This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft File: 6lUOVOR2bVdl0PPQYd8ddNpViXM.mft (raw, json) Hash identifier: O4nP9XO7sMC6HBo3NAo7XX8YgtFpnR0XsnITY+DlBOg= Subject key identifier: A5:C5:F4:DF:59:36:57:A6:0F:0F:CB:79:E6:2E:88:23:F4:FB:3F:8E Authority key identifier: EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73 Certificate issuer: /CN=ea550e54e4766d5765d0f3d061df1d74da558973 Certificate serial: 019B35A0CB41070100CE5BDEE2261723AD80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft Manifest number: 0ED5 Signing time: Fri 19 Dec 2025 08:01:28 +0000 Manifest this update: Fri 19 Dec 2025 08:01:28 +0000 Manifest next update: Sat 20 Dec 2025 08:01:28 +0000 Files and hashes: 1: 6lUOVOR2bVdl0PPQYd8ddNpViXM.crl (hash: wxlU2Di4WmmcYBqLXHt/OWaKOneb4FTUCYclc8kaUZk=) 2: SOLF2PkE720JgjOdf1KwRyDMoVU.roa (hash: xFpd4K6CQn8K2Nx3S7ipIBzbB30czEVkqtv2sS8du2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:cb:41:07:01:00:ce:5b:de:e2:26:17:23:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea550e54e4766d5765d0f3d061df1d74da558973 Validity Not Before: Dec 19 08:01:28 2025 GMT Not After : Dec 20 08:01:28 2025 GMT Subject: CN=a5c5f4df593657a60f0fcb79e62e8823f4fb3f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:07:b5:ef:05:7e:ac:7e:15:f0:b1:7b:c1:68: 5f:2b:35:4e:f0:2c:4a:76:bb:26:24:e1:7b:d3:9b: e3:40:3c:a0:09:33:18:cb:2a:3c:bc:78:b2:57:7f: 94:d4:12:c5:30:93:d5:e3:cf:5f:e7:36:16:6c:2f: 36:99:4c:58:eb:1f:76:4f:d1:9a:8d:3a:fa:07:a7: 16:68:a3:4d:d3:ec:c6:59:f0:f0:2c:ba:e0:cd:e5: b5:83:05:fd:7a:50:b0:c3:af:0b:c7:ec:9e:06:11: 6b:1d:9f:e9:2c:da:e2:63:66:f9:b6:0c:d8:19:36: 19:5c:f1:7f:c6:45:c7:5d:d4:6d:eb:84:29:0c:48: 72:60:dd:dd:de:5c:56:73:8d:95:29:01:cc:45:f5: 13:4b:61:f8:e1:ab:45:d0:8a:bb:39:96:3f:5c:de: 13:fa:50:c6:9b:53:e2:56:5e:98:99:94:b3:8b:71: f2:9c:d0:bd:53:92:60:14:68:50:0e:17:77:78:7e: 78:c9:3b:68:88:17:35:02:32:bc:ca:44:a3:5d:6f: 1d:9d:d6:e1:3e:fe:38:c5:a5:9d:9c:d7:c2:26:bc: cd:ce:14:2f:40:6a:09:72:6c:e4:61:9d:cd:30:cc: 29:f5:83:0c:d5:01:a4:87:6d:f1:20:84:a1:72:97: 45:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C5:F4:DF:59:36:57:A6:0F:0F:CB:79:E6:2E:88:23:F4:FB:3F:8E X509v3 Authority Key Identifier: keyid:EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ec:9d:76:69:a2:bd:1f:5b:a2:8f:43:4f:46:b3:0b:89:25: 5e:55:5b:9e:eb:12:c5:43:2d:bc:39:82:cc:7e:ab:54:7d:bc: