This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft File: 6sLBr9S97JgFBvoH33yGYtVU-kY.mft (raw, json) Hash identifier: yvZ8KCpDZcsOrA788WfrxOYEZFC9pb5BMWwPNHhYXS8= Subject key identifier: 7E:1B:2D:28:DC:12:1D:C1:7C:65:9E:80:C7:53:EF:99:94:F4:36:87 Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Certificate serial: 019B1F18D460F3E8EECD6C9B76FDE23B7A6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft Manifest number: 11AE Signing time: Sun 14 Dec 2025 23:01:19 +0000 Manifest this update: Sun 14 Dec 2025 23:01:19 +0000 Manifest next update: Mon 15 Dec 2025 23:01:19 +0000 Files and hashes: 1: 6sLBr9S97JgFBvoH33yGYtVU-kY.crl (hash: nFh9ptOxIRUhbrjn0h4iSCo+m0A+eRpqR6XymgQ80Nc=) 2: BUdyw1-SGZIPLhIdmkFoIijVZNQ.roa (hash: POuTPJV5w0ptjI2Zk74d4sYkk88TP0THdSg61Bf1T5U=) 3: CqElUduaScHUfUXZ9oxVz_D7LwU.roa (hash: 3e+PiLGHJw3mA6A8DCEuv3cyH3r4LQ3GYaMPKoRjmZw=) 4: I73UM1nCBWQnJ20aXL_6NYA4pj8.roa (hash: L68T0N8qj7ef7ryDCvyLKmdACJuuoiHt4h0eR0KlZX4=) 5: Ia6V3oQfJDjO1qZ0unwCn8VGfRI.roa (hash: YjJMnYScrGxfBSd345nAAnlIHFqBVMEk1HrKUwbMEtQ=) 6: McMTko8bQr91a0JpNrnKOvBDV0I.roa (hash: +aOn0BT18FMcBHp4FqjXhcnRXA0IZ5BQanHigZZPPho=) 7: UgN0cKNW9dNdHdWelhpwDBynnFs.roa (hash: d596rMSRxVyDkNR+qvNV44FN3LGE81IKqHNAerm5Jfc=) 8: joY5CsIYEyMcozVZTWmYrHc7OT0.roa (hash: vg4E06T36uPUCW84ei0wvbNrdV4VJy6JNaGAZaILXZs=) 9: mTBy0j8EnJsdaUzGVXZ-14s63tY.roa (hash: helve75lh7gtxaq/8CTnY/dxHsO6u+Iv8BV7ge1atis=) 10: ohfoQ6PMXyCRqvXL697wq32N2IE.roa (hash: 4Ftq9cImGTnlsG/GFrSW+NEOcfqwWC5dS24FmwyqHJQ=) 11: tVnuMHg38Y2y8DClEzJcg-BhRZI.roa (hash: 2bCfD0mgqb/6Lcsm2AyIQ8y1K+w9/t9hgqU4lqbYazg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:18:d4:60:f3:e8:ee:cd:6c:9b:76:fd:e2:3b:7a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Validity Not Before: Dec 14 23:01:19 2025 GMT Not After : Dec 15 23:01:19 2025 GMT Subject: CN=7e1b2d28dc121dc17c659e80c753ef9994f43687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:21:ec:6b:58:60:d3:a5:f5:83:66:7d:13:03: 84:cb:13:e5:87:70:9b:51:13:c1:86:1c:24:13:58: 23:f7:30:6d:e0:fd:d3:5b:e1:8d:ac:9a:61:8a:56: 38:0e:2e:31:90:98:d7:98:fb:90:6c:64:e5:4b:41: 73:c8:1e:44:db:ae:96:77:5c:de:cf:d9:04:46:38: a3:1c:c0:4f:5c:7f:05:87:f1:35:e5:bd:86:d9:d2: 5e:ca:26:f7:0e:fe:d4:e8:14:87:99:9e:f1:8c:6d: bd:b5:3b:83:19:5e:26:90:e6:73:09:8b:b8:fc:13: 32:53:f0:6d:b8:79:b2:05:c6:11:a3:9b:09:5d:5e: 9d:d6:73:44:60:28:53:1d:d1:47:22:f7:33:07:00: 96:f3:9f:e8:e6:25:c4:31:64:68:10:41:14:9e:6c: 5d:6c:83:dc:4c:cb:30:a1:84:48:32:66:6f:7f:e1: 