This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft File: 6k4ChliRLmlpfBhVO5Up89HOQF0.mft (raw, json) Hash identifier: lsGU/yOpI5EBDkFcoh7J1htgOfVk29rZE6tOVGk20Bc= Subject key identifier: 2D:2D:E3:BC:89:06:C0:98:F0:CB:3B:BD:04:06:21:9E:3C:DA:A2:BF Authority key identifier: EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D Certificate issuer: /CN=ea4e028658912e69697c18553b9529f3d1ce405d Certificate serial: 019B687BB590E40071CB47798DA783974E0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft Manifest number: 10E8 Signing time: Mon 29 Dec 2025 05:01:36 +0000 Manifest this update: Mon 29 Dec 2025 05:01:36 +0000 Manifest next update: Tue 30 Dec 2025 05:01:36 +0000 Files and hashes: 1: 6k4ChliRLmlpfBhVO5Up89HOQF0.crl (hash: 2iGeQhlmwDZqtlijSCNj0NQA83672i56Is6SCX5GcSY=) 2: hKHrJZfyvpiqMzNaxqWMsCAzd7U.roa (hash: KpUX9BCj308/B4B0VQzL1CJw7WHe+Vbo6CVwUR3M9gA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 05:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:7b:b5:90:e4:00:71:cb:47:79:8d:a7:83:97:4e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea4e028658912e69697c18553b9529f3d1ce405d Validity Not Before: Dec 29 05:01:36 2025 GMT Not After : Dec 30 05:01:36 2025 GMT Subject: CN=2d2de3bc8906c098f0cb3bbd0406219e3cdaa2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:4d:5a:5e:76:53:1a:ba:5a:c2:e2:b8:01: cc:ce:80:61:cf:5b:4b:c3:aa:f5:63:33:62:f2:27: 17:cf:60:f1:e0:51:60:77:8f:7f:89:c9:60:cd:47: d0:70:37:ea:08:bc:d6:5b:1e:a2:5e:af:3e:67:7c: d4:6f:3f:3e:e8:2e:df:db:8a:88:65:53:27:14:67: 3c:d0:c3:ee:65:3b:ec:a1:f2:77:8e:2c:62:78:4f: 6e:ce:7e:74:3b:66:2c:2b:37:55:00:63:a2:f8:54: 61:06:1c:0b:3a:5c:ce:03:3c:6b:c3:15:7d:3b:52: a2:9f:0c:f4:08:12:ec:a7:91:c7:c1:db:27:36:50: 2a:f5:52:50:b1:b0:c6:87:06:07:ab:52:bf:93:ce: d2:d7:ca:76:d1:56:52:2e:b2:a3:69:c0:4d:5a:91: 6b:f8:08:c9:30:d4:d1:87:77:98:5e:5f:8d:17:0b: 75:4f:77:1a:7a:54:30:4d:8a:40:d2:70:a7:0e:60: 47:9c:85:2b:ae:8c:5a:e9:b3:6b:38:57:3f:56:de: 16:83:e8:6b:d2:60:73:18:55:0f:3a:d5:88:3c:17: 56:dc:76:4a:1a:88:f2:0c:8a:92:0e:f6:ef:36:50: 5b:7d:4a:39:98:11:6c:4e:8d:dd:60:1e:c6:01:03: 59:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2D:E3:BC:89:06:C0:98:F0:CB:3B:BD:04:06:21:9E:3C:DA:A2:BF X509v3 Authority Key Identifier: keyid:EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a2:54:08:17:4e:9b:20:e2:00:5a:fc:63:14:d5:5e:f3:d4: 4f:a7:c8:f4:28:e2:57:c9:43:7d:16:48:44:fa:f6:34:06:1b: 6f:9e:b8:e0:2b:a6:f6:02:ad:11:24:9a:c7:bd:c4:b8:81:8c: 94:b5:1b:65:9f:81:30:fb:f8:a5:b8:f6:45:9e:c7:78:3c:55: 91:85:bd:8c:e3:8f:33:b5:f7:72:5a:31:d4:ed:c3:c9:f6:8b: 30:89:77:94:51:a7:7a:da:34:91:60:f1:17:c1:a4:a9:4a:56: c5:cf:c5:b2:fd:86:32:32:d2:fb:31:09:bc:80:7e:b9:47:63: 3d:ec:7f:b1:65:e7:1d:c0:72:bd:62:46:fd:c9:6e:0b:31:0b: 1c:7c:a8:58:b6:f6:ef:13:9f:62:ab:1e:38:78:2f:4a:8d:6b: 59:ee:1c:e4:e4:e1:71:91:c0:1b:e9:2f:52:ce:59:8b:f4:95: fe:62:56:e0:0d:22:fa:b0:29:2c:42:aa:90:2b:83:01:22:be: e2:54:ee:2c:e1:e1:b8:9d:0f:73:cf:f2:39:62:78:6a:9a:fa: 69:d4:ca:fc:93:28:29:08:82:50:a3:65:2b:2c:e5:51:27:1c: 24:2e:b5:de:32:52:60:b6:69:72:63:8c:cf:2a:13:60:5f:6b: b7:aa:dc:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoe7WQ5ABxy0d5jaeDl04KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNGUwMjg2NTg5MTJlNjk2OTdjMTg1NTNiOTUyOWYzZDFj ZTQwNWQwHhcNMjUxMjI5MDUwMTM2WhcNMjUxMjMwMDUwMTM2WjAzMTEwLwYDVQQD EygyZDJkZTNiYzg5MDZjMDk4ZjBjYjNiYmQwNDA2MjE5ZTNjZGFhMmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6xNWl52Uxq6WsLiuAHMzoBhz1tL w6r1YzNi8icXz2Dx4FFgd49/iclgzUfQcDfqCLzWWx6iXq8+Z3zUbz8+6C7f24qI ZVMnFGc80MPuZTvsofJ3jixieE9uzn50O2YsKzdVAGOi+FRhBhwLOlzOAzxrwxV9 O1Kinwz0CBLsp5HHwdsnNlAq9VJQsbDGhwYHq1K/k87S18p20VZSLrKjacBNWpFr +AjJMNTRh3eYXl+NFwt1T3caelQwTYpA0nCnDmBHnIUrroxa6bNrOFc/Vt4Wg+hr 0mBzGFUPOtWIPBdW3HZKGojyDIqSDvbvNlBbfUo5mBFsTo3dYB7GAQNZfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0t47yJBsCY8Ms7vQQGIZ482qK/MB8GA1UdIwQY MBaAFOpOAoZYkS5paXwYVTuVKfPRzkBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNms0Q2hsaVJMbWxwZkJoVk81VXA4OUhPUUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xNDU2MzEtYjYzZS00ODA5LWI0YWIt YmNlZjllMzIyZjJhLzEvNms0Q2hsaVJMbWxwZkJoVk81VXA4OUhPUUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xNDU2MzEtYjYzZS00ODA5LWI0YWItYmNlZjllMzIyZjJh LzEvNms0Q2hsaVJMbWxwZkJoVk81VXA4OUhPUUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqJUCBdO myDiAFr8YxTVXvPUT6fI9CjiV8lDfRZIRPr2NAYbb5644Cum9gKtESSax73EuIGM lLUbZZ+BMPv4pbj2RZ7HeDxVkYW9jOOPM7X3clox1O3DyfaLMIl3lFGneto0kWDx F8GkqUpWxc/Fsv2GMjLS+zEJvIB+uUdjPex/sWXnHcByvWJG/cluCzELHHyoWLb2 7xOfYqseOHgvSo1rWe4c5OThcZHAG+kvUs5Zi/SV/mJW4A0i+rApLEKqkCuDASK+ 4lTuLOHhuJ0Pc8/yOWJ4apr6adTK/JMoKQiCUKNlKyzlUSccJC613jJSYLZpcmOM zyoTYF9rt6rcvA== -----END CERTIFICATE-----Generated at Mon Dec 29 14:54:07 2025 by rpki-client