This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft File: 6rBQEXItJcEknmWLLK7MEYwp6CI.mft (raw, json) Hash identifier: W0glaBaXoOUGNThN5EJI4odB+C0bCJStWE9Ix5vB9kY= Subject key identifier: FF:23:93:68:3C:08:A2:32:32:AB:95:A2:58:7A:49:3C:47:BA:7E:3A Authority key identifier: EA:B0:50:11:72:2D:25:C1:24:9E:65:8B:2C:AE:CC:11:8C:29:E8:22 Certificate issuer: /CN=eab05011722d25c1249e658b2caecc118c29e822 Certificate serial: 019B59E4258072762007F0DAA91784C52128 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft Manifest number: 0515 Signing time: Fri 26 Dec 2025 09:01:22 +0000 Manifest this update: Fri 26 Dec 2025 09:01:22 +0000 Manifest next update: Sat 27 Dec 2025 09:01:22 +0000 Files and hashes: 1: 6rBQEXItJcEknmWLLK7MEYwp6CI.crl (hash: c4Jboy1XsFObexFfDIXcq7MOULVFM6ex+ZBo9w7M0+E=) 2: CJPWpn8RP7gsAwpJK6rfiafLL0g.roa (hash: MSILC9AgMAOaApiwEtXOHau49IMY7PQIrPiC8xgTPYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:25:80:72:76:20:07:f0:da:a9:17:84:c5:21:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eab05011722d25c1249e658b2caecc118c29e822 Validity Not Before: Dec 26 09:01:22 2025 GMT Not After : Dec 27 09:01:22 2025 GMT Subject: CN=ff2393683c08a23232ab95a2587a493c47ba7e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:b5:13:ff:35:fe:33:e8:e7:b0:5a:d1:82: 04:69:71:b3:68:8c:0d:a1:ff:b6:ab:30:52:5c:ab: 81:5c:dd:f4:ca:81:69:b1:75:59:60:61:ae:10:3d: a5:85:69:02:44:3b:4c:90:68:dc:c7:c1:f6:7c:98: 50:57:24:2d:0d:38:46:42:00:a6:7c:14:05:8e:25: 0f:07:bf:d7:31:d1:43:c3:a0:f9:3f:73:0b:c5:f0: 1b:b0:15:51:17:10:25:91:8b:97:9a:0e:25:79:a5: ff:09:80:5a:42:f8:09:f3:ad:d0:c2:4d:77:8e:80: 69:50:95:5e:85:3c:cd:4b:92:fc:f3:ae:b8:35:ac: f6:74:42:a7:23:3d:02:f3:31:65:d8:72:42:ed:8b: b2:98:24:71:0e:d4:64:91:5c:46:8b:e2:57:ec:d3: 75:ba:7e:03:4f:62:78:1c:18:ed:59:69:76:57:f7: ed:2e:01:01:ec:37:55:5e:5a:1b:42:6f:7a:93:6d: d9:da:57:e3:4d:58:b8:d2:9a:5f:f3:9e:12:6b:2c: 57:be:86:9d:15:5f:86:74:85:4c:8e:58:ec:a7:be: 4e:1f:df:a6:f9:3e:8f:4a:64:23:97:67:7f:a3:7c: d4:3b:3c:c2:6f:b9:49:a5:17:fe:74:92:e4:f7:2e: f0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:23:93:68:3C:08:A2:32:32:AB:95:A2:58:7A:49:3C:47:BA:7E:3A X509v3 Authority Key Identifier: keyid:EA:B0:50:11:72:2D:25:C1:24:9E:65:8B:2C:AE:CC:11:8C:29:E8:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:8a:19:51:c3:60:1f:2a:4c:60:12:06:dd:36:6b:9b:ae:8a: 