This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft File: 6tIKIulI-5ZEEprTAZ8I1PSYH88.mft (raw, json) Hash identifier: TlpMkhFSLU8s/NeH4CJUGBVsK+FB4uW9cOhk4SLE3r8= Subject key identifier: 20:2C:E2:CE:28:DE:C5:91:8B:DC:92:4A:CF:DA:90:60:49:F3:73:F9 Authority key identifier: EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF Certificate issuer: /CN=ead20a22e948fb9644129ad3019f08d4f4981fcf Certificate serial: 019AF20946515AEEFAC75D6BC8B69E743F75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft Manifest number: 072F Signing time: Sat 06 Dec 2025 05:01:25 +0000 Manifest this update: Sat 06 Dec 2025 05:01:25 +0000 Manifest next update: Sun 07 Dec 2025 05:01:25 +0000 Files and hashes: 1: 6tIKIulI-5ZEEprTAZ8I1PSYH88.crl (hash: pHZt3+PVwGk3HXdfD7iuVOsmJ3Jw++nj7Df90TBup9U=) 2: ERZth0xX85HWn67GzDSpThEJK6U.roa (hash: 7waXqANAdY315AAe2QRMY1aCHLszX3hvr0AdWM3OyXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:46:51:5a:ee:fa:c7:5d:6b:c8:b6:9e:74:3f:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ead20a22e948fb9644129ad3019f08d4f4981fcf Validity Not Before: Dec 6 05:01:25 2025 GMT Not After : Dec 7 05:01:25 2025 GMT Subject: CN=202ce2ce28dec5918bdc924acfda906049f373f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:59:1d:e4:f0:67:1b:de:b6:fd:06:83:73:a7: 38:ef:c3:d7:2b:21:f0:30:ec:1d:a4:5e:91:65:79: da:89:2c:9a:3d:c0:eb:9d:6e:a9:5d:1d:fb:73:c0: d1:32:e5:d6:f5:74:a9:99:6e:13:30:fe:7d:c9:2b: c3:ed:12:d6:cc:f2:68:15:40:f9:83:89:c6:ce:d1: c6:9f:e1:6e:e6:0e:0e:75:de:cf:01:6f:9c:b9:2f: b8:8a:fc:43:35:d0:8d:c0:f7:a2:5c:ed:60:e7:fe: c0:40:42:9b:fa:75:f1:c1:92:59:62:8e:17:63:05: 52:dc:24:74:be:4d:c9:22:ea:88:03:f6:ab:61:4e: 49:e5:3c:c9:2c:8f:ca:57:fc:0d:cd:f2:50:6f:c3: 56:8c:d9:27:79:60:41:06:24:14:06:09:26:3d:fa: 47:03:39:1e:39:e7:19:8f:e7:34:5b:2f:46:92:7a: 06:70:28:ea:f7:14:c9:4d:df:30:78:19:2e:d0:ca: 23:f6:51:5b:c3:70:ed:d7:39:95:6d:6d:e7:f1:b7: 5a:04:f9:3d:79:1c:b9:da:31:36:60:38:a4:ad:2d: 1f:e9:c6:76:09:bd:40:ac:d4:9c:e7:7f:60:f4:7e: 5c:28:eb:08:21:a3:9b:7b:a5:9e:a4:62:14:21:16: 71:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2C:E2:CE:28:DE:C5:91:8B:DC:92:4A:CF:DA:90:60:49:F3:73:F9 X509v3 Authority Key Identifier: keyid:EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:15:00:e8:33:d7:98:bf:02:63:6d:c6:3e:aa:b0:52:90:9e: 42:5f:f8:db:09:18:21:77:63:77:f4:0f:26:7f:fd:d7:1a:9b: c2:b3:89:63:1d:d5:34:28:7d:d2:18:92:b0:18:67:6b:7a:86: 1c:9c:a3:0b:6b:57:b6:15:07:47:7f:c3:98:7a:c5:ef:60:20: 42:d3:f0:f2:2d:d2:29:71:ab:4d:f8:bf:ed:bb:63:78:27:34: 32:9e:82:dd:55:8b:7f:5c:48:3b:87:48:33:4b:12:0f:08:58: a5:8f:a5:5d:7f:d6:96:6b:84:fc:9b:e6:f0:7f:e0:41:50:e0: 8e:cc:2d:18:d6:8c:c1:e5:7f:c0:17:10:d6:70:7b:52:34:1a: 9e:0b:24:fc:e2:22:69:51:0f:84:93:a0:4f:c4:99:e1:dc:55: d8:db:bc:b0:cc:64:23:c5:98:d9:7f:6c:d5:4a:05:39:7f:e5: 39:74:1e:16:26:74:53:71:e6:fd:66:83:19:b5:54:b1:bc:f8: 03:1e:b5:af:e1:8f:a7:89:f8:71:22:fe:e1:3d:3b:d2:bf:33: a6:fd:22:48:25:4a:9d:94:fe:95:41:66:8d:8c:41:90:1b:e6: 1d:dd:f1:c9:0e:76:7d:cf:21:47:d9:b2:49:5c:36:99:54:9f: 29:df:52:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUZRWu76x11ryLaedD91MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhZDIwYTIyZTk0OGZiOTY0NDEyOWFkMzAxOWYwOGQ0ZjQ5 ODFmY2YwHhcNMjUxMjA2MDUwMTI1WhcNMjUxMjA3MDUwMTI1WjAzMTEwLwYDVQQD EygyMDJjZTJjZTI4ZGVjNTkxOGJkYzkyNGFjZmRhOTA2MDQ5ZjM3M2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslkd5PBnG962/QaDc6c478PXKyHw MOwdpF6RZXnaiSyaPcDrnW6pXR37c8DRMuXW9XSpmW4TMP59ySvD7RLWzPJoFUD5 g4nGztHGn+Fu5g4Odd7PAW+cuS+4ivxDNdCNwPeiXO1g5/7AQEKb+nXxwZJZYo4X YwVS3CR0vk3JIuqIA/arYU5J5TzJLI/KV/wNzfJQb8NWjNkneWBBBiQUBgkmPfpH AzkeOecZj+c0Wy9GknoGcCjq9xTJTd8weBku0Moj9lFbw3Dt1zmVbW3n8bdaBPk9 eRy52jE2YDikrS0f6cZ2Cb1ArNSc539g9H5cKOsIIaObe6WepGIUIRZxJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAs4s4o3sWRi9ySSs/akGBJ83P5MB8GA1UdIwQY MBaAFOrSCiLpSPuWRBKa0wGfCNT0mB/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnRJS0l1bEktNVpFRXByVEFaOEkxUFNZSDg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xN2NhNWYtNDMyNy00YTg4LWI5NzYt YjY0ZmZjZTA2NTgwLzEvNnRJS0l1bEktNVpFRXByVEFaOEkxUFNZSDg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8xN2NhNWYtNDMyNy00YTg4LWI5NzYtYjY0ZmZjZTA2NTgw LzEvNnRJS0l1bEktNVpFRXByVEFaOEkxUFNZSDg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARUA6DPX mL8CY23GPqqwUpCeQl/42wkYIXdjd/QPJn/91xqbwrOJYx3VNCh90hiSsBhna3qG HJyjC2tXthUHR3/DmHrF72AgQtPw8i3SKXGrTfi/7btjeCc0Mp6C3VWLf1xIO4dI M0sSDwhYpY+lXX/WlmuE/Jvm8H/gQVDgjswtGNaMweV/wBcQ1nB7UjQangsk/OIi aVEPhJOgT8SZ4dxV2Nu8sMxkI8WY2X9s1UoFOX/lOXQeFiZ0U3Hm/WaDGbVUsbz4 Ax61r+GPp4n4cSL+4T070r8zpv0iSCVKnZT+lUFmjYxBkBvmHd3xyQ52fc8hR9my SVw2mVSfKd9Szg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:17:56 2025 by rpki-client