This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft File: 6hyVHWG4faGUOXhNI2Z6icsykKQ.mft (raw, json) Hash identifier: wFwfBBXQEstvG9HV+al0+t/cppUMPSuyxZ6+ZFWvdYY= Subject key identifier: B1:EF:03:ED:37:3C:0D:34:4E:F7:EF:FE:2C:E5:0D:32:93:AD:51:48 Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4 Certificate issuer: /CN=ea1c951d61b87da19439784d23667a89cb3290a4 Certificate serial: 019B3D9090793684A2473F6DBEC2FC9C2B6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft Manifest number: 11D7 Signing time: Sat 20 Dec 2025 21:00:42 +0000 Manifest this update: Sat 20 Dec 2025 21:00:42 +0000 Manifest next update: Sun 21 Dec 2025 21:00:42 +0000 Files and hashes: 1: 6hyVHWG4faGUOXhNI2Z6icsykKQ.crl (hash: 0htuejDTxXxbOpEpwIuy+IeakdkTGxWDzkipTRqHaFo=) 2: DNuH6oIfd0PY2UVMr4WMzxd7NU0.roa (hash: iqajQOHR2WVqg/fcCZBACzn/zImoOaKBPBj1ANJonPc=) 3: IDKX9sPGQlI6MZvv-y5YFAm0ePk.roa (hash: k1Iw/tEDEs1ds0ZzGmimuwWihzs+ZhkkWmj8r8qIDVY=) 4: NQVBTx4RbrONvu3Vt7IdOsvxKko.roa (hash: ci9wFGdOR13x1Mk5Vu2208pIxEOz06nAwV5fe0oYKhQ=) 5: eD-jgmLjU8l3pyRuumgK9QIMg5I.roa (hash: MI8CkhvzSAw59I9pdOh0qmm9At+Brpo0+Yc/fyYEwKI=) 6: t4HOM7223cblLwASPVWvJxWa0P8.roa (hash: 6CJfm+zy3ed5GsTq+D3MyV6sLn5UpIUZ3lP8fBBYmiw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:90:79:36:84:a2:47:3f:6d:be:c2:fc:9c:2b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4 Validity Not Before: Dec 20 21:00:42 2025 GMT Not After : Dec 21 21:00:42 2025 GMT Subject: CN=b1ef03ed373c0d344ef7effe2ce50d3293ad5148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cd:90:d7:a0:06:f2:43:0f:5f:6d:9d:34:b4: a9:9f:68:b0:f6:1d:1f:06:7b:02:85:cb:02:22:17: c9:95:66:b5:19:a4:9c:b5:12:38:85:01:bc:d6:f7: 07:be:0e:41:93:a7:89:f1:e6:29:f4:c1:2b:be:1d: 62:6b:3f:39:3f:dd:db:0f:2f:77:bd:ba:ba:12:4f: 48:6e:9c:54:17:0f:4b:39:19:1c:5b:34:bf:68:3d: c9:7a:be:84:05:0d:c9:9b:d3:37:55:59:8c:76:03: 2d:f1:8a:0e:e1:9b:14:ec:96:dc:1c:8b:23:e3:5f: 38:16:e3:b2:0c:25:56:af:5a:7c:be:f3:89:4d:c0: 68:a5:31:0b:d5:de:5f:16:66:fe:e4:f5:07:bf:41: 82:06:27:21:07:1e:09:b8:d8:a2:58:a2:54:84:9e: a1:b8:df:07:58:52:8e:70:5a:53:5d:26:04:7f:4e: ac:63:47:2b:3a:27:4c:17:05:6b:69:1c:65:1f:8e: d6:2d:6f:32:b9:d4:a7:0e:39:48:85:3f:c4:02:b4: 3a:25:6c:65:87:e1:f8:2e:9a:ea:30:eb:63:d6:00: c1:cb:2c:b7:95:39:6e:79:aa:f9:77:69:76:a2:ea: 8f:5f:4a:90:ba:d1:79:04:42:e4:1d:49:81:e2:ce: 3f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EF:03:ED:37:3C:0D:34:4E:F7:EF:FE:2C:E5:0D:32:93:AD:51:48 