cc:42:66:a9:be:6f:89:4f:42:3f:c0:b8:a7:e7:ab:26:91:5c: 25:57:a4:14:0c:66:4d:f7:92:e1:06:40:ac:f8:29:ae:4d:82: e8:fa:ac:b0:b9:99:ec:10:1f:d9:75:6f:af:b4:2c:43:71:2f: e6:3f:b3:64:5b:cb:e6:04:42:a8:2b:94:fb:14:90:a9:3a:4f: d6:e4:dd:60:f5:f8:d4:51:b4:da:de:48:eb:7f:28:2d:c1:f6: a1:4c:09:51:25:4a:0d:1f:49:fe:41:eb:94:d9:7e:f0:87:89: 95:9b:9f:62:3e:6d:ca:5b:a0:e3:76:98:1e:58:57:c5:fe:dc: 7d:71:90:d9:71:42:da:e5:8a:14:4c:6b:cd:28:03:dd:4b:79: 98:78:ec:c0:e9:79:8e:07:c6:cb:5b:a9:b2:63:8b:07:49:a7: 8c:30:76:00:51:89:c6:28:a1:35:a2:ed:a6:e6:23:e5:df:54: 4d:1d:8d:81:bf:e0:1c:f6:08:10:0d:7a:c9:25:43:57:90:56: f1:76:91:3d:88:91:5a:d2:5a:fa:e3:d0:87:46:d1:21:21:b1: b0:2c:c0:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oMtBBwEAzlve4iYXI62AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTUwZTU0ZTQ3NjZkNTc2NWQwZjNkMDYxZGYxZDc0ZGE1 NTg5NzMwHhcNMjUxMjE5MDgwMTI4WhcNMjUxMjIwMDgwMTI4WjAzMTEwLwYDVQQD EyhhNWM1ZjRkZjU5MzY1N2E2MGYwZmNiNzllNjJlODgyM2Y0ZmIzZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoge17wV+rH4V8LF7wWhfKzVO8CxK drsmJOF705vjQDygCTMYyyo8vHiyV3+U1BLFMJPV489f5zYWbC82mUxY6x92T9Ga jTr6B6cWaKNN0+zGWfDwLLrgzeW1gwX9elCww68Lx+yeBhFrHZ/pLNriY2b5tgzY GTYZXPF/xkXHXdRt64QpDEhyYN3d3lxWc42VKQHMRfUTS2H44atF0Iq7OZY/XN4T +lDGm1PiVl6YmZSzi3HynNC9U5JgFGhQDhd3eH54yTtoiBc1AjK8ykSjXW8dndbh Pv44xaWdnNfCJrzNzhQvQGoJcmzkYZ3NMMwp9YMM1QGkh23xIIShcpdFxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXF9N9ZNlemDw/LeeYuiCP0+z+OMB8GA1UdIwQY MBaAFOpVDlTkdm1XZdDz0GHfHXTaVYlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxVT1ZPUjJiVmRsMFBQUVlkOGRkTnBWaVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OGY2MzctMzEyMS00MGY3LWI3OGYt OWM5ZjIwOTAzMjlhLzEvNmxVT1ZPUjJiVmRsMFBQUVlkOGRkTnBWaVhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82OGY2MzctMzEyMS00MGY3LWI3OGYtOWM5ZjIwOTAzMjlh LzEvNmxVT1ZPUjJiVmRsMFBQUVlkOGRkTnBWaVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAluyddmmi vR9boo9DT0azC4klXlVbnusSxUMtvDmCzH6rVH28zEJmqb5viU9CP8C4p+erJpFc JVekFAxmTfeS4QZArPgprk2C6PqssLmZ7BAf2XVvr7QsQ3Ev5j+zZFvL5gRCqCuU +xSQqTpP1uTdYPX41FG02t5I638oLcH2oUwJUSVKDR9J/kHrlNl+8IeJlZufYj5t ylug43aYHlhXxf7cfXGQ2XFC2uWKFExrzSgD3Ut5mHjswOl5jgfGy1upsmOLB0mn jDB2AFGJxiihNaLtpuYj5d9UTR2Ngb/gHPYIEA16ySVDV5BW8XaRPYiRWtJa+uPQ h0bRISGxsCzAVw== -----END CERTIFICATE-----Generated at Fri Dec 19 15:27:59 2025 by rpki-client