This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json) Hash identifier: XU+KPd1/UJTXoxOArXBunOt4rmgNONuBURsXzBPk2fw= Subject key identifier: D2:61:E0:4C:BC:BA:2F:47:81:7D:68:DE:D8:0C:86:F3:2D:C6:42:B8 Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef Certificate serial: 019B104A1418201AD36DB3F8FE9565A47F09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft Manifest number: 15B5 Signing time: Fri 12 Dec 2025 02:00:48 +0000 Manifest this update: Fri 12 Dec 2025 02:00:48 +0000 Manifest next update: Sat 13 Dec 2025 02:00:48 +0000 Files and hashes: 1: 0UzsGme_k2nP3xmC23x_NIyPI4I.roa (hash: 9GCcsHrAPMsxEip94efAnxBNP67TuW3l3gu24kwBziA=) 2: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: P+hcJAyvdKWNwjTuIK6RUL6VSFhsH+Ti5e7WPlRboNI=) 3: QhX-bY8Pyu0IVpXlU-objdMMYgU.roa (hash: AtV/TPeQmqPYNR6TwwiivnQLG1K0ZguaxSrJsKzoymM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 02:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:4a:14:18:20:1a:d3:6d:b3:f8:fe:95:65:a4:7f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef Validity Not Before: Dec 12 02:00:48 2025 GMT Not After : Dec 13 02:00:48 2025 GMT Subject: CN=d261e04cbcba2f47817d68ded80c86f32dc642b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5b:4b:b3:64:a8:a6:72:6b:ed:50:cd:ab:e6: d3:cf:f6:0a:3f:8d:89:c4:8d:b3:4f:3f:c1:b5:6e: f1:4d:c1:9b:22:71:3b:01:19:08:ac:e1:b5:82:f4: 90:d5:52:10:ad:d2:d7:32:77:0c:61:93:27:33:55: 8e:fb:92:16:8a:b8:be:45:eb:db:9d:d7:98:90:03: 3a:2d:9f:ad:99:3a:e2:8c:c3:d5:8b:66:ed:d6:01: 3c:a8:dd:35:0b:40:77:b0:90:cb:77:dd:78:81:eb: c4:5e:c5:42:46:f8:9d:64:97:d7:55:61:a0:f1:b8: 69:1a:b0:dd:fb:2e:5e:f9:09:85:f4:75:a1:2e:1e: 61:f8:a7:26:1f:35:a5:6d:f2:ea:cf:23:ee:b0:05: 6b:ac:60:53:b8:af:b3:a6:c9:dc:91:0f:fc:69:a9: 56:0c:a3:4e:5b:bc:7d:bf:81:95:7f:4a:b1:42:fa: bb:f2:e2:79:68:e0:46:ec:56:dc:2f:50:39:72:68: 96:77:c3:94:be:31:09:28:5a:73:2f:da:73:c3:39: 1f:2b:87:67:e7:d0:44:dc:0e:08:a8:f8:da:05:bd: 6f:62:0d:8f:bc:23:fe:6a:3e:14:2b:9a:d4:cf:f5: 2b:47:9f:82:d0:bc:40:ab:c4:03:71:77:fb:f5:7c: 44:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:61:E0:4C:BC:BA:2F:47:81:7D:68:DE:D8:0C:86:F3:2D:C6:42:B8 X509v3 Authority Key Identifier: keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:51:1d:4d:45:22:b1:eb:2e:8a:84:a0:ea:c7:4f:ce:c1:f2: 43:38:00:4d:49:20:b9:91:c5:0f:ea:30:48:3e:28:8f:e9:c8: 00:75:7b:4c:32:b8:e7:78:41:8b:15:f7:43:e2:16:b1:dc:ed: 52:56:7a:67:d4:29:19:b0:3d:db:14:41:e1:ad:0a:28:8d:9f: b8:01:da:17:d9:58:89:dc:fa:89:3f:60:10:d9:02:5f:6d:bb: 0f:31:d4:44:2c:69:a2:06:d3:79:6a:0c:a2:96:71:13:47:66: 0e:d3:02:f1:2b:d1:44:3a:fa:f8:23:0c:07:d4:73:e1:1d:5f: e9:a1:a9:3a:81:82:8f:93:a5:e9:53:31:70:c9:74:b9:f1:d2: ea:81:69:78:83:87:54:1a:76:c3:e4:b4:8d:db:d0:59:77:4b: 81:5a:9a:e8:02:22:6b:ea:09:33:36:22:50:82:66:b8:07:79: 48:9a:b1:95:b1:65:ae:d3:18:44:4b:6d:b8:3c:e4:09:c2:90: f3:17:53:e4:5a:7f:9f:e1:75:32:4d:3d:39:f5:fd:75:d9:0b: 5f:2e:fa:f5:a0:b1:80:85:62:15:bf:d2:37:c1:67:a8:5f:5b: 86:02:54:42:eb:79:27:13:1b:77:6a:a6:bc:d7:49:26:89:5a: a3:df:8d:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQShQYIBrTbbP4/pVlpH8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYjQ3NmY2NzdjZDBjMzI5OGQyODExZTYwZjQ4ZTFiMjli M2FmZWYwHhcNMjUxMjEyMDIwMDQ4WhcNMjUxMjEzMDIwMDQ4WjAzMTEwLwYDVQQD EyhkMjYxZTA0Y2JjYmEyZjQ3ODE3ZDY4ZGVkODBjODZmMzJkYzY0MmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyltLs2SopnJr7VDNq+bTz/YKP42J xI2zTz/BtW7xTcGbInE7ARkIrOG1gvSQ1VIQrdLXMncMYZMnM1WO+5IWiri+Revb ndeYkAM6LZ+tmTrijMPVi2bt1gE8qN01C0B3sJDLd914gevEXsVCRvidZJfXVWGg 8bhpGrDd+y5e+QmF9HWhLh5h+KcmHzWlbfLqzyPusAVrrGBTuK+zpsnckQ/8aalW DKNOW7x9v4GVf0qxQvq78uJ5aOBG7FbcL1A5cmiWd8OUvjEJKFpzL9pzwzkfK4dn 59BE3A4IqPjaBb1vYg2PvCP+aj4UK5rUz/UrR5+C0LxAq8QDcXf79XxEIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJh4Ey8ui9HgX1o3tgMhvMtxkK4MB8GA1UdIwQY MBaAFOq0dvZ3zQwymNKBHmD0jhsps6/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82NTdhOTItNjIyMC00NDI1LTg4OTkt MDdmMTk1MGQ4ODk0LzEvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi82NTdhOTItNjIyMC00NDI1LTg4OTktMDdmMTk1MGQ4ODk0 LzEvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwVEdTUUi sesuioSg6sdPzsHyQzgATUkguZHFD+owSD4oj+nIAHV7TDK453hBixX3Q+IWsdzt UlZ6Z9QpGbA92xRB4a0KKI2fuAHaF9lYidz6iT9gENkCX227DzHURCxpogbTeWoM opZxE0dmDtMC8SvRRDr6+CMMB9Rz4R1f6aGpOoGCj5Ol6VMxcMl0ufHS6oFpeIOH VBp2w+S0jdvQWXdLgVqa6AIia+oJMzYiUIJmuAd5SJqxlbFlrtMYREttuDzkCcKQ 8xdT5Fp/n+F1Mk09OfX9ddkLXy769aCxgIViFb/SN8FnqF9bhgJUQut5JxMbd2qm vNdJJolao9+N3A== -----END CERTIFICATE-----Generated at Fri Dec 12 09:48:09 2025 by rpki-client