This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft File: r6R0pepgHICSke55uuORiWTQhx4.mft (raw, json) Hash identifier: 5GX90VGXl+Hsu7rN9U9Z5wLuqM3KvHPI85FiXheCxX4= Subject key identifier: 4B:9C:0D:95:99:84:2F:01:2E:F6:1B:F2:B8:EE:E5:73:9C:42:4E:3C Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E Certificate issuer: /CN=afa474a5ea601c809291ee79bae3918964d0871e Certificate serial: 019B6467A4F1CF88B08ADC70947C8070FD21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft Manifest number: 0E70 Signing time: Sun 28 Dec 2025 10:01:12 +0000 Manifest this update: Sun 28 Dec 2025 10:01:12 +0000 Manifest next update: Mon 29 Dec 2025 10:01:12 +0000 Files and hashes: 1: r6R0pepgHICSke55uuORiWTQhx4.crl (hash: SWic9MpLc6K5JNRrBf/0yNc0pY3mBZFiPsKeqP1REPo=) 2: x6GJc4ojOxgz3esDAZaU67m_2pc.roa (hash: zoKZ4awQgsW57nby6hTMjyGrch8AryfCfI+Yae5icPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:67:a4:f1:cf:88:b0:8a:dc:70:94:7c:80:70:fd:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e Validity Not Before: Dec 28 10:01:12 2025 GMT Not After : Dec 29 10:01:12 2025 GMT Subject: CN=4b9c0d9599842f012ef61bf2b8eee5739c424e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9e:e5:c0:c7:eb:ee:d4:11:1f:dd:e7:eb:a3: 67:4b:ab:31:c1:f5:1a:ee:cc:e3:20:14:3b:d4:85: 24:1d:63:3b:ba:6f:8e:7b:d6:75:aa:8a:95:29:a8: 9f:36:73:07:c8:83:aa:dd:0d:60:5f:b6:a0:14:3d: 4f:d4:69:88:b8:29:55:99:07:88:09:a1:2e:41:a4: 41:89:7a:8c:04:d9:9f:51:38:89:5d:93:9b:5e:4f: d8:54:cb:12:6c:fa:f4:04:52:d9:a7:e1:5b:93:c0: 76:43:7b:c4:2c:58:f1:4c:eb:f9:a5:d2:0a:56:6e: 78:e4:b6:a5:ce:63:ca:7f:31:c2:b3:16:64:5d:21: 1d:08:cb:19:4c:69:4f:3e:4e:83:32:e4:b5:5a:e6: 79:8d:dd:09:9d:f1:17:bc:2d:60:fb:9c:89:62:d8: d0:f4:e8:5d:c0:d5:3d:e7:20:6c:02:9c:f3:bb:e9: ad:8f:48:5a:9c:6e:0b:07:94:e6:24:79:aa:f9:f5: 4e:96:13:38:51:37:24:e5:22:1b:29:e2:ac:26:43: a0:78:a1:7e:8f:97:e9:16:e8:26:18:3c:2e:9a:86: a0:ef:56:8e:a0:77:38:49:dd:51:ce:d9:02:2e:1c: a2:5e:1b:64:eb:59:18:ad:ac:0b:92:6e:d3:cc:83: 5a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9C:0D:95:99:84:2F:01:2E:F6:1B:F2:B8:EE:E5:73:9C:42:4E:3C X509v3 Authority Key Identifier: keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:39:dc:0a:b3:83:eb:be:5c:3f:3d:da:ac:b6:c5:6b:0a:46: b2:f0:24:48:53:73:2f:a9:53:54:57:05:f9:ac:34:ac:f6:f9: f0:aa:90:9e:c8:b7:0d:b4:d9:00:d0:51:56:84:7c:e1:6a:e6: ed:f1:a7:22:4e:7e:99:fd:19:12:83:d2:17:10:18:69:18:64: 47:2c:2d:e7:c2:c8:c7:85:66:c6:88:26:cd:a2:5a:98:b8:48: 9a:22:4e:00:76:36:94:f1:a0:bf:9c:cb:d8:84:12:ec:f1:d1: 3a:60:18:c6:64:8d:f2:ad:92:6c:76:a4:ad:cd:eb:62:62:6f: 9c:1d:67:a7:e9:49:e1:80:88:8f:4e:86:10:82:7d:8b:5d:02: a2:58:91:1f:44:64:97:62:d6:43:18:fb:f2:61:d2:c1:0c:33: b2:7b:50:27:37:4b:a2:37:63:da:55:5f:a0:f1:91:ca:3b:f4: de:9d:84:6e:93:91:bb:12:9c:08:23:de:e5:cd:6e:ad:b3:f2: 53:6e:ae:7d:f9:03:1d:c8:ea:10:cb:59:1f:71:e3:33:b1:91: 45:fb:b2:68:d2:e8:90:57:54:49:bd:b2:45:11:4d:01:67:87: 1c:38:95:b0:e6:68:93:1a:52:d2:cb:d9:f0:ed:62:06:b1:a3: 48:f5:1a:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtkZ6Txz4iwitxwlHyAcP0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYTQ3NGE1ZWE2MDFjODA5MjkxZWU3OWJhZTM5MTg5NjRk MDg3MWUwHhcNMjUxMjI4MTAwMTEyWhcNMjUxMjI5MTAwMTEyWjAzMTEwLwYDVQQD Eyg0YjljMGQ5NTk5ODQyZjAxMmVmNjFiZjJiOGVlZTU3MzljNDI0ZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J7lwMfr7tQRH93n66NnS6sxwfUa 7szjIBQ71IUkHWM7um+Oe9Z1qoqVKaifNnMHyIOq3Q1gX7agFD1P1GmIuClVmQeI CaEuQaRBiXqMBNmfUTiJXZObXk/YVMsSbPr0BFLZp+Fbk8B2Q3vELFjxTOv5pdIK Vm545LalzmPKfzHCsxZkXSEdCMsZTGlPPk6DMuS1WuZ5jd0JnfEXvC1g+5yJYtjQ 9OhdwNU95yBsApzzu+mtj0hanG4LB5TmJHmq+fVOlhM4UTck5SIbKeKsJkOgeKF+ j5fpFugmGDwumoag71aOoHc4Sd1RztkCLhyiXhtk61kYrawLkm7TzINa7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEucDZWZhC8BLvYb8rju5XOcQk48MB8GA1UdIwQY MBaAFK+kdKXqYByAkpHuebrjkYlk0IceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjZSMHBlcGdISUNTa2U1NXV1T1JpV1RRaHg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jYzRkNzYtM2FlOS00OTFlLTliZDIt MTkzY2M2MWJjZTYxLzEvcjZSMHBlcGdISUNTa2U1NXV1T1JpV1RRaHg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9jYzRkNzYtM2FlOS00OTFlLTliZDItMTkzY2M2MWJjZTYx LzEvcjZSMHBlcGdISUNTa2U1NXV1T1JpV1RRaHg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzncCrOD 675cPz3arLbFawpGsvAkSFNzL6lTVFcF+aw0rPb58KqQnsi3DbTZANBRVoR84Wrm 7fGnIk5+mf0ZEoPSFxAYaRhkRywt58LIx4VmxogmzaJamLhImiJOAHY2lPGgv5zL 2IQS7PHROmAYxmSN8q2SbHakrc3rYmJvnB1np+lJ4YCIj06GEIJ9i10ColiRH0Rk l2LWQxj78mHSwQwzsntQJzdLojdj2lVfoPGRyjv03p2EbpORuxKcCCPe5c1urbPy U26uffkDHcjqEMtZH3HjM7GRRfuyaNLokFdUSb2yRRFNAWeHHDiVsOZokxpS0svZ 8O1iBrGjSPUaHA== -----END CERTIFICATE-----Generated at Sun Dec 28 11:23:28 2025 by rpki-client