This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft File: 6x5t-zkpXJOgRyycE1WUAYqPy1w.mft (raw, json) Hash identifier: bHwGgxGLKEWOnQg5WnS83kP2owisrQLe6+6qlE9d8M4= Subject key identifier: 3C:81:01:93:EF:90:59:23:FF:F8:72:6B:06:94:F0:32:A0:EB:C8:82 Authority key identifier: EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C Certificate issuer: /CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c Certificate serial: 019B59767CAA8908191F29C53B8852F547C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft Manifest number: 0689 Signing time: Fri 26 Dec 2025 07:01:35 +0000 Manifest this update: Fri 26 Dec 2025 07:01:35 +0000 Manifest next update: Sat 27 Dec 2025 07:01:35 +0000 Files and hashes: 1: 6x5t-zkpXJOgRyycE1WUAYqPy1w.crl (hash: 6IlgMpfGolU2f+lufuCuQVjGSkXU4VgB3KK+qBDBEBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:7c:aa:89:08:19:1f:29:c5:3b:88:52:f5:47:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c Validity Not Before: Dec 26 07:01:35 2025 GMT Not After : Dec 27 07:01:35 2025 GMT Subject: CN=3c810193ef905923fff8726b0694f032a0ebc882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a2:0a:1c:06:e1:02:52:f5:a2:3b:f7:39:1b: f8:22:78:46:b9:eb:25:91:cc:93:f6:17:1c:65:7a: 41:be:74:b6:c0:da:55:f6:37:1c:80:d7:4a:8d:a3: 16:ee:60:fe:f5:d5:aa:34:db:75:2d:6d:e0:50:3b: e8:f0:17:8c:69:d9:d1:14:8a:10:72:3f:bc:12:58: 1d:45:68:c4:1b:73:10:10:bf:82:c1:14:9e:51:50: ca:3a:85:9e:8c:3a:23:5d:6c:39:73:13:9e:5e:9a: 7c:06:4c:b4:46:01:ea:9b:03:b1:bf:50:34:1a:f8: d0:62:b0:38:ef:e2:33:99:8a:52:0f:dc:c9:2f:c7: fd:a9:97:e7:4c:d6:4c:36:80:db:33:d0:21:ee:0e: 99:53:04:d0:19:1d:6e:05:e4:73:f3:f0:8e:fd:42: d1:0c:9f:8b:c3:01:10:78:78:af:76:3e:38:16:fc: 05:66:7b:43:b8:a2:d4:9a:01:e9:6b:d1:b1:51:fd: 1c:61:4d:39:4f:c3:1f:7c:a8:f9:59:a5:b2:03:79: c6:c8:72:17:b3:d9:e1:05:3f:99:bb:e6:e5:8f:b3: c4:0f:40:25:04:f2:3d:83:4b:5c:8c:d8:82:e2:20: b1:51:ba:b9:e5:03:55:a6:ed:1f:2a:aa:b5:a0:e4: fe:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:81:01:93:EF:90:59:23:FF:F8:72:6B:06:94:F0:32:A0:EB:C8:82 X509v3 Authority Key Identifier: keyid:EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:32:af:6e:1a:fd:24:db:9d:9c:3d:a5:83:8d:5d:6c:10:16: f2:6d:db:f7:93:58:ec:92:18:9a:6a:69:28:d4:47:f0:f1:c1: 66:cf:5b:8e:48:4a:b6:47:17:d7:38:db:09:83:53:83:fe:40: 46:6f:94:d3:1e:12:c8:5a:35:46:9a:75:e6:7d:6f:75:73:e6: 5f:a6:19:9f:39:90:8e:22:35:ee:4f:16:81:67:2a:e8:49:cc: 33:a0:10:62:97:8f:12:ee:66:ff:ea:1a:5b:0f:3c:e6:39:0c: d2:8a:f6:c0:8a:06:11:de:93:bc:a2:96:8d:33:08:4c:25:7e: cd:c3:b5:f7:7f:0c:e5:64:65:5a:fc:eb:98:bc:1b:21:84:3a: 00:10:cf:f7:ef:f6:be:85:68:08:ce:be:09:d7:c6:08:39:7a: e4:e3:61:9f:b3:bd:73:46:c3:d9:ba:cc:e5:b3:7e:17:bb:81: fb:c1:a8:49:69:0c:dd:bf:46:34:3b:bc:60:d6:67:07:a4:49: 3c:8e:a4:71:34:44:90:30:e7:f0:05:b9:2d:7d:50:a3:6e:7b: be:ae:07:ae:c5:1d:f2:89:09:31:29:3b:ac:4c:71:ca:c7:46: df:18:78:46:c9:96:73:13:56:d1:8d:d3:2d:6f:74:82:df:4e: b7:e1:13:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdnyqiQgZHynFO4hS9UfGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMWU2ZGZiMzkyOTVjOTNhMDQ3MmM5YzEzNTU5NDAxOGE4 ZmNiNWMwHhcNMjUxMjI2MDcwMTM1WhcNMjUxMjI3MDcwMTM1WjAzMTEwLwYDVQQD EygzYzgxMDE5M2VmOTA1OTIzZmZmODcyNmIwNjk0ZjAzMmEwZWJjODgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaIKHAbhAlL1ojv3ORv4InhGuesl kcyT9hccZXpBvnS2wNpV9jccgNdKjaMW7mD+9dWqNNt1LW3gUDvo8BeMadnRFIoQ cj+8ElgdRWjEG3MQEL+CwRSeUVDKOoWejDojXWw5cxOeXpp8Bky0RgHqmwOxv1A0 GvjQYrA47+IzmYpSD9zJL8f9qZfnTNZMNoDbM9Ah7g6ZUwTQGR1uBeRz8/CO/ULR DJ+LwwEQeHivdj44FvwFZntDuKLUmgHpa9GxUf0cYU05T8MffKj5WaWyA3nGyHIX s9nhBT+Zu+blj7PED0AlBPI9g0tcjNiC4iCxUbq55QNVpu0fKqq1oOT+MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyBAZPvkFkj//hyawaU8DKg68iCMB8GA1UdIwQY MBaAFOsebfs5KVyToEcsnBNVlAGKj8tcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNng1dC16a3BYSk9nUnl5Y0UxV1VBWXFQeTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yZTEwYjItMjU5Ny00ZWI3LTk2MGEt ZjA4NWFmOTU3YzhkLzEvNng1dC16a3BYSk9nUnl5Y0UxV1VBWXFQeTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yZTEwYjItMjU5Ny00ZWI3LTk2MGEtZjA4NWFmOTU3Yzhk LzEvNng1dC16a3BYSk9nUnl5Y0UxV1VBWXFQeTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTKvbhr9 JNudnD2lg41dbBAW8m3b95NY7JIYmmppKNRH8PHBZs9bjkhKtkcX1zjbCYNTg/5A Rm+U0x4SyFo1Rpp15n1vdXPmX6YZnzmQjiI17k8WgWcq6EnMM6AQYpePEu5m/+oa Ww885jkM0or2wIoGEd6TvKKWjTMITCV+zcO1938M5WRlWvzrmLwbIYQ6ABDP9+/2 voVoCM6+CdfGCDl65ONhn7O9c0bD2brM5bN+F7uB+8GoSWkM3b9GNDu8YNZnB6RJ PI6kcTREkDDn8AW5LX1Qo257vq4HrsUd8okJMSk7rExxysdG3xh4RsmWcxNW0Y3T LW90gt9Ot+ETYw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:02 2025 by rpki-client