This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft File: 6k4ChliRLmlpfBhVO5Up89HOQF0.mft (raw, json) Hash identifier: Lc1RoKm4a3acwPm2w35v3zaTBkhYx/E4aMcqhwOYhBA= Subject key identifier: D1:12:CE:C4:04:2F:83:19:0D:AF:72:EC:D6:EB:09:50:BC:63:DC:A5 Authority key identifier: EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D Certificate issuer: /CN=ea4e028658912e69697c18553b9529f3d1ce405d Certificate serial: 019B552BA83F6D30EF8A0E6092A6395A11D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft Manifest number: 10DE Signing time: Thu 25 Dec 2025 11:01:23 +0000 Manifest this update: Thu 25 Dec 2025 11:01:23 +0000 Manifest next update: Fri 26 Dec 2025 11:01:23 +0000 Files and hashes: 1: 6k4ChliRLmlpfBhVO5Up89HOQF0.crl (hash: g+r6Wr0NyOedHD63+xA1KBJXJMhY8+uKCKVw7nP+yGA=) 2: hKHrJZfyvpiqMzNaxqWMsCAzd7U.roa (hash: KpUX9BCj308/B4B0VQzL1CJw7WHe+Vbo6CVwUR3M9gA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2b:a8:3f:6d:30:ef:8a:0e:60:92:a6:39:5a:11:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea4e028658912e69697c18553b9529f3d1ce405d Validity Not Before: Dec 25 11:01:23 2025 GMT Not After : Dec 26 11:01:23 2025 GMT Subject: CN=d112cec4042f83190daf72ecd6eb0950bc63dca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:71:88:d8:02:a2:26:88:2a:4c:f6:ca:01:7f: ad:f3:72:0e:6d:f4:f1:c4:90:1e:81:86:09:56:5a: 56:93:e4:ed:13:f2:6c:f7:0a:e0:44:f7:ba:04:7e: 31:9f:f0:84:3d:ed:81:a0:a1:29:bb:38:6d:0e:44: 4f:f4:7d:dc:1e:35:7f:6a:98:c1:30:ac:f7:98:1f: bf:58:4a:f1:f2:27:fe:72:36:50:fe:b8:23:b0:f4: 70:b5:e1:76:b0:4e:8f:6b:a1:5d:f9:be:e6:12:ac: cb:cc:61:3d:58:1c:89:c1:5a:f4:43:a9:16:4c:d2: 4f:e0:d8:b3:ec:d0:6e:65:31:44:a0:e7:79:73:70: 38:2d:7e:2d:af:28:a6:2c:ed:fa:c0:67:21:65:28: df:cd:75:64:b5:ab:03:19:28:22:de:5f:bf:13:7f: 1b:66:e4:06:88:ac:29:47:b3:69:c1:a1:19:04:3b: 16:c4:ef:38:46:bb:23:59:cb:79:ea:f5:bf:7d:07: 91:90:19:e9:2e:de:25:07:91:74:6b:46:d1:7b:90: 46:9a:86:08:df:29:74:c1:0d:d6:cb:11:17:57:99: 56:2f:61:e4:47:1a:6e:43:22:86:3e:21:ef:cf:db: bf:91:02:c8:d3:27:39:14:fb:bb:c6:7d:8a:cf:5e: ac:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:12:CE:C4:04:2F:83:19:0D:AF:72:EC:D6:EB:09:50:BC:63:DC:A5 X509v3 Authority Key Identifier: keyid:EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:76:a8:f4:87:07:17:01:d5:19:f9:6e:50:84:3b:24:98:69: 91:27:63:70:1a:f4:d5:3d:06:2d:7d:4b:0c:74:84:41:f3:14: e7:e4:75:bb:27:37:fe:f9:9e:ea:fe:b0:32:7b:bb:06:72:a2: 27:d9:fe:6c:d4:b3:d5:4d:99:e7:ee:a2:21:de:eb:f6:0e:86: 80:e9:65:76:d3:73:7f:14:48:c6:7d:6b:27:6a:8d:29:35:38: 9e:9a:fb:ab:44:b9:d1:91:94:b6:a7:fa:db:0c:9c:2f:8c:7f: 26:e4:65:1b:b2:ed:03:47:c3:20:6c:00:b8:f1:af:56:54:c9: 3f:62:ad:e5:a6:97:22:a2:5a:d8:c5:6e:d6:2b:14:2a:ae:32: 66:6c:e8:a0:1a:50:09:55:96:e0:c2:79:31:38:9b:94:78:45: a4:f9:f1:f0:a4:9a:8d:98:b2:cc:0c:f5:bb:f9:0b:2d:b1:38: 37:60:c0:f5:15:3c:95:2b:3f:79:2a:d0:91:78:7a:20:65:05: f7:77:40:1e:32:bb:dd:cd:2a:7c:66:ef:f6:a5:e0:40:02:2f: 8b:47:88:58:d9:39:02:c2:ba:86:b9:97:1d:eb:dc:b8:d0:2e: 03:03:58:c8:df:d4:17:b3:c4:41:6b:f4:2d:76:d1:83:c2:8f: 81:4a:42:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVK6g/bTDvig5gkqY5WhHVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNGUwMjg2NTg5MTJlNjk2OTdjMTg1NTNiOTUyOWYzZDFj ZTQwNWQwHhcNMjUxMjI1MTEwMTIzWhcNMjUxMjI2MTEwMTIzWjAzMTEwLwYDVQQD EyhkMTEyY2VjNDA0MmY4MzE5MGRhZjcyZWNkNmViMDk1MGJjNjNkY2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XGI2AKiJogqTPbKAX+t83IObfTx xJAegYYJVlpWk+TtE/Js9wrgRPe6BH4xn/CEPe2BoKEpuzhtDkRP9H3cHjV/apjB MKz3mB+/WErx8if+cjZQ/rgjsPRwteF2sE6Pa6Fd+b7mEqzLzGE9WByJwVr0Q6kW TNJP4Niz7NBuZTFEoOd5c3A4LX4tryimLO36wGchZSjfzXVktasDGSgi3l+/E38b ZuQGiKwpR7NpwaEZBDsWxO84RrsjWct56vW/fQeRkBnpLt4lB5F0a0bRe5BGmoYI 3yl0wQ3WyxEXV5lWL2HkRxpuQyKGPiHvz9u/kQLI0yc5FPu7xn2Kz16sFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNESzsQEL4MZDa9y7NbrCVC8Y9ylMB8GA1UdIwQY MBaAFOpOAoZYkS5paXwYVTuVKfPRzkBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNms0Q2hsaVJMbWxwZkJoVk81VXA4OUhPUUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xNDU2MzEtYjYzZS00ODA5LWI0YWIt YmNlZjllMzIyZjJhLzEvNms0Q2hsaVJMbWxwZkJoVk81VXA4OUhPUUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xNDU2MzEtYjYzZS00ODA5LWI0YWItYmNlZjllMzIyZjJh LzEvNms0Q2hsaVJMbWxwZkJoVk81VXA4OUhPUUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXao9IcH FwHVGfluUIQ7JJhpkSdjcBr01T0GLX1LDHSEQfMU5+R1uyc3/vme6v6wMnu7BnKi J9n+bNSz1U2Z5+6iId7r9g6GgOlldtNzfxRIxn1rJ2qNKTU4npr7q0S50ZGUtqf6 2wycL4x/JuRlG7LtA0fDIGwAuPGvVlTJP2Kt5aaXIqJa2MVu1isUKq4yZmzooBpQ CVWW4MJ5MTiblHhFpPnx8KSajZiyzAz1u/kLLbE4N2DA9RU8lSs/eSrQkXh6IGUF 93dAHjK73c0qfGbv9qXgQAIvi0eIWNk5AsK6hrmXHevcuNAuAwNYyN/UF7PEQWv0 LXbRg8KPgUpCvg== -----END CERTIFICATE-----Generated at Thu Dec 25 13:04:09 2025 by rpki-client