This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft File: 6IgY9AA6SCbnpomKFDYfjaWQVk8.mft (raw, json) Hash identifier: BhUdU2pnEM90Zf4V9reKKNiBINOPIELXzsUtTpmlOis= Subject key identifier: C5:38:79:34:BF:E5:5E:CB:36:6F:83:1B:37:6F:7A:94:17:A4:A0:66 Authority key identifier: E8:88:18:F4:00:3A:48:26:E7:A6:89:8A:14:36:1F:8D:A5:90:56:4F Certificate issuer: /CN=e88818f4003a4826e7a6898a14361f8da590564f Certificate serial: 019B5AF6B1311DE63A8D415B2A12B5154A28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft Manifest number: 024C Signing time: Fri 26 Dec 2025 14:01:15 +0000 Manifest this update: Fri 26 Dec 2025 14:01:15 +0000 Manifest next update: Sat 27 Dec 2025 14:01:15 +0000 Files and hashes: 1: 6IgY9AA6SCbnpomKFDYfjaWQVk8.crl (hash: luA7OJFGuM/W311q5lgbeYZvfzmo7YVhSdzMl11viXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.crl rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:b1:31:1d:e6:3a:8d:41:5b:2a:12:b5:15:4a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e88818f4003a4826e7a6898a14361f8da590564f Validity Not Before: Dec 26 14:01:15 2025 GMT Not After : Dec 27 14:01:15 2025 GMT Subject: CN=c5387934bfe55ecb366f831b376f7a9417a4a066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:65:f9:dd:28:c2:49:77:81:1b:5e:6d:ff:8b: fc:b2:b5:f8:37:4b:01:11:00:9c:62:d8:87:e7:3f: 8c:57:be:7e:de:47:c7:a0:17:34:61:e0:dc:1c:a6: 28:dd:f8:c6:98:86:88:96:ef:a9:18:d8:21:d6:6c: 85:91:46:f0:1a:3a:15:63:c2:6f:a3:55:39:3c:3f: 76:97:ec:41:90:8d:20:ed:e7:81:52:15:dd:97:6a: 65:40:a6:f5:c4:67:48:79:59:cd:d8:0d:13:75:a6: 36:1e:43:89:3b:22:9f:d4:72:32:72:5b:1b:32:1c: 23:e0:4c:1c:0c:3c:3e:ef:5c:7c:51:84:6a:02:4b: 76:ae:88:b1:a7:05:27:14:dc:30:bc:f0:18:31:55: 09:3e:6e:11:60:c1:1b:e2:2b:c6:55:ac:15:3b:10: d3:90:c8:eb:d2:a6:f1:92:f5:9a:b6:63:8c:f4:e2: ca:58:17:2d:27:5e:bd:1b:3e:29:23:12:0e:1e:c3: 0a:e1:76:25:93:9e:69:dc:0d:c4:21:fe:a4:8b:b7: ce:78:e3:72:15:ca:95:8c:fd:e3:d4:ab:17:93:a0: 31:b2:59:61:e8:fb:02:ba:c6:39:45:eb:45:c8:e7: 30:74:59:98:2a:3c:65:aa:c3:3c:d4:a4:f6:b8:27: e2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:38:79:34:BF:E5:5E:CB:36:6F:83:1B:37:6F:7A:94:17:A4:A0:66 X509v3 Authority Key Identifier: keyid:E8:88:18:F4:00:3A:48:26:E7:A6:89:8A:14:36:1F:8D:A5:90:56:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:54:5b:39:63:98:bc:99:50:dc:78:ec:2a:4b:02:f5:fc:b7: 2f:30:ef:9f:e7:e1:9f:a5:64:74:b2:a6:4d:e6:c7:88:60:f0: 