This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft File: 6lUOVOR2bVdl0PPQYd8ddNpViXM.mft (raw, json) Hash identifier: tF6OOqEBGCEFs+aZeqw2MCM4cdzPcCGn/352pHBIkc0= Subject key identifier: 7F:43:A9:42:F6:50:F4:9E:25:F8:15:07:6C:5A:CD:3D:12:2A:F0:73 Authority key identifier: EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73 Certificate issuer: /CN=ea550e54e4766d5765d0f3d061df1d74da558973 Certificate serial: 019AF3F7B5219605C079626C2F7AAC36DB1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft Manifest number: 0EB3 Signing time: Sat 06 Dec 2025 14:01:28 +0000 Manifest this update: Sat 06 Dec 2025 14:01:28 +0000 Manifest next update: Sun 07 Dec 2025 14:01:28 +0000 Files and hashes: 1: 6lUOVOR2bVdl0PPQYd8ddNpViXM.crl (hash: jauVRmVmyx9ckAA+B1AS+npiutfohPZpu+Xy84uYWZY=) 2: SOLF2PkE720JgjOdf1KwRyDMoVU.roa (hash: xFpd4K6CQn8K2Nx3S7ipIBzbB30czEVkqtv2sS8du2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:b5:21:96:05:c0:79:62:6c:2f:7a:ac:36:db:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea550e54e4766d5765d0f3d061df1d74da558973 Validity Not Before: Dec 6 14:01:28 2025 GMT Not After : Dec 7 14:01:28 2025 GMT Subject: CN=7f43a942f650f49e25f815076c5acd3d122af073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:05:2a:d2:07:f2:0b:25:89:37:35:cb:68:9a: 9e:88:4d:bd:5c:c6:a4:6a:bd:1a:d9:63:2e:20:23: 6c:ce:55:22:72:e7:5e:22:94:a6:da:47:17:d8:64: e2:b1:84:4b:9b:36:a7:0a:42:b8:c4:0e:ca:23:2c: 0d:ec:2b:52:f1:03:a9:ab:8d:b5:39:49:20:ab:b9: c8:67:4e:f1:12:41:83:c3:4b:73:ea:ed:52:c8:59: e1:1f:11:6e:44:bd:82:c3:92:91:de:3d:2b:bb:9e: c3:4c:60:5e:d7:97:ef:28:a0:6c:e5:ba:5c:97:77: 32:df:40:de:e3:bf:4b:d9:65:92:bc:ed:f4:f9:c2: c0:aa:c0:4a:00:38:84:0a:55:fa:b8:89:7b:ae:e5: ee:88:a7:ed:ed:5e:22:d1:c7:dc:aa:ef:b3:e0:ad: 36:d8:ef:d4:9f:06:eb:a2:4d:6a:da:0a:60:df:3b: b7:33:02:b3:ac:52:01:a3:03:02:5e:db:2f:f2:69: 18:eb:24:9a:e8:f2:2d:a3:11:c4:fb:25:bd:1f:64: 22:5f:c2:26:a8:87:27:e1:c7:d6:ee:5c:38:df:74: c0:f3:ac:a8:dc:bc:7c:c9:57:9b:62:09:26:bf:d1: 53:4c:30:6f:07:3b:ef:11:5e:17:94:1b:3a:67:e5: d5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:43:A9:42:F6:50:F4:9E:25:F8:15:07:6C:5A:CD:3D:12:2A:F0:73 X509v3 Authority Key Identifier: keyid:EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:aa:1e:c6:4b:7c:32:36:28:0a:9a:9f:0c:a3:44:31:ff:f3: 78:a8:98:d5:1a:45:7a:43:e1:0a:29:43:59:03:45:5c:d0:24: c7:6a:e6:5d:15:27:34:44:45:ae:e0:d7:87:fa:16:b1:d2:51: 1c:e8:a3:ae:ad:5b:5f:7c:d8:8c:75:3a:a7:ab:9c:8f:39:3b: 09:b4:b9:b3:4f:d9:10:c6:41:25:b9:37:fc:eb:e9:50:4b:cf: 2f:65:65:0a:a5:13:a6:a9:38:7a:0c:01:5a:9f:ad:af:e7:1a: a1:ad:52:51:ec:39:c9:93:71:36:ca:d4:c9:65:6a:77:8a:82: 53:39:45:18:22:55:85:fe:c4:7e:9e:44:33:b1:43:23:0e:c9: cb:3e:a2:ba:45:bb:63:23:1b:02:3e:89:e3:d8:a4:15:3f:76: 8c:56:a3:fe:24:cb:d5:e2:81:5e:b0:9f:59:ed:d5:45:7a:14: 33:08:96:67:69:e3:c3:79:97:43:1b:99:e9:1e:de:8d:5b:33: 06:eb:5f:9b:17:91:14:99:4b:f8:52:54:23:a6:d8:7a:e2:8c: 27:c9:79:d5:b6:22:0d:06:ab:bd:43:8d:a3:93:f0:74:57:65: 4e:6e:da:14:6c:db:19:ea:d0:0f:a3:4b:58:45:89:10:92:51: 55:ab:28:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97UhlgXAeWJsL3qsNtsaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTUwZTU0ZTQ3NjZkNTc2NWQwZjNkMDYxZGYxZDc0ZGE1 NTg5NzMwHhcNMjUxMjA2MTQwMTI4WhcNMjUxMjA3MTQwMTI4WjAzMTEwLwYDVQQD Eyg3ZjQzYTk0MmY2NTBmNDllMjVmODE1MDc2YzVhY2QzZDEyMmFmMDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAUq0gfyCyWJNzXLaJqeiE29XMak ar0a2WMuICNszlUicudeIpSm2kcX2GTisYRLmzanCkK4xA7KIywN7CtS8QOpq421 OUkgq7nIZ07xEkGDw0tz6u1SyFnhHxFuRL2Cw5KR3j0ru57DTGBe15fvKKBs5bpc l3cy30De479L2WWSvO30+cLAqsBKADiEClX6uIl7ruXuiKft7V4i0cfcqu+z4K02 2O/Unwbrok1q2gpg3zu3MwKzrFIBowMCXtsv8mkY6ySa6PItoxHE+yW9H2QiX8Im qIcn4cfW7lw433TA86yo3Lx8yVebYgkmv9FTTDBvBzvvEV4XlBs6Z+XVSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9DqUL2UPSeJfgVB2xazT0SKvBzMB8GA1UdIwQY MBaAFOpVDlTkdm1XZdDz0GHfHXTaVYlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxVT1ZPUjJiVmRsMFBQUVlkOGRkTnBWaVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OGY2MzctMzEyMS00MGY3LWI3OGYt OWM5ZjIwOTAzMjlhLzEvNmxVT1ZPUjJiVmRsMFBQUVlkOGRkTnBWaVhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82OGY2MzctMzEyMS00MGY3LWI3OGYtOWM5ZjIwOTAzMjlh LzEvNmxVT1ZPUjJiVmRsMFBQUVlkOGRkTnBWaVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6oexkt8 MjYoCpqfDKNEMf/zeKiY1RpFekPhCilDWQNFXNAkx2rmXRUnNERFruDXh/oWsdJR HOijrq1bX3zYjHU6p6ucjzk7CbS5s0/ZEMZBJbk3/OvpUEvPL2VlCqUTpqk4egwB Wp+tr+caoa1SUew5yZNxNsrUyWVqd4qCUzlFGCJVhf7Efp5EM7FDIw7Jyz6iukW7 YyMbAj6J49ikFT92jFaj/iTL1eKBXrCfWe3VRXoUMwiWZ2njw3mXQxuZ6R7ejVsz ButfmxeRFJlL+FJUI6bYeuKMJ8l51bYiDQarvUONo5PwdFdlTm7aFGzbGerQD6NL WEWJEJJRVaso3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:56:09 2025 by rpki-client