This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft File: 6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft (raw, json) Hash identifier: OpjlFOFtQmqdRUvmzfOP0vTXQbmEOWWezD918E82diM= Subject key identifier: 52:DF:EA:1E:A1:51:09:00:4A:B2:31:35:DE:EB:9C:F0:8A:0D:71:CC Authority key identifier: E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66 Certificate issuer: /CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66 Certificate serial: 019AF3C0B02EECAAC629295FB5798F9DEBF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft Manifest number: 0525 Signing time: Sat 06 Dec 2025 13:01:22 +0000 Manifest this update: Sat 06 Dec 2025 13:01:22 +0000 Manifest next update: Sun 07 Dec 2025 13:01:22 +0000 Files and hashes: 1: 6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl (hash: oy5gJ/IzVXeQsxuh5FL99KIqGdqIf/u1FAr45Tt8aFA=) 2: IZobsVo8D0iMLl6R0arb5_tQtNA.roa (hash: k9u6wYsejWLpFpy4B5EqE+Go9z1mManh6wvsZ38Rnrc=) 3: fjcBIwD0UXboDtm9hQQuC4nZKFg.roa (hash: a7+yo1MMdqmC3Rdod1c+o5dbpKenkQKnUI7GqCwwDY0=) 4: jOTXaOGJoE6NDCvCKKBezqpIGGk.roa (hash: qYO092gSKFsXYhjhZOcwgA3qVjBaIAjkoDnU0SJsxRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:b0:2e:ec:aa:c6:29:29:5f:b5:79:8f:9d:eb:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66 Validity Not Before: Dec 6 13:01:22 2025 GMT Not After : Dec 7 13:01:22 2025 GMT Subject: CN=52dfea1ea15109004ab23135deeb9cf08a0d71cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:df:31:0e:55:21:c7:9f:dc:34:81:2b:e1:d8: 37:aa:f5:e6:aa:96:9d:bd:06:7c:6f:44:ea:ac:9e: 6b:15:60:ea:10:b6:0f:92:6d:a3:48:2b:e0:30:1f: 0f:6e:dc:02:1f:9d:8d:b4:ca:00:31:0e:d8:39:5f: 31:dc:74:69:cf:82:81:78:e6:98:b3:3b:2e:29:11: 15:a0:62:a2:79:a5:27:09:e7:13:c1:5a:12:49:90: f7:c9:58:8f:1e:27:cf:2a:d6:06:21:8e:ab:a0:74: ce:0b:b8:74:de:02:7a:34:bf:cd:d9:f0:af:29:bc: 8b:8e:7a:c2:dd:35:d6:76:45:25:96:74:7f:6a:ad: 20:63:d6:dd:b0:94:99:0f:f4:c4:49:fe:ec:d4:47: f3:50:cc:54:27:84:b5:8f:49:10:f1:65:89:2a:9b: c2:45:82:c3:71:61:33:70:f0:f2:26:59:d4:fe:b6: ee:d6:93:d9:c9:e8:5f:57:09:7f:d4:0e:d6:a9:b2: 36:de:ad:02:c3:59:c8:e1:9e:72:45:c5:3a:40:79: d2:38:70:cf:da:46:8f:f3:b6:5a:66:56:1f:c0:61: 6a:9d:a2:fc:25:d9:5b:b3:26:13:bd:5e:81:88:22: 2f:0d:07:4b:4f:87:4c:91:a2:de:51:3e:9f:32:72: 71:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DF:EA:1E:A1:51:09:00:4A:B2:31:35:DE:EB:9C:F0:8A:0D:71:CC X509v3 Authority Key Identifier: keyid:E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a4:93:b6:d6:9a:0c:3b:c2:6c:ae:53:f4:68:59:a5:4c:0c: a6:ff:29:d9:50:af:bc:01:20:ba:ce:39:5d:1a:a1:d6:e4:94: 06:a3:3e:bf:74:a1:a0:69:21:da:5e:da:ab:6a:56:51:72:d5: 09:96:7d:7f:ce:ad:da:d8:d0:a6:95:f4:75:74:b6:17:5f:79: 18:4c:6b:50:99:47:bc:ac:c2:3f:1c:87:be:ea:9a:7b:91:00: 97:73:7a:5d:f1:81:7b:a2:f3:4b:ca:32:ce:ed:93:ad:05:d5: 59:d8:61:43:87:89:97:1d:96:98:c7:c0:f8:3f:11:17:f8:2e: b4:f0:f2:cf:d6:9b:0b:f6:55:9a:1c:f9:4e:64:14:de:5b:5f: 67:e8:a2:ec:52:55:de:1b:6d:db:12:95:d4:79:fe:cc:a2:24: 34:11:42:53:3f:70:0f:46:a1:76:20:52:a3:a4:40:12:e3:c1: e1:0e:19:fa:ea:fc:a5:f5:b1:51:42:57:3d:f7:63:1b:48:13: b7:48:dd:bc:42:ca:45:89:57:b0:94:e3:6e:66:09:96:3b:2f: d9:d6:63:a3:47:a0:9c:44:40:53:57:21:d4:e2:44:7d:9e:73: b7:96:23:75:91:76:92:91:2f:dc:38:2d:35:30:97:b3:2a:52: 23:cc:86:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwLAu7KrGKSlftXmPnev1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YmQyNmRjZTQ4MTYxYzdmYmY5ZmY2N2I5MDdmMWU2MDVj MjVhNjYwHhcNMjUxMjA2MTMwMTIyWhcNMjUxMjA3MTMwMTIyWjAzMTEwLwYDVQQD Eyg1MmRmZWExZWExNTEwOTAwNGFiMjMxMzVkZWViOWNmMDhhMGQ3MWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt8xDlUhx5/cNIEr4dg3qvXmqpad vQZ8b0TqrJ5rFWDqELYPkm2jSCvgMB8PbtwCH52NtMoAMQ7YOV8x3HRpz4KBeOaY szsuKREVoGKieaUnCecTwVoSSZD3yViPHifPKtYGIY6roHTOC7h03gJ6NL/N2fCv KbyLjnrC3TXWdkUllnR/aq0gY9bdsJSZD/TESf7s1EfzUMxUJ4S1j0kQ8WWJKpvC RYLDcWEzcPDyJlnU/rbu1pPZyehfVwl/1A7WqbI23q0Cw1nI4Z5yRcU6QHnSOHDP 2kaP87ZaZlYfwGFqnaL8JdlbsyYTvV6BiCIvDQdLT4dMkaLeUT6fMnJxwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLf6h6hUQkASrIxNd7rnPCKDXHMMB8GA1UdIwQY MBaAFOi9JtzkgWHH+/n/Z7kH8eYFwlpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iZDljYTgtMTc5Yi00MzIyLWEwOTQt NTBkZDNhNTgxNTRiLzEvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iZDljYTgtMTc5Yi00MzIyLWEwOTQtNTBkZDNhNTgxNTRi LzEvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKSTttaa DDvCbK5T9GhZpUwMpv8p2VCvvAEgus45XRqh1uSUBqM+v3ShoGkh2l7aq2pWUXLV CZZ9f86t2tjQppX0dXS2F195GExrUJlHvKzCPxyHvuqae5EAl3N6XfGBe6LzS8oy zu2TrQXVWdhhQ4eJlx2WmMfA+D8RF/gutPDyz9abC/ZVmhz5TmQU3ltfZ+ii7FJV 3htt2xKV1Hn+zKIkNBFCUz9wD0ahdiBSo6RAEuPB4Q4Z+ur8pfWxUUJXPfdjG0gT t0jdvELKRYlXsJTjbmYJljsv2dZjo0egnERAU1ch1OJEfZ5zt5YjdZF2kpEv3Dgt NTCXsypSI8yG8g== -----END CERTIFICATE-----Generated at Sat Dec 6 17:51:58 2025 by rpki-client