21:2e:71:ad:70:ee:e5:1c:4b:94:5b:f7:40:81:a8:20:b2:dc: 6c:4b:2b:ed:ef:5e:51:6f:fe:22:e9:6b:9f:bb:9e:f0:ea:1f: 57:fe:06:4f:43:bb:56:da:db:40:19:a4:e4:95:0f:7f:a0:28: 7f:45:ba:28:b3:64:9c:76:d6:d9:66:41:0d:44:18:bd:a4:6c: 1d:21:0f:23:52:35:82:a1:4d:0f:0d:69:26:7b:a3:07:87:04: 88:fa:75:d0:e1:7d:eb:54:59:b3:63:c9:bb:a4:2c:e7:9e:6e: d3:b9:a3:03:d3:c2:28:43:32:39:c6:88:37:d1:8e:1c:83:c0: a9:ee:be:10:a5:de:b1:39:84:a9:c9:4f:c6:8a:19:ce:61:18: 4e:da:9f:89:70:5e:12:39:89:11:ab:25:8a:80:90:a4:90:19: 6a:5a:24:e7:b1:b1:b4:f9:d6:f4:1e:e2:9e:88:06:f4:8b:0f: e4:d5:3d:e7:11:ef:20:43:e7:04:82:2a:cd:d3:f1:5a:9e:8f: 30:a2:56:cc:5d:55:4a:a6:6d:60:e5:e1:42:1d:ad:95:5e:45: 1a:f8:9b:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9rExHeY6jUFbKhK1FUooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ODgxOGY0MDAzYTQ4MjZlN2E2ODk4YTE0MzYxZjhkYTU5 MDU2NGYwHhcNMjUxMjI2MTQwMTE1WhcNMjUxMjI3MTQwMTE1WjAzMTEwLwYDVQQD EyhjNTM4NzkzNGJmZTU1ZWNiMzY2ZjgzMWIzNzZmN2E5NDE3YTRhMDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWX53SjCSXeBG15t/4v8srX4N0sB EQCcYtiH5z+MV75+3kfHoBc0YeDcHKYo3fjGmIaIlu+pGNgh1myFkUbwGjoVY8Jv o1U5PD92l+xBkI0g7eeBUhXdl2plQKb1xGdIeVnN2A0TdaY2HkOJOyKf1HIyclsb Mhwj4EwcDDw+71x8UYRqAkt2roixpwUnFNwwvPAYMVUJPm4RYMEb4ivGVawVOxDT kMjr0qbxkvWatmOM9OLKWBctJ169Gz4pIxIOHsMK4XYlk55p3A3EIf6ki7fOeONy FcqVjP3j1KsXk6Axsllh6PsCusY5RetFyOcwdFmYKjxlqsM81KT2uCfivQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMU4eTS/5V7LNm+DGzdvepQXpKBmMB8GA1UdIwQY MBaAFOiIGPQAOkgm56aJihQ2H42lkFZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNklnWTlBQTZTQ2JucG9tS0ZEWWZqYVdRVms4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMjVmZTMtZjU4MS00Yjg4LWI4NmEt MmJiZWQ1MGJiNTFlLzEvNklnWTlBQTZTQ2JucG9tS0ZEWWZqYVdRVms4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zMjVmZTMtZjU4MS00Yjg4LWI4NmEtMmJiZWQ1MGJiNTFl LzEvNklnWTlBQTZTQ2JucG9tS0ZEWWZqYVdRVms4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFRbOWOY vJlQ3HjsKksC9fy3LzDvn+fhn6VkdLKmTebHiGDwIS5xrXDu5RxLlFv3QIGoILLc bEsr7e9eUW/+Iulrn7ue8OofV/4GT0O7VtrbQBmk5JUPf6Aof0W6KLNknHbW2WZB DUQYvaRsHSEPI1I1gqFNDw1pJnujB4cEiPp10OF961RZs2PJu6Qs555u07mjA9PC KEMyOcaIN9GOHIPAqe6+EKXesTmEqclPxooZzmEYTtqfiXBeEjmJEaslioCQpJAZ alok57GxtPnW9B7inogG9IsP5NU95xHvIEPnBIIqzdPxWp6PMKJWzF1VSqZtYOXh Qh2tlV5FGvibEA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:32 2025 by rpki-client