This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft File: 6UWUa-c3BQO-r75A4REVudyVO8M.mft (raw, json) Hash identifier: Ux53TKwN4B3WdyTUuWj2dr+vjrlJzXz5pzdTfSm3U5s= Subject key identifier: 94:B7:7C:4C:3A:68:D0:2C:86:93:2B:53:4B:06:CB:BE:FB:A2:4C:A9 Authority key identifier: E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3 Certificate issuer: /CN=e945946be7370503beafbe40e11115b9dc953bc3 Certificate serial: 019B2852F9193B81002A2665C6BEC1F330EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft Manifest number: 0F8C Signing time: Tue 16 Dec 2025 18:01:24 +0000 Manifest this update: Tue 16 Dec 2025 18:01:24 +0000 Manifest next update: Wed 17 Dec 2025 18:01:24 +0000 Files and hashes: 1: 6UWUa-c3BQO-r75A4REVudyVO8M.crl (hash: Y057R/fQpiZ/pbhk7/WxVxrfrF5xIvCUdgtafPmx63A=) 2: QPTMBPa1R1iyVMpj2m0ksKZtNe4.roa (hash: zRiBFcC8k+QThl68UQZBhw2tExgPORwu8ZM6Z3ofO4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:f9:19:3b:81:00:2a:26:65:c6:be:c1:f3:30:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e945946be7370503beafbe40e11115b9dc953bc3 Validity Not Before: Dec 16 18:01:24 2025 GMT Not After : Dec 17 18:01:24 2025 GMT Subject: CN=94b77c4c3a68d02c86932b534b06cbbefba24ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b4:d0:6b:b9:ff:a3:d2:31:d0:85:71:16:84: 14:36:a8:21:a0:3c:9e:c0:e1:f6:d4:af:1f:4a:c6: 81:70:14:68:b3:93:da:18:33:d7:02:6f:92:79:29: 79:21:07:ae:52:d4:3e:d7:53:f8:6d:23:14:8c:c4: 24:31:a8:a9:27:38:a7:7c:ea:ed:72:b6:c3:a6:88: c9:ad:ad:c2:30:52:30:90:51:73:69:7f:4a:cf:7c: d4:0e:37:71:25:19:96:c3:0e:00:8c:5f:33:3d:67: 22:db:0a:26:5e:3c:a5:f7:7f:41:3d:fe:48:97:0e: c3:8f:fc:65:a5:93:11:07:e7:c3:42:e9:35:fb:76: 74:00:9a:6f:73:dd:3c:92:99:c8:45:a1:e1:9a:15: 8b:1c:23:27:43:9c:93:97:0a:48:d5:fc:c7:8c:6e: d0:3f:fb:ce:98:47:82:20:94:00:d0:79:a5:63:be: 4e:2c:96:88:72:a6:99:14:43:f5:6e:3f:f3:d3:ea: 4b:b2:70:aa:00:2f:2b:db:d1:b8:8d:2a:42:92:9c: b4:60:99:cd:a0:21:ce:86:a0:01:47:3b:18:25:10: ba:71:ee:cc:6d:23:1c:05:fb:e4:a1:48:1b:f6:5b: 54:1f:d1:b9:fc:28:c3:56:d2:05:e4:60:4b:aa:50: da:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B7:7C:4C:3A:68:D0:2C:86:93:2B:53:4B:06:CB:BE:FB:A2:4C:A9 X509v3 Authority Key Identifier: keyid:E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:05:50:88:d9:3c:92:bf:f0:21:d6:69:78:42:48:83:bb:03: 4c:e7:41:38:84:a9:be:2e:83:bb:a5:f7:9c:d1:5a:9f:8d:23: 