This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json) Hash identifier: yqdfQfY8i+FGtL0nanhQxhskNITqr2HpUFqQLmqD5hY= Subject key identifier: EA:E8:3A:FA:75:0C:9F:00:32:65:41:8A:C4:C8:A6:27:13:86:99:EB Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60 Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260 Certificate serial: 019B4A026948DE74722B6833BE5A36B8A9F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft Manifest number: 0EAC Signing time: Tue 23 Dec 2025 07:00:30 +0000 Manifest this update: Tue 23 Dec 2025 07:00:30 +0000 Manifest next update: Wed 24 Dec 2025 07:00:30 +0000 Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: b7/TEuQ1R4fxEtO3PmqQeAcj9D7I4mCtSgclWKhmrjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:02:69:48:de:74:72:2b:68:33:be:5a:36:b8:a9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260 Validity Not Before: Dec 23 07:00:30 2025 GMT Not After : Dec 24 07:00:30 2025 GMT Subject: CN=eae83afa750c9f003265418ac4c8a627138699eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b7:00:3b:65:72:37:54:e0:d9:54:b1:bb:e4: 5d:c2:40:13:a9:e2:14:c8:1f:36:a7:25:2c:c4:16: cb:82:23:34:a8:ba:e4:c3:e4:e8:ac:d7:2f:d8:da: 1b:0a:11:03:c0:cc:39:a1:67:22:b0:af:94:4b:b4: 68:89:35:e2:91:6b:f3:46:35:49:78:05:a2:68:e3: 3d:34:41:3c:d1:d9:c2:b7:93:1d:46:a6:74:fc:e1: ff:c3:66:cf:ff:58:9d:32:1e:9e:db:3d:38:ab:ce: ad:41:2e:07:9a:15:9a:52:ff:d4:e9:d6:3a:c4:01: 71:e0:23:00:55:81:ef:44:46:9e:fc:57:f0:5c:b3: 3c:79:2a:10:de:3e:87:6c:b3:9f:0a:4c:04:23:79: e5:a9:7e:de:7f:0b:d8:76:80:c4:4d:3d:80:f7:44: 84:a0:4d:49:6e:a1:dc:49:3b:bf:e9:97:ea:58:6c: 24:38:5b:0b:43:6e:b9:dc:cc:63:72:50:88:8f:6e: 42:46:36:a7:f2:f8:d5:79:9c:17:e4:21:19:0c:2c: 39:62:de:70:f6:82:39:44:04:ec:22:2a:e7:0f:e7: 51:fa:55:dc:b9:b8:ab:88:fc:30:bd:55:f1:08:92: 13:23:62:9b:b3:5e:72:39:dc:f2:10:e3:74:9b:50: 61:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E8:3A:FA:75:0C:9F:00:32:65:41:8A:C4:C8:A6:27:13:86:99:EB X509v3 Authority Key Identifier: keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:07:1e:1f:3a:1c:c0:10:bc:92:74:d8:7b:cb:6e:64:3c:21: f2:11:9a:41:cc:ee:5b:43:63:dd:57:69:7c:61:10:8c:39:60: a2:83:2d:b9:f4:05:fe:35:f9:bc:17:34:cd:81:b2:60:bd:9a: e8:4e:1a:60:fe:eb:9d:6e:c3:5b:e8:87:3f:93:d2:b9:dc:62: bb:62:5f:20:ce:a6:dd:a8:dc:e0:4d:f6:7d:fb:c9:d6:25:6c: d1:19:2e:c0:db:14:49:fb:16:71:d6:f7:d5:72:d6:2c:bb:b1: 3c:76:8d:d9:9b:0b:1a:a1:79:f6:ae:3d:f8:d1:9f:10:d1:33: 97:60:25:58:21:9a:dd:65:55:32:52:40:95:5f:79:16:3c:14: a0:00:6f:b9:19:c9:ec:23:f0:3b:ab:fc:69:4b:8f:b2:47:88: a3:4f:b0:52:54:a2:f7:b6:0a:0e:7a:9e:05:a5:a6:14:48:6c: 44:bc:c2:23:b0:cc:81:f5:fb:42:26:d4:16:f5:41:dc:bb:88: 10:dc:5d:5d:c2:f9:62:fb:0c:f9:04:cf:a3:c1:a5:05:4d:e1: 77:12:f7:79:da:1f:45:f4:17:dd:1e:7e:d7:b0:5d:0c:9a:c0: 74:bb:4c:bd:8d:20:61:18:80:60:62:14:a8:96:d0:9e:72:55: e6:fe:03:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAmlI3nRyK2gzvlo2uKnwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMDFjYWZmODkzNTQ2OTEwYTI1ZmJjY2ViODYyMzU1Zjdh MzcyNjAwHhcNMjUxMjIzMDcwMDMwWhcNMjUxMjI0MDcwMDMwWjAzMTEwLwYDVQQD EyhlYWU4M2FmYTc1MGM5ZjAwMzI2NTQxOGFjNGM4YTYyNzEzODY5OWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rcAO2VyN1Tg2VSxu+RdwkATqeIU yB82pyUsxBbLgiM0qLrkw+TorNcv2NobChEDwMw5oWcisK+US7RoiTXikWvzRjVJ eAWiaOM9NEE80dnCt5MdRqZ0/OH/w2bP/1idMh6e2z04q86tQS4HmhWaUv/U6dY6 xAFx4CMAVYHvREae/FfwXLM8eSoQ3j6HbLOfCkwEI3nlqX7efwvYdoDETT2A90SE oE1JbqHcSTu/6ZfqWGwkOFsLQ2653MxjclCIj25CRjan8vjVeZwX5CEZDCw5Yt5w 9oI5RATsIirnD+dR+lXcubiriPwwvVXxCJITI2Kbs15yOdzyEON0m1BhpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOroOvp1DJ8AMmVBisTIpicThpnrMB8GA1UdIwQY MBaAFOoByv+JNUaRCiX7zOuGI1X3o3JgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYTdlYTItNTAzMC00ZTY0LWJkZDYt MmU5ZWRhMTk5YTc4LzEvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8wYTdlYTItNTAzMC00ZTY0LWJkZDYtMmU5ZWRhMTk5YTc4 LzEvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQceHzoc wBC8knTYe8tuZDwh8hGaQczuW0Nj3VdpfGEQjDlgooMtufQF/jX5vBc0zYGyYL2a 6E4aYP7rnW7DW+iHP5PSudxiu2JfIM6m3ajc4E32ffvJ1iVs0RkuwNsUSfsWcdb3 1XLWLLuxPHaN2ZsLGqF59q49+NGfENEzl2AlWCGa3WVVMlJAlV95FjwUoABvuRnJ 7CPwO6v8aUuPskeIo0+wUlSi97YKDnqeBaWmFEhsRLzCI7DMgfX7QibUFvVB3LuI ENxdXcL5YvsM+QTPo8GlBU3hdxL3edofRfQX3R5+17BdDJrAdLtMvY0gYRiAYGIU qJbQnnJV5v4DJA== -----END CERTIFICATE-----Generated at Tue Dec 23 09:46:12 2025 by rpki-client