74:6d:cb:61:a5:4b: c0:55:21:6d:f3:0c:3e:e4:7c:34:db:e3:24:f5:93: 65:af:85:83:12:36:95:a6:70:c8:ab:e5:50:ff:0b: b6:8e:b1:f6:09:f7:78:62:a9:9e:9d:ab:c5:9d:a6: 8e:ef:8b:f9:f9:f5:a1:a6:0a:69:59:70:eb:d9:51: 5c:0f:cb:ee:b9:56:b5:c7:3f:9a:b4:7c:38:a9:1d: ec:2c:4d:30:9c:88:49:87:ae:f3:b1:1b:da:de:ad: be:7a:c8:a6:75:f9:d9:20:f4:ea:34:24:5f:91:e9: b2:d9:80:80:e7:d2:7c:f5:e5:3b:83:e9:52:b4:7a: f3:0f:f3:47:68:62:39:7c:1c:4a:f2:06:f4:6b:d0: db:ab:4c:34:10:d8:20:a2:f8:47:b6:8f:3c:c5:ac: 27:55:b8:e9:aa:8b:dc:47:b1:3c:55:e9:d1:86:e2: 06:4e:05:dd:67:06:6a:9b:bf:ce:56:66:b8:90:a1: c8:08:1d:7a:1b:2a:cf:f1:00:26:aa:14:2d:aa:3d: 76:58:e7:2f:01:07:a4:99:56:e2:3b:4d:88:cb:b7: 07:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DB:5B:7B:1C:9A:33:06:8F:2A:16:99:40:22:9E:6B:92:EA:33:7A X509v3 Authority Key Identifier: keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b9:2e:f3:6a:9e:be:b6:40:7f:c7:db:76:75:3a:4a:06:ed: 3b:63:9d:d8:a3:b7:ce:60:96:a5:2e:64:07:b4:34:45:75:03: 3d:90:cd:22:84:ca:07:de:aa:64:b0:5e:8c:6a:89:10:34:1e: cb:52:6f:7c:c9:96:54:6f:e2:c0:05:a3:49:89:8f:ca:59:b8: ad:92:c7:93:db:e6:3c:68:d7:94:f2:67:79:74:66:57:14:fc: dc:7f:cc:69:3b:46:ca:4e:5a:54:8d:fa:62:f4:41:45:98:c5: 28:54:4c:78:27:42:87:35:65:4d:d4:77:1e:db:60:ba:52:b9: 8a:8d:da:be:92:37:64:69:76:b4:9d:b4:f6:cc:01:3e:d6:00: 67:41:74:4d:99:d2:19:e9:c6:4a:8a:7c:d1:16:47:03:84:db: a8:ae:40:cd:5d:e0:35:d7:f9:f3:b4:fa:3c:2f:ff:bd:37:70: ed:b9:9f:97:65:ac:16:66:7e:cb:a2:2e:ed:ad:97:f6:b2:bd: 38:b3:25:33:78:ed:11:da:51:81:93:43:2c:80:14:de:48:78: d4:f8:d2:89:70:27:75:d8:0a:45:d2:3e:e0:f3:0c:9d:4f:88: 80:24:01:d1:e8:79:1b:04:cb:79:fe:87:f6:85:34:7b:d5:9c: 82:a5:32:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkxllz1w085iOOmnUO92oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMjJhYjZiYmU0MmVkOWNmMzY3YmIwMzE3ZGY3ZTY0MGUy ODM2ZGMwHhcNMjUxMjExMTgwMTE5WhcNMjUxMjEyMTgwMTE5WjAzMTEwLwYDVQQD EyhhM2RiNWI3YjFjOWEzMzA2OGYyYTE2OTk0MDIyOWU2YjkyZWEzMzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufNchVcgi29SjHr3zeJiZXw8nW2Q 8XZLcOqFadikDghsShUK2dx0bcthpUvAVSFt8ww+5Hw02+Mk9ZNlr4WDEjaVpnDI q+VQ/wu2jrH2Cfd4YqmenavFnaaO74v5+fWhpgppWXDr2VFcD8vuuVa1xz+atHw4 qR3sLE0wnIhJh67zsRva3q2+esimdfnZIPTqNCRfkemy2YCA59J89eU7g+lStHrz D/NHaGI5fBxK8gb0a9Dbq0w0ENggovhHto88xawnVbjpqovcR7E8VenRhuIGTgXd ZwZqm7/OVma4kKHICB16GyrP8QAmqhQtqj12WOcvAQekmVbiO02Iy7cHswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPbW3scmjMGjyoWmUAinmuS6jN6MB8GA1UdIwQY MBaAFOoiq2u+Qu2c82e7AxfffmQOKDbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWEzYTItYWQ1My00NmE1LThmZDUt MDY1ZWQ0ZDg0NDFmLzEvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hNWEzYTItYWQ1My00NmE1LThmZDUtMDY1ZWQ0ZDg0NDFm LzEvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7ku82qe vrZAf8fbdnU6SgbtO2Od2KO3zmCWpS5kB7Q0RXUDPZDNIoTKB96qZLBejGqJEDQe y1JvfMmWVG/iwAWjSYmPylm4rZLHk9vmPGjXlPJneXRmVxT83H/MaTtGyk5aVI36 YvRBRZjFKFRMeCdChzVlTdR3HttgulK5io3avpI3ZGl2tJ209swBPtYAZ0F0TZnS GenGSop80RZHA4TbqK5AzV3gNdf587T6PC//vTdw7bmfl2WsFmZ+y6Iu7a2X9rK9 OLMlM3jtEdpRgZNDLIAU3kh41PjSiXAnddgKRdI+4PMMnU+IgCQB0eh5GwTLef6H 9oU0e9WcgqUyvg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:28:39 2025 by rpki-client