This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft File: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json) Hash identifier: 8mWCBVRxkzAKgOIvhde5XdwuVRPLXlQUAxd3eN2zsE0= Subject key identifier: 27:4A:4F:92:2C:BD:97:D0:05:70:55:81:F1:D1:13:AF:7B:70:9D:A3 Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD Certificate issuer: /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd Certificate serial: 019B443940915947A294A25FEB330B92AF7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft Manifest number: 0DE3 Signing time: Mon 22 Dec 2025 04:02:41 +0000 Manifest this update: Mon 22 Dec 2025 04:02:41 +0000 Manifest next update: Tue 23 Dec 2025 04:02:41 +0000 Files and hashes: 1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: qCI0WqPcqfiFT6RO7By6HpY5sIBb2vB0qtJ3vyIr6Tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:39:40:91:59:47:a2:94:a2:5f:eb:33:0b:92:af:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd Validity Not Before: Dec 22 04:02:41 2025 GMT Not After : Dec 23 04:02:41 2025 GMT Subject: CN=274a4f922cbd97d005705581f1d113af7b709da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:70:ad:c1:d0:58:96:31:b3:a1:aa:80:43:3c: 6d:96:a8:cf:ae:b7:58:5b:3e:3d:0e:3c:68:9b:56: 24:c6:59:e3:53:5e:d5:8b:78:06:d1:fe:02:59:19: 19:57:13:7b:25:45:d9:8f:84:2b:a3:ca:c8:05:52: 28:ee:06:57:a6:2e:7f:d2:8d:3e:52:56:65:79:18: e1:fe:cb:2b:34:9a:f7:9e:0f:bc:21:84:93:97:57: e0:80:8a:c8:77:33:2f:19:82:ff:6e:ea:1c:99:4d: 96:24:54:c4:74:92:9b:e0:ee:b9:b6:8c:c0:b0:23: f9:d8:96:8f:62:0d:09:4b:ce:b0:b5:bf:45:6b:0f: 6b:6b:4d:5d:81:9f:ff:e0:5b:11:85:12:0a:7d:53: 38:43:09:43:41:68:c2:be:7e:a1:8e:82:f8:7b:80: ac:bc:ba:a0:f5:51:62:c3:59:08:83:39:fb:1a:e6: 3f:f9:16:f8:d3:d3:9a:fb:a1:d1:1a:b4:a5:62:6c: d2:96:ff:e0:39:fd:f5:05:eb:75:42:ac:a4:12:eb: b8:02:c3:e8:12:3f:58:05:4a:a3:b8:b2:99:3f:03: 4a:fa:76:e5:02:a0:e1:93:fb:1e:a3:0a:4d:ab:b8: f3:65:e6:cf:88:ce:c7:39:e3:ff:ea:25:60:c9:af: 8c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4A:4F:92:2C:BD:97:D0:05:70:55:81:F1:D1:13:AF:7B:70:9D:A3 X509v3 Authority Key Identifier: keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0b:6f:d7:8b:2a:67:dd:f3:ce:b7:91:94:89:03:77:45:1e: 98:bc:cf:89:88:b8:b7:a6:03:b0:d0:3a:6f:6b:b2:48:a6:24: 46:10:aa:5b:4c:36:23:5e:ea:1d:8a:12:57:dd:36:2f:76:07: 28:b0:46:86:6b:dd:16:03:ef:f9:b6:a2:41:04:6f:b2:da:83: 0f:e1:59:47:bb:2d:00:6e:4d:cd:1b:6d:9a:06:30:1d:58:9c: dc:45:6c:75:76:8d:65:44:fb:3b:21:e4:8e:d2:5b:dd:41:5c: 84:a1:2f:07:5c:76:c1:71:1e:a7:6c:ad:5a:d3:aa:7e:e4:db: a5:c6:81:dc:b1:21:e5:7e:2e:37:8c:ab:34:77:f2:bc:8d:e7: 00:8c:3f:75:7f:67:9e:3e:b2:2c:38:b7:b6:5b:81:17:fb:cf: d1:f6:ca:89:11:8b:fa:04:62:40:06:4d:8c:78:01:a2:f1:56: 9c:60:e0:65:cd:e1:8f:9e:b4:9f:06:77:23:5b:fa:b5:dc:40: bb:05:11:fa:6c:5d:38:5e:a4:55:13:8e:95:e1:59:86:5e:4f: f6:a8:b1:6b:bb:77:64:61:42:17:ee:c7:0c:0a:02:a8:a0:8a: d5:a6:10:6a:f3:da:45:c1:64:29:c6:50:e4:ab:ce:bd:41:7c: 1c:66:27:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOUCRWUeilKJf6zMLkq9/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZWU0OThhZWFiYTE0NTU3NmE2MWI2MzdmMTM2ZWMxYzNm NDMwZGQwHhcNMjUxMjIyMDQwMjQxWhcNMjUxMjIzMDQwMjQxWjAzMTEwLwYDVQQD EygyNzRhNGY5MjJjYmQ5N2QwMDU3MDU1ODFmMWQxMTNhZjdiNzA5ZGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXCtwdBYljGzoaqAQzxtlqjPrrdY Wz49Djxom1YkxlnjU17Vi3gG0f4CWRkZVxN7JUXZj4Qro8rIBVIo7gZXpi5/0o0+ UlZleRjh/ssrNJr3ng+8IYSTl1fggIrIdzMvGYL/buocmU2WJFTEdJKb4O65tozA sCP52JaPYg0JS86wtb9Faw9ra01dgZ//4FsRhRIKfVM4QwlDQWjCvn6hjoL4e4Cs vLqg9VFiw1kIgzn7GuY/+Rb409Oa+6HRGrSlYmzSlv/gOf31Bet1QqykEuu4AsPo Ej9YBUqjuLKZPwNK+nblAqDhk/seowpNq7jzZebPiM7HOeP/6iVgya+MTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdKT5IsvZfQBXBVgfHRE697cJ2jMB8GA1UdIwQY MBaAFOjuSYrquhRVdqYbY38TbsHD9DDdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk81Sml1cTZGRlYycGh0amZ4TnV3Y1AwTU4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8wZWM5MDUtNjc0MC00NmY0LWIwZTgt YTA2OGFjOGIxMDI4LzEvNk81Sml1cTZGRlYycGh0amZ4TnV3Y1AwTU4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8wZWM5MDUtNjc0MC00NmY0LWIwZTgtYTA2OGFjOGIxMDI4 LzEvNk81Sml1cTZGRlYycGh0amZ4TnV3Y1AwTU4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAtv14sq Z93zzreRlIkDd0UemLzPiYi4t6YDsNA6b2uySKYkRhCqW0w2I17qHYoSV902L3YH KLBGhmvdFgPv+baiQQRvstqDD+FZR7stAG5NzRttmgYwHVic3EVsdXaNZUT7OyHk jtJb3UFchKEvB1x2wXEep2ytWtOqfuTbpcaB3LEh5X4uN4yrNHfyvI3nAIw/dX9n nj6yLDi3tluBF/vP0fbKiRGL+gRiQAZNjHgBovFWnGDgZc3hj560nwZ3I1v6tdxA uwUR+mxdOF6kVROOleFZhl5P9qixa7t3ZGFCF+7HDAoCqKCK1aYQavPaRcFkKcZQ 5KvOvUF8HGYniA== -----END CERTIFICATE-----Generated at Mon Dec 22 14:05:14 2025 by rpki-client