This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft File: 6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft (raw, json) Hash identifier: a7Il7/Q/mkV3XFhKtvMXqi+8ZykBZ/Amxu4rj86pULk= Subject key identifier: 8E:E9:75:B3:92:54:C2:79:9E:2E:96:8E:19:21:C2:AC:28:64:41:15 Authority key identifier: E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49 Certificate issuer: /CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49 Certificate serial: 019B5B645F867C50619AA408835BC5F66F6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft Manifest number: 0225 Signing time: Fri 26 Dec 2025 16:01:03 +0000 Manifest this update: Fri 26 Dec 2025 16:01:03 +0000 Manifest next update: Sat 27 Dec 2025 16:01:03 +0000 Files and hashes: 1: 6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl (hash: 0AA1bh4vy1+zShf8uBj/L/aNbgJPjYhM4bQZRuGugss=) 2: Yv4Nu-EN5zhL6KGxxs_xzdLAzPE.roa (hash: g3Z/I7jSdU5A7yhO2T69Xb/0yTPIA/OmlqPS3Q3yctw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:5f:86:7c:50:61:9a:a4:08:83:5b:c5:f6:6f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49 Validity Not Before: Dec 26 16:01:03 2025 GMT Not After : Dec 27 16:01:03 2025 GMT Subject: CN=8ee975b39254c2799e2e968e1921c2ac28644115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:19:06:46:ff:7c:3b:04:b0:c3:a0:c6:c2:13: fd:ac:38:7a:a6:83:0d:46:da:89:39:3d:40:f3:7c: 90:56:82:38:b8:d0:73:7d:b9:6f:e5:d6:25:86:d7: bc:d5:a8:94:be:f2:84:85:0c:34:19:6c:59:e3:5f: 47:84:8b:96:bb:f1:96:74:44:08:d8:92:ed:0d:9d: 8e:51:25:d5:27:67:44:98:e4:7b:b0:6c:40:15:b6: 49:bb:56:c5:b7:aa:8f:24:fe:d6:71:ce:6f:5d:b4: 91:ff:98:57:2c:34:17:1b:f2:f5:bb:ae:1d:5f:ec: 2b:e2:19:66:f9:55:20:09:42:15:72:b0:f9:de:a0: 37:6d:01:cb:c9:bb:6e:db:50:bb:f8:87:98:6b:7c: 66:c2:a3:d7:a8:60:76:7d:a5:bf:c5:16:c0:e5:de: fb:2c:0e:86:43:21:c5:ed:7d:f5:09:47:e9:bd:3d: c9:a3:57:7a:25:67:09:20:66:64:17:fe:44:b0:7c: 9e:2f:12:34:e2:62:2e:f1:94:3c:3a:e9:e9:f5:07: 01:dd:bb:0d:23:b2:d6:af:e2:a0:f8:ba:4d:e2:2e: a3:a0:b4:e5:bc:ea:2d:4c:e7:ee:c6:da:53:8d:55: 77:31:f0:dd:0c:ea:38:5b:e9:c0:fc:60:ae:ce:ac: b5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E9:75:B3:92:54:C2:79:9E:2E:96:8E:19:21:C2:AC:28:64:41:15 X509v3 Authority Key Identifier: keyid:E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:df:13:fc:3f:44:9a:73:f0:59:d3:80:23:19:3b:44:99:e6: 06:59:08:9c:33:25:37:f5:8b:26:6e:74:dc:85:af:ef:f4:04: 