This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft File: 6k4ChliRLmlpfBhVO5Up89HOQF0.mft (raw, json) Hash identifier: DEMh+neS/pJVTqNU/mGKEZuwr3qz5Rim0hB+9DoVlcE= Subject key identifier: BD:E2:E5:5E:E5:4A:D4:49:F8:F8:CB:17:2D:6D:68:10:BF:03:DB:C3 Authority key identifier: EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D Certificate issuer: /CN=ea4e028658912e69697c18553b9529f3d1ce405d Certificate serial: 019B3833BC8675368A3E182A988596F81EDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft Manifest number: 10CF Signing time: Fri 19 Dec 2025 20:01:13 +0000 Manifest this update: Fri 19 Dec 2025 20:01:13 +0000 Manifest next update: Sat 20 Dec 2025 20:01:13 +0000 Files and hashes: 1: 6k4ChliRLmlpfBhVO5Up89HOQF0.crl (hash: EXv3YhNqsipl/wDfuh0XQEufsFE8UC6sBaBNNYGta4g=) 2: hKHrJZfyvpiqMzNaxqWMsCAzd7U.roa (hash: KpUX9BCj308/B4B0VQzL1CJw7WHe+Vbo6CVwUR3M9gA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:bc:86:75:36:8a:3e:18:2a:98:85:96:f8:1e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea4e028658912e69697c18553b9529f3d1ce405d Validity Not Before: Dec 19 20:01:13 2025 GMT Not After : Dec 20 20:01:13 2025 GMT Subject: CN=bde2e55ee54ad449f8f8cb172d6d6810bf03dbc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:46:63:6c:62:8f:0b:28:8f:1d:7a:a2:76:33: 37:1c:0c:84:c9:75:d4:e1:f1:89:31:80:58:64:33: df:05:d4:3d:00:2a:75:ca:56:dd:55:7e:2a:6a:aa: d6:49:ad:03:0c:5d:a3:77:4e:93:c3:6d:7c:83:c9: af:e5:61:10:e0:d7:f2:50:9c:3e:49:37:a6:d1:f7: cc:19:68:3b:be:a7:65:11:d3:6d:48:e6:12:8d:fa: b9:d9:2e:dc:cb:5f:10:8a:35:df:92:07:3e:30:4b: 26:da:99:2f:c2:cc:ba:81:7e:1b:ba:b2:15:18:6f: 14:38:47:68:c8:c0:d2:c3:df:4b:52:e8:18:23:b5: b5:56:a3:d2:e0:d3:eb:8c:05:a0:e7:98:22:2b:e5: cf:23:e1:cb:0e:0c:38:44:c8:02:45:f7:96:0e:d9: cf:db:57:bb:e3:69:7e:59:fe:a5:98:8f:da:5d:b5: 00:5e:4f:f6:97:84:c6:f1:70:e9:65:5a:64:3d:ef: d9:11:65:dd:ac:2a:5d:2b:b0:cd:a6:32:f3:48:23: 15:05:d9:a1:53:b5:fd:12:4a:0b:37:61:f7:b4:9f: 46:f6:32:4b:b1:6e:de:16:9b:54:ec:ed:e1:f8:9f: 44:1c:d4:e8:74:b5:46:d6:73:c5:6f:20:ea:c7:85: b9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E2:E5:5E:E5:4A:D4:49:F8:F8:CB:17:2D:6D:68:10:BF:03:DB:C3 X509v3 Authority Key Identifier: keyid:EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:21:8c:43:e1:35:1f:b3:6d:dc:5e:0b:52:c6:ee:10:e2:24: 02:6a:9b:ab:d5:18:4a:3a:40:46:38:ae:1d:a0:7c:fa:85:37: 