0d:52:92:c6:15:d8:85:e0:2d:77:27:02:7b:b1:0a: 92:32:ca:82:a0:a1:cd:24:8b:47:22:a8:44:0d:64: fe:01:a4:7b:2d:93:5e:91:19:ae:1b:27:39:40:d2: 40:bb:a7:49:54:36:8e:69:0a:c4:b3:69:dd:c9:00: f1:01:77:4b:e5:f3:1a:42:df:a5:77:1d:52:41:4c: 53:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1B:2D:28:DC:12:1D:C1:7C:65:9E:80:C7:53:EF:99:94:F4:36:87 X509v3 Authority Key Identifier: keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c0:dd:1c:5e:80:ea:60:54:74:ff:0a:f5:75:77:95:9e:cc: 5f:1e:0f:cd:33:69:31:d2:50:dc:17:29:75:bc:c4:93:18:98: ac:ad:38:30:6b:a2:33:6b:16:85:f7:58:2d:e5:0f:b0:7f:47: 06:24:a9:27:97:03:0f:f7:1f:98:d4:4a:5e:1b:4e:0a:68:0d: b3:90:2e:17:8d:6a:29:b3:83:ff:0a:7a:ee:cb:5b:5a:e7:d2: 31:ce:05:b9:9e:2a:24:14:ea:38:dd:e7:c0:92:bd:6b:0b:a4: fb:d3:c5:b1:cd:8a:57:e8:91:11:a9:8c:d4:91:ea:0e:77:36: 94:97:b6:68:dd:b4:98:8b:e4:f5:d7:45:99:f4:15:29:13:5c: f6:57:49:c0:98:8c:4a:bc:6b:73:15:eb:06:71:65:34:71:a6: d5:c7:e7:a5:5e:81:af:36:3d:8a:c6:14:6e:0a:03:91:0d:51: 5e:44:0e:c5:18:90:1d:3e:8b:4a:6e:f1:96:55:f9:e0:3a:40: 50:43:4e:b1:f1:08:26:e9:08:fd:5c:4d:5f:ba:bb:1c:b3:99: 9d:e4:b4:ff:65:84:d9:5c:77:2c:cb:85:71:6f:32:9a:dd:50: ba:8c:f3:e0:89:99:7e:92:dd:8b:8a:f9:d7:73:56:68:ef:6a: 0d:c9:f6:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfGNRg8+juzWybdv3iO3ptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1 NGZhNDYwHhcNMjUxMjE0MjMwMTE5WhcNMjUxMjE1MjMwMTE5WjAzMTEwLwYDVQQD Eyg3ZTFiMmQyOGRjMTIxZGMxN2M2NTllODBjNzUzZWY5OTk0ZjQzNjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCHsa1hg06X1g2Z9EwOEyxPlh3Cb URPBhhwkE1gj9zBt4P3TW+GNrJphilY4Di4xkJjXmPuQbGTlS0FzyB5E266Wd1ze z9kERjijHMBPXH8Fh/E15b2G2dJeyib3Dv7U6BSHmZ7xjG29tTuDGV4mkOZzCYu4 /BMyU/BtuHmyBcYRo5sJXV6d1nNEYChTHdFHIvczBwCW85/o5iXEMWRoEEEUnmxd bIPcTMswoYRIMmZvf+ENUpLGFdiF4C13JwJ7sQqSMsqCoKHNJItHIqhEDWT+AaR7 LZNekRmuGyc5QNJAu6dJVDaOaQrEs2ndyQDxAXdL5fMaQt+ldx1SQUxTvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4bLSjcEh3BfGWegMdT75mU9DaHMB8GA1UdIwQY MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt YzBjZWIwMzdhZDQyLzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsDdHF6A 6mBUdP8K9XV3lZ7MXx4PzTNpMdJQ3BcpdbzEkxiYrK04MGuiM2sWhfdYLeUPsH9H BiSpJ5cDD/cfmNRKXhtOCmgNs5AuF41qKbOD/wp67stbWufSMc4FuZ4qJBTqON3n wJK9awuk+9PFsc2KV+iREamM1JHqDnc2lJe2aN20mIvk9ddFmfQVKRNc9ldJwJiM SrxrcxXrBnFlNHGm1cfnpV6BrzY9isYUbgoDkQ1RXkQOxRiQHT6LSm7xllX54DpA UENOsfEIJukI/VxNX7q7HLOZneS0/2WE2Vx3LMuFcW8ymt1Quozz4ImZfpLdi4r5 13NWaO9qDcn29w== -----END CERTIFICATE-----Generated at Mon Dec 15 08:23:04 2025 by rpki-client