This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft File: bI5k4HENMvJqNtaM_3s_hqyCDOs.mft (raw, json) Hash identifier: ybc8yF+Mk11JR8DnC8e6RKvkwR4ajzluoRcwVQbJrSk= Subject key identifier: 7E:6F:44:0A:C4:41:1A:B4:5C:62:50:63:3C:A0:8A:DD:CE:6B:58:11 Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB Certificate issuer: /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb Certificate serial: 019B0F37B0F21B6BA09CBE8C32277614AFC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft Manifest number: 01E6 Signing time: Thu 11 Dec 2025 21:01:06 +0000 Manifest this update: Thu 11 Dec 2025 21:01:06 +0000 Manifest next update: Fri 12 Dec 2025 21:01:06 +0000 Files and hashes: 1: ZUMP4gFwulXOpnT82AiRknnGbj0.roa (hash: bDRLu83yHenh9/HNiwqhOVvpz6DGXK6dcJiMgfWy7JM=) 2: bI5k4HENMvJqNtaM_3s_hqyCDOs.crl (hash: itsmZM+C+7LysQmePdY1/CNPJfN3387xPc/Fxvei5gY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:b0:f2:1b:6b:a0:9c:be:8c:32:27:76:14:af:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb Validity Not Before: Dec 11 21:01:06 2025 GMT Not After : Dec 12 21:01:06 2025 GMT Subject: CN=7e6f440ac4411ab45c6250633ca08addce6b5811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:88:43:df:de:87:4e:37:a4:9a:1d:7c:d6:09: d1:ee:4c:88:44:7d:d0:b4:44:7c:71:b0:be:db:cb: 22:52:47:d2:4e:84:f6:46:29:67:c6:0a:ee:03:08: 86:ac:0c:c3:58:b1:df:42:83:2b:09:1c:c7:3a:99: c0:23:b5:29:f8:c3:12:14:9c:2a:8e:86:59:4d:d2: ef:e1:a1:28:0d:8e:72:f3:3f:bb:22:6f:3d:10:bc: 89:5a:ed:88:9a:d7:1a:cd:6e:71:ea:0d:95:87:27: 36:89:0d:03:bf:7d:2c:db:dc:e2:65:04:39:ce:64: 2f:67:13:d1:c8:e4:2d:ff:fd:9b:22:c6:99:44:45: 68:2c:9f:e6:a2:8e:a5:ba:e2:eb:d7:4a:fc:8f:95: 26:ea:29:5a:63:7a:19:bc:09:a9:1a:f3:c9:12:f8: 46:2c:60:b1:1e:f7:0c:8b:64:3e:4a:b6:d8:ae:b2: c9:c9:54:64:a2:a2:2a:7d:0c:2a:2b:61:53:28:d9: cb:b3:4d:15:6f:be:1d:00:54:03:81:14:61:be:57: d3:b6:72:7f:94:9e:51:f9:35:ae:13:f4:0f:b5:53: 5f:e1:f4:a5:cd:be:38:1b:a0:b4:2a:a2:a9:de:29: 90:3d:03:13:84:be:09:46:95:2a:4c:d8:c4:09:b6: 56:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6F:44:0A:C4:41:1A:B4:5C:62:50:63:3C:A0:8A:DD:CE:6B:58:11 X509v3 Authority Key Identifier: keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:8c:44:d9:cb:97:33:9a:3e:5d:e4:6e:c2:75:76:5f:39:16: 6d:5b:67:8d:b8:db:ff:e7:47:9d:c9:c0:31:de:84:c7:18:14: eb:55:1e:68:27:57:e5:ef:81:f3:7c:62:02:b4:99:f7:bf:ed: 5a:8c:ff:98:ad:1d:a3:cd:10:9d:9c:7b:f3:ce:b8:57:d1:bb: 0f:31:6d:bc:92:80:6f:6c:37:f9:56:1f:0e:ca:e9:5d:2b:e8: 2f:f4:c8:36:a7:7f:5f:63:25:ec:92:55:b4:38:fd:78:37:db: 3c:7b:96:0a:a1:ce:0f:5b:b6:5a:07:4a:63:ef:db:c1:0c:de: ed:c1:d5:81:47:ac:68:3c:cc:fc:6a:f1:45:c3:ed:9a:3c:43: 2e:b5:7c:a4:8b:c0:cc:95:0e:dc:91:a4:e0:8a:be:3b:c0:be: 8a:2e:70:ee:6c:52:22:29:3b:21:2d:89:00:15:ee:1f:c7:d9: d0:a9:93:d7:c2:af:06:d0:a9:40:89:9a:58:15:96:a5:50:0b: 47:66:8a:96:1c:5b:2d:e0:16:9a:80:bd:32:f5:32:df:07:5a: 92:21:9e:e0:15:63:d4:32:f5:d3:34:01:38:bb:79:39:17:c9: ec:3f:51:0f:80:01:8a:11:b8:d4:2f:d5:3f:6c:f3:27:41:f8: 35:bf:ba:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN7DyG2ugnL6MMid2FK/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGU2NGUwNzEwZDMyZjI2YTM2ZDY4Y2ZmN2IzZjg2YWM4 MjBjZWIwHhcNMjUxMjExMjEwMTA2WhcNMjUxMjEyMjEwMTA2WjAzMTEwLwYDVQQD Eyg3ZTZmNDQwYWM0NDExYWI0NWM2MjUwNjMzY2EwOGFkZGNlNmI1ODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwohD396HTjekmh181gnR7kyIRH3Q tER8cbC+28siUkfSToT2RilnxgruAwiGrAzDWLHfQoMrCRzHOpnAI7Up+MMSFJwq joZZTdLv4aEoDY5y8z+7Im89ELyJWu2ImtcazW5x6g2Vhyc2iQ0Dv30s29ziZQQ5 zmQvZxPRyOQt//2bIsaZREVoLJ/moo6luuLr10r8j5Um6ilaY3oZvAmpGvPJEvhG LGCxHvcMi2Q+SrbYrrLJyVRkoqIqfQwqK2FTKNnLs00Vb74dAFQDgRRhvlfTtnJ/ lJ5R+TWuE/QPtVNf4fSlzb44G6C0KqKp3imQPQMThL4JRpUqTNjECbZWBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5vRArEQRq0XGJQYzygit3Oa1gRMB8GA1UdIwQY MBaAFGyOZOBxDTLyajbWjP97P4asggzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkk1azRIRU5NdkpxTnRhTV8zc19ocXlDRE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83YmUxYWEtNWIwNS00NzUzLWI3ZDgt YjhiYjlkN2RhMmRiLzEvYkk1azRIRU5NdkpxTnRhTV8zc19ocXlDRE9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC83YmUxYWEtNWIwNS00NzUzLWI3ZDgtYjhiYjlkN2RhMmRi LzEvYkk1azRIRU5NdkpxTnRhTV8zc19ocXlDRE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYxE2cuX M5o+XeRuwnV2XzkWbVtnjbjb/+dHncnAMd6ExxgU61UeaCdX5e+B83xiArSZ97/t Woz/mK0do80QnZx78864V9G7DzFtvJKAb2w3+VYfDsrpXSvoL/TINqd/X2Ml7JJV tDj9eDfbPHuWCqHOD1u2WgdKY+/bwQze7cHVgUesaDzM/GrxRcPtmjxDLrV8pIvA zJUO3JGk4Iq+O8C+ii5w7mxSIik7IS2JABXuH8fZ0KmT18KvBtCpQImaWBWWpVAL R2aKlhxbLeAWmoC9MvUy3wdakiGe4BVj1DL10zQBOLt5ORfJ7D9RD4ABihG41C/V P2zzJ0H4Nb+6LQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:56:46 2025 by rpki-client