This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft File: 6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft (raw, json) Hash identifier: tLU8siRWsZM/G5zah+I7Dfm/qiDg1G1yt02Samibob4= Subject key identifier: 7A:D3:6F:59:6E:B8:55:5A:FF:30:21:41:68:65:99:0C:F9:02:1D:1B Authority key identifier: 6E:51:CB:9A:48:1B:5A:E9:9D:8B:E1:18:3E:3F:B0:87:FF:5C:8B:6F Certificate issuer: /CN=6e51cb9a481b5ae99d8be1183e3fb087ff5c8b6f Certificate serial: 065B77C9642EF8C0D597A677A0CB9E50E9F3F74D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blHLmkgbWumdi-EYPj-wh_9ci28.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft Manifest number: 0269 Signing time: Thu 25 Dec 2025 18:16:33 +0000 Manifest this update: Thu 25 Dec 2025 18:11:33 +0000 Manifest next update: Fri 26 Dec 2025 20:33:33 +0000 Files and hashes: 1: 6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.crl (hash: /uPK3KaKqzI0lsJq3GqRuUK0ls8P7Q2hfMy/gXzBU78=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.crl rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft rsync://rpki.ripe.net/repository/DEFAULT/blHLmkgbWumdi-EYPj-wh_9ci28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 20:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:5b:77:c9:64:2e:f8:c0:d5:97:a6:77:a0:cb:9e:50:e9:f3:f7:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e51cb9a481b5ae99d8be1183e3fb087ff5c8b6f Validity Not Before: Dec 25 18:11:33 2025 GMT Not After : Dec 26 20:33:33 2025 GMT Subject: CN=7AD36F596EB8555AFF3021416865990CF9021D1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b7:90:14:44:13:8e:53:bd:8f:d0:47:dc:bc: bf:03:73:ad:6b:64:4a:cd:78:1d:2e:c2:b6:6b:62: f4:15:06:bb:94:81:df:70:7f:0e:de:6e:cf:cb:98: 77:ea:e5:0d:01:70:6e:90:ee:6d:84:1f:e7:82:fc: 29:c4:10:b4:a6:c0:5f:d8:bd:10:e0:fe:d2:86:8d: 79:54:67:08:50:76:02:da:27:73:44:88:bf:5a:35: 01:b5:be:86:f4:5c:cb:4d:c2:60:37:47:48:d4:c3: 74:f1:b0:9b:b4:29:a6:09:e9:72:51:8c:d5:55:1b: e7:be:ab:ba:75:13:e2:1e:cf:12:30:e0:a0:fa:74: 28:66:ca:0c:7d:74:12:fa:3f:93:c1:59:35:b6:54: 96:02:fa:45:f2:91:68:00:88:2b:61:74:85:6e:b4: 3c:ab:32:55:e1:5b:e5:6c:16:7c:a0:ad:65:ec:f7: 37:f1:b3:50:d2:68:86:af:c1:03:b4:31:c3:e2:0c: aa:35:38:3b:74:d2:95:5f:2e:80:11:0c:a5:96:88: fe:7c:cb:62:54:1e:f5:e7:58:f4:ef:f9:cc:9f:30: a6:15:62:e2:12:7c:f6:41:b6:d8:e5:c1:05:77:5e: 56:fc:07:98:aa:eb:41:4a:59:0c:4a:a8:4a:60:38: cf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D3:6F:59:6E:B8:55:5A:FF:30:21:41:68:65:99:0C:F9:02:1D:1B X509v3 Authority Key Identifier: keyid:6E:51:CB:9A:48:1B:5A:E9:9D:8B:E1:18:3E:3F:B0:87:FF:5C:8B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blHLmkgbWumdi-EYPj-wh_9ci28.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:73:4f:14:fe:96:13:3f:7d:2e:32:84:52:fc:58:62:27:11: 4e:b4:89:30:c7:c0:1b:bf:f2:7e:83:59:af:3d:3c:16:f9:83: 51:29:82:ea:a1:1c:37:a0:df:8a:45:f9:27:9a:65:23:24:00: 8f:ad:d0:37:0a:e5:6c:52:a0:ae:89:3b:67:a2:d2:79:1d:2c: d8:a3:67:71:c6:1f:51:23:28:75:15:a1:3e:7d:ef:7c:b1:ca: 0a:f1:40:b2:c0:3c:21:11:0d:1c:b7:22:bc:a5:e9:39:f3:e9: de:bc:ca:0c:ad:5d:f7:2c:de:98:4b:92:06:5f:e1:a8:7f:6d: 25:42:8f:36:18:e2:63:d3:67:ce:7b:72:d7:ac:d3:db:19:78: 89:c3:cb:02:e0:c4:65:0c:f6:37:72:0b:76:22:c0:07:ab:20: 93:f4:d9:5d:69:06:5a:db:b5:ea:96:17:44:e0:b5:aa:6f:c8: 15:e8:47:32:32:13:f6:13:04:13:b7:81:34:2b:b1:8f:d1:68: 8b:7a:3a:1e:bd:1b:a8:7b:46:6a:e1:e8:e0:05:5d:6e:a2:94: 10:47:7d:eb:14:e1:3e:cc:88:09:1b:27:e9:4c:53:5b:8f:55: e0:53:88:35:f2:d0:3b:a7:d5:a6:a4:37:02:ac:a3:0b:22:61: 5f:bb:b2:75 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBlt3yWQu+MDVl6Z3oMueUOnz900wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmU1MWNiOWE0ODFiNWFlOTlkOGJlMTE4M2UzZmIwODdm ZjVjOGI2ZjAeFw0yNTEyMjUxODExMzNaFw0yNTEyMjYyMDMzMzNaMDMxMTAvBgNV BAMTKDdBRDM2RjU5NkVCODU1NUFGRjMwMjE0MTY4NjU5OTBDRjkwMjFEMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnt5AURBOOU72P0EfcvL8Dc61r ZErNeB0uwrZrYvQVBruUgd9wfw7ebs/LmHfq5Q0BcG6Q7m2EH+eC/CnEELSmwF/Y vRDg/tKGjXlUZwhQdgLaJ3NEiL9aNQG1vob0XMtNwmA3R0jUw3TxsJu0KaYJ6XJR jNVVG+e+q7p1E+IezxIw4KD6dChmygx9dBL6P5PBWTW2VJYC+kXykWgAiCthdIVu tDyrMlXhW+VsFnygrWXs9zfxs1DSaIavwQO0McPiDKo1ODt00pVfLoARDKWWiP58 y2JUHvXnWPTv+cyfMKYVYuISfPZBttjlwQV3Xlb8B5iq60FKWQxKqEpgOM9JAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUetNvWW64VVr/MCFBaGWZDPkCHRswHwYDVR0j BBgwFoAUblHLmkgbWumdi+EYPj+wh/9ci28wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjU4MzlmYmQtMzI3ZS00ZmNlLThhM2UtNTNmZjhmMGM0 NjBlLzEvNkU1MUNCOUE0ODFCNUFFOTlEOEJFMTE4M0UzRkIwODdGRjVDOEI2Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JsSExta2diV3VtZGktRVlQai13aF85 Y2kyOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82NTgzOWZiZC0z MjdlLTRmY2UtOGEzZS01M2ZmOGYwYzQ2MGUvMS82RTUxQ0I5QTQ4MUI1QUU5OUQ4 QkUxMTgzRTNGQjA4N0ZGNUM4QjZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy3NPFP6WEz99LjKEUvxY YicRTrSJMMfAG7/yfoNZrz08FvmDUSmC6qEcN6DfikX5J5plIyQAj63QNwrlbFKg rok7Z6LSeR0s2KNnccYfUSModRWhPn3vfLHKCvFAssA8IRENHLcivKXpOfPp3rzK DK1d9yzemEuSBl/hqH9tJUKPNhjiY9Nnznty16zT2xl4icPLAuDEZQz2N3ILdiLA B6sgk/TZXWkGWtu16pYXROC1qm/IFehHMjIT9hMEE7eBNCuxj9Foi3o6Hr0bqHtG auHo4AVdbqKUEEd96xThPsyICRsn6UxTW49V4FOINfLQO6fVpqQ3AqyjCyJhX7uy dQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:07 2025 by rpki-client