This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft File: 6lz30dxfvb1jS9YbgLfv_uxGKHM.mft (raw, json) Hash identifier: gC99H8Xb8JH/VGubWDW9mf4kjuSWIDjOw4b1e/hLwm4= Subject key identifier: C9:37:E6:E1:50:EE:3D:A2:DC:90:C3:F7:41:D8:D6:7D:E2:1F:A4:E2 Authority key identifier: EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73 Certificate issuer: /CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873 Certificate serial: 019B5A1A53258F066FD554AC024203278771 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft Manifest number: 164A Signing time: Fri 26 Dec 2025 10:00:33 +0000 Manifest this update: Fri 26 Dec 2025 10:00:33 +0000 Manifest next update: Sat 27 Dec 2025 10:00:33 +0000 Files and hashes: 1: 6lz30dxfvb1jS9YbgLfv_uxGKHM.crl (hash: xdZLhq6XHLD1BkUIx1PCs1TEOOc6L4eSyZFjj9QKOYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:53:25:8f:06:6f:d5:54:ac:02:42:03:27:87:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873 Validity Not Before: Dec 26 10:00:33 2025 GMT Not After : Dec 27 10:00:33 2025 GMT Subject: CN=c937e6e150ee3da2dc90c3f741d8d67de21fa4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bf:33:b6:88:aa:c7:54:2b:35:69:b1:08:84: 87:a1:d6:76:ef:fb:27:45:10:69:e5:3d:1c:ef:a9: 5e:65:5a:de:b2:0c:99:77:a7:84:ad:0d:0c:ac:5a: 23:75:6e:62:f2:bb:bc:da:1c:4e:34:37:26:65:04: 89:bc:3c:61:9a:8c:ce:df:ab:27:43:cb:d1:d0:94: 52:b3:3d:d2:f1:f7:c5:b0:a1:07:9e:63:09:6a:dc: 8e:c1:33:43:34:b2:f4:f2:80:f3:c3:46:f6:f4:0b: 4d:f0:24:8c:8f:4c:79:3e:59:5c:a5:af:cf:fd:7d: 22:cc:d3:33:3d:7b:00:ad:f6:0a:ef:b5:5d:0a:03: 4a:50:1c:87:c0:b9:a6:7c:c1:bd:46:86:a8:2a:5c: 2b:f6:28:3e:87:92:b8:e6:90:ec:5e:08:d9:fc:e2: 0c:20:ce:52:43:79:5d:25:43:b5:50:74:56:2a:df: a1:5e:2e:fd:e1:97:a9:54:1a:ec:cc:1a:e3:4d:81: 54:8b:1a:62:88:b9:41:cc:28:cc:2a:8b:ad:5c:66: 0b:f8:dc:7c:d2:5a:e5:d5:35:20:ce:fb:dd:ba:d1: 2d:0b:3c:f9:67:d0:3c:a5:a0:88:ee:bf:a4:3b:30: 01:a6:f7:84:21:ee:6b:0e:d1:90:2d:b8:34:52:33: 97:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:37:E6:E1:50:EE:3D:A2:DC:90:C3:F7:41:D8:D6:7D:E2:1F:A4:E2 X509v3 Authority Key Identifier: keyid:EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:9d:10:a1:f4:b8:4e:e0:8c:46:17:fc:e2:0e:c9:4b:0c:1e: 41:e0:8b:28:21:e9:b5:96:c1:f5:37:2e:c4:a2:f2:6b:98:92: 9e:5f:ac:b5:81:e0:c0:c0:e4:44:e2:2b:26:94:24:37:e6:d0: 04:2c:85:c9:b6:4b:6f:00:1c:e9:b1:73:3d:dc:5a:c0:68:9b: 4d:60:7d:84:27:a9:cf:96:42:d9:65:ad:3c:11:88:29:f1:22: b0:0f:7a:18:1e:ea:54:c2:5d:35:7b:e0:cd:2a:d9:ee:aa:26: 94:84:d4:4c:b2:7e:23:ec:3b:dc:ea:f6:c1:87:4b:9e:ef:31: ce:6e:36:4b:b1:2f:85:b0:45:ea:b2:d1:aa:12:05:c8:48:5a: ae:7a:b7:fa:3a:61:6b:b3:a0:80:7c:bb:19:a6:0f:05:d0:77: 21:0a:36:d0:bc:48:45:46:cb:95:ad:98:7c:68:9a:74:8b:73: 9c:87:36:9b:7b:31:d5:fc:25:e5:86:80:5c:d1:54:e8:7f:5d: ef:47:82:a0:35:99:27:14:06:bd:74:fb:c4:b9:30:e5:e8:9f: 57:cf:a6:e1:40:45:74:3b:58:2c:40:9d:16:64:fe:7f:ad:9c: db:05:e6:c6:f2:58:d5:34:07:8a:04:1e:41:cf:51:76:b1:9d: 5b:91:c5:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGlMljwZv1VSsAkIDJ4dxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNWNmN2QxZGM1ZmJkYmQ2MzRiZDYxYjgwYjdlZmZlZWM0 NjI4NzMwHhcNMjUxMjI2MTAwMDMzWhcNMjUxMjI3MTAwMDMzWjAzMTEwLwYDVQQD EyhjOTM3ZTZlMTUwZWUzZGEyZGM5MGMzZjc0MWQ4ZDY3ZGUyMWZhNGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL8ztoiqx1QrNWmxCISHodZ27/sn RRBp5T0c76leZVresgyZd6eErQ0MrFojdW5i8ru82hxONDcmZQSJvDxhmozO36sn Q8vR0JRSsz3S8ffFsKEHnmMJatyOwTNDNLL08oDzw0b29AtN8CSMj0x5Pllcpa/P /X0izNMzPXsArfYK77VdCgNKUByHwLmmfMG9RoaoKlwr9ig+h5K45pDsXgjZ/OIM IM5SQ3ldJUO1UHRWKt+hXi794ZepVBrszBrjTYFUixpiiLlBzCjMKoutXGYL+Nx8 0lrl1TUgzvvdutEtCzz5Z9A8paCI7r+kOzABpveEIe5rDtGQLbg0UjOXmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMk35uFQ7j2i3JDD90HY1n3iH6TiMB8GA1UdIwQY MBaAFOpc99HcX729Y0vWG4C37/7sRihzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmx6MzBkeGZ2YjFqUzlZYmdMZnZfdXhHS0hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kYmQyNGItODQ3NS00ZWIwLTk2MzQt ODEzMjMyOWFjMzViLzEvNmx6MzBkeGZ2YjFqUzlZYmdMZnZfdXhHS0hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kYmQyNGItODQ3NS00ZWIwLTk2MzQtODEzMjMyOWFjMzVi LzEvNmx6MzBkeGZ2YjFqUzlZYmdMZnZfdXhHS0hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA250QofS4 TuCMRhf84g7JSwweQeCLKCHptZbB9TcuxKLya5iSnl+stYHgwMDkROIrJpQkN+bQ BCyFybZLbwAc6bFzPdxawGibTWB9hCepz5ZC2WWtPBGIKfEisA96GB7qVMJdNXvg zSrZ7qomlITUTLJ+I+w73Or2wYdLnu8xzm42S7EvhbBF6rLRqhIFyEharnq3+jph a7OggHy7GaYPBdB3IQo20LxIRUbLla2YfGiadItznIc2m3sx1fwl5YaAXNFU6H9d 70eCoDWZJxQGvXT7xLkw5eifV8+m4UBFdDtYLECdFmT+f62c2wXmxvJY1TQHigQe Qc9RdrGdW5HFOw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:45 2025 by rpki-client