This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft File: 6FZKS1_vRERHffDaWxmSTVLRAJQ.mft (raw, json) Hash identifier: 9TlKrlrlU2CZ9YqaFQ4Zy6pIamFGs7jcwgxLsmQeQOk= Subject key identifier: B7:33:E5:78:07:3D:44:C4:63:07:27:F4:80:AF:CF:42:C9:78:25:5C Authority key identifier: E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94 Certificate issuer: /CN=e8564a4b5fef4444477df0da5b19924d52d10094 Certificate serial: 019B3B34C1F73C99CD680CC5B052BAE76A66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 10:01:11 +0000 Manifest this update: Sat 20 Dec 2025 10:01:11 +0000 Manifest next update: Sun 21 Dec 2025 10:01:11 +0000 Files and hashes: 1: 6FZKS1_vRERHffDaWxmSTVLRAJQ.crl (hash: bzEF+uwCnmwNAfPj5WMlJNwIOmJF6cxUa/gO0FGSc4U=) 2: 9SVfluOBZwBfs-bjwE_rTE8NN74.roa (hash: vH7rlpjAcAk1sy3DNBgkpNoFX/t68ex1sv/VxyfNsUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:c1:f7:3c:99:cd:68:0c:c5:b0:52:ba:e7:6a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8564a4b5fef4444477df0da5b19924d52d10094 Validity Not Before: Dec 20 10:01:11 2025 GMT Not After : Dec 21 10:01:11 2025 GMT Subject: CN=b733e578073d44c4630727f480afcf42c978255c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:f4:a0:69:13:a0:11:a9:99:b4:49:bf:4b: 3d:0f:d2:64:48:0a:0e:65:2e:cb:49:06:a2:bb:d0: 50:df:bf:b9:96:ae:3c:64:2a:1a:52:1b:2e:d9:17: d9:be:b8:39:bc:14:02:f5:09:ce:ca:fc:91:ea:89: 50:6c:36:da:55:90:c0:57:ff:ab:c5:8b:6d:ef:3b: c2:32:fd:12:a7:13:b6:cb:ae:15:43:56:7d:b7:81: 8f:87:e0:4f:04:c1:1c:dd:16:6f:58:d5:bb:a7:d6: 95:e4:fe:22:12:fa:ed:8b:6f:06:a3:25:fb:8b:a7: 6b:13:00:ea:53:74:ac:42:6f:2c:d6:c4:92:9f:8c: cb:2e:50:4b:73:17:37:71:d4:fd:e7:ec:ae:cf:1e: 11:ee:03:25:09:1e:0e:b2:49:c9:50:bb:7c:3b:77: 1e:53:b9:7d:cd:b2:f4:8f:b4:22:63:48:ca:fa:d4: 27:1f:6f:d5:10:cd:f9:3c:49:64:9f:48:d0:ca:ad: 14:a5:cf:4b:e3:3f:38:04:c9:e6:64:e2:2d:07:1c: 40:2c:36:67:f9:82:9e:76:df:1f:e7:33:5c:14:c5: 83:19:cd:92:0b:07:e0:9b:93:91:df:4f:c5:6f:ca: c3:8d:ea:5a:01:66:bf:91:25:a5:d3:76:c8:e4:61: 90:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:33:E5:78:07:3D:44:C4:63:07:27:F4:80:AF:CF:42:C9:78:25:5C X509v3 Authority Key Identifier: keyid:E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c4:f1:49:6e:9a:13:2c:ce:31:b2:42:32:d6:d3:08:79:ee: e6:ed:b2:b5:34:9d:f4:d8:b1:0f:cd:3f:37:ae:93:e3:0d:96: bf:9b:21:a6:41:07:9e:79:c6:91:15:ee:0f:65:9c:de:d9:cf: d0:53:b4:74:c8:eb:4d:f5:93:83:47:6b:20:0b:e5:b0:03:67: 78:c9:d8:ec:2a:de:08:99:ab:95:a9:cd:f7:64:2d:d6:c2:95: 68:54:19:da:07:99:67:bd:f0:f9:2d:9c:15:e2:19:00:49:68: 29:3a:9e:a2:f7:6e:6b:67:d1:49:d8:e4:45:c0:71:83:a8:da: 58:a4:20:64:3d:30:1e:75:72:09:5e:3b:58:0e:2c:74:67:61: f8:92:99:25:7f:8b:9d:1a:cf:ff:c1:6d:40:f4:c8:e6:a7:5d: 20:6c:bc:f2:a3:2b:1b:87:2f:d8:f4:1c:5a:7f:08:fb:20:a4: 41:56:c3:d2:86:e5:51:09:59:d8:7a:ad:ca:29:4d:ee:6e:af: 35:96:a7:56:94:43:9a:ba:ec:ba:aa:10:d9:83:89:aa:53:a8: 8e:6f:17:b7:6d:f1:48:a6:46:ea:67:0b:81:4d:7d:e8:c6:17: c7:8c:06:b2:9d:32:a0:40:34:a6:a8:0e:2d:4d:52:cb:6a:8f: 13:c7:fb:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NMH3PJnNaAzFsFK652pmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NTY0YTRiNWZlZjQ0NDQ0NzdkZjBkYTViMTk5MjRkNTJk MTAwOTQwHhcNMjUxMjIwMTAwMTExWhcNMjUxMjIxMTAwMTExWjAzMTEwLwYDVQQD EyhiNzMzZTU3ODA3M2Q0NGM0NjMwNzI3ZjQ4MGFmY2Y0MmM5NzgyNTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxez0oGkToBGpmbRJv0s9D9JkSAoO ZS7LSQaiu9BQ37+5lq48ZCoaUhsu2RfZvrg5vBQC9QnOyvyR6olQbDbaVZDAV/+r xYtt7zvCMv0SpxO2y64VQ1Z9t4GPh+BPBMEc3RZvWNW7p9aV5P4iEvrti28GoyX7 i6drEwDqU3SsQm8s1sSSn4zLLlBLcxc3cdT95+yuzx4R7gMlCR4OsknJULt8O3ce U7l9zbL0j7QiY0jK+tQnH2/VEM35PElkn0jQyq0Upc9L4z84BMnmZOItBxxALDZn +YKedt8f5zNcFMWDGc2SCwfgm5OR30/Fb8rDjepaAWa/kSWl03bI5GGQDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcz5XgHPUTEYwcn9ICvz0LJeCVcMB8GA1UdIwQY MBaAFOhWSktf70RER33w2lsZkk1S0QCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkZaS1MxX3ZSRVJIZmZEYVd4bVNUVkxSQUpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zZjM3OGUtZThhNy00YTlmLTg1OGIt NWM0OWM4MjY0YTdiLzEvNkZaS1MxX3ZSRVJIZmZEYVd4bVNUVkxSQUpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zZjM3OGUtZThhNy00YTlmLTg1OGItNWM0OWM4MjY0YTdi LzEvNkZaS1MxX3ZSRVJIZmZEYVd4bVNUVkxSQUpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsTxSW6a EyzOMbJCMtbTCHnu5u2ytTSd9NixD80/N66T4w2Wv5shpkEHnnnGkRXuD2Wc3tnP 0FO0dMjrTfWTg0drIAvlsANneMnY7CreCJmrlanN92Qt1sKVaFQZ2geZZ73w+S2c FeIZAEloKTqeovdua2fRSdjkRcBxg6jaWKQgZD0wHnVyCV47WA4sdGdh+JKZJX+L nRrP/8FtQPTI5qddIGy88qMrG4cv2PQcWn8I+yCkQVbD0oblUQlZ2HqtyilN7m6v NZanVpRDmrrsuqoQ2YOJqlOojm8Xt23xSKZG6mcLgU196MYXx4wGsp0yoEA0pqgO LU1Sy2qPE8f79Q== -----END CERTIFICATE-----Generated at Sat Dec 20 12:48:30 2025 by rpki-client