66:50:0e:bc:98:d1:b7:9f:2c:72:ad:5a:82:6f:19:7e:a0:51: ad:bc:e1:b3:a4:61:02:42:84:43:d0:93:a4:55:97:a9:77:ba: c5:62:75:d9:3b:29:7b:3c:b2:e3:e3:0e:e2:f5:25:1b:e0:ec: 9c:ae:15:08:b9:06:08:c6:f2:8e:06:8c:1a:7a:db:4e:be:f3: 87:b5:e6:6a:ed:44:95:3d:34:71:c7:06:2e:8b:1b:5c:ee:d3: 92:f5:d9:2c:95:f6:45:63:c2:b0:74:be:4f:60:e3:51:ae:2a: 82:3d:b7:26:93:22:76:64:4d:00:c1:e4:46:d1:21:64:04:bf: a0:cb:65:5d:67:32:fd:e4:52:e5:9c:99:17:c9:71:be:59:3f: 41:0c:69:dd:59:f8:20:82:4f:10:85:c5:5e:7a:1e:78:1f:c7: 59:1f:0c:b8:b9:d2:92:04:07:7b:1c:e6:09:62:f8:53:58:10: f2:4e:43:16:b1:b4:25:ed:32:d7:44:a6:3d:fb:7f:4c:59:dd: 44:0d:0a:a3:67:95:92:df:df:43:c5:7c:02:f0:c2:dc:94:67: 20:5b:e5:00:1a:38:eb:d2:2a:87:2b:13:af:c3:f2:06:3d:3e: e4:c0:43:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5CWAcnYgB/DaqReExSEoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYjA1MDExNzIyZDI1YzEyNDllNjU4YjJjYWVjYzExOGMy OWU4MjIwHhcNMjUxMjI2MDkwMTIyWhcNMjUxMjI3MDkwMTIyWjAzMTEwLwYDVQQD EyhmZjIzOTM2ODNjMDhhMjMyMzJhYjk1YTI1ODdhNDkzYzQ3YmE3ZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWW1E/81/jPo57Ba0YIEaXGzaIwN of+2qzBSXKuBXN30yoFpsXVZYGGuED2lhWkCRDtMkGjcx8H2fJhQVyQtDThGQgCm fBQFjiUPB7/XMdFDw6D5P3MLxfAbsBVRFxAlkYuXmg4leaX/CYBaQvgJ863Qwk13 joBpUJVehTzNS5L88664Naz2dEKnIz0C8zFl2HJC7YuymCRxDtRkkVxGi+JX7NN1 un4DT2J4HBjtWWl2V/ftLgEB7DdVXlobQm96k23Z2lfjTVi40ppf854SayxXvoad FV+GdIVMjljsp75OH9+m+T6PSmQjl2d/o3zUOzzCb7lJpRf+dJLk9y7wlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8jk2g8CKIyMquVolh6STxHun46MB8GA1UdIwQY MBaAFOqwUBFyLSXBJJ5liyyuzBGMKegiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnJCUUVYSXRKY0Vrbm1XTExLN01FWXdwNkNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zZjk1MjgtYmExYS00MjUzLTg1MDct N2RiOGY4MTZkMDc3LzEvNnJCUUVYSXRKY0Vrbm1XTExLN01FWXdwNkNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8zZjk1MjgtYmExYS00MjUzLTg1MDctN2RiOGY4MTZkMDc3 LzEvNnJCUUVYSXRKY0Vrbm1XTExLN01FWXdwNkNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYoZUcNg HypMYBIG3TZrm66KZlAOvJjRt58scq1agm8ZfqBRrbzhs6RhAkKEQ9CTpFWXqXe6 xWJ12Tspezyy4+MO4vUlG+DsnK4VCLkGCMbyjgaMGnrbTr7zh7Xmau1ElT00cccG LosbXO7TkvXZLJX2RWPCsHS+T2DjUa4qgj23JpMidmRNAMHkRtEhZAS/oMtlXWcy /eRS5ZyZF8lxvlk/QQxp3Vn4IIJPEIXFXnoeeB/HWR8MuLnSkgQHexzmCWL4U1gQ 8k5DFrG0Je0y10SmPft/TFndRA0Ko2eVkt/fQ8V8AvDC3JRnIFvlABo469IqhysT r8PyBj0+5MBDjA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:56 2025 by rpki-client