This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft File: 6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft (raw, json) Hash identifier: gFq+hCN+FkhTGSifLDpFBPhPFVGnMogfSkIdnn0H8rI= Subject key identifier: FB:2A:EA:9D:72:9D:33:7A:9A:13:E7:05:B9:90:97:80:48:C8:7F:71 Authority key identifier: E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49 Certificate issuer: /CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49 Certificate serial: 019AFCC365708EEAC10058396EC804458577 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft Manifest number: 01F4 Signing time: Mon 08 Dec 2025 07:00:55 +0000 Manifest this update: Mon 08 Dec 2025 07:00:55 +0000 Manifest next update: Tue 09 Dec 2025 07:00:55 +0000 Files and hashes: 1: 6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl (hash: JfPzcZDW7QlfmhJxaCA9wjYOs3mRklefHwRk9iRpfbg=) 2: Yv4Nu-EN5zhL6KGxxs_xzdLAzPE.roa (hash: g3Z/I7jSdU5A7yhO2T69Xb/0yTPIA/OmlqPS3Q3yctw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c3:65:70:8e:ea:c1:00:58:39:6e:c8:04:45:85:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49 Validity Not Before: Dec 8 07:00:55 2025 GMT Not After : Dec 9 07:00:55 2025 GMT Subject: CN=fb2aea9d729d337a9a13e705b990978048c87f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:99:ca:9a:5d:d5:3a:71:ad:bf:98:1a:78:dd: 37:5a:ab:87:85:50:87:a9:a8:12:63:52:77:e4:47: 17:27:2a:90:2f:24:ed:a9:62:1a:ef:8e:b4:a4:ad: e1:62:34:70:e1:93:ac:a9:16:82:c6:89:78:8e:8c: fd:d5:f8:96:fa:55:80:12:01:c9:ae:4c:19:08:80: 56:e7:70:89:e2:1b:d3:e3:fd:1b:e0:60:24:8c:ab: 10:15:42:5e:5a:51:82:66:9f:cb:da:3d:17:43:7f: cc:4e:26:91:11:65:b6:fe:cb:fe:19:54:b0:14:5c: 3a:7b:3b:06:fc:17:50:46:c3:44:c6:81:22:11:b0: 5c:74:98:72:e8:7a:47:ba:95:02:56:0a:15:06:d3: fa:49:a4:41:4a:d0:b5:ae:42:93:92:22:0d:72:cd: bf:a6:56:c4:98:88:61:1d:61:b5:50:3f:6b:57:91: 61:52:ce:48:3b:d6:0e:c2:61:fb:73:cf:89:b6:74: 23:f9:c9:90:42:1c:a1:0f:7b:fa:c9:70:55:f6:8b: 1f:cf:0e:4b:10:16:2c:8e:af:50:4d:f4:06:15:09: 70:d1:18:e9:cd:54:61:c1:03:ff:7d:df:04:ee:0c: 06:58:fa:df:02:e7:0b:d2:73:a0:b0:14:53:9a:d4: 9f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2A:EA:9D:72:9D:33:7A:9A:13:E7:05:B9:90:97:80:48:C8:7F:71 X509v3 Authority Key Identifier: keyid:E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:38:8a:8f:a7:e6:b0:0c:e2:3e:4e:b8:ac:4b:60:b5:8e:cc: e8:29:18:93:5e:a0:4d:49:5b:4b:94:25:9c:d7:a9:fe:72:78: 