This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft File: 6UWUa-c3BQO-r75A4REVudyVO8M.mft (raw, json) Hash identifier: NB6MFsrnL8ST9EFhWWuoZyAA0YlMdhTznkfYT9/0beE= Subject key identifier: BA:C7:AC:5B:BD:19:BA:DF:3A:A0:66:6F:AE:A9:30:17:16:26:B0:A7 Authority key identifier: E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3 Certificate issuer: /CN=e945946be7370503beafbe40e11115b9dc953bc3 Certificate serial: 019B3D911067BCC1E25E47B798CCE1B1D2A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft Manifest number: 0F97 Signing time: Sat 20 Dec 2025 21:01:15 +0000 Manifest this update: Sat 20 Dec 2025 21:01:15 +0000 Manifest next update: Sun 21 Dec 2025 21:01:15 +0000 Files and hashes: 1: 6UWUa-c3BQO-r75A4REVudyVO8M.crl (hash: ielSEsWvnG49dBy+BywbZ1IL0c2HOfukTJFzTlQ1Wxc=) 2: QPTMBPa1R1iyVMpj2m0ksKZtNe4.roa (hash: zRiBFcC8k+QThl68UQZBhw2tExgPORwu8ZM6Z3ofO4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:10:67:bc:c1:e2:5e:47:b7:98:cc:e1:b1:d2:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e945946be7370503beafbe40e11115b9dc953bc3 Validity Not Before: Dec 20 21:01:15 2025 GMT Not After : Dec 21 21:01:15 2025 GMT Subject: CN=bac7ac5bbd19badf3aa0666faea930171626b0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a9:ba:33:f0:11:3e:6c:bc:e8:bc:03:50:67: b6:55:58:23:30:ee:3d:b9:4e:84:8b:06:21:41:76: b6:ca:af:44:6e:7d:0e:5e:11:1e:a4:14:4f:23:76: 5b:f3:b8:96:61:52:67:1c:9e:a8:58:a3:af:f5:b5: 65:33:c9:85:f9:0e:f6:71:3e:bc:6a:e4:c1:95:e1: 8d:52:18:4b:39:4b:9b:12:14:6a:0f:bd:fd:df:44: ae:3c:14:5e:1a:94:8c:06:77:2b:0b:06:41:31:77: ce:9f:b7:92:d8:9b:e6:b1:4c:c7:ce:34:c2:97:76: 5d:78:f7:68:07:03:46:12:fa:a1:dd:d5:d0:79:6c: 5a:cf:db:a8:70:77:a0:b1:bf:27:cb:92:4d:d7:a3: ca:a7:20:7c:68:21:a0:d6:30:5c:6c:71:04:e6:c7: 58:1b:a6:cd:00:87:03:cc:e9:b6:9b:c2:57:b1:98: 29:2a:e8:50:bf:48:60:4e:a7:a5:c8:7c:f5:55:57: 35:8a:3f:8b:c3:d0:e5:9c:2a:63:2b:f2:4d:49:dc: 34:41:b2:f3:03:d1:02:ea:9d:52:cc:58:51:4c:9c: 79:90:3f:01:2c:0f:48:f4:0c:cb:b5:62:81:cc:2c: ab:4e:72:0d:d7:f8:c0:f9:1d:d3:af:c9:b3:61:9e: 45:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C7:AC:5B:BD:19:BA:DF:3A:A0:66:6F:AE:A9:30:17:16:26:B0:A7 X509v3 Authority Key Identifier: keyid:E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e0:a6:eb:27:1f:47:62:b5:ec:59:f8:67:85:d4:c6:06:b9: f2:94:15:02:c6:a9:35:ef:39:23:aa:04:2c:59:15:68:ee:56: f1:f2:c2:1e:53:99:93:41:62:ba:8b:5c:8d:28:4f:36:31:b4: 39:89:0c:79:3e:f9:3c:af:af:54:52:83:b0:3d:05:d6:92:5f: 81:bd:cb:0c:1f:13:b1:95:50:7c:a4:65:39:24:47:70:2c:65: f8:59:04:bb:b7:0e:7e:68:9c:c6:2f:15:b1:08:ab:cd:b3:80: 07:56:04:06:b0:e2:f5:70:76:5b:8b:33:10:b4:f9:7b:63:8a: 3f:c5:ba:c9:3b:97:db:4d:dc:e4:d2:38:19:97:d4:76:ca:38: aa:7a:2b:e9:52:99:d4:6e:3c:e6:bb:2d:d8:43:de:ab:7e:60: 47:03:3e:fb:4f:a4:52:d6:17:90:45:2f:b0:c1:83:22:fb:7a: 40:34:61:c6:d5:bd:c5:df:11:21:aa:21:10:ba:a2:df:6b:df: e2:53:1d:c5:df:7e:16:50:d7:1f:e6:61:13:ed:3a:f0:9a:3c: 18:67:6f:8e:57:04:07:56:00:8b:c6:de:63:bd:33:76:02:37: 00:86:6d:bf:d7:18:de:85:d5:31:ae:fc:27:3c:06:e8:90:2b: 51:c0:10:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kRBnvMHiXke3mMzhsdKjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NDU5NDZiZTczNzA1MDNiZWFmYmU0MGUxMTExNWI5ZGM5 NTNiYzMwHhcNMjUxMjIwMjEwMTE1WhcNMjUxMjIxMjEwMTE1WjAzMTEwLwYDVQQD EyhiYWM3YWM1YmJkMTliYWRmM2FhMDY2NmZhZWE5MzAxNzE2MjZiMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyam6M/ARPmy86LwDUGe2VVgjMO49 uU6EiwYhQXa2yq9Ebn0OXhEepBRPI3Zb87iWYVJnHJ6oWKOv9bVlM8mF+Q72cT68 auTBleGNUhhLOUubEhRqD73930SuPBReGpSMBncrCwZBMXfOn7eS2JvmsUzHzjTC l3ZdePdoBwNGEvqh3dXQeWxaz9uocHegsb8ny5JN16PKpyB8aCGg1jBcbHEE5sdY G6bNAIcDzOm2m8JXsZgpKuhQv0hgTqelyHz1VVc1ij+Lw9DlnCpjK/JNSdw0QbLz A9EC6p1SzFhRTJx5kD8BLA9I9AzLtWKBzCyrTnIN1/jA+R3Tr8mzYZ5FWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrHrFu9GbrfOqBmb66pMBcWJrCnMB8GA1UdIwQY MBaAFOlFlGvnNwUDvq++QOERFbnclTvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlVXVWEtYzNCUU8tcjc1QTRSRVZ1ZHlWTzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81ZmYxOTktZGFmMC00YTdlLThlNWQt NjZkM2Q4YmE1MzlmLzEvNlVXVWEtYzNCUU8tcjc1QTRSRVZ1ZHlWTzhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81ZmYxOTktZGFmMC00YTdlLThlNWQtNjZkM2Q4YmE1Mzlm LzEvNlVXVWEtYzNCUU8tcjc1QTRSRVZ1ZHlWTzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOCm6ycf R2K17Fn4Z4XUxga58pQVAsapNe85I6oELFkVaO5W8fLCHlOZk0FiuotcjShPNjG0 OYkMeT75PK+vVFKDsD0F1pJfgb3LDB8TsZVQfKRlOSRHcCxl+FkEu7cOfmicxi8V sQirzbOAB1YEBrDi9XB2W4szELT5e2OKP8W6yTuX203c5NI4GZfUdso4qnor6VKZ 1G485rst2EPeq35gRwM++0+kUtYXkEUvsMGDIvt6QDRhxtW9xd8RIaohELqi32vf 4lMdxd9+FlDXH+ZhE+068Jo8GGdvjlcEB1YAi8beY70zdgI3AIZtv9cY3oXVMa78 JzwG6JArUcAQyQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:19:21 2025 by rpki-client