This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft File: 6lg9YfLlemsW6ksanKJ7slDXSO8.mft (raw, json) Hash identifier: smmk0vGN5CsrMOfJfR5hrq5XI4hXhtBKJPA2hY1ktG8= Subject key identifier: C1:C8:02:40:0E:BF:BC:4C:7B:B0:17:0B:6E:1B:26:BC:36:91:36:36 Authority key identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF Certificate issuer: /CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef Certificate serial: 019B55CFF7C3E391D58B98C69410F1F30982 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft Manifest number: 1798 Signing time: Thu 25 Dec 2025 14:00:50 +0000 Manifest this update: Thu 25 Dec 2025 14:00:50 +0000 Manifest next update: Fri 26 Dec 2025 14:00:50 +0000 Files and hashes: 1: 6lg9YfLlemsW6ksanKJ7slDXSO8.crl (hash: pesMrkBvR39DqBNfoxAMgZvASO3lkql7UAItrow8Xhs=) 2: BDcWEX2jsziWI3BwAdwXDgVlUUs.roa (hash: ohMsIfsvhMfjPWnDhvdOtdCZBCwqZ7Awj2tCgJhUEaE=) 3: YZeqBXKQFmXRNEkSHxYTd5FtBG8.roa (hash: H2qTKciVzX2Iz/NfWeOKudVbBEab6voHC2+59WhtYSU=) 4: eIUbhEvS312QdpTsSOJbOfKRhjg.roa (hash: TDTdEPNKnFdTs1u7Iy6p2CE/KWnf5yhsocLiaVIOsqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:cf:f7:c3:e3:91:d5:8b:98:c6:94:10:f1:f3:09:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef Validity Not Before: Dec 25 14:00:50 2025 GMT Not After : Dec 26 14:00:50 2025 GMT Subject: CN=c1c802400ebfbc4c7bb0170b6e1b26bc36913636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:41:05:23:74:62:11:13:ee:f3:c5:1a:82:82: 6e:cf:50:ad:b3:66:ef:58:fa:64:0f:d7:03:a4:45: 12:0e:08:46:93:dc:8b:f6:cf:45:7a:d7:30:72:a7: 6b:1a:25:3c:5c:9b:5d:25:53:16:95:ad:73:19:52: b9:61:26:65:1e:bf:c4:32:87:6f:25:a4:40:f8:fe: 9c:56:6c:52:be:cc:a9:60:1c:00:43:56:3e:53:01: 12:47:da:ca:23:a5:70:c2:13:b7:62:09:5f:82:ce: e4:50:dc:6f:bc:94:94:a1:7f:fd:d3:e3:d8:3c:f5: 83:41:41:52:6f:81:e3:94:83:41:5d:5e:9e:52:8b: 7a:f6:5c:c4:9c:8b:61:27:d3:28:92:9c:09:c4:ba: a5:2e:3d:79:34:72:85:e4:06:ab:42:10:f5:30:7b: 6b:d7:84:e7:ef:18:c8:68:62:4c:c9:54:e2:3a:f4: 1b:68:a9:80:c7:97:d0:21:33:36:74:be:fa:f3:e6: 22:2b:1c:c4:a3:f9:79:64:5a:b1:ce:6d:33:be:23: da:de:96:48:67:94:67:68:3f:4a:36:06:aa:a4:d3: dc:5d:cf:59:14:95:ca:0e:98:8a:17:04:27:47:f5: 45:64:ec:c8:ad:7c:f0:e9:05:17:4b:2b:a6:ab:da: 3b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C8:02:40:0E:BF:BC:4C:7B:B0:17:0B:6E:1B:26:BC:36:91:36:36 X509v3 Authority Key Identifier: keyid:EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:1d:e0:38:a3:2c:82:de:e6:63:80:c5:fd:32:d1:3f:5b:e1: 04:2a:87:7d:ef:5f:77:ca:ee:2f:08:00:9b:4b:69:73:68:df: 20:51:0c:22:2d:9a:48:33:cb:a3:8b:1e:91:e6:8b:09:9a:55: 4a:2e:3a:c7:5d:ca:48:ce:37:7f:ad:31:df:fb:90:ed:15:50: 5a:4e:1a:05:43:fe:b9:08:c3:32:32:85:18:56:f7:c4:29:45: 44:eb:02:3d:aa:72:db:8c:b7:2d:3f:6c:6a:40:06:39:54:68: 71:86:b3:01:99:a9:13:12:89:28:1b:24:6f:df:38:cc:9e:8f: f3:f7:db:ca:6b:bc:a3:91:c1:a6:fa:6b:a9:f6:6f:c1:6a:f6: 6c:32:1e:60:c2:d5:32:56:16:d3:bb:df:1b:3a:d4:71:82:84: 9c:8f:57:38:2a:36:a8:60:fe:a9:00:9a:7f:f2:bb:66:63:e6: 13:58:77:8c:79:ed:fc:a7:6e:03:d4:61:c9:e9:3d:5e:40:27: 0f:be:10:18:24:39:c4:87:f6:3b:57:de:cb:a0:8f:61:38:73: 51:aa:77:29:0c:5b:6f:bd:a2:03:b2:d1:8e:09:90:4b:9b:8e: 4e:2f:b1:03:f3:b2:d6:7b:ad:83:63:4f:1a:3f:b3:9f:b2:6e: 63:5d:a8:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVz/fD45HVi5jGlBDx8wmCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTgzZDYxZjJlNTdhNmIxNmVhNGIxYTljYTI3YmIyNTBk NzQ4ZWYwHhcNMjUxMjI1MTQwMDUwWhcNMjUxMjI2MTQwMDUwWjAzMTEwLwYDVQQD EyhjMWM4MDI0MDBlYmZiYzRjN2JiMDE3MGI2ZTFiMjZiYzM2OTEzNjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EEFI3RiERPu88UagoJuz1Cts2bv WPpkD9cDpEUSDghGk9yL9s9FetcwcqdrGiU8XJtdJVMWla1zGVK5YSZlHr/EModv JaRA+P6cVmxSvsypYBwAQ1Y+UwESR9rKI6VwwhO3Yglfgs7kUNxvvJSUoX/90+PY PPWDQUFSb4HjlINBXV6eUot69lzEnIthJ9MokpwJxLqlLj15NHKF5AarQhD1MHtr 14Tn7xjIaGJMyVTiOvQbaKmAx5fQITM2dL768+YiKxzEo/l5ZFqxzm0zviPa3pZI Z5RnaD9KNgaqpNPcXc9ZFJXKDpiKFwQnR/VFZOzIrXzw6QUXSyumq9o7vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHIAkAOv7xMe7AXC24bJrw2kTY2MB8GA1UdIwQY MBaAFOpYPWHy5XprFupLGpyie7JQ10jvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxnOVlmTGxlbXNXNmtzYW5LSjdzbERYU084LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ZjUxMjgtN2NiYS00OWM1LTliMjUt OTljMWIwY2ZjM2E4LzEvNmxnOVlmTGxlbXNXNmtzYW5LSjdzbERYU084Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82ZjUxMjgtN2NiYS00OWM1LTliMjUtOTljMWIwY2ZjM2E4 LzEvNmxnOVlmTGxlbXNXNmtzYW5LSjdzbERYU084LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxh3gOKMs gt7mY4DF/TLRP1vhBCqHfe9fd8ruLwgAm0tpc2jfIFEMIi2aSDPLo4sekeaLCZpV Si46x13KSM43f60x3/uQ7RVQWk4aBUP+uQjDMjKFGFb3xClFROsCPapy24y3LT9s akAGOVRocYazAZmpExKJKBskb984zJ6P8/fbymu8o5HBpvprqfZvwWr2bDIeYMLV MlYW07vfGzrUcYKEnI9XOCo2qGD+qQCaf/K7ZmPmE1h3jHnt/KduA9Rhyek9XkAn D74QGCQ5xIf2O1fey6CPYThzUap3KQxbb72iA7LRjgmQS5uOTi+xA/Oy1nutg2NP Gj+zn7JuY12owg== -----END CERTIFICATE-----Generated at Thu Dec 25 19:41:16 2025 by rpki-client