70:41:93:91:c9:e7:8d:81:16:a8:cf:cb:e3:af:8d:13:f1:93: de:dd:c6:9c:c9:a3:57:65:3d:4b:10:87:56:95:46:56:b1:88: ec:d5:64:01:bd:e5:80:08:a3:ec:cf:84:48:6a:eb:56:1d:8a: 64:c3:23:2c:d5:d8:11:8a:2b:72:05:ae:91:a7:81:01:e3:f2: fc:33:86:0a:f7:b6:de:97:1b:c4:24:27:7d:4d:b0:4a:f8:c1: 45:69:33:a8:88:e0:9c:a3:24:cd:f2:e8:f5:8d:3e:6f:ca:bf: 67:e0:c2:86:40:56:69:0f:d0:87:bb:07:e4:68:ce:0c:3f:b6: 94:cd:2f:7b:d2:63:70:78:2f:e3:a0:2f:ca:27:64:f3:12:ba: 06:c4:c6:ca:e4:73:f3:07:fa:8d:ca:26:e0:f9:ba:31:bb:f7: 50:a7:c3:d1:41:1d:7d:08:be:cf:a0:be:d7:4f:d2:95:f7:f5: 89:be:aa:52:7c:9d:42:83:5f:12:7b:32:48:4e:f5:8b:35:3e: b3:f3:64:49:14:39:05:72:1d:f2:e8:da:2e:75:34:a0:46:b7: 9a:19:c2:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZF+GfFBhmqQIg1vF9m9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Y2ZlNWIzM2VlNDQzZmRlOTJiZDQyMTE4ODgxY2E2ZTgy NjNhNDkwHhcNMjUxMjI2MTYwMTAzWhcNMjUxMjI3MTYwMTAzWjAzMTEwLwYDVQQD Eyg4ZWU5NzViMzkyNTRjMjc5OWUyZTk2OGUxOTIxYzJhYzI4NjQ0MTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxkGRv98OwSww6DGwhP9rDh6poMN RtqJOT1A83yQVoI4uNBzfblv5dYlhte81aiUvvKEhQw0GWxZ419HhIuWu/GWdEQI 2JLtDZ2OUSXVJ2dEmOR7sGxAFbZJu1bFt6qPJP7Wcc5vXbSR/5hXLDQXG/L1u64d X+wr4hlm+VUgCUIVcrD53qA3bQHLybtu21C7+IeYa3xmwqPXqGB2faW/xRbA5d77 LA6GQyHF7X31CUfpvT3Jo1d6JWcJIGZkF/5EsHyeLxI04mIu8ZQ8Ounp9QcB3bsN I7LWr+Kg+LpN4i6joLTlvOotTOfuxtpTjVV3MfDdDOo4W+nA/GCuzqy1EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7pdbOSVMJ5ni6WjhkhwqwoZEEVMB8GA1UdIwQY MBaAFOjP5bM+5EP96SvUIRiIHKboJjpJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk1fbHN6N2tRXzNwSzlRaEdJZ2NwdWdtT2trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hNDM1NmMtOGQxNC00YjFjLWE1NWIt NzBjMmU3Njg2ZTZiLzEvNk1fbHN6N2tRXzNwSzlRaEdJZ2NwdWdtT2trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hNDM1NmMtOGQxNC00YjFjLWE1NWItNzBjMmU3Njg2ZTZi LzEvNk1fbHN6N2tRXzNwSzlRaEdJZ2NwdWdtT2trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbN8T/D9E mnPwWdOAIxk7RJnmBlkInDMlN/WLJm503IWv7/QEcEGTkcnnjYEWqM/L46+NE/GT 3t3GnMmjV2U9SxCHVpVGVrGI7NVkAb3lgAij7M+ESGrrVh2KZMMjLNXYEYorcgWu kaeBAePy/DOGCve23pcbxCQnfU2wSvjBRWkzqIjgnKMkzfLo9Y0+b8q/Z+DChkBW aQ/Qh7sH5GjODD+2lM0ve9JjcHgv46Avyidk8xK6BsTGyuRz8wf6jcom4Pm6Mbv3 UKfD0UEdfQi+z6C+10/Slff1ib6qUnydQoNfEnsySE71izU+s/NkSRQ5BXId8uja LnU0oEa3mhnCmQ== -----END CERTIFICATE-----Generated at Fri Dec 26 22:48:45 2025 by rpki-client