This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft File: 6sLBr9S97JgFBvoH33yGYtVU-kY.mft (raw, json) Hash identifier: 3hWVNjZNpcYoaSaqksgqxEKgfvYa9lJVHOJNzaaO2h4= Subject key identifier: F3:49:72:2F:DD:85:3B:DF:0D:63:E2:50:5D:E9:E5:12:C4:37:94:BE Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Certificate serial: 019B6A6939C497DDA9A70A4800AA7A5A18A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft Manifest number: 11D5 Signing time: Mon 29 Dec 2025 14:00:39 +0000 Manifest this update: Mon 29 Dec 2025 14:00:39 +0000 Manifest next update: Tue 30 Dec 2025 14:00:39 +0000 Files and hashes: 1: 6sLBr9S97JgFBvoH33yGYtVU-kY.crl (hash: cHQHjN7faoAXathK98M8dVX0WdaKtp25NbwXHV10RQg=) 2: BUdyw1-SGZIPLhIdmkFoIijVZNQ.roa (hash: POuTPJV5w0ptjI2Zk74d4sYkk88TP0THdSg61Bf1T5U=) 3: CqElUduaScHUfUXZ9oxVz_D7LwU.roa (hash: 3e+PiLGHJw3mA6A8DCEuv3cyH3r4LQ3GYaMPKoRjmZw=) 4: I73UM1nCBWQnJ20aXL_6NYA4pj8.roa (hash: L68T0N8qj7ef7ryDCvyLKmdACJuuoiHt4h0eR0KlZX4=) 5: Ia6V3oQfJDjO1qZ0unwCn8VGfRI.roa (hash: YjJMnYScrGxfBSd345nAAnlIHFqBVMEk1HrKUwbMEtQ=) 6: McMTko8bQr91a0JpNrnKOvBDV0I.roa (hash: +aOn0BT18FMcBHp4FqjXhcnRXA0IZ5BQanHigZZPPho=) 7: UgN0cKNW9dNdHdWelhpwDBynnFs.roa (hash: d596rMSRxVyDkNR+qvNV44FN3LGE81IKqHNAerm5Jfc=) 8: joY5CsIYEyMcozVZTWmYrHc7OT0.roa (hash: vg4E06T36uPUCW84ei0wvbNrdV4VJy6JNaGAZaILXZs=) 9: mTBy0j8EnJsdaUzGVXZ-14s63tY.roa (hash: helve75lh7gtxaq/8CTnY/dxHsO6u+Iv8BV7ge1atis=) 10: ohfoQ6PMXyCRqvXL697wq32N2IE.roa (hash: 4Ftq9cImGTnlsG/GFrSW+NEOcfqwWC5dS24FmwyqHJQ=) 11: tVnuMHg38Y2y8DClEzJcg-BhRZI.roa (hash: 2bCfD0mgqb/6Lcsm2AyIQ8y1K+w9/t9hgqU4lqbYazg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:69:39:c4:97:dd:a9:a7:0a:48:00:aa:7a:5a:18:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Validity Not Before: Dec 29 14:00:39 2025 GMT Not After : Dec 30 14:00:39 2025 GMT Subject: CN=f349722fdd853bdf0d63e2505de9e512c43794be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f2:cc:b0:f9:26:10:4b:22:15:c0:6c:a0:94: 68:5d:66:b0:d4:ce:52:cc:b8:4b:fc:c1:af:b7:f4: fe:39:f9:b9:84:61:29:ab:f7:cb:e1:51:0d:5e:36: 6e:8c:81:36:ef:0a:15:e4:4d:b7:67:d9:c7:c9:6d: 23:95:77:a8:9b:21:14:29:93:d2:dd:73:04:17:92: 63:93:3c:2c:0c:d9:77:63:1a:91:86:02:67:f2:9b: 8b:36:88:82:a9:6f:4d:c1:10:cf:e1:08:3e:6b:37: 76:ce:24:d3:64:a4:03:6b:09:05:ab:c0:83:78:d9: f0:c6:5b:23:2c:82:ba:71:76:f2:e9:63:f3:20:10: 8f:2f:aa:6f:da:f4:b3:ae:69:4d:a1:02:a3:29:75: 00:36:78:8d:bf:44:33:35:6f:8c:8c:48:ac:e7:40: 63:64:03:02:af:a5:f4:c2:10:80:94:70:6d:3e:6d: 