This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft File: a6Cslx0HtTjEP7yK2weeVNMxDg0.mft (raw, json) Hash identifier: Bm5oH1bvdzBwHpN9Krr80TZBNyv8qIrkxJZ6lx3Z8Uc= Subject key identifier: 7E:0A:D3:84:8E:7C:02:E8:5A:77:31:41:30:F1:F8:C9:D6:80:FF:7E Authority key identifier: 6B:A0:AC:97:1D:07:B5:38:C4:3F:BC:8A:DB:07:9E:54:D3:31:0E:0D Certificate issuer: /CN=6ba0ac971d07b538c43fbc8adb079e54d3310e0d Certificate serial: 019B59E3A140FA5B10DD442BF45FF11C0069 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft Manifest number: 0283 Signing time: Fri 26 Dec 2025 09:00:48 +0000 Manifest this update: Fri 26 Dec 2025 09:00:48 +0000 Manifest next update: Sat 27 Dec 2025 09:00:48 +0000 Files and hashes: 1: a6Cslx0HtTjEP7yK2weeVNMxDg0.crl (hash: gHQM6+ZADUa6Hb+m0jfBd3jYBXySFKS/f5uo2/OZxKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:a1:40:fa:5b:10:dd:44:2b:f4:5f:f1:1c:00:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ba0ac971d07b538c43fbc8adb079e54d3310e0d Validity Not Before: Dec 26 09:00:48 2025 GMT Not After : Dec 27 09:00:48 2025 GMT Subject: CN=7e0ad3848e7c02e85a77314130f1f8c9d680ff7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c3:3f:cb:e5:dc:d5:32:a0:7c:7b:22:fc:61: fb:fc:c6:43:08:5e:2a:a6:6e:53:1c:30:c9:4d:07: 9d:ca:d0:0d:24:d7:11:5d:79:bb:2b:33:c2:61:3c: 3b:b4:8e:a7:f8:ef:ae:e2:3f:b8:53:26:35:94:43: 1e:3b:16:fc:05:44:93:92:c5:b3:92:ff:3e:55:69: f2:ce:44:37:ad:18:69:e4:78:22:6f:51:b5:6e:90: 97:49:ab:ab:b0:c9:d5:a1:a9:dc:75:d5:4c:03:5f: 5c:ac:97:f0:51:b1:4f:09:47:ec:91:50:60:7e:4c: 92:a6:b7:91:83:d5:6b:6a:07:5f:5d:9a:1b:3d:cd: e4:c3:93:47:a8:9c:4f:16:c7:65:52:56:49:ce:8d: 94:96:4a:d0:fe:54:6c:78:47:94:a5:7a:34:24:46: 0c:7c:53:51:7c:e7:c0:e9:b4:cd:e5:ec:56:d5:51: d0:89:a4:e7:e2:d3:a4:77:6a:e5:4a:0a:1a:7b:f4: cc:55:06:7c:14:36:a1:96:13:26:96:ad:de:df:9e: 71:a7:4a:41:73:66:e1:f0:da:41:91:ee:aa:f6:f2: 2a:1a:73:07:8e:80:1d:07:87:4a:c1:a9:04:a1:77: d0:50:13:8d:b6:32:91:57:0f:29:51:28:ee:1a:8f: f1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0A:D3:84:8E:7C:02:E8:5A:77:31:41:30:F1:F8:C9:D6:80:FF:7E X509v3 Authority Key Identifier: keyid:6B:A0:AC:97:1D:07:B5:38:C4:3F:BC:8A:DB:07:9E:54:D3:31:0E:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:2d:52:19:39:f8:d1:fc:2b:bc:c3:6a:f0:43:47:b4:96:f0: 86:8f:61:87:8e:a9:45:97:b8:55:7a:f8:45:4f:27:56:d6:9d: 