This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft File: 6lPzPM38X-hLhMFfBDIpBpka-ec.mft (raw, json) Hash identifier: eKyGTVnWOCkYokd4QpkI2c6QTm0wCUFZO21ycxNMRXI= Subject key identifier: DE:68:F5:A5:8F:9C:9B:F8:A6:77:50:EE:03:F5:D8:F3:6D:9A:29:0E Authority key identifier: EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7 Certificate issuer: /CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7 Certificate serial: 019B34C543A649F1D9E38EF9D1BD364E5A40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 04:01:41 +0000 Manifest this update: Fri 19 Dec 2025 04:01:41 +0000 Manifest next update: Sat 20 Dec 2025 04:01:41 +0000 Files and hashes: 1: 6lPzPM38X-hLhMFfBDIpBpka-ec.crl (hash: aqSnkG0tUwvs+PpRLyYGRfoX0OIUuDftMimuQNNzI2U=) 2: xNXvRwm0cFi8tLLdb2nvNopZe5s.roa (hash: Ek+ehf6lVos9XeTSOdvg4+GzfPP9fwac2An5Jv96Lm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:43:a6:49:f1:d9:e3:8e:f9:d1:bd:36:4e:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7 Validity Not Before: Dec 19 04:01:41 2025 GMT Not After : Dec 20 04:01:41 2025 GMT Subject: CN=de68f5a58f9c9bf8a67750ee03f5d8f36d9a290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:64:fa:a0:6b:04:0d:c8:5d:fa:f0:20:36:63: ed:f7:a0:57:88:52:51:e5:0c:cd:9f:5e:dd:1a:23: 3f:ab:11:5c:e5:e5:f7:ce:c9:bf:3b:43:82:77:b3: ac:c2:1c:4c:c3:87:96:bd:5f:0d:61:57:8f:e6:57: 5e:d5:ab:73:54:10:6e:99:a0:99:6b:c8:72:15:bc: 9d:28:35:85:95:71:13:18:6e:56:eb:fc:cd:4e:e1: 2d:1d:2a:c6:1a:c2:4f:41:93:dc:99:3f:ce:30:cd: c4:72:28:dc:b9:a9:64:7f:4f:c0:d4:cf:04:9f:cd: 8c:b2:7b:17:27:b5:01:86:c3:9f:6d:10:5d:ab:d7: 0e:17:d0:fc:b2:32:cc:56:97:b1:61:fe:35:bf:4e: d1:71:2c:1d:2e:75:3e:22:1f:c5:fb:be:ef:2f:d4: 30:bd:de:4b:cb:f8:06:84:3b:9b:5f:16:d1:b9:ae: fa:f5:a5:fd:0e:a4:d0:4c:9a:83:b4:a1:07:07:02: a9:4c:62:cf:c0:d5:e2:af:84:87:79:70:27:f0:4c: 6d:09:46:32:1c:c1:84:06:35:a3:34:9f:f5:06:b8: 7d:22:8a:33:40:04:cf:a6:d1:5d:37:b7:3d:7c:68: 70:81:c1:c1:e8:72:20:38:e1:38:7f:65:00:8f:d8: 4c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:68:F5:A5:8F:9C:9B:F8:A6:77:50:EE:03:F5:D8:F3:6D:9A:29:0E X509v3 Authority Key Identifier: keyid:EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a9:a7:fb:bc:9a:98:3c:c1:a1:07:c5:22:7e:a8:ba:c3:80: 4b:9f:17:d5:76:27:5e:36:03:d7:92:61:ef:ee:5f:96:70:04: 70:4b:46:15:9e:69:38:28:73:a7:6b:b2:7b:e9:b8:f0:59:1d: