This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft File: 6T5Zf3uhSto19PbFD4plg6BPzDU.mft (raw, json) Hash identifier: 5GgccoaeR3oiqzGZjK6XySiABvFE/Br8mwr6geqNBao= Subject key identifier: 0A:55:B8:73:DE:B5:CC:A5:8B:EF:51:64:60:07:0A:BC:D3:59:F5:B2 Authority key identifier: E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35 Certificate issuer: /CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35 Certificate serial: 019B1EAAD4991DC9B8AA3837E1D71E12DCE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft Manifest number: 0505 Signing time: Sun 14 Dec 2025 21:01:10 +0000 Manifest this update: Sun 14 Dec 2025 21:01:10 +0000 Manifest next update: Mon 15 Dec 2025 21:01:10 +0000 Files and hashes: 1: 6T5Zf3uhSto19PbFD4plg6BPzDU.crl (hash: zQAE9pHqSxurKmbY2bO21zoL3fHNBUKSgYnHNz6282Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:aa:d4:99:1d:c9:b8:aa:38:37:e1:d7:1e:12:dc:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35 Validity Not Before: Dec 14 21:01:10 2025 GMT Not After : Dec 15 21:01:10 2025 GMT Subject: CN=0a55b873deb5cca58bef516460070abcd359f5b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5c:95:3d:5b:b2:15:bc:cf:19:f9:9f:4e:71: a7:d3:17:11:b8:93:68:1f:5f:90:5a:e4:19:fe:c4: be:d9:89:09:b6:20:27:f1:69:1b:25:b1:a3:05:ae: 6f:dd:57:cd:5d:11:5b:5b:58:54:8a:0f:9b:84:ba: 56:78:f7:fa:35:4f:3d:b2:81:b1:38:70:0d:db:19: f3:16:ca:20:2e:29:74:9d:1b:af:36:57:97:82:c8: 9c:82:dc:b3:2a:59:7c:b2:2c:21:f3:6d:76:bc:b4: cb:79:8e:e3:be:a5:0b:64:a7:35:49:e3:f8:ec:b4: 9e:57:de:85:bb:bc:20:a0:dc:98:5a:7e:ed:5e:06: 7b:dd:79:a5:bf:89:70:d5:ca:e2:d8:0b:b7:9f:02: b4:1e:a3:fa:d9:8c:f3:7f:00:3a:38:b5:5b:6e:fa: ae:ce:26:ef:51:81:35:1e:e4:7e:b6:b1:a4:39:0a: b1:82:06:e9:18:7f:17:33:f2:48:78:eb:9a:a8:c3: bc:1d:ec:ee:98:98:1a:06:88:ee:66:dc:28:eb:01: ff:6b:8e:f2:bc:a9:8a:ea:ec:21:38:94:54:4e:6e: 53:2d:c4:7c:6f:07:30:37:f9:72:b2:49:5d:51:e4: da:7d:86:29:16:65:de:5f:48:e7:fc:f1:fb:ec:7b: 11:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:55:B8:73:DE:B5:CC:A5:8B:EF:51:64:60:07:0A:BC:D3:59:F5:B2 X509v3 Authority Key Identifier: keyid:E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:32:ca:ca:11:f0:27:76:7d:2d:b2:5e:19:34:cc:3f:c9:29: f7:f9:f9:0d:7e:3c:e2:dd:09:13:67:93:cc:26:81:52:71:83: 0c:db:70:41:fe:8f:45:5d:e7:a3:47:a6:14:70:b1:be:e0:3b: 28:04:28:8b:48:e8:31:fe:36:92:ce:86:4f:83:8b:f8:4f:02: 26:39:c2:9b:00:82:c0:a8:68:05:4f:6e:66:30:03:c5:db:a9: 9b:c9:0e:b0:05:58:9f:26:a9:93:6e:df:ae:92:a2:7e:49:b3: d4:27:27:25:61:83:58:20:3f:0f:cc:63:06:e2:25:91:a8:16: 84:cb:98:87:30:f1:f1:c6:63:34:35:6a:95:d1:9e:e6:a7:4a: 4a:de:86:0e:60:ba:22:eb:27:9a:1a:c5:f8:ed:ac:2b:65:47: 34:50:52:cc:4a:7c:05:ca:e1:fe:b3:ee:24:e1:f7:ab:a4:9d: ca:73:14:b7:35:90:c3:55:f4:d2:e6:ed:5c:38:45:e6:90:1f: f5:1c:de:58:c8:61:31:76:b2:c2:74:28:c2:43:62:7d:23:15: f2:74:bc:1e:fa:69:d8:1c:e8:73:36:b6:7e:59:22:0f:5b:a9: a6:92:84:a7:70:41:c1:96:00:68:73:92:84:26:47:4e:08:bc: c0:32:bf:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseqtSZHcm4qjg34dceEtzjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5M2U1OTdmN2JhMTRhZGEzNWY0ZjZjNTBmOGE2NTgzYTA0 ZmNjMzUwHhcNMjUxMjE0MjEwMTEwWhcNMjUxMjE1MjEwMTEwWjAzMTEwLwYDVQQD EygwYTU1Yjg3M2RlYjVjY2E1OGJlZjUxNjQ2MDA3MGFiY2QzNTlmNWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1yVPVuyFbzPGfmfTnGn0xcRuJNo H1+QWuQZ/sS+2YkJtiAn8WkbJbGjBa5v3VfNXRFbW1hUig+bhLpWePf6NU89soGx OHAN2xnzFsogLil0nRuvNleXgsicgtyzKll8siwh8212vLTLeY7jvqULZKc1SeP4 7LSeV96Fu7wgoNyYWn7tXgZ73Xmlv4lw1cri2Au3nwK0HqP62YzzfwA6OLVbbvqu zibvUYE1HuR+trGkOQqxggbpGH8XM/JIeOuaqMO8HezumJgaBojuZtwo6wH/a47y vKmK6uwhOJRUTm5TLcR8bwcwN/lyskldUeTafYYpFmXeX0jn/PH77HsRWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApVuHPetcyli+9RZGAHCrzTWfWyMB8GA1UdIwQY MBaAFOk+WX97oUraNfT2xQ+KZYOgT8w1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlQ1WmYzdWhTdG8xOVBiRkQ0cGxnNkJQekRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83ZjM1NjEtMWNlNy00M2UxLTg5ZGIt MDcwYjQyNTYyNjJiLzEvNlQ1WmYzdWhTdG8xOVBiRkQ0cGxnNkJQekRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC83ZjM1NjEtMWNlNy00M2UxLTg5ZGItMDcwYjQyNTYyNjJi LzEvNlQ1WmYzdWhTdG8xOVBiRkQ0cGxnNkJQekRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTLKyhHw J3Z9LbJeGTTMP8kp9/n5DX484t0JE2eTzCaBUnGDDNtwQf6PRV3no0emFHCxvuA7 KAQoi0joMf42ks6GT4OL+E8CJjnCmwCCwKhoBU9uZjADxdupm8kOsAVYnyapk27f rpKifkmz1CcnJWGDWCA/D8xjBuIlkagWhMuYhzDx8cZjNDVqldGe5qdKSt6GDmC6 IusnmhrF+O2sK2VHNFBSzEp8Bcrh/rPuJOH3q6SdynMUtzWQw1X00ubtXDhF5pAf 9RzeWMhhMXaywnQowkNifSMV8nS8Hvpp2Bzocza2flkiD1upppKEp3BBwZYAaHOS hCZHTgi8wDK/8w== -----END CERTIFICATE-----Generated at Mon Dec 15 06:45:58 2025 by rpki-client