53:93:e5:6a:64:fd:ac:c7:77:b4:e2:8b:78:3d:ad: f8:d9:c0:4d:0a:f6:fc:33:91:58:cc:ac:dd:eb:eb: 54:6f:08:44:71:8f:82:2b:9c:bc:9c:f2:51:50:98: 4a:33:d8:f1:e8:ed:59:e4:4c:dc:6a:cf:e0:31:5c: 54:be:b5:c6:32:e6:87:71:9f:0f:82:ee:98:45:75: 61:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:49:72:2F:DD:85:3B:DF:0D:63:E2:50:5D:E9:E5:12:C4:37:94:BE X509v3 Authority Key Identifier: keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:86:0e:78:d2:29:9a:a8:1a:6e:18:6e:c4:16:26:4c:b4:71: 56:9b:15:e8:2b:1d:31:69:b7:91:a9:2f:99:7e:fc:29:78:3d: a0:32:08:e2:68:45:12:1b:1e:b1:87:60:e2:6b:ab:92:42:73: 5d:00:ba:ae:6f:40:28:0c:8b:6a:65:c1:3a:97:bc:86:3f:9d: 44:39:1d:73:7b:39:ee:a3:91:be:1b:ed:7c:09:41:7b:bd:69: 8b:20:f2:97:a8:5a:5f:73:00:b4:53:ec:03:12:2a:09:25:da: 72:41:e9:0e:fa:59:a8:d4:06:e4:dc:3b:8b:5f:a4:8f:c1:cb: 83:97:64:29:09:87:46:e5:28:29:72:8d:14:20:b1:b4:52:c0: 13:8b:96:5f:2f:d6:97:da:a8:91:57:98:67:a9:68:ad:fa:71: fa:3a:46:f3:2d:69:7e:21:f8:46:60:f6:58:de:4b:3a:96:e9: 0e:89:3f:45:9b:06:b3:99:d1:cd:2c:cc:3a:0e:88:b3:c9:67: 6f:0c:35:1e:9c:1f:fe:e5:51:d5:6f:69:5b:35:78:87:4e:a9: a8:84:f5:2f:42:52:6a:44:6c:9c:02:ba:3c:bf:91:74:34:e5: ee:65:d7:df:8d:58:82:d7:7a:a4:3b:a5:0d:c6:c4:9d:48:a4: 32:f0:4e:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqaTnEl92ppwpIAKp6WhipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1 NGZhNDYwHhcNMjUxMjI5MTQwMDM5WhcNMjUxMjMwMTQwMDM5WjAzMTEwLwYDVQQD EyhmMzQ5NzIyZmRkODUzYmRmMGQ2M2UyNTA1ZGU5ZTUxMmM0Mzc5NGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofLMsPkmEEsiFcBsoJRoXWaw1M5S zLhL/MGvt/T+Ofm5hGEpq/fL4VENXjZujIE27woV5E23Z9nHyW0jlXeomyEUKZPS 3XMEF5JjkzwsDNl3YxqRhgJn8puLNoiCqW9NwRDP4Qg+azd2ziTTZKQDawkFq8CD eNnwxlsjLIK6cXby6WPzIBCPL6pv2vSzrmlNoQKjKXUANniNv0QzNW+MjEis50Bj ZAMCr6X0whCAlHBtPm1Tk+VqZP2sx3e04ot4Pa342cBNCvb8M5FYzKzd6+tUbwhE cY+CK5y8nPJRUJhKM9jx6O1Z5Ezcas/gMVxUvrXGMuaHcZ8Pgu6YRXVh5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNJci/dhTvfDWPiUF3p5RLEN5S+MB8GA1UdIwQY MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt YzBjZWIwMzdhZDQyLzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4YOeNIp mqgabhhuxBYmTLRxVpsV6CsdMWm3kakvmX78KXg9oDII4mhFEhsesYdg4murkkJz XQC6rm9AKAyLamXBOpe8hj+dRDkdc3s57qORvhvtfAlBe71piyDyl6haX3MAtFPs AxIqCSXackHpDvpZqNQG5Nw7i1+kj8HLg5dkKQmHRuUoKXKNFCCxtFLAE4uWXy/W l9qokVeYZ6lorfpx+jpG8y1pfiH4RmD2WN5LOpbpDok/RZsGs5nRzSzMOg6Is8ln bww1Hpwf/uVR1W9pWzV4h06pqIT1L0JSakRsnAK6PL+RdDTl7mXX341Ygtd6pDul DcbEnUikMvBOgA== -----END CERTIFICATE-----Generated at Mon Dec 29 23:46:12 2025 by rpki-client