7b:ce:88:9b:90:ce:13:95:ef:8d:27:4f:26:ad:4f:af:1f:fa: 21:ae:aa:e7:5a:da:84:e9:29:2c:38:78:77:f4:8e:60:f1:94: cb:da:a5:0e:b8:b3:29:e3:9b:1e:5c:fa:74:e8:1f:ed:af:bc: 81:8e:95:2e:e3:1a:28:66:8d:b1:cd:c8:6e:83:72:57:89:68: 75:d2:84:d3:cf:93:5e:81:7f:02:bc:24:94:d0:f0:f1:ad:1a: 92:f5:8a:8c:8a:82:f5:d4:0c:6d:7c:b9:0d:aa:8b:55:fa:a9: 6b:40:57:4e:d3:ce:92:63:35:ed:3c:1e:cc:af:46:01:2c:22: ad:74:a6:0b:30:2e:73:9c:f8:bd:cc:20:36:b5:a7:26:22:4e: dd:db:51:d3:f9:cc:0a:c3:a7:6b:cf:de:db:81:7e:52:ad:cf: c9:c2:18:50:fa:3d:b3:e9:ab:a4:9c:d4:e0:ac:31:15:77:a0: 46:d4:6e:06:6e:9d:2b:fe:6f:e7:67:bb:26:d6:7d:f8:af:ca: e2:31:26:00:e5:9d:b5:09:8c:2a:1f:ee:be:9d:53:da:d3:97: f2:d5:bb:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ46FA+lsQ3UQr9F/xHABpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYTBhYzk3MWQwN2I1MzhjNDNmYmM4YWRiMDc5ZTU0ZDMz MTBlMGQwHhcNMjUxMjI2MDkwMDQ4WhcNMjUxMjI3MDkwMDQ4WjAzMTEwLwYDVQQD Eyg3ZTBhZDM4NDhlN2MwMmU4NWE3NzMxNDEzMGYxZjhjOWQ2ODBmZjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcM/y+Xc1TKgfHsi/GH7/MZDCF4q pm5THDDJTQedytANJNcRXXm7KzPCYTw7tI6n+O+u4j+4UyY1lEMeOxb8BUSTksWz kv8+VWnyzkQ3rRhp5Hgib1G1bpCXSaursMnVoancddVMA19crJfwUbFPCUfskVBg fkySpreRg9VragdfXZobPc3kw5NHqJxPFsdlUlZJzo2UlkrQ/lRseEeUpXo0JEYM fFNRfOfA6bTN5exW1VHQiaTn4tOkd2rlSgoae/TMVQZ8FDahlhMmlq3e355xp0pB c2bh8NpBke6q9vIqGnMHjoAdB4dKwakEoXfQUBONtjKRVw8pUSjuGo/xDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4K04SOfALoWncxQTDx+MnWgP9+MB8GA1UdIwQY MBaAFGugrJcdB7U4xD+8itsHnlTTMQ4NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTZDc2x4MEh0VGpFUDd5SzJ3ZWVWTk14RGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80ZDM1NDAtYjc5MC00NjRmLTg3ZTIt MThkMWU5MTBiOTI1LzEvYTZDc2x4MEh0VGpFUDd5SzJ3ZWVWTk14RGcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80ZDM1NDAtYjc5MC00NjRmLTg3ZTItMThkMWU5MTBiOTI1 LzEvYTZDc2x4MEh0VGpFUDd5SzJ3ZWVWTk14RGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXi1SGTn4 0fwrvMNq8ENHtJbwho9hh46pRZe4VXr4RU8nVtade86Im5DOE5XvjSdPJq1Prx/6 Ia6q51rahOkpLDh4d/SOYPGUy9qlDrizKeObHlz6dOgf7a+8gY6VLuMaKGaNsc3I boNyV4loddKE08+TXoF/ArwklNDw8a0akvWKjIqC9dQMbXy5DaqLVfqpa0BXTtPO kmM17TwezK9GASwirXSmCzAuc5z4vcwgNrWnJiJO3dtR0/nMCsOna8/e24F+Uq3P ycIYUPo9s+mrpJzU4KwxFXegRtRuBm6dK/5v52e7JtZ9+K/K4jEmAOWdtQmMKh/u vp1T2tOX8tW71w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:18 2025 by rpki-client