a6:da:dd:75:9e:ed:55:e3:65:1a:00:77:c1:a8:36:3b:75:e8: 33:41:cb:64:a7:5e:4b:60:e2:3f:46:67:45:f9:85:d6:11:b2: 24:07:9d:7f:54:0d:fa:50:d9:cb:67:39:4f:79:8c:81:60:2a: f2:b4:cb:3e:db:f5:2b:aa:2f:c8:e3:35:f2:cb:da:3f:db:b7: c7:99:1f:9d:0d:ce:d8:0f:c1:a4:b1:cf:f4:87:2e:f4:3c:ba: 3e:72:51:8c:99:55:ad:22:b0:f6:e7:00:d1:7c:e7:1f:cf:67: e9:67:26:b8:17:20:b2:0f:99:f1:a1:f8:95:ec:c3:d3:e7:d4: 96:6d:b8:92:c4:b5:08:6d:b1:46:8a:66:cd:00:88:a2:00:bc: a5:ce:ae:f6:35:b8:c4:62:5a:23:65:d9:99:b9:ce:f7:ae:32: 91:ae:c2:2f:70:4b:f5:92:30:b6:07:2c:68:6a:96:ed:73:cd: 5e:17:c3:d9:11:99:7c:69:1f:4d:8f:06:03:14:0e:41:06:48: 39:e0:1f:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xUOmSfHZ44750b02TlpAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTNmMzNjY2RmYzVmZTg0Yjg0YzE1ZjA0MzIyOTA2OTkx YWY5ZTcwHhcNMjUxMjE5MDQwMTQxWhcNMjUxMjIwMDQwMTQxWjAzMTEwLwYDVQQD EyhkZTY4ZjVhNThmOWM5YmY4YTY3NzUwZWUwM2Y1ZDhmMzZkOWEyOTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02T6oGsEDchd+vAgNmPt96BXiFJR 5QzNn17dGiM/qxFc5eX3zsm/O0OCd7OswhxMw4eWvV8NYVeP5lde1atzVBBumaCZ a8hyFbydKDWFlXETGG5W6/zNTuEtHSrGGsJPQZPcmT/OMM3Ecijcualkf0/A1M8E n82MsnsXJ7UBhsOfbRBdq9cOF9D8sjLMVpexYf41v07RcSwdLnU+Ih/F+77vL9Qw vd5Ly/gGhDubXxbRua769aX9DqTQTJqDtKEHBwKpTGLPwNXir4SHeXAn8ExtCUYy HMGEBjWjNJ/1Brh9IoozQATPptFdN7c9fGhwgcHB6HIgOOE4f2UAj9hMAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5o9aWPnJv4pndQ7gP12PNtmikOMB8GA1UdIwQY MBaAFOpT8zzN/F/oS4TBXwQyKQaZGvnnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxQelBNMzhYLWhMaE1GZkJESXBCcGthLWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mOTUyOTgtZjkwOS00NWM5LTkxMDQt OGE0ZjYzZWE5YmYxLzEvNmxQelBNMzhYLWhMaE1GZkJESXBCcGthLWVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mOTUyOTgtZjkwOS00NWM5LTkxMDQtOGE0ZjYzZWE5YmYx LzEvNmxQelBNMzhYLWhMaE1GZkJESXBCcGthLWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqmn+7ya mDzBoQfFIn6ousOAS58X1XYnXjYD15Jh7+5flnAEcEtGFZ5pOChzp2uye+m48Fkd ptrddZ7tVeNlGgB3wag2O3XoM0HLZKdeS2DiP0ZnRfmF1hGyJAedf1QN+lDZy2c5 T3mMgWAq8rTLPtv1K6ovyOM18svaP9u3x5kfnQ3O2A/BpLHP9Icu9Dy6PnJRjJlV rSKw9ucA0XznH89n6WcmuBcgsg+Z8aH4lezD0+fUlm24ksS1CG2xRopmzQCIogC8 pc6u9jW4xGJaI2XZmbnO964yka7CL3BL9ZIwtgcsaGqW7XPNXhfD2RGZfGkfTY8G AxQOQQZIOeAfTA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:50:28 2025 by rpki-client