This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft File: 6k4ChliRLmlpfBhVO5Up89HOQF0.mft (raw, json) Hash identifier: 8px3xMyQtLCObKWXCKj1OO47iXPA1HavXHahkCBxuF0= Subject key identifier: 2E:59:C8:FF:77:91:F5:0E:2B:B2:4D:CA:2D:F4:25:D1:62:83:6C:A2 Authority key identifier: EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D Certificate issuer: /CN=ea4e028658912e69697c18553b9529f3d1ce405d Certificate serial: 019B3645A8A4D75E79DD238629D83404ECC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft Manifest number: 10CE Signing time: Fri 19 Dec 2025 11:01:33 +0000 Manifest this update: Fri 19 Dec 2025 11:01:33 +0000 Manifest next update: Sat 20 Dec 2025 11:01:33 +0000 Files and hashes: 1: 6k4ChliRLmlpfBhVO5Up89HOQF0.crl (hash: N+CSaOu2wTnTS50TRoAQmYTWwG1NrWCWQI+oi5gFpWM=) 2: hKHrJZfyvpiqMzNaxqWMsCAzd7U.roa (hash: KpUX9BCj308/B4B0VQzL1CJw7WHe+Vbo6CVwUR3M9gA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:a8:a4:d7:5e:79:dd:23:86:29:d8:34:04:ec:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea4e028658912e69697c18553b9529f3d1ce405d Validity Not Before: Dec 19 11:01:33 2025 GMT Not After : Dec 20 11:01:33 2025 GMT Subject: CN=2e59c8ff7791f50e2bb24dca2df425d162836ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c9:fe:d0:98:55:1f:67:8e:a8:a1:5f:d8:cd: 51:eb:63:65:fa:93:51:72:78:a7:23:ac:65:e8:7c: 6f:38:17:25:03:ee:b7:2e:21:93:47:ca:a8:19:e0: 04:f7:68:84:46:5b:dc:2d:d3:c3:74:0c:ea:46:fa: 76:da:9e:b5:67:80:c0:fa:4a:66:6d:6f:9d:3d:37: 27:71:49:b7:9d:f4:35:56:cc:bb:cd:2a:03:a4:8f: d9:75:30:77:d0:93:63:a9:ab:50:7f:79:b2:e8:d3: fd:02:13:03:20:63:dc:9d:2c:50:4d:81:dc:bd:4c: 99:ea:95:32:2d:cd:94:a2:43:19:2d:44:f3:ec:a8: 9e:1b:2c:1a:59:cd:8d:2b:6d:1b:6d:70:6d:2f:af: 85:77:a7:8b:e0:4c:0b:d6:16:52:06:99:d0:3c:4a: a8:20:c3:f3:50:43:9a:b8:a6:e8:5f:8d:fd:17:4a: fb:c8:11:49:9a:eb:1a:b9:85:1a:39:65:1b:e7:4a: ee:79:05:e3:64:bd:28:78:78:65:ad:db:3e:e3:56: 29:41:f9:65:ce:5a:3d:5d:f1:92:60:c0:ee:77:33: 4a:36:af:f5:60:12:4a:4f:43:ff:b6:86:06:ed:61: 7b:cc:c4:2b:98:89:23:d0:10:30:7b:dd:dc:2a:6c: 9e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:59:C8:FF:77:91:F5:0E:2B:B2:4D:CA:2D:F4:25:D1:62:83:6C:A2 X509v3 Authority Key Identifier: keyid:EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ca:cc:b5:8d:17:0b:44:96:dd:86:f3:40:04:7e:66:3b:5b: 9c:28:9c:7c:a6:c4:c0:f6:36:84:f3:62:51:6f:64:71:d3:76: c1:cc:68:9f:f9:fc:ca:9b:7c:6c:76:91:ac:48:a1:18:ae:f2: fa:6c:dc:44:09:eb:b1:81:64:80:dd:01:46:fa:80:42:5a:74: 2f:4f:ae:12:c5:57:d8:9b:45:68:e3:00:ef:fb:be:03:bc:5f: ee:ac:13:cc:eb:b3:e3:34:e7:1b:9b:5c:e1:59:53:72:b1:c8: fd:9d:cc:bd:bf:a6:f7:d0:01:7d:13:fb:0a:3c:73:a3:0a:ad: 8e:4a:b7:96:98:86:e8:a2:13:cd:24:52:ca:87:6b:97:7b:92: e5:65:69:9f:34:5f:70:ed:d8:a3:7b:2e:4e:c9:a5:82:03:a8: 24:7b:f1:26:51:aa:21:5d:29:eb:7d:c9:06:8c:91:0f:ff:82: 0d:0a:c2:76:dc:8c:4a:ad:8f:fd:55:c4:16:bc:d1:67:b3:ba: a2:41:24:30:e5:50:56:67:95:29:c1:bf:e6:a5:ad:d7:4e:f2: 98:2a:41:4e:a7:a0:03:0b:59:2e:10:b1:ac:52:22:9f:01:53: a4:92:5f:b8:fe:a6:dc:02:83:a6:15:30:09:7d:51:0c:22:10: 67:eb:55:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2Raik11553SOGKdg0BOzGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNGUwMjg2NTg5MTJlNjk2OTdjMTg1NTNiOTUyOWYzZDFj ZTQwNWQwHhcNMjUxMjE5MTEwMTMzWhcNMjUxMjIwMTEwMTMzWjAzMTEwLwYDVQQD EygyZTU5YzhmZjc3OTFmNTBlMmJiMjRkY2EyZGY0MjVkMTYyODM2Y2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocn+0JhVH2eOqKFf2M1R62Nl+pNR cninI6xl6HxvOBclA+63LiGTR8qoGeAE92iERlvcLdPDdAzqRvp22p61Z4DA+kpm bW+dPTcncUm3nfQ1Vsy7zSoDpI/ZdTB30JNjqatQf3my6NP9AhMDIGPcnSxQTYHc vUyZ6pUyLc2UokMZLUTz7KieGywaWc2NK20bbXBtL6+Fd6eL4EwL1hZSBpnQPEqo IMPzUEOauKboX439F0r7yBFJmusauYUaOWUb50rueQXjZL0oeHhlrds+41YpQfll zlo9XfGSYMDudzNKNq/1YBJKT0P/toYG7WF7zMQrmIkj0BAwe93cKmyeOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5ZyP93kfUOK7JNyi30JdFig2yiMB8GA1UdIwQY MBaAFOpOAoZYkS5paXwYVTuVKfPRzkBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNms0Q2hsaVJMbWxwZkJoVk81VXA4OUhPUUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xNDU2MzEtYjYzZS00ODA5LWI0YWIt YmNlZjllMzIyZjJhLzEvNms0Q2hsaVJMbWxwZkJoVk81VXA4OUhPUUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xNDU2MzEtYjYzZS00ODA5LWI0YWItYmNlZjllMzIyZjJh LzEvNms0Q2hsaVJMbWxwZkJoVk81VXA4OUhPUUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMrMtY0X C0SW3YbzQAR+ZjtbnCicfKbEwPY2hPNiUW9kcdN2wcxon/n8ypt8bHaRrEihGK7y +mzcRAnrsYFkgN0BRvqAQlp0L0+uEsVX2JtFaOMA7/u+A7xf7qwTzOuz4zTnG5tc 4VlTcrHI/Z3Mvb+m99ABfRP7Cjxzowqtjkq3lpiG6KITzSRSyodrl3uS5WVpnzRf cO3Yo3suTsmlggOoJHvxJlGqIV0p633JBoyRD/+CDQrCdtyMSq2P/VXEFrzRZ7O6 okEkMOVQVmeVKcG/5qWt107ymCpBTqegAwtZLhCxrFIinwFTpJJfuP6m3AKDphUw CX1RDCIQZ+tVfA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:06:14 2025 by rpki-client