66:ad:e5:86:6f:89:db:1f:88:30:5a:6f:7c:69:db:ff:97:67: 7e:9e:07:4d:f5:aa:3b:78:74:65:8b:c7:e7:0c:1d:29:3f:52: 6a:c2:d0:bd:34:9f:da:4c:59:87:1e:36:23:33:1b:b7:0e:64: 64:c0:94:d1:b1:31:d4:24:0b:66:e6:b6:17:c4:cb:d6:96:2a: 5e:df:0b:12:1c:11:95:db:55:51:ec:d5:da:c4:65:ec:a1:65: f1:03:ac:cb:51:39:c9:d4:b1:11:62:1c:41:06:4a:15:2f:25: 89:3d:a9:86:bb:cd:dc:92:3f:f5:37:6d:be:b7:2c:c8:87:da: cd:26:c1:59:aa:73:8f:23:bd:76:89:cf:54:a3:26:b3:39:bf: 73:b0:42:46:3d:60:ed:6d:a8:f8:f3:b2:54:fc:d9:c4:11:3c: b5:e7:b4:c7:7a:7c:63:d0:d7:3f:3e:46:9c:bf:3b:28:53:e1: b9:21:ef:c8:f3:35:a3:c4:78:bf:3c:7d:b7:3b:2e:b1:d8:6e: b5:a3:a0:21:83:70:29:b5:0f:64:22:5e:c8:f0:6a:21:1e:7d: 41:3e:f2:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUvkZO4EAKiZlxr7B8zDqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NDU5NDZiZTczNzA1MDNiZWFmYmU0MGUxMTExNWI5ZGM5 NTNiYzMwHhcNMjUxMjE2MTgwMTI0WhcNMjUxMjE3MTgwMTI0WjAzMTEwLwYDVQQD Eyg5NGI3N2M0YzNhNjhkMDJjODY5MzJiNTM0YjA2Y2JiZWZiYTI0Y2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrTQa7n/o9Ix0IVxFoQUNqghoDye wOH21K8fSsaBcBRos5PaGDPXAm+SeSl5IQeuUtQ+11P4bSMUjMQkMaipJzinfOrt crbDpojJra3CMFIwkFFzaX9Kz3zUDjdxJRmWww4AjF8zPWci2womXjyl939BPf5I lw7Dj/xlpZMRB+fDQuk1+3Z0AJpvc908kpnIRaHhmhWLHCMnQ5yTlwpI1fzHjG7Q P/vOmEeCIJQA0HmlY75OLJaIcqaZFEP1bj/z0+pLsnCqAC8r29G4jSpCkpy0YJnN oCHOhqABRzsYJRC6ce7MbSMcBfvkoUgb9ltUH9G5/CjDVtIF5GBLqlDa2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJS3fEw6aNAshpMrU0sGy777okypMB8GA1UdIwQY MBaAFOlFlGvnNwUDvq++QOERFbnclTvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlVXVWEtYzNCUU8tcjc1QTRSRVZ1ZHlWTzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81ZmYxOTktZGFmMC00YTdlLThlNWQt NjZkM2Q4YmE1MzlmLzEvNlVXVWEtYzNCUU8tcjc1QTRSRVZ1ZHlWTzhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81ZmYxOTktZGFmMC00YTdlLThlNWQtNjZkM2Q4YmE1Mzlm LzEvNlVXVWEtYzNCUU8tcjc1QTRSRVZ1ZHlWTzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAVQiNk8 kr/wIdZpeEJIg7sDTOdBOISpvi6Du6X3nNFan40jZq3lhm+J2x+IMFpvfGnb/5dn fp4HTfWqO3h0ZYvH5wwdKT9SasLQvTSf2kxZhx42IzMbtw5kZMCU0bEx1CQLZua2 F8TL1pYqXt8LEhwRldtVUezV2sRl7KFl8QOsy1E5ydSxEWIcQQZKFS8liT2phrvN 3JI/9TdtvrcsyIfazSbBWapzjyO9donPVKMmszm/c7BCRj1g7W2o+POyVPzZxBE8 tee0x3p8Y9DXPz5GnL87KFPhuSHvyPM1o8R4vzx9tzsusdhutaOgIYNwKbUPZCJe yPBqIR59QT7yEg== -----END CERTIFICATE-----Generated at Tue Dec 16 21:36:34 2025 by rpki-client