This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft File: c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft (raw, json) Hash identifier: DSKOtilkGfkBDJHFZQNQuemwTs5XgZFBhPWr3leEwJA= Subject key identifier: F0:26:36:B4:31:A0:37:D3:5B:95:05:41:58:33:1B:22:32:62:A2:1B Authority key identifier: 73:AB:E1:5F:6C:54:09:2B:10:3D:4A:C0:86:44:46:9A:7B:1E:6F:E4 Certificate issuer: /CN=73abe15f6c54092b103d4ac08644469a7b1e6fe4 Certificate serial: 019B5ABF6E8E1E5EFC3E42105BB12218D41B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft Manifest number: 1723 Signing time: Fri 26 Dec 2025 13:00:53 +0000 Manifest this update: Fri 26 Dec 2025 13:00:53 +0000 Manifest next update: Sat 27 Dec 2025 13:00:53 +0000 Files and hashes: 1: c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl (hash: 2Mb8gjK9ppTKVQeebFGKbruBUF0eCiKeX29LIeBb2e0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:6e:8e:1e:5e:fc:3e:42:10:5b:b1:22:18:d4:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73abe15f6c54092b103d4ac08644469a7b1e6fe4 Validity Not Before: Dec 26 13:00:53 2025 GMT Not After : Dec 27 13:00:53 2025 GMT Subject: CN=f02636b431a037d35b95054158331b223262a21b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:15:03:7a:d3:ae:c7:97:de:b9:12:e7:40:fe: 94:76:ca:67:66:98:0c:eb:4e:78:5c:44:b8:f1:86: b1:dd:b8:9f:72:de:94:7b:38:1c:a9:d6:80:5a:21: b5:81:ba:cc:06:3b:35:99:69:6c:5d:e9:35:75:29: 2d:ba:33:7a:3a:11:40:3d:ab:4b:af:34:64:df:08: 43:4f:28:e8:d0:c6:c7:a2:1b:03:e7:84:74:af:30: 33:fd:83:1c:2b:bb:6c:fe:c1:59:01:75:ff:0a:a2: 29:5a:1c:6f:24:0b:4e:1e:ab:da:3a:dd:61:d3:5f: 3e:c4:86:54:8c:5f:4e:f8:c3:e0:e1:9d:95:5d:28: 0f:09:9b:c2:26:b8:64:1b:ce:7b:3d:7f:3a:1c:c3: 9e:3a:00:78:31:30:e0:9d:e7:81:9f:5c:b5:36:64: 3c:cc:3b:fb:1f:ff:f4:0c:6c:f0:49:f5:f6:3d:d0: 17:e5:2a:2d:8f:eb:34:bc:56:13:ea:5c:8c:a9:b4: eb:bc:65:1c:87:36:32:82:a8:f6:a1:eb:fe:21:e5: 5e:e8:60:44:ad:df:b8:9c:0f:48:e0:bb:43:ec:66: fc:b2:3b:6e:d4:77:68:51:79:9c:68:19:65:00:e7: 22:9f:55:9d:45:51:01:6d:74:85:02:9e:30:ef:1b: 5d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:26:36:B4:31:A0:37:D3:5B:95:05:41:58:33:1B:22:32:62:A2:1B X509v3 Authority Key Identifier: keyid:73:AB:E1:5F:6C:54:09:2B:10:3D:4A:C0:86:44:46:9A:7B:1E:6F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:9c:56:b3:31:a9:f1:ab:49:eb:24:6a:c1:69:86:d6:c6:fa: 6a:bd:8b:26:ff:23:cb:42:4d:67:5a:c3:eb:4c:08:a6:9b:4e: 