This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft File: 6MpwwfyVubHp3Hd1RVutuSFPkdA.mft (raw, json) Hash identifier: 5JYnt8sRZOWi73PLRih4xI+qvHzLiILVqon2Rvk7p3U= Subject key identifier: 52:B3:75:E1:04:55:0D:28:0C:FD:FB:38:53:C8:44:52:6C:84:D9:72 Authority key identifier: E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0 Certificate issuer: /CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0 Certificate serial: 019AEED105F736F82EECCF7FE2D5AB7AC75F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft Manifest number: 1666 Signing time: Fri 05 Dec 2025 14:01:07 +0000 Manifest this update: Fri 05 Dec 2025 14:01:07 +0000 Manifest next update: Sat 06 Dec 2025 14:01:07 +0000 Files and hashes: 1: 6MpwwfyVubHp3Hd1RVutuSFPkdA.crl (hash: FMrweRMx7MyUI6R+IqiaaFWjvhsm+B608oCnHF2raVQ=) 2: h3MBCKUGhHfeEGJEjBUvFcZingY.roa (hash: Kf87fhJV7eWi54ATVvDhv4SnGp1TZLheM1w//OwPipM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 14:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:d1:05:f7:36:f8:2e:ec:cf:7f:e2:d5:ab:7a:c7:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0 Validity Not Before: Dec 5 14:01:07 2025 GMT Not After : Dec 6 14:01:07 2025 GMT Subject: CN=52b375e104550d280cfdfb3853c844526c84d972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7e:39:c8:bd:4f:96:4a:d0:e9:33:7a:bf:89: 58:5a:16:11:b3:64:b3:9c:e1:fb:91:a9:32:f6:94: 61:fa:ec:e8:9e:21:50:8b:12:1c:c3:26:59:ea:12: 7e:df:3d:8d:9c:69:4e:5d:3c:d5:32:31:4f:a5:cd: 03:80:4e:c9:e1:f1:7e:a5:ae:21:bd:64:3e:be:35: e5:b1:5d:ac:08:52:c6:28:e2:8e:10:a7:fe:49:e3: f1:8b:3d:94:f8:57:8a:c1:9f:e4:da:9b:1b:bb:b5: 36:07:ed:3f:2b:c8:bf:3e:0b:b8:a5:32:86:72:6c: 81:25:da:46:52:e5:5d:d6:ff:e4:86:b3:30:8b:c4: b8:46:77:ef:1d:79:7e:57:ed:19:b8:2a:b1:44:47: 10:8c:b2:27:1e:54:cd:db:66:c1:2a:76:36:2b:d1: 12:1f:d5:06:8c:1c:3d:19:c9:a5:ca:e3:f0:e0:e0: 55:f2:72:ad:bd:71:1e:03:87:bb:cb:81:70:4a:86: 6e:05:e2:4c:ca:45:1b:b6:89:c4:5c:3e:b2:cc:02: 0e:83:7a:19:aa:9a:65:4d:f4:ec:53:69:60:06:03: 3d:98:b2:66:69:37:2d:d7:84:bd:43:74:42:9f:9f: 2b:fc:72:12:9f:4f:6f:59:02:0f:e1:fa:ec:84:ce: b5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B3:75:E1:04:55:0D:28:0C:FD:FB:38:53:C8:44:52:6C:84:D9:72 X509v3 Authority Key Identifier: keyid:E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b3:84:46:3b:d0:56:21:6d:63:da:67:7a:59:1f:e7:f6:4a: ef:fd:54:d7:48:5d:f1:f7:0a:8d:e9:13:6f:b4:db:3c:bb:54: 