This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft File: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft (raw, json) Hash identifier: xzABWPuomkQSeCxvbaUywgXNGEBAoi0QhdfQbdraDJs= Subject key identifier: F0:6F:38:04:26:F6:64:0C:9A:49:00:3D:70:66:D2:B6:9B:85:9C:F7 Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87 Certificate issuer: /CN=e8f239a70043734172d26378bf2106ae72552187 Certificate serial: 019B676828FDF298C08A52A6E137ED901BBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft Manifest number: 17A1 Signing time: Mon 29 Dec 2025 00:00:37 +0000 Manifest this update: Mon 29 Dec 2025 00:00:37 +0000 Manifest next update: Tue 30 Dec 2025 00:00:37 +0000 Files and hashes: 1: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl (hash: qb+YbkXktFmQ6MvefHdpIBjHUt+6n6Rbuns/ORs1g8s=) 2: _rOeYqbasUbg4wEPxQv2jbf1rDs.roa (hash: QqZ9iY31p0jdqPdmJMdj1h5d+9EiWy2N5/wKWyWJKZc=) 3: uoGc2nJpk2UpZyfHZzcx7uBg-dw.roa (hash: YbLz65VSnoZrUAyODriZg6tIX0t6U/Eu072okI1A/7E=) 4: uw5KIyglPtCBajZfvp_4MoIXMiY.roa (hash: +BtHm8C8PIjC3P+48v8raxefyMbdIOq6iq81PMb5GEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:28:fd:f2:98:c0:8a:52:a6:e1:37:ed:90:1b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f239a70043734172d26378bf2106ae72552187 Validity Not Before: Dec 29 00:00:37 2025 GMT Not After : Dec 30 00:00:37 2025 GMT Subject: CN=f06f380426f6640c9a49003d7066d2b69b859cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:11:04:5f:e9:ce:1e:98:49:6c:6f:66:0d:48: 96:86:7c:4e:6b:ac:ba:4e:fb:41:b6:c4:98:7a:35: f8:58:cf:be:f2:cd:1d:19:d6:be:4c:25:47:73:d7: 51:8b:40:2c:6a:ad:7c:cd:93:69:8d:06:b3:cb:52: 41:3c:c5:d7:6d:f2:60:3a:f7:ee:4a:ad:f6:9b:5b: 30:db:65:e2:48:0a:e9:75:f9:ee:26:98:b2:71:cb: be:75:ac:37:eb:0c:84:02:c4:c7:01:97:51:e6:7c: 70:42:e9:c1:f3:a0:f8:22:51:e0:ea:9b:1f:fc:c7: 81:4b:2a:b4:6d:71:28:28:eb:46:ae:e1:5a:cd:15: 99:07:8c:aa:71:7c:b7:e4:49:c6:a0:6a:5d:49:39: 27:b3:79:15:3f:1a:79:11:97:74:02:b9:5e:6c:a5: b1:7f:ab:4f:e9:08:18:14:b6:3e:a0:d2:9a:11:67: dd:5b:5c:e0:64:e1:46:05:0f:63:bf:27:1e:57:7c: 2a:ff:b9:68:13:c6:8b:a0:25:de:21:b7:89:98:85: b9:e3:b6:e0:46:73:c3:c1:2b:3e:a2:20:e5:a2:96: c5:62:79:e6:4c:8c:40:9b:f0:5a:e0:c8:54:45:94: 45:78:bc:31:7e:0b:d2:d9:22:12:98:d1:cc:ec:92: c1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6F:38:04:26:F6:64:0C:9A:49:00:3D:70:66:D2:B6:9B:85:9C:F7 X509v3 Authority