13:d5:e6:d0:f3:57:a9:19:b4:a5:e4:94:89:fd:1e:42:09:27: 79:23:2e:71:02:01:73:7f:fd:6e:f4:64:11:68:1a:ef:42:a6: cd:6a:12:1b:af:0b:c5:a7:9a:d7:18:4c:c1:0d:f7:9c:95:af: be:ed:b6:1b:a4:6a:09:05:e3:7d:e4:bf:25:59:e5:ab:b1:52: 85:bf:85:81:2f:85:b2:77:8a:b0:81:7a:d2:88:df:2d:1d:a7: f2:43:2a:f7:cb:2a:83:96:8f:88:a6:75:c6:0f:6e:fd:61:87: 01:f0:ec:73:ab:ff:b2:90:13:b2:84:f6:b8:6f:a5:a6:e4:6a: 2b:cc:1b:97:0b:a2:e3:b0:28:1e:1d:49:19:f7:db:d9:98:9b: 27:b3:a7:e5:8c:74:45:e5:87:9d:d5:65:1f:c2:fe:cc:fd:0e: 73:68:74:6d:dc:7f:9c:10:7a:e0:43:84:d6:92:a5:c2:a4:d2: 26:58:eb:6a:f5:c6:46:35:78:14:10:48:ff:0f:ad:64:63:c2: cb:80:4b:f2:91:6e:27:10:6f:ea:e6:45:71:fb:9d:e3:05:ce: 2d:78:51:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav26OHl78PkIQW7EiGNQbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYWJlMTVmNmM1NDA5MmIxMDNkNGFjMDg2NDQ0NjlhN2Ix ZTZmZTQwHhcNMjUxMjI2MTMwMDUzWhcNMjUxMjI3MTMwMDUzWjAzMTEwLwYDVQQD EyhmMDI2MzZiNDMxYTAzN2QzNWI5NTA1NDE1ODMzMWIyMjMyNjJhMjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhUDetOux5feuRLnQP6UdspnZpgM 6054XES48Yax3bifct6UezgcqdaAWiG1gbrMBjs1mWlsXek1dSktujN6OhFAPatL rzRk3whDTyjo0MbHohsD54R0rzAz/YMcK7ts/sFZAXX/CqIpWhxvJAtOHqvaOt1h 018+xIZUjF9O+MPg4Z2VXSgPCZvCJrhkG857PX86HMOeOgB4MTDgneeBn1y1NmQ8 zDv7H//0DGzwSfX2PdAX5Sotj+s0vFYT6lyMqbTrvGUchzYygqj2oev+IeVe6GBE rd+4nA9I4LtD7Gb8sjtu1HdoUXmcaBllAOcin1WdRVEBbXSFAp4w7xtdXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAmNrQxoDfTW5UFQVgzGyIyYqIbMB8GA1UdIwQY MBaAFHOr4V9sVAkrED1KwIZERpp7Hm/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzZ2aFgyeFVDU3NRUFVyQWhrUkdtbnNlYi1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jODI1MWYtYzNmYy00OGU2LThhZWYt MTkyYmUzODk3ZGFjLzEvYzZ2aFgyeFVDU3NRUFVyQWhrUkdtbnNlYi1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9jODI1MWYtYzNmYy00OGU2LThhZWYtMTkyYmUzODk3ZGFj LzEvYzZ2aFgyeFVDU3NRUFVyQWhrUkdtbnNlYi1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5xWszGp 8atJ6yRqwWmG1sb6ar2LJv8jy0JNZ1rD60wIpptOE9Xm0PNXqRm0peSUif0eQgkn eSMucQIBc3/9bvRkEWga70KmzWoSG68Lxaea1xhMwQ33nJWvvu22G6RqCQXjfeS/ JVnlq7FShb+FgS+FsneKsIF60ojfLR2n8kMq98sqg5aPiKZ1xg9u/WGHAfDsc6v/ spATsoT2uG+lpuRqK8wblwui47AoHh1JGffb2ZibJ7On5Yx0ReWHndVlH8L+zP0O c2h0bdx/nBB64EOE1pKlwqTSJljravXGRjV4FBBI/w+tZGPCy4BL8pFuJxBv6uZF cfud4wXOLXhR9w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:05 2025 by rpki-client