This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft File: S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json) Hash identifier: dmV0b9JzVQHIfDVqAISBXG2/FjmgXGIimHP1vd/87eo= Subject key identifier: 07:73:42:E4:09:0D:39:C8:E4:80:D8:8A:26:2B:39:69:6B:D9:4F:C3 Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E Certificate issuer: /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e Certificate serial: 019B454A4DA27BCE6E83CDE0DB56F757BD7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft Manifest number: 0EC5 Signing time: Mon 22 Dec 2025 09:00:55 +0000 Manifest this update: Mon 22 Dec 2025 09:00:55 +0000 Manifest next update: Tue 23 Dec 2025 09:00:55 +0000 Files and hashes: 1: 07VM5GQDyy0wcSk66eg9Nc4GYr0.roa (hash: tZR04Bh0g3Sbqjc1Ej/IqbvRwZJEdNyq0qHOrpzegq8=) 2: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: uh8W/16f2Ja9YKeDboTL5PsoswWJj8lM+WZZLRy/8SQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:4d:a2:7b:ce:6e:83:cd:e0:db:56:f7:57:bd:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e Validity Not Before: Dec 22 09:00:55 2025 GMT Not After : Dec 23 09:00:55 2025 GMT Subject: CN=077342e4090d39c8e480d88a262b39696bd94fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:81:6f:02:5f:e4:a6:35:1e:d0:ba:4c:d1: 00:8c:53:7a:08:8e:f3:a0:59:27:6e:1f:6e:19:b2: 5d:e2:57:5e:9b:9f:f2:c4:0b:96:83:be:6d:98:09: 40:44:e2:4c:25:4c:30:80:64:67:96:8c:18:50:04: 12:5d:3c:c0:74:e6:ee:d0:1b:58:76:ab:68:8a:f1: c8:cf:03:cc:a6:f9:2d:dc:42:b7:88:6b:29:05:87: 29:72:b9:71:e9:cb:ca:13:5a:59:5e:d2:2c:85:5c: c7:fa:ba:1b:65:0a:f0:35:f0:24:97:76:cf:43:0e: 1f:9e:d9:ba:e5:f5:62:3c:71:8c:94:c9:f8:27:9c: cc:93:a3:4b:0f:9a:ec:38:f2:64:4f:91:53:42:c9: 53:d9:1b:c7:79:22:15:c5:af:f1:29:59:b9:c7:67: ec:9f:5b:09:b4:62:da:81:64:12:e8:d3:5a:9c:9f: 6d:86:f2:a4:55:24:a5:7f:8a:08:67:c0:7e:eb:fc: f5:42:5b:76:40:3a:6d:dd:57:98:7f:a3:24:0f:99: ba:db:43:c0:28:8b:b4:1a:36:dc:31:4b:84:ae:f2: 44:43:8d:eb:4a:58:5a:f5:e2:90:d1:44:55:f3:d2: ab:35:b2:1a:5a:90:eb:37:20:85:f9:c6:2b:26:36: 91:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:73:42:E4:09:0D:39:C8:E4:80:D8:8A:26:2B:39:69:6B:D9:4F:C3 X509v3 Authority Key Identifier: keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:b6:1c:cd:0f:53:81:4a:71:27:79:db:1b:56:7e:50:a3:4e: 50:b2:2e:b1:d0:54:28:e2:94:ba:83:7d:60:3d:f1:ce:54:29: 34:6b:42:d3:2e:b3:65:12:0b:66:b1:7b:ce:e2:8b:d5:64:53: 6e:66:fc:ae:62:d8:9c:a9:c8:41:09:0f:87:e5:55:69:f5:58: 4d:db:8e:37:cc:6c:f9:98:82:13:4d:fc:c8:48:03:9c:88:c1: ed:04:33:d8:ca:4e:0f:66:3f:13:ea:d2:ce:7f:c7:2a:13:03: 3f:3f:ec:e6:e4:72:a2:1c:56:63:01:25:5f:6a:ff:10:d8:8a: 23:92:21:b9:39:2e:c8:40:34:45:23:3e:95:a9:52:a1:6c:db: cb:14:68:e7:09:11:64:f6:14:a9:45:f1:d4:9d:45:25:3f:c0: 28:6f:e5:ec:35:67:ea:9c:52:32:19:ac:01:63:33:c7:2f:e9: e4:57:3f:f6:a4:4e:5f:a7:7d:05:b4:ed:e6:89:0f:af:14:56: 97:92:9f:1f:e8:43:4d:b4:61:51:f2:69:a9:9c:ac:a0:44:5d: 09:c8:99:b2:f8:19:5d:dc:2c:54:6d:03:fb:01:a8:93:9c:64: c1:36:a6:82:dd:e2:b8:9b:f4:cc:5d:97:e5:f1:34:cf:5f:5e: 54:c8:9a:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSk2ie85ug83g21b3V716MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYWZmNDhhZDExNDViMTAwYzc4M2ZiN2FmYjZmMzAyOGJk OGYzNGUwHhcNMjUxMjIyMDkwMDU1WhcNMjUxMjIzMDkwMDU1WjAzMTEwLwYDVQQD EygwNzczNDJlNDA5MGQzOWM4ZTQ4MGQ4OGEyNjJiMzk2OTZiZDk0ZmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX+BbwJf5KY1HtC6TNEAjFN6CI7z oFknbh9uGbJd4ldem5/yxAuWg75tmAlAROJMJUwwgGRnlowYUAQSXTzAdObu0BtY dqtoivHIzwPMpvkt3EK3iGspBYcpcrlx6cvKE1pZXtIshVzH+robZQrwNfAkl3bP Qw4fntm65fViPHGMlMn4J5zMk6NLD5rsOPJkT5FTQslT2RvHeSIVxa/xKVm5x2fs n1sJtGLagWQS6NNanJ9thvKkVSSlf4oIZ8B+6/z1Qlt2QDpt3VeYf6MkD5m620PA KIu0GjbcMUuErvJEQ43rSlha9eKQ0URV89KrNbIaWpDrNyCF+cYrJjaRgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdzQuQJDTnI5IDYiiYrOWlr2U/DMB8GA1UdIwQY MBaAFEuv9IrRFFsQDHg/t6+28wKL2PNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMt YmZlYjdjZWEyMDlkLzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9lNGZmYzUtZmI4ZC00YzQwLThiNzMtYmZlYjdjZWEyMDlk LzEvUzZfMGl0RVVXeEFNZUQtM3I3YnpBb3ZZODA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqLYczQ9T gUpxJ3nbG1Z+UKNOULIusdBUKOKUuoN9YD3xzlQpNGtC0y6zZRILZrF7zuKL1WRT bmb8rmLYnKnIQQkPh+VVafVYTduON8xs+ZiCE038yEgDnIjB7QQz2MpOD2Y/E+rS zn/HKhMDPz/s5uRyohxWYwElX2r/ENiKI5IhuTkuyEA0RSM+lalSoWzbyxRo5wkR ZPYUqUXx1J1FJT/AKG/l7DVn6pxSMhmsAWMzxy/p5Fc/9qROX6d9BbTt5okPrxRW l5KfH+hDTbRhUfJpqZysoERdCciZsvgZXdwsVG0D+wGok5xkwTamgt3iuJv0zF2X 5fE0z19eVMiayw== -----END CERTIFICATE-----Generated at Mon Dec 22 10:34:01 2025 by rpki-client