X509v3 Authority Key Identifier: keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:31:46:90:b7:2f:06:ac:ee:48:e0:80:79:31:bc:bf:78:8a: f8:ab:12:61:c7:71:ae:89:48:6f:d7:76:fd:3f:83:90:33:a2: 03:ed:ff:9e:a5:6e:f8:e0:a7:88:ab:27:79:b3:5f:76:90:10: e3:b7:eb:ad:1e:93:85:89:15:b2:5a:94:40:9a:84:ef:56:f5: 08:b2:28:f3:2b:f9:7d:c2:06:28:34:a3:80:79:ef:45:5d:42: 21:dc:d0:3e:a9:64:1d:2d:33:71:bc:5d:51:fa:ec:0f:4b:fa: 05:69:81:0e:41:60:39:f8:f9:bb:c3:b5:fa:db:98:a7:11:cf: 66:c3:8d:55:e4:39:35:72:b5:43:91:2e:c0:24:64:22:0f:bd: ec:b4:f9:da:68:50:02:7e:53:40:7b:5b:af:30:ed:0d:28:d8: d7:bf:5d:d6:2e:aa:84:f3:ca:67:6f:cc:84:ba:c5:aa:af:56: 73:a0:5a:dd:f4:98:34:4c:31:56:59:0f:d0:35:7d:19:78:3b: b8:d4:2f:26:b3:51:ae:3f:97:99:e1:d8:f6:61:44:de:11:34: 90:ee:cc:9f:53:b4:f4:8e:45:75:ff:78:7c:b7:db:1b:04:9e: a5:49:45:0b:1c:57:b9:a0:d8:fa:20:ac:fa:2f:7e:0e:5d:64: 11:c7:03:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kJB5NoSiRz9tvsL8nCtsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMWM5NTFkNjFiODdkYTE5NDM5Nzg0ZDIzNjY3YTg5Y2Iz MjkwYTQwHhcNMjUxMjIwMjEwMDQyWhcNMjUxMjIxMjEwMDQyWjAzMTEwLwYDVQQD EyhiMWVmMDNlZDM3M2MwZDM0NGVmN2VmZmUyY2U1MGQzMjkzYWQ1MTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms2Q16AG8kMPX22dNLSpn2iw9h0f BnsChcsCIhfJlWa1GaSctRI4hQG81vcHvg5Bk6eJ8eYp9MErvh1iaz85P93bDy93 vbq6Ek9IbpxUFw9LORkcWzS/aD3Jer6EBQ3Jm9M3VVmMdgMt8YoO4ZsU7JbcHIsj 4184FuOyDCVWr1p8vvOJTcBopTEL1d5fFmb+5PUHv0GCBichBx4JuNiiWKJUhJ6h uN8HWFKOcFpTXSYEf06sY0crOidMFwVraRxlH47WLW8yudSnDjlIhT/EArQ6JWxl h+H4LprqMOtj1gDByyy3lTluear5d2l2ouqPX0qQutF5BELkHUmB4s4/1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHvA+03PA00Tvfv/izlDTKTrVFIMB8GA1UdIwQY MBaAFOoclR1huH2hlDl4TSNmeonLMpCkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82MTc3MTUtOTQ4NC00MGY5LTg5NmMt NzI0YjFhMDIxMmQ0LzEvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS82MTc3MTUtOTQ4NC00MGY5LTg5NmMtNzI0YjFhMDIxMmQ0 LzEvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTFGkLcv BqzuSOCAeTG8v3iK+KsSYcdxrolIb9d2/T+DkDOiA+3/nqVu+OCniKsnebNfdpAQ 47frrR6ThYkVslqUQJqE71b1CLIo8yv5fcIGKDSjgHnvRV1CIdzQPqlkHS0zcbxd UfrsD0v6BWmBDkFgOfj5u8O1+tuYpxHPZsONVeQ5NXK1Q5EuwCRkIg+97LT52mhQ An5TQHtbrzDtDSjY179d1i6qhPPKZ2/MhLrFqq9Wc6Ba3fSYNEwxVlkP0DV9GXg7 uNQvJrNRrj+XmeHY9mFE3hE0kO7Mn1O09I5Fdf94fLfbGwSepUlFCxxXuaDY+iCs +i9+Dl1kEccDjg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:38:10 2025 by rpki-client