This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft File: r6R0pepgHICSke55uuORiWTQhx4.mft (raw, json) Hash identifier: BLoV3EgAViN3CcaINShw1H7ALLODhUrENunU7CB+CCk= Subject key identifier: 58:E5:48:42:CB:E8:1F:F0:7D:D2:A4:C5:85:62:D4:2D:2C:4D:43:11 Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E Certificate issuer: /CN=afa474a5ea601c809291ee79bae3918964d0871e Certificate serial: 019B3231C8C8A90428F48F563BFCEF3EDED0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft Manifest number: 0E56 Signing time: Thu 18 Dec 2025 16:01:21 +0000 Manifest this update: Thu 18 Dec 2025 16:01:21 +0000 Manifest next update: Fri 19 Dec 2025 16:01:21 +0000 Files and hashes: 1: r6R0pepgHICSke55uuORiWTQhx4.crl (hash: OUR5scRCvVnkhkH7Y74ugVlpkE3o2WQ+6O89GxOzV/g=) 2: x6GJc4ojOxgz3esDAZaU67m_2pc.roa (hash: zoKZ4awQgsW57nby6hTMjyGrch8AryfCfI+Yae5icPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:c8:c8:a9:04:28:f4:8f:56:3b:fc:ef:3e:de:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e Validity Not Before: Dec 18 16:01:21 2025 GMT Not After : Dec 19 16:01:21 2025 GMT Subject: CN=58e54842cbe81ff07dd2a4c58562d42d2c4d4311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5b:06:c4:e0:61:c9:b5:98:fd:d2:63:b2:70: cf:a3:2e:81:95:71:ab:f7:7c:be:8e:c2:d9:e2:92: 91:26:77:31:f8:13:35:9f:5b:f3:35:a9:f7:c4:d4: 51:f0:5e:fa:f7:a4:a4:8e:56:b7:c5:e8:70:ad:91: 94:e1:16:db:d3:f1:61:61:29:08:9c:6d:40:22:cd: f9:70:c0:40:0c:f9:a3:63:90:32:a1:72:c1:15:f2: dc:c2:14:fd:a9:e0:9c:56:cc:13:c0:c3:38:d0:4b: 53:b8:32:ed:25:45:0a:c5:41:92:5c:02:a9:1a:41: 40:05:f8:ce:4d:4c:4a:f1:b2:6f:2c:93:50:70:e1: 9f:ab:12:41:87:80:78:19:d5:26:cb:9a:82:9c:40: 50:39:f0:a1:b7:fc:41:1d:e5:74:04:5e:8c:4c:99: a0:56:6b:99:f7:74:90:43:5f:93:e4:4b:4b:6d:f6: f1:fa:e8:ed:41:ba:99:88:3b:90:23:27:b1:38:fa: 7d:dd:a6:e9:94:d6:8b:85:06:60:35:b5:9f:ba:85: 45:74:3a:26:75:6e:15:24:c2:0f:07:7e:40:32:e7: b8:29:fa:5d:83:00:b6:a6:70:ad:cb:8c:34:ce:cd: 79:35:26:17:8b:23:83:96:1b:fa:d8:ea:a8:7f:b7: fd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E5:48:42:CB:E8:1F:F0:7D:D2:A4:C5:85:62:D4:2D:2C:4D:43:11 X509v3 Authority Key Identifier: keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e2:56:c2:bd:cb:ef:5b:0f:77:2a:36:66:1f:9b:f5:2a:de: 4f:b8:84:a2:a0:f0:ae:b5:84:88:13:d7:b2:4d:3c:3f:a1:16: 8a:89:17:58:0f:6e:2b:c2:bf:3e:cf:40:a1:bc:08:42:a8:c2: 6b:f4:67:1f:cc:f9:20:ce:ba:5a:fa:f4:27:55:13:f9:75:6c: 3d:c3:c7:6b:6f:bb:91:2a:51:44:04:de:39:55:4e:07:4d:52: ca:e1:c4:d5:c5:c7:c1:50:f5:64:ee:58:7f:2b:4c:7b:a5:ae: 74:15:fa:cb:0e:a3:a9:bd:97:d7:77:81:d1:8b:12:e7:fc:70: ef:9a:94:12:26:f2:6a:a7:8b:4e:a8:11:a1:dc:39:a5:3e:78: 17:be:01:86:3f:ba:b7:45:25:59:11:5e:b4:30:4e:a2:0b:45: c6:9e:4c:3a:bb:20:09:df:2b:d9:d4:37:58:4a:ad:6a:91:27: cf:60:2f:ff:d7:3f:30:40:dd:2b:4a:e0:03:86:33:01:27:64: 0e:89:92:1b:1f:45:68:40:33:97:b8:99:82:db:4c:94:01:c5: 27:5a:65:80:96:f1:7d:64:2f:0c:af:91:0a:8c:e0:9b:6f:dd: 4d:0d:23:52:63:67:b2:05:b7:e7:f9:1f:0c:5f:72:fd:8c:61: 32:17:94:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMcjIqQQo9I9WO/zvPt7QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYTQ3NGE1ZWE2MDFjODA5MjkxZWU3OWJhZTM5MTg5NjRk MDg3MWUwHhcNMjUxMjE4MTYwMTIxWhcNMjUxMjE5MTYwMTIxWjAzMTEwLwYDVQQD Eyg1OGU1NDg0MmNiZTgxZmYwN2RkMmE0YzU4NTYyZDQyZDJjNGQ0MzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVsGxOBhybWY/dJjsnDPoy6BlXGr 93y+jsLZ4pKRJncx+BM1n1vzNan3xNRR8F7696Skjla3xehwrZGU4Rbb0/FhYSkI nG1AIs35cMBADPmjY5AyoXLBFfLcwhT9qeCcVswTwMM40EtTuDLtJUUKxUGSXAKp GkFABfjOTUxK8bJvLJNQcOGfqxJBh4B4GdUmy5qCnEBQOfCht/xBHeV0BF6MTJmg VmuZ93SQQ1+T5EtLbfbx+ujtQbqZiDuQIyexOPp93abplNaLhQZgNbWfuoVFdDom dW4VJMIPB35AMue4KfpdgwC2pnCty4w0zs15NSYXiyODlhv62Oqof7f9lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjlSELL6B/wfdKkxYVi1C0sTUMRMB8GA1UdIwQY MBaAFK+kdKXqYByAkpHuebrjkYlk0IceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjZSMHBlcGdISUNTa2U1NXV1T1JpV1RRaHg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jYzRkNzYtM2FlOS00OTFlLTliZDIt MTkzY2M2MWJjZTYxLzEvcjZSMHBlcGdISUNTa2U1NXV1T1JpV1RRaHg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9jYzRkNzYtM2FlOS00OTFlLTliZDItMTkzY2M2MWJjZTYx LzEvcjZSMHBlcGdISUNTa2U1NXV1T1JpV1RRaHg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieJWwr3L 71sPdyo2Zh+b9SreT7iEoqDwrrWEiBPXsk08P6EWiokXWA9uK8K/Ps9AobwIQqjC a/RnH8z5IM66Wvr0J1UT+XVsPcPHa2+7kSpRRATeOVVOB01SyuHE1cXHwVD1ZO5Y fytMe6WudBX6yw6jqb2X13eB0YsS5/xw75qUEibyaqeLTqgRodw5pT54F74Bhj+6 t0UlWRFetDBOogtFxp5MOrsgCd8r2dQ3WEqtapEnz2Av/9c/MEDdK0rgA4YzASdk DomSGx9FaEAzl7iZgttMlAHFJ1plgJbxfWQvDK+RCozgm2/dTQ0jUmNnsgW35/kf DF9y/YxhMheUyA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:55:59 2025 by rpki-client