90:7f:eb:14:f4:df:02:10:2c:22:dc:33:7e:a0:71:dd:96:92: 94:62:5e:d9:85:84:4a:74:4a:48:eb:33:f5:32:aa:a3:78:40: b1:31:15:0b:4f:30:dc:9e:9e:51:e8:82:b2:8d:7a:fd:96:a2: 32:7b:08:52:70:77:c3:6a:df:ba:ef:e7:48:6a:75:90:00:df: 78:04:15:ad:1e:70:57:ee:54:ea:d0:85:07:38:bc:c6:4f:cc: 1d:ae:db:65:49:37:93:4d:f9:af:a1:fa:8c:60:ee:86:32:1e: ae:a9:c9:45:18:df:54:3d:21:fb:c5:16:fc:64:2c:e0:7c:71: b1:14:f4:5d:77:9a:e0:32:ac:91:eb:c1:1d:1a:c7:c8:38:14: ae:fc:2b:13:6b:f8:ff:59:ec:c7:52:8e:93:85:61:be:ec:a2: a3:0e:d0:f6:5e:4c:7d:03:b9:dd:dd:47:ec:85:4f:9c:86:c0: 49:50:5a:cd:90:9f:98:82:18:0c:a8:43:ac:e1:af:e0:39:cf: 3a:fb:9a:d8:db:4d:2e:3e:f6:ef:3e:ba:42:7c:f8:c2:e7:22: d8:34:46:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZru0QX3Nvgu7M9/4tWresdfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Y2E3MGMxZmM5NWI5YjFlOWRjNzc3NTQ1NWJhZGI5MjE0 ZjkxZDAwHhcNMjUxMjA1MTQwMTA3WhcNMjUxMjA2MTQwMTA3WjAzMTEwLwYDVQQD Eyg1MmIzNzVlMTA0NTUwZDI4MGNmZGZiMzg1M2M4NDQ1MjZjODRkOTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq345yL1PlkrQ6TN6v4lYWhYRs2Sz nOH7kaky9pRh+uzoniFQixIcwyZZ6hJ+3z2NnGlOXTzVMjFPpc0DgE7J4fF+pa4h vWQ+vjXlsV2sCFLGKOKOEKf+SePxiz2U+FeKwZ/k2psbu7U2B+0/K8i/Pgu4pTKG cmyBJdpGUuVd1v/khrMwi8S4RnfvHXl+V+0ZuCqxREcQjLInHlTN22bBKnY2K9ES H9UGjBw9GcmlyuPw4OBV8nKtvXEeA4e7y4FwSoZuBeJMykUbtonEXD6yzAIOg3oZ qpplTfTsU2lgBgM9mLJmaTct14S9Q3RCn58r/HISn09vWQIP4frshM61lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKzdeEEVQ0oDP37OFPIRFJshNlyMB8GA1UdIwQY MBaAFOjKcMH8lbmx6dx3dUVbrbkhT5HQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk1wd3dmeVZ1YkhwM0hkMVJWdXR1U0ZQa2RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZmI5ZmUtZGRjNy00NDMyLWE0YTMt MTZkOWY3ZDA3NGYzLzEvNk1wd3dmeVZ1YkhwM0hkMVJWdXR1U0ZQa2RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81ZmI5ZmUtZGRjNy00NDMyLWE0YTMtMTZkOWY3ZDA3NGYz LzEvNk1wd3dmeVZ1YkhwM0hkMVJWdXR1U0ZQa2RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrOERjvQ ViFtY9pnelkf5/ZK7/1U10hd8fcKjekTb7TbPLtUkH/rFPTfAhAsItwzfqBx3ZaS lGJe2YWESnRKSOsz9TKqo3hAsTEVC08w3J6eUeiCso16/ZaiMnsIUnB3w2rfuu/n SGp1kADfeAQVrR5wV+5U6tCFBzi8xk/MHa7bZUk3k035r6H6jGDuhjIerqnJRRjf VD0h+8UW/GQs4HxxsRT0XXea4DKskevBHRrHyDgUrvwrE2v4/1nsx1KOk4Vhvuyi ow7Q9l5MfQO53d1H7IVPnIbASVBazZCfmIIYDKhDrOGv4DnPOvua2NtNLj727z66 Qnz4wuci2DRGaw== -----END CERTIFICATE-----Generated at Fri Dec 5 23:22:29 2025 by rpki-client