Key Identifier: keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:6c:4f:d8:fb:9d:1b:69:75:a2:4a:56:a3:20:5a:39:24:db: 44:e0:f1:33:bb:f7:cb:72:4a:e6:e7:dd:a2:de:33:ca:b8:68: 60:19:15:87:16:4d:e2:da:e4:42:be:27:ce:37:51:c9:4b:ad: 4e:ce:14:56:df:36:fe:d0:ea:45:61:b8:33:74:0b:4e:77:3b: ad:53:49:ca:2b:43:ab:13:56:c7:b0:91:94:2e:65:81:64:08: 0f:ee:65:b0:97:9a:91:77:00:da:f0:51:28:a5:00:67:3c:40: c5:14:8e:79:23:18:6b:5f:61:a4:c7:e5:19:b4:06:d0:0a:ff: e4:ad:7c:48:58:2f:9f:be:ba:87:28:a1:41:59:27:78:4d:05: 5f:65:30:08:cc:d8:61:fc:2a:51:23:2f:76:d3:93:a8:4e:23: 8f:16:5c:8b:b8:ff:6f:3b:61:df:f6:32:d2:0d:e3:3d:b4:b2: 64:ef:44:25:ff:71:fe:79:1b:d4:64:ec:04:59:2e:4a:9c:82: 7b:37:85:3b:a0:52:87:12:fa:a6:77:fc:73:48:fb:b0:ee:8b: 63:69:75:46:14:55:fa:78:4a:30:d4:ad:3d:e2:f6:21:2c:f7: 00:74:a4:07:5a:12:de:50:ab:c0:ed:e2:7d:d9:99:0c:38:3b: 9c:30:d7:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaCj98pjAilKm4TftkBu+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZjIzOWE3MDA0MzczNDE3MmQyNjM3OGJmMjEwNmFlNzI1 NTIxODcwHhcNMjUxMjI5MDAwMDM3WhcNMjUxMjMwMDAwMDM3WjAzMTEwLwYDVQQD EyhmMDZmMzgwNDI2ZjY2NDBjOWE0OTAwM2Q3MDY2ZDJiNjliODU5Y2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhEEX+nOHphJbG9mDUiWhnxOa6y6 TvtBtsSYejX4WM++8s0dGda+TCVHc9dRi0Asaq18zZNpjQazy1JBPMXXbfJgOvfu Sq32m1sw22XiSArpdfnuJpiyccu+daw36wyEAsTHAZdR5nxwQunB86D4IlHg6psf /MeBSyq0bXEoKOtGruFazRWZB4yqcXy35EnGoGpdSTkns3kVPxp5EZd0ArlebKWx f6tP6QgYFLY+oNKaEWfdW1zgZOFGBQ9jvyceV3wq/7loE8aLoCXeIbeJmIW547bg RnPDwSs+oiDlopbFYnnmTIxAm/Ba4MhURZRFeLwxfgvS2SISmNHM7JLBGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBvOAQm9mQMmkkAPXBm0rabhZz3MB8GA1UdIwQY MBaAFOjyOacAQ3NBctJjeL8hBq5yVSGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy80ZTkwMmEtMjk5Zi00ZGE3LTlhNmQt NjY5YmQxMTNhMTc4LzEvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy80ZTkwMmEtMjk5Zi00ZGE3LTlhNmQtNjY5YmQxMTNhMTc4 LzEvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2xP2Pud G2l1okpWoyBaOSTbRODxM7v3y3JK5ufdot4zyrhoYBkVhxZN4trkQr4nzjdRyUut Ts4UVt82/tDqRWG4M3QLTnc7rVNJyitDqxNWx7CRlC5lgWQID+5lsJeakXcA2vBR KKUAZzxAxRSOeSMYa19hpMflGbQG0Ar/5K18SFgvn766hyihQVkneE0FX2UwCMzY YfwqUSMvdtOTqE4jjxZci7j/bzth3/Yy0g3jPbSyZO9EJf9x/nkb1GTsBFkuSpyC ezeFO6BShxL6pnf8c0j7sO6LY2l1RhRV+nhKMNStPeL2ISz3AHSkB1oS3lCrwO3i fdmZDDg7nDDXug== -----END CERTIFICATE-----Generated at Mon Dec 29 08:28:22 2025 by rpki-client