88:8f:32:fc:41:8d:b5:a8:a1:dc:ae:aa:6b:f4:31:84:36:f8: fb:78:25:55:e6:1a:98:33:27:d4:5f:76:0c:3a:8b:2b:da:7e: 45:31:b9:3c:12:ef:ae:5b:ac:e8:75:dd:dc:3a:82:84:88:15: 4a:25:66:ed:a4:28:c3:54:84:d4:99:34:14:56:b0:5d:4f:ba: 92:b2:a9:af:c2:4c:10:4f:b1:e4:31:bd:4b:57:a0:f5:5b:2c: 79:17:b7:83:48:8b:22:cb:70:e6:2a:08:19:7a:15:1b:d3:4b: e2:28:e9:b4:64:d6:1a:09:1e:a5:eb:01:6d:10:38:29:8f:19: 03:b9:1b:96:53:c9:0d:75:7b:1d:c0:51:13:57:04:54:61:04: ca:22:1e:68:fa:ab:42:fd:2d:9e:f2:a2:67:ba:c2:0a:ab:8d: 86:b2:8c:bc:53:d7:9e:75:09:57:ba:dd:b6:d0:80:75:36:46: 41:72:d6:67:1b:a6:d0:d0:98:41:80:f3:13:e5:8a:78:b3:83: a7:60:b0:1c:71:93:e8:e6:32:31:16:88:61:80:4c:9b:1e:1e: ec:5d:1f:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8w2VwjurBAFg5bsgERYV3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Y2ZlNWIzM2VlNDQzZmRlOTJiZDQyMTE4ODgxY2E2ZTgy NjNhNDkwHhcNMjUxMjA4MDcwMDU1WhcNMjUxMjA5MDcwMDU1WjAzMTEwLwYDVQQD EyhmYjJhZWE5ZDcyOWQzMzdhOWExM2U3MDViOTkwOTc4MDQ4Yzg3ZjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpnKml3VOnGtv5gaeN03WquHhVCH qagSY1J35EcXJyqQLyTtqWIa7460pK3hYjRw4ZOsqRaCxol4joz91fiW+lWAEgHJ rkwZCIBW53CJ4hvT4/0b4GAkjKsQFUJeWlGCZp/L2j0XQ3/MTiaREWW2/sv+GVSw FFw6ezsG/BdQRsNExoEiEbBcdJhy6HpHupUCVgoVBtP6SaRBStC1rkKTkiINcs2/ plbEmIhhHWG1UD9rV5FhUs5IO9YOwmH7c8+JtnQj+cmQQhyhD3v6yXBV9osfzw5L EBYsjq9QTfQGFQlw0RjpzVRhwQP/fd8E7gwGWPrfAucL0nOgsBRTmtSfxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsq6p1ynTN6mhPnBbmQl4BIyH9xMB8GA1UdIwQY MBaAFOjP5bM+5EP96SvUIRiIHKboJjpJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk1fbHN6N2tRXzNwSzlRaEdJZ2NwdWdtT2trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hNDM1NmMtOGQxNC00YjFjLWE1NWIt NzBjMmU3Njg2ZTZiLzEvNk1fbHN6N2tRXzNwSzlRaEdJZ2NwdWdtT2trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hNDM1NmMtOGQxNC00YjFjLWE1NWItNzBjMmU3Njg2ZTZi LzEvNk1fbHN6N2tRXzNwSzlRaEdJZ2NwdWdtT2trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTiKj6fm sAziPk64rEtgtY7M6CkYk16gTUlbS5QlnNep/nJ4iI8y/EGNtaih3K6qa/QxhDb4 +3glVeYamDMn1F92DDqLK9p+RTG5PBLvrlus6HXd3DqChIgVSiVm7aQow1SE1Jk0 FFawXU+6krKpr8JMEE+x5DG9S1eg9VsseRe3g0iLIstw5ioIGXoVG9NL4ijptGTW GgkepesBbRA4KY8ZA7kbllPJDXV7HcBRE1cEVGEEyiIeaPqrQv0tnvKiZ7rCCquN hrKMvFPXnnUJV7rdttCAdTZGQXLWZxum0NCYQYDzE+WKeLODp2CwHHGT6OYyMRaI YYBMmx4e7F0faQ== -----END CERTIFICATE-----Generated at Mon Dec 8 10:35:19 2025 by rpki-client