This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft File: 6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft (raw, json) Hash identifier: b4uFVGhImjvONsVt/eOvM8NHfGga8/cmphAjJrF2rH8= Subject key identifier: 50:60:EB:F4:E9:B9:8D:1E:56:9E:84:E4:9C:2D:6F:82:22:08:24:24 Authority key identifier: EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF Certificate issuer: /CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf Certificate serial: 019B650D51B49B6EFA8A8DFA1DDFB962A793 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft Manifest number: 17A0 Signing time: Sun 28 Dec 2025 13:02:10 +0000 Manifest this update: Sun 28 Dec 2025 13:02:10 +0000 Manifest next update: Mon 29 Dec 2025 13:02:10 +0000 Files and hashes: 1: 6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl (hash: WEt4bijVA2MAq2759bcwjAb4YjqkqPXzN2ihndLGGFU=) 2: DIYTcQL0kTTU2q4HEzGujm0gUwo.roa (hash: RDp4zi/HUT9tIKN8ofgNKdiyOgNtG9lWPQ4C3eVO32Y=) 3: uL0oA5oOVHGz1EKQthaeZ4nofOI.roa (hash: Ukj6KTn0iYnjxnepezeV1ye/hQ4gCPQyF7UCJwJgWx0=) 4: xEVUwNoistpr086p8wiZOj3lAS0.roa (hash: jssBpk2I1njjei0F0mwFNz5A15Y3I0c8WhHM6GhLppA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0d:51:b4:9b:6e:fa:8a:8d:fa:1d:df:b9:62:a7:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf Validity Not Before: Dec 28 13:02:10 2025 GMT Not After : Dec 29 13:02:10 2025 GMT Subject: CN=5060ebf4e9b98d1e569e84e49c2d6f8222082424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:37:31:48:13:4c:99:0c:1a:c9:ba:14:d9:2d: 8f:3a:3a:ca:2c:80:76:bd:4f:c6:48:a4:95:d5:11: 39:0e:af:e6:3f:f2:1f:34:dc:1b:3f:02:16:c7:ed: 79:c4:be:e9:b4:8d:98:1b:b6:d5:0a:5f:ec:57:db: 54:6f:2f:89:7d:f0:bc:0d:e1:a1:14:d3:1c:bd:f7: c4:3d:3f:af:10:b3:d5:77:9e:61:07:34:f0:e3:ae: 5c:51:d4:af:c2:89:ee:de:85:f4:3b:76:54:2c:59: 8c:0c:9c:3f:db:a9:33:e8:e9:08:8b:54:a0:2f:9e: 21:81:79:6d:51:88:59:44:36:32:03:5e:54:49:df: 0e:5b:ff:e3:1e:d6:1d:5f:35:90:7d:64:a3:c5:be: c9:af:aa:c3:82:82:36:af:bc:51:64:a4:6a:a0:4d: c0:4d:95:8a:9d:1d:e3:24:a8:fa:22:8f:75:0e:32: c2:94:c4:fd:3c:85:0d:db:5d:8d:cd:a8:fb:e3:f9: d0:82:83:c0:e1:7a:4f:5f:f5:67:ae:27:e8:28:3d: 25:55:13:bc:7f:77:33:87:bc:ae:18:7d:0d:05:48: 8e:92:d3:63:55:be:3b:d8:fa:29:65:6a:a3:05:68: 08:66:2e:c7:60:fd:5b:f6:2a:01:6c:8e:6b:34:f0: 69:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:60:EB:F4:E9:B9:8D:1E:56:9E:84:E4:9C:2D:6F:82:22:08:24:24 X509v3 Authority Key Identifier: keyid:EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:0e:35:fb:53:f0:90:6f:e7:d2:94:18:68:f2:33:a1:4d:19: c0:c3:c2:df:fb:08:d5:bc:0b:ed:52:82:bb:da:0e:cd:fa:ee: bc:36:25:20:c5:98:7f:61:41:f6:4f:b0:06:45:e8:5d:e9:b9: 1b:40:8a:88:11:9b:11:b0:4b:70:ed:62:7c:c5:a3:b8:08:5d: fc:dd:6b:26:4f:25:e4:76:f5:54:26:5e:a3:42:3e:16:f4:c7: 09:fa:cc:5c:d0:93:9b:67:c6:f5:8e:18:7e:d5:73:ed:fb:cb: 6e:1e:ed:a1:a1:42:c4:2a:c2:87:98:aa:74:0b:27:1c:03:09: f0:19:83:e8:1c:13:bd:b0:42:6d:4f:22:ce:8a:7c:ae:d9:bb: 1a:30:e1:2a:c9:51:5c:b3:f3:66:f5:5f:77:cb:14:f5:e1:c7: 36:9b:cd:dd:cf:80:c1:9f:a2:46:e7:38:0f:31:e0:6b:8f:d9: 77:d3:4c:30:2b:81:55:6c:01:2d:c1:4d:c6:7a:41:02:ed:0f: e7:a7:33:19:e4:b3:77:bb:e3:35:a6:92:e8:31:bc:02:b9:b4: c4:d1:7d:5e:4b:06:62:3b:9a:39:73:57:56:31:ca:d9:b8:d1: 74:36:59:3c:1e:76:3b:2a:d7:7c:52:9a:72:4b:c4:59:0b:a3: 47:1a:91:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDVG0m276io36Hd+5YqeTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTVkZmQxMzAyMWQ1ODU1ZmYxOTQ1MzQ5MzNjZDdkNmNh Y2Q2Y2YwHhcNMjUxMjI4MTMwMjEwWhcNMjUxMjI5MTMwMjEwWjAzMTEwLwYDVQQD Eyg1MDYwZWJmNGU5Yjk4ZDFlNTY5ZTg0ZTQ5YzJkNmY4MjIyMDgyNDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zcxSBNMmQwayboU2S2POjrKLIB2 vU/GSKSV1RE5Dq/mP/IfNNwbPwIWx+15xL7ptI2YG7bVCl/sV9tUby+JffC8DeGh FNMcvffEPT+vELPVd55hBzTw465cUdSvwonu3oX0O3ZULFmMDJw/26kz6OkIi1Sg L54hgXltUYhZRDYyA15USd8OW//jHtYdXzWQfWSjxb7Jr6rDgoI2r7xRZKRqoE3A TZWKnR3jJKj6Io91DjLClMT9PIUN212Nzaj74/nQgoPA4XpPX/VnrifoKD0lVRO8 f3czh7yuGH0NBUiOktNjVb472PopZWqjBWgIZi7HYP1b9ioBbI5rNPBpJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBg6/TpuY0eVp6E5Jwtb4IiCCQkMB8GA1UdIwQY MBaAFOpV39EwIdWFX/GUU0kzzX1srNbPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxYZjBUQWgxWVZmOFpSVFNUUE5mV3lzMXM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82ZjQzM2ItZGMzMi00NWEyLTk3OWUt ZmYxNDMzNjg3NTNmLzEvNmxYZjBUQWgxWVZmOFpSVFNUUE5mV3lzMXM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS82ZjQzM2ItZGMzMi00NWEyLTk3OWUtZmYxNDMzNjg3NTNm LzEvNmxYZjBUQWgxWVZmOFpSVFNUUE5mV3lzMXM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQ41+1Pw kG/n0pQYaPIzoU0ZwMPC3/sI1bwL7VKCu9oOzfruvDYlIMWYf2FB9k+wBkXoXem5 G0CKiBGbEbBLcO1ifMWjuAhd/N1rJk8l5Hb1VCZeo0I+FvTHCfrMXNCTm2fG9Y4Y ftVz7fvLbh7toaFCxCrCh5iqdAsnHAMJ8BmD6BwTvbBCbU8izop8rtm7GjDhKslR XLPzZvVfd8sU9eHHNpvN3c+AwZ+iRuc4DzHga4/Zd9NMMCuBVWwBLcFNxnpBAu0P 56czGeSzd7vjNaaS6DG8Arm0xNF9XksGYjuaOXNXVjHK2bjRdDZZPB52OyrXfFKa ckvEWQujRxqR0A== -----END CERTIFICATE-----Generated at Sun Dec 28 18:58:54 2025 by rpki-client