This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft File: 6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft (raw, json) Hash identifier: mBodkDlegH3oUNv8l7xblIgbsGxb6UNBF+GHj2S50TA= Subject key identifier: 8E:C0:D0:04:0F:C9:FD:4E:AD:45:07:97:58:11:7F:11:FB:FB:61:9A Authority key identifier: E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49 Certificate issuer: /CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49 Certificate serial: 019B4DDFA6F3CE930B19710B783D3259B5CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft Manifest number: 021E Signing time: Wed 24 Dec 2025 01:01:01 +0000 Manifest this update: Wed 24 Dec 2025 01:01:01 +0000 Manifest next update: Thu 25 Dec 2025 01:01:01 +0000 Files and hashes: 1: 6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl (hash: zDINP0eXPSB+Br7am+pp8QDrOlxghs5CX8iN7vv87lk=) 2: Yv4Nu-EN5zhL6KGxxs_xzdLAzPE.roa (hash: g3Z/I7jSdU5A7yhO2T69Xb/0yTPIA/OmlqPS3Q3yctw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:a6:f3:ce:93:0b:19:71:0b:78:3d:32:59:b5:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49 Validity Not Before: Dec 24 01:01:01 2025 GMT Not After : Dec 25 01:01:01 2025 GMT Subject: CN=8ec0d0040fc9fd4ead45079758117f11fbfb619a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fa:09:ea:b8:5d:92:e6:18:ee:29:ff:f8:ad: fc:9b:a7:69:64:2c:0e:57:5b:8a:68:ab:8b:e8:ce: ac:f5:b1:cc:73:68:da:7f:6b:1f:69:72:45:f9:75: 84:7f:d0:a2:d2:7d:42:ee:f4:74:02:16:8b:e6:1c: 87:9a:78:71:7d:73:0e:ad:50:67:ea:77:4f:f0:73: c1:50:22:c5:73:79:55:47:a0:d1:2c:a9:25:06:22: 4e:dd:e9:74:2b:68:32:04:93:92:30:e4:50:50:fb: 04:d8:46:61:e9:a2:ab:9d:e9:6d:79:dc:aa:46:e1: 14:04:17:b7:04:c2:93:56:36:b8:e0:01:23:43:70: 96:2b:d7:e1:b4:ef:ee:d4:70:76:97:13:57:5a:f1: 5d:63:ff:cd:8b:67:ec:d6:ad:05:ba:43:16:e4:48: 8b:25:69:ef:75:44:26:b5:11:03:68:05:05:bf:e3: ab:98:93:d6:f6:a3:b2:39:f1:ab:f1:a0:5f:9a:bf: 3a:67:60:5c:8e:7f:d4:0e:dd:12:f2:76:d8:e0:ec: cc:dc:bb:e7:2c:6c:08:9c:cc:3d:e7:15:3b:43:5f: 0b:1b:9e:13:c4:5e:36:dd:5d:da:98:9b:eb:2d:48: f9:be:f4:a4:ab:e3:a2:e6:8b:14:9f:78:b4:aa:5f: c6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C0:D0:04:0F:C9:FD:4E:AD:45:07:97:58:11:7F:11:FB:FB:61:9A X509v3 Authority Key Identifier: keyid:E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:13:07:b6:bb:04:fe:09:a4:ce:0f:0b:3d:1c:ee:c2:f9:61: c4:d8:e1:81:cd:99:52:43:33:8b:44:f9:03:43:51:8d:b4:c6: a3:96:80:d5:3b:73:7e:d4:81:9f:20:99:03:78:e3:85:34:89: 91:76:c7:49:7c:e3:53:7f:57:be:a9:4e:66:2e:0d:07:78:db: 71:4a:13:2c:44:53:b3:bd:8d:ee:bd:05:c2:ef:dc:05:91:be: ff:cd:c9:99:a4:ba:5c:9c:1a:5c:a0:a9:95:b4:81:53:2e:0c: 6a:5b:62:df:22:af:ff:59:42:37:95:97:db:de:86:5c:39:f0: 7b:91:f5:c6:b4:ae:8e:3d:32:ef:44:08:72:a9:b8:67:6c:a6: e0:32:0d:9d:c7:1e:af:26:4c:e5:22:a8:88:96:73:c0:88:ca: ee:c9:b2:20:72:a3:69:71:6c:bb:b8:13:cf:d6:77:10:40:ea: 39:d5:bb:06:97:0d:f9:cb:17:59:62:78:11:04:65:b6:d0:5e: d4:d9:31:86:e2:96:be:15:d3:e2:d4:e5:55:52:b9:9c:3c:d1: 86:fb:e2:77:19:0b:4d:ee:45:d0:e3:30:3c:d4:31:e6:8b:82: 16:6e:fa:7c:55:d3:ca:21:45:88:5d:5f:95:4f:d5:0d:af:21: 27:60:3f:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN36bzzpMLGXELeD0yWbXKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Y2ZlNWIzM2VlNDQzZmRlOTJiZDQyMTE4ODgxY2E2ZTgy NjNhNDkwHhcNMjUxMjI0MDEwMTAxWhcNMjUxMjI1MDEwMTAxWjAzMTEwLwYDVQQD Eyg4ZWMwZDAwNDBmYzlmZDRlYWQ0NTA3OTc1ODExN2YxMWZiZmI2MTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/oJ6rhdkuYY7in/+K38m6dpZCwO V1uKaKuL6M6s9bHMc2jaf2sfaXJF+XWEf9Ci0n1C7vR0AhaL5hyHmnhxfXMOrVBn 6ndP8HPBUCLFc3lVR6DRLKklBiJO3el0K2gyBJOSMORQUPsE2EZh6aKrneltedyq RuEUBBe3BMKTVja44AEjQ3CWK9fhtO/u1HB2lxNXWvFdY//Ni2fs1q0FukMW5EiL JWnvdUQmtREDaAUFv+OrmJPW9qOyOfGr8aBfmr86Z2Bcjn/UDt0S8nbY4OzM3Lvn LGwInMw95xU7Q18LG54TxF423V3amJvrLUj5vvSkq+Oi5osUn3i0ql/GOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7A0AQPyf1OrUUHl1gRfxH7+2GaMB8GA1UdIwQY MBaAFOjP5bM+5EP96SvUIRiIHKboJjpJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk1fbHN6N2tRXzNwSzlRaEdJZ2NwdWdtT2trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hNDM1NmMtOGQxNC00YjFjLWE1NWIt NzBjMmU3Njg2ZTZiLzEvNk1fbHN6N2tRXzNwSzlRaEdJZ2NwdWdtT2trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hNDM1NmMtOGQxNC00YjFjLWE1NWItNzBjMmU3Njg2ZTZi LzEvNk1fbHN6N2tRXzNwSzlRaEdJZ2NwdWdtT2trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABMHtrsE /gmkzg8LPRzuwvlhxNjhgc2ZUkMzi0T5A0NRjbTGo5aA1TtzftSBnyCZA3jjhTSJ kXbHSXzjU39XvqlOZi4NB3jbcUoTLERTs72N7r0Fwu/cBZG+/83JmaS6XJwaXKCp lbSBUy4Malti3yKv/1lCN5WX296GXDnwe5H1xrSujj0y70QIcqm4Z2ym4DINncce ryZM5SKoiJZzwIjK7smyIHKjaXFsu7gTz9Z3EEDqOdW7BpcN+csXWWJ4EQRlttBe 1NkxhuKWvhXT4tTlVVK5nDzRhvvidxkLTe5F0OMwPNQx5ouCFm76fFXTyiFFiF1f lU/VDa8hJ2A/dw== -----END CERTIFICATE-----Generated at Wed Dec 24 11:11:35 2025 by rpki-client