81:65:de:02:6a:69:29:35:26:96:de:1b:6b:b8:7d:73:88:01: 3a:8a:fa:c2:b4:b4:cf:f6:a5:86:4e:45:83:07:55:97:2f:64: e3:08:13:2a:cf:dd:34:e4:48:09:e6:05:5f:90:2a:45:37:f2: fc:5a:58:4d:55:87:ab:b7:5d:07:40:25:e1:13:bd:24:7d:f9: 79:4d:2b:1b:b0:6f:62:b2:45:c7:e0:f4:4c:3c:63:97:60:0c: ba:ec:f1:6c:db:f5:84:f3:03:d5:7b:00:f4:07:62:7d:3a:3b: 5a:99:36:5f:24:ee:a4:c9:10:6f:fd:6c:eb:29:96:58:21:82: 71:12:9d:cd:43:bd:aa:50:01:24:03:81:e0:5f:09:c8:8d:8d: d9:3a:86:b6:5b:26:92:41:e2:33:d1:c3:c4:49:9e:60:bc:f6: 1e:0e:fb:fd:f3:a8:b4:75:d5:65:d5:a7:be:bd:e4:1a:e1:c8: 26:b6:1e:89:59:17:2b:5e:af:7a:d3:c0:eb:e7:7f:7d:1f:d5: 88:85:e4:b9:dd:0b:b0:99:fe:b4:8d:4a:9a:09:ac:3d:aa:a9: 3c:46:89:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M7yGdTaKPhgqmIWW+B7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNGUwMjg2NTg5MTJlNjk2OTdjMTg1NTNiOTUyOWYzZDFj ZTQwNWQwHhcNMjUxMjE5MjAwMTEzWhcNMjUxMjIwMjAwMTEzWjAzMTEwLwYDVQQD EyhiZGUyZTU1ZWU1NGFkNDQ5ZjhmOGNiMTcyZDZkNjgxMGJmMDNkYmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEZjbGKPCyiPHXqidjM3HAyEyXXU 4fGJMYBYZDPfBdQ9ACp1ylbdVX4qaqrWSa0DDF2jd06Tw218g8mv5WEQ4NfyUJw+ STem0ffMGWg7vqdlEdNtSOYSjfq52S7cy18QijXfkgc+MEsm2pkvwsy6gX4burIV GG8UOEdoyMDSw99LUugYI7W1VqPS4NPrjAWg55giK+XPI+HLDgw4RMgCRfeWDtnP 21e742l+Wf6lmI/aXbUAXk/2l4TG8XDpZVpkPe/ZEWXdrCpdK7DNpjLzSCMVBdmh U7X9EkoLN2H3tJ9G9jJLsW7eFptU7O3h+J9EHNTodLVG1nPFbyDqx4W5iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3i5V7lStRJ+PjLFy1taBC/A9vDMB8GA1UdIwQY MBaAFOpOAoZYkS5paXwYVTuVKfPRzkBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNms0Q2hsaVJMbWxwZkJoVk81VXA4OUhPUUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xNDU2MzEtYjYzZS00ODA5LWI0YWIt YmNlZjllMzIyZjJhLzEvNms0Q2hsaVJMbWxwZkJoVk81VXA4OUhPUUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xNDU2MzEtYjYzZS00ODA5LWI0YWItYmNlZjllMzIyZjJh LzEvNms0Q2hsaVJMbWxwZkJoVk81VXA4OUhPUUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCGMQ+E1 H7Nt3F4LUsbuEOIkAmqbq9UYSjpARjiuHaB8+oU3gWXeAmppKTUmlt4ba7h9c4gB Oor6wrS0z/alhk5FgwdVly9k4wgTKs/dNORICeYFX5AqRTfy/FpYTVWHq7ddB0Al 4RO9JH35eU0rG7BvYrJFx+D0TDxjl2AMuuzxbNv1hPMD1XsA9AdifTo7Wpk2XyTu pMkQb/1s6ymWWCGCcRKdzUO9qlABJAOB4F8JyI2N2TqGtlsmkkHiM9HDxEmeYLz2 Hg77/fOotHXVZdWnvr3kGuHIJrYeiVkXK16vetPA6+d/fR/ViIXkud0LsJn+tI1K mgmsPaqpPEaJqQ== -----END CERTIFICATE-----Generated at Fri Dec 19 21:58:09 2025 by rpki-client