This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft File: 6k4ChliRLmlpfBhVO5Up89HOQF0.mft (raw, json) Hash identifier: +lt6Z0NJVPFpGC0K9i5o4AglrfzsuuWj8cCKXU40HvU= Subject key identifier: A7:24:10:77:4F:F4:7D:30:52:CE:F9:F3:90:65:14:ED:BC:69:10:FD Authority key identifier: EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D Certificate issuer: /CN=ea4e028658912e69697c18553b9529f3d1ce405d Certificate serial: 019AF68AAE142AA29EC74F9A72F68EB9FD37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft Manifest number: 10AD Signing time: Sun 07 Dec 2025 02:01:14 +0000 Manifest this update: Sun 07 Dec 2025 02:01:14 +0000 Manifest next update: Mon 08 Dec 2025 02:01:14 +0000 Files and hashes: 1: 6k4ChliRLmlpfBhVO5Up89HOQF0.crl (hash: hMWsUAn4P9j609Tcd50S8aConkATBhIRp35Kc46fUN0=) 2: hKHrJZfyvpiqMzNaxqWMsCAzd7U.roa (hash: KpUX9BCj308/B4B0VQzL1CJw7WHe+Vbo6CVwUR3M9gA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:ae:14:2a:a2:9e:c7:4f:9a:72:f6:8e:b9:fd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea4e028658912e69697c18553b9529f3d1ce405d Validity Not Before: Dec 7 02:01:14 2025 GMT Not After : Dec 8 02:01:14 2025 GMT Subject: CN=a72410774ff47d3052cef9f3906514edbc6910fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cd:8d:6a:2a:3a:ee:3b:e5:e5:81:46:25:01: 2e:bb:c0:ba:2e:ef:22:22:9d:cb:6c:dd:24:2b:40: 2e:5f:cd:c4:72:aa:69:66:1b:c9:5c:5c:53:12:f2: 91:16:92:65:b6:16:22:ee:3f:b7:13:94:13:74:c1: 2f:d6:e9:40:4f:d0:41:33:d9:41:38:84:a6:a1:a2: d0:8c:67:e6:94:47:56:87:8c:a0:38:80:e0:55:66: 6a:d9:2a:3d:2b:51:ed:15:71:a4:f5:4a:34:1d:0d: a4:d2:ee:b4:b5:34:f5:03:38:8f:7f:8d:1d:3b:03: cc:c2:31:e2:e5:9e:5d:d9:3c:e1:4d:0b:3f:94:f2: 42:20:98:48:19:67:7a:ac:b3:b3:84:1f:b6:45:59: 59:43:69:98:53:c3:a6:5a:42:87:24:bf:0c:d0:ee: b8:df:47:24:b3:57:da:0c:2d:7b:3b:e3:46:fb:af: a4:90:85:d8:60:53:57:b8:b1:49:c6:7b:76:04:de: 0a:f3:d3:87:8f:1f:f8:60:45:6a:da:df:a1:bf:fd: 84:6b:99:a3:03:6e:0d:84:3f:66:b2:08:46:83:6c: 39:f1:8a:81:94:3c:7f:87:fd:8c:41:bf:44:81:3e: 5e:7f:0d:b2:b2:77:aa:66:6c:3f:f9:4b:e2:30:76: 55:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:24:10:77:4F:F4:7D:30:52:CE:F9:F3:90:65:14:ED:BC:69:10:FD X509v3 Authority Key Identifier: keyid:EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:68:67:7b:e2:d2:76:71:b7:8d:a0:9c:8f:42:b7:63:3c:a5: b1:c5:cf:2c:09:cf:58:27:f6:96:50:62:cd:31:58:92:fd:0c: 52:db:62:44:dc:0a:1d:61:b8:4b:1c:ef:61:7e:9b:89:4f:3e: 5c:98:98:1f:6d:17:bd:24:3d:2e:1f:4c:fe:86:77:d5:0e:60: 60:87:14:e7:8a:61:7b:96:7a:72:70:26:d7:5a:d4:c0:1e:63: ff:a8:d4:b5:77:3b:9b:04:41:73:41:d9:9c:61:fa:fe:e1:71: 6e:3a:14:e6:b6:10:be:1c:71:1f:21:e2:94:ab:89:5b:08:98: 78:91:64:78:33:0d:96:f4:dd:6e:68:d2:36:ad:1b:04:8b:b6: 20:95:c0:6e:94:cf:14:f6:16:87:d4:18:07:67:5a:c7:c2:8d: 3c:f7:41:db:b6:7b:2c:4a:1b:88:de:e9:2b:a8:b9:aa:69:18: c5:c9:56:b3:92:97:a3:31:2e:5b:b4:e8:99:60:34:62:3a:80: a4:27:77:32:09:27:b0:22:70:4e:2a:b6:9c:10:4a:87:48:7e: ea:0e:98:3e:08:e3:b9:ab:17:21:88:c6:5c:22:bf:1d:70:0c: 49:c3:5e:fd:8a:06:30:1a:44:5d:6f:c7:ed:c1:87:75:59:7b: 73:2e:47:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2iq4UKqKex0+acvaOuf03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNGUwMjg2NTg5MTJlNjk2OTdjMTg1NTNiOTUyOWYzZDFj ZTQwNWQwHhcNMjUxMjA3MDIwMTE0WhcNMjUxMjA4MDIwMTE0WjAzMTEwLwYDVQQD EyhhNzI0MTA3NzRmZjQ3ZDMwNTJjZWY5ZjM5MDY1MTRlZGJjNjkxMGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys2Naio67jvl5YFGJQEuu8C6Lu8i Ip3LbN0kK0AuX83EcqppZhvJXFxTEvKRFpJlthYi7j+3E5QTdMEv1ulAT9BBM9lB OISmoaLQjGfmlEdWh4ygOIDgVWZq2So9K1HtFXGk9Uo0HQ2k0u60tTT1AziPf40d OwPMwjHi5Z5d2TzhTQs/lPJCIJhIGWd6rLOzhB+2RVlZQ2mYU8OmWkKHJL8M0O64 30cks1faDC17O+NG+6+kkIXYYFNXuLFJxnt2BN4K89OHjx/4YEVq2t+hv/2Ea5mj A24NhD9msghGg2w58YqBlDx/h/2MQb9EgT5efw2ysneqZmw/+UviMHZVLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKckEHdP9H0wUs7585BlFO28aRD9MB8GA1UdIwQY MBaAFOpOAoZYkS5paXwYVTuVKfPRzkBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNms0Q2hsaVJMbWxwZkJoVk81VXA4OUhPUUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xNDU2MzEtYjYzZS00ODA5LWI0YWIt YmNlZjllMzIyZjJhLzEvNms0Q2hsaVJMbWxwZkJoVk81VXA4OUhPUUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xNDU2MzEtYjYzZS00ODA5LWI0YWItYmNlZjllMzIyZjJh LzEvNms0Q2hsaVJMbWxwZkJoVk81VXA4OUhPUUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2hne+LS dnG3jaCcj0K3YzylscXPLAnPWCf2llBizTFYkv0MUttiRNwKHWG4SxzvYX6biU8+ XJiYH20XvSQ9Lh9M/oZ31Q5gYIcU54phe5Z6cnAm11rUwB5j/6jUtXc7mwRBc0HZ nGH6/uFxbjoU5rYQvhxxHyHilKuJWwiYeJFkeDMNlvTdbmjSNq0bBIu2IJXAbpTP FPYWh9QYB2dax8KNPPdB27Z7LEobiN7pK6i5qmkYxclWs5KXozEuW7TomWA0YjqA pCd3MgknsCJwTiq2nBBKh0h+6g6YPgjjuasXIYjGXCK/HXAMScNe/YoGMBpEXW/H 7cGHdVl7cy5HAQ== -----END CERTIFICATE-----Generated at Sun Dec 7 05:51:29 2025 by rpki-client