This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft File: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft (raw, json) Hash identifier: NGfU5uuO06ytK9MEb4pZMhSMkIArE05nJEEKynAcS54= Subject key identifier: 28:13:0D:34:C1:0E:17:5C:70:E0:31:10:98:7F:35:E6:E5:71:C6:D2 Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A Certificate issuer: /CN=ea51769ce8672c56d1652bf90a5aefca819b488a Certificate serial: 019B30E86429E95317900B75CEB1329C8865 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 10:01:34 +0000 Manifest this update: Thu 18 Dec 2025 10:01:34 +0000 Manifest next update: Fri 19 Dec 2025 10:01:34 +0000 Files and hashes: 1: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl (hash: MVNdBqu0TLocJGs01TXO3uQjx3Z96DORJjIVs2lfm+E=) 2: zLngmWEw_D0Bxeb-kcPWwP9gp_U.roa (hash: Sf54rTElSlunUVvFtUXJDy0FrQ/XeLhMeCRG3/nN1oE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:64:29:e9:53:17:90:0b:75:ce:b1:32:9c:88:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a Validity Not Before: Dec 18 10:01:34 2025 GMT Not After : Dec 19 10:01:34 2025 GMT Subject: CN=28130d34c10e175c70e03110987f35e6e571c6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:cc:0e:4b:70:f3:93:b1:ba:7f:03:f4:57: 49:e5:d8:d6:c2:ac:9b:28:db:f6:48:15:c6:f5:8a: 78:fb:3a:95:7c:f5:32:5f:b6:35:6e:68:53:df:53: aa:87:73:3d:36:2d:fc:f7:25:ae:26:1e:83:ca:fb: 60:83:90:12:84:ff:c6:04:8d:7f:31:48:53:1f:d5: 30:83:70:34:c3:0d:ba:ee:15:16:21:13:ce:fe:e7: 20:69:b5:69:d5:64:21:6b:96:35:04:d2:46:13:70: 2e:86:08:21:a3:07:e6:2c:53:ad:45:3b:95:f1:c2: dd:ff:fd:0d:87:f9:96:15:52:e8:96:0a:ce:e5:5c: 83:4b:b8:a5:6a:37:09:b6:7b:23:1b:f3:3b:ee:f3: bd:81:43:aa:61:99:35:58:92:73:9c:27:16:f1:02: 62:26:09:e2:8f:fb:16:a9:18:19:43:45:ac:3f:87: c8:dc:26:4b:04:6a:4b:13:00:2c:a1:cf:05:d9:63: 96:28:f0:38:21:d5:b9:d3:12:ea:2d:13:54:04:dc: b4:71:1c:76:c4:c2:f0:be:72:79:3e:2c:01:35:3b: 42:44:74:61:9d:a7:a3:8e:37:6e:e9:97:ca:e7:92: ff:38:c2:1d:c7:ef:13:43:5d:fc:ab:fc:32:23:a7: 02:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:13:0D:34:C1:0E:17:5C:70:E0:31:10:98:7F:35:E6:E5:71:C6:D2 X509v3 Authority Key Identifier: keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:48:7d:bc:24:da:d9:90:0a:e3:ea:ae:27:73:b4:ad:42:83: e1:44:17:dd:b5:af:f2:e0:61:60:68:2e:97:8f:d8:80:bd:eb: 7e:24:44:7d:77:6e:76:ee:3c:47:51:22:8b:6b:c5:68:dd:e0: 3b:1a:74:6e:7b:94:c0:63:27:b4:16:93:93:7d:25:fb:03:4f: d0:7c:56:ac:34:bf:14:73:43:3b:07:36:04:6f:33:4f:c9:d6: 7a:1a:0a:6a:81:09:32:9f:e9:1c:3e:76:25:ce:77:83:62:b1: 1e:87:a0:8a:06:da:e1:d5:e3:df:88:32:7e:f5:09:7a:8d:20: 0e:7a:9a:87:a2:67:cd:7d:a2:6f:50:7b:59:c8:3f:18:6a:c1: 96:db:e3:0e:27:10:19:3c:e0:12:74:fd:8c:dd:4b:60:6c:ef: 20:86:54:2b:3e:43:09:a0:c5:f8:2a:bc:31:17:26:6e:b6:04: 55:c1:20:f5:c8:bc:c7:72:c8:9b:92:69:03:47:57:78:c0:08: 44:88:8e:55:52:ec:30:e4:10:c1:c3:73:a5:22:31:b7:93:43: e8:47:78:ef:0e:cc:aa:e8:8b:77:39:95:17:15:00:cc:84:0b: a3:3d:b2:21:79:21:f6:ad:aa:f7:28:42:ae:26:03:97:d7:11: 1f:f8:54:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6GQp6VMXkAt1zrEynIhlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTE3NjljZTg2NzJjNTZkMTY1MmJmOTBhNWFlZmNhODE5 YjQ4OGEwHhcNMjUxMjE4MTAwMTM0WhcNMjUxMjE5MTAwMTM0WjAzMTEwLwYDVQQD EygyODEzMGQzNGMxMGUxNzVjNzBlMDMxMTA5ODdmMzVlNmU1NzFjNmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYnMDktw85Oxun8D9FdJ5djWwqyb KNv2SBXG9Yp4+zqVfPUyX7Y1bmhT31Oqh3M9Ni389yWuJh6Dyvtgg5AShP/GBI1/ MUhTH9Uwg3A0ww267hUWIRPO/ucgabVp1WQha5Y1BNJGE3AuhgghowfmLFOtRTuV 8cLd//0Nh/mWFVLolgrO5VyDS7ilajcJtnsjG/M77vO9gUOqYZk1WJJznCcW8QJi Jgnij/sWqRgZQ0WsP4fI3CZLBGpLEwAsoc8F2WOