This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft File: 6lUOVOR2bVdl0PPQYd8ddNpViXM.mft (raw, json) Hash identifier: JE6Ut7devMOudWdIuH/Yo4gv5Z2gw7hC9+tNpiC6DoU= Subject key identifier: 28:2C:95:32:FB:5B:00:86:CB:7D:28:8C:3F:AA:3B:46:1C:C3:34:56 Authority key identifier: EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73 Certificate issuer: /CN=ea550e54e4766d5765d0f3d061df1d74da558973 Certificate serial: 019B4324D3EAAC707CA76AC61A3645AE4AA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft Manifest number: 0EDC Signing time: Sun 21 Dec 2025 23:00:45 +0000 Manifest this update: Sun 21 Dec 2025 23:00:45 +0000 Manifest next update: Mon 22 Dec 2025 23:00:45 +0000 Files and hashes: 1: 6lUOVOR2bVdl0PPQYd8ddNpViXM.crl (hash: GvvxWJ0tehwtTXPzsk109b8P6HFCeRjw4TA9cMJF0+Y=) 2: SOLF2PkE720JgjOdf1KwRyDMoVU.roa (hash: xFpd4K6CQn8K2Nx3S7ipIBzbB30czEVkqtv2sS8du2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:d3:ea:ac:70:7c:a7:6a:c6:1a:36:45:ae:4a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea550e54e4766d5765d0f3d061df1d74da558973 Validity Not Before: Dec 21 23:00:45 2025 GMT Not After : Dec 22 23:00:45 2025 GMT Subject: CN=282c9532fb5b0086cb7d288c3faa3b461cc33456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dc:e7:b4:82:87:56:f2:0d:f0:d2:f5:bb:2b: 83:ac:82:c5:93:cc:74:0b:a9:59:19:4a:b9:82:96: d0:66:5a:38:e4:1b:98:1f:f1:fb:1a:03:ee:7a:1f: bd:30:6c:03:6f:55:a4:8a:16:0d:37:75:46:4a:c8: dc:71:09:20:e8:e1:9c:63:3c:b6:ac:c4:24:c0:d7: 59:07:d0:d8:c8:49:99:4b:fd:06:d2:36:a7:f9:c1: bf:22:e5:c6:62:c9:8d:17:86:a4:f8:76:73:c7:2f: 03:70:48:36:89:bf:c6:30:9d:f3:f5:77:83:f1:f0: cf:4b:c8:b7:96:e6:2f:32:f1:90:48:72:ae:7f:08: f9:b9:b0:1c:cc:49:1f:54:a4:50:31:c3:cd:2b:df: 7c:e4:fb:ad:5e:11:c5:25:e5:03:8d:69:84:5b:60: 85:cc:ef:dc:a9:44:f2:73:c1:40:90:dc:f4:a9:84: ce:62:e3:2c:0f:de:cd:d7:5f:cf:12:a0:1d:d4:a3: 98:31:fa:78:fd:c8:49:a0:3a:65:c1:8d:ff:df:c6: 35:3a:ac:69:25:5b:3a:9d:3b:eb:80:c1:bf:23:a7: 34:15:8b:9a:58:35:82:8b:83:50:ac:08:78:ae:85: 91:9e:0c:73:e9:0b:83:27:36:0b:ad:09:52:81:e5: 2e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2C:95:32:FB:5B:00:86:CB:7D:28:8C:3F:AA:3B:46:1C:C3:34:56 X509v3 Authority Key Identifier: keyid:EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:67:9c:7c:61:dc:40:32:64:15:fd:74:57:67:b7:98:88:15: 31:7c:3f:e1:af:3f:08:10:b6:56:9c:d0:ed:7f:60:0c:32:c0: 6c:c6:c9:71:fd:eb:d1:a8:2e:97:ef:08:7e:69:ad:5d:f0:bb: a4:79:c6:a4:e9:1e:b6:1e:c1:c1:e2:af:53:f3:7d:9c:9c:68: 47:bf:fe:3a:e0:7b:6a:bc:3f:b3:7a:16:fd:b4:cc:88:1c:cc: c7:c5:96:e6:72:5e:ce:a5:4f:ee:6c:8a:36:05:98:8f:15:bb: ff:db:3d:00:ef:90:f3:36:2e:96:32:f3:83:45:2e:55:75:bf: b6:e3:d8:58:a4:00:ef:ad:48:dd:e6:90:b8:78:d4:b6:37:48: 3f:39:3d:2a:2b:73:23:60:8f:68:90:a9:c1:7b:e5:49:0e:b2: 3a:38:87:86:3f:c4:5e:16:5a:67:6c:42:32:fb:6f:97:61:59: cd:ca:dd:c6:d8:f8:21:c9:af:71:30:29:82:a7:f0:a8:73:0f: 9b:c8:96:58:f8:cf:02:c9:42:8e:59:43:f8:9d:81:ed:5e:44: 5c:85:c0:c1:2d:2e:20:04:f6:62:25:80:25:51:2b:9b:54:3b: 35:27:22:8e:c6:41:76:ad:94:aa:b9:5f:a1:7e:51:8a:b3:68: a2:17:7b:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJNPqrHB8p2rGGjZFrkqoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTUwZTU0ZTQ3NjZkNTc2NWQwZjNkMDYxZGYxZDc0ZGE1 NTg5NzMwHhcNMjUxMjIxMjMwMDQ1WhcNMjUxMjIyMjMwMDQ1WjAzMTEwLwYDVQQD EygyODJjOTUzMmZiNWIwMDg2Y2I3ZDI4OGMzZmFhM2I0NjFjYzMzNDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdzntIKHVvIN8NL1uyuDrILFk8x0 C6lZGUq5gpbQZlo45BuYH/H7GgPueh+9MGwDb1WkihYNN3VGSsjccQkg6OGcYzy2 rMQkwNdZB9DYyEmZS/0G0jan+cG/IuXGYsmNF4ak+HZzxy8DcEg2ib/GMJ3z9XeD 8fDPS8i3luYvMvGQSHKufwj5ubAczEkfVKRQMcPNK9985PutXhHFJeUDjWmEW2CF zO/cqUTyc8FAkNz0qYTOYuMsD97N11/PEqAd1KOYMfp4/chJoDplwY3/38Y1Oqxp JVs6nTvrgMG/I6c0FYuaWDWCi4NQrAh4roWRngxz6QuDJzYLrQlSgeUuWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgslTL7WwCGy30ojD+qO0YcwzRWMB8GA1UdIwQY MBaAFOpVDlTkdm1XZdDz0GHfHXTaVYlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxVT1ZPUjJiVmRsMFBQUVlkOGRkTnBWaVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OGY2MzctMzEyMS00MGY3LWI3OGYt OWM5ZjIwOTAzMjlhLzEvNmxVT1ZPUjJiVmRsMFBQUVlkOGRkTnBWaVhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82OGY2MzctMzEyMS00MGY3LWI3OGYtOWM5ZjIwOTAzMjlh LzEvNmxVT1ZPUjJiVmRsMFBQUVlkOGRkTnBWaVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2ecfGHc QDJkFf10V2e3mIgVMXw/4a8/CBC2VpzQ7X9gDDLAbMbJcf3r0agul+8IfmmtXfC7 pHnGpOketh7BweKvU/N9nJxoR7/+OuB7arw/s3oW/bTMiBzMx8WW5nJezqVP7myK NgWYjxW7/9s9AO+Q8zYuljLzg0UuVXW/tuPYWKQA761I3eaQuHjUtjdIPzk9Kitz I2CPaJCpwXvlSQ6yOjiHhj/EXhZaZ2xCMvtvl2FZzcrdxtj4IcmvcTApgqfwqHMP m8iWWPjPAslCjllD+J2B7V5EXIXAwS0uIAT2YiWAJVErm1Q7NScijsZBdq2Uqrlf oX5RirNoohd7Jw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:26:21 2025 by rpki-client