This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft File: S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json) Hash identifier: TUc98ob9KpkUaa1cgApVUfDOTjc20oOWUsrNbDKqjLM= Subject key identifier: F6:AA:CE:5A:22:B4:3E:DB:1B:E6:A9:70:1F:8A:A0:D3:30:4A:C6:74 Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E Certificate issuer: /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e Certificate serial: 019B3F7F807B579115FC55724BF393B7C29D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft Manifest number: 0EC2 Signing time: Sun 21 Dec 2025 06:01:19 +0000 Manifest this update: Sun 21 Dec 2025 06:01:19 +0000 Manifest next update: Mon 22 Dec 2025 06:01:19 +0000 Files and hashes: 1: 07VM5GQDyy0wcSk66eg9Nc4GYr0.roa (hash: tZR04Bh0g3Sbqjc1Ej/IqbvRwZJEdNyq0qHOrpzegq8=) 2: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: ZMcgHH0pSOqQn1bhDKU77Q6s5L450rpZZT7g2VKYWYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:80:7b:57:91:15:fc:55:72:4b:f3:93:b7:c2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e Validity Not Before: Dec 21 06:01:19 2025 GMT Not After : Dec 22 06:01:19 2025 GMT Subject: CN=f6aace5a22b43edb1be6a9701f8aa0d3304ac674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:cf:ba:c3:43:fa:1a:35:03:84:70:e5:d1: 7c:c2:76:e4:fc:c4:92:9b:a8:e8:07:4e:1f:c3:ba: 4f:a3:7f:ea:5c:cf:4e:35:1d:4b:56:0a:31:bd:c7: d0:46:d5:95:1b:0f:4b:3d:26:eb:f6:a2:cd:df:6e: dc:d8:22:ad:1c:e0:9d:da:b2:d6:fb:c7:ce:c3:45: ef:fd:91:6f:29:6e:cf:0c:ad:5c:7d:58:60:21:52: 80:7b:f2:de:8c:27:0f:96:1c:c6:d8:a8:cf:a7:9c: fa:ba:06:7b:11:bd:9d:46:ff:c1:43:90:fc:50:4e: ce:9d:d3:9f:be:63:65:13:38:08:7a:0d:91:79:e2: 08:5c:ad:9c:68:15:d2:25:5f:5d:5c:9b:ac:47:d1: 5a:e5:fe:af:4e:48:28:60:03:fb:8b:d3:80:c0:65: 00:04:4f:44:7b:5a:e3:6b:64:4e:45:f7:85:61:5f: 6d:b6:09:ef:49:c7:fe:64:a4:72:56:ff:4c:96:d9: 3d:9e:07:61:90:c6:d7:bf:96:4a:98:97:76:4e:5d: 5f:73:4b:ea:23:68:a1:6e:d3:e6:16:b9:91:d2:29: 0e:aa:41:23:6d:41:0a:2a:c0:7e:1f:42:63:bd:a1: f6:60:ef:31:3b:98:85:3b:c0:e3:d2:6e:f8:7e:ae: 0a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AA:CE:5A:22:B4:3E:DB:1B:E6:A9:70:1F:8A:A0:D3:30:4A:C6:74 X509v3 Authority Key Identifier: keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:a6:fd:76:0a:03:14:e4:4b:a4:4b:57:e1:6d:76:74:7f:ee: 50:d2:4a:23:76:8a:35:29:68:9e:24:4c:f9:0c:c7:a2:c4:e8: 2b:51:9d:3c:25:9f:c0:a8:ac:da:aa:bf:c0:61:2d:31:2e:36: c8:e7:27:94:09:41:71:90:87:b7:92:ff:60:d5:1d:66:3e:d3: d8:52:1c:ed:67:d8:35:86:e0:06:cc:a9:8f:9d:21:b9:31:28: 81:e1:75:38:ae:e5:93:a1:ef:bd:a2:5b:96:24:d4:b2:7a:77: 2f:b3:a4:04:63:61:1a:65:d6:d6:17:84:84:58:84:58:3e:8f: e8:78:6c:28:de:d9:89:0f:e7:ce:08:14:66:06:e8:3b:44:34: b5:d7:38:1e:fd:98:17:5c:3d:6e:6e:e4:e2:84:a0:ff:87:db: 13:7e:e1:a6:fd:ee:81:c9:2a:a5:e4:6c:90:15:4e:4c:96:1d: 5b:b7:e8:a2:0e:d1:9b:44:4b:5d:93:74:b0:f5:6f:10:20:ed: ce:ea:15:ec:05:1d:3d:a8:d3:64:0e:d0:ff:c7:e9:10:c1:c6: 41:4d:c4:df:b7:43:94:9c:db:1d:c0:97:8a:57:74:77:bb:30: ca:37:7d:e5:c3:81:09:b5:0a:da:c1:b0:9c:1d:ee:fd:4a:57: d0:c8:56:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f4B7V5EV/FVyS/OTt8KdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYWZmNDhhZDExNDViMTAwYzc4M2ZiN2FmYjZmMzAyOGJk OGYzNGUwHhcNMjUxMjIxMDYwMTE5WhcNMjUxMjIyMDYwMTE5WjAzMTEwLwYDVQQD EyhmNmFhY2U1YTIyYjQzZWRiMWJlNmE5NzAxZjhhYTBkMzMwNGFjNjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVzPusND+ho1A4Rw5dF8wnbk/MSS m6joB04fw7pPo3/qXM9ONR1LVgoxvcfQRtWVGw9LPSbr9qLN327c2CKtHOCd2rLW +8fOw0Xv/ZFvKW7PDK1cfVhgIVKAe/LejCcPlhzG2KjPp5z6ugZ7Eb2dRv/BQ5D8 UE7OndOfvmNlEzgIeg2ReeIIXK2caBXSJV9dXJusR9Fa5f6vTkgoYAP7i9OAwGUA BE9Ee1rja2RORfeFYV9ttgnvScf+ZKRyVv9Mltk9ngdhkMbXv5ZKmJd2Tl1fc0vq I2ihbtPmFrmR0ikOqkEjbUEKKsB+H0JjvaH2YO8xO5iFO8Dj0m74fq4KvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaqzloitD7bG+apcB+KoNMwSsZ0MB8GA1UdIwQY MBaAFEuv9IrRFFsQDHg/t6+28wKL2PNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMt YmZlYjdjZWEyMDlkLzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMtYmZlYjdjZWEyMDlk LzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqb9dgoD FORLpEtX4W12dH/uUNJKI3aKNSloniRM+QzHosToK1GdPCWfwKis2qq/wGEtMS42 yOcnlAlBcZCHt5L/YNUdZj7T2FIc7WfYNYbgBsypj50huTEogeF1OK7lk6HvvaJb liTUsnp3L7OkBGNhGmXW1heEhFiEWD6P6HhsKN7ZiQ/nzggUZgboO0Q0tdc4Hv2Y F1w9bm7k4oSg/4fbE37hpv3ugckqpeRskBVOTJYdW7foog7Rm0RLXZN0sPVvECDt zuoV7AUdPajTZA7Q/8fpEMHGQU3E37dDlJzbHcCXild0d7swyjd95cOBCbUK2sGw nB3u/UpX0MhWXg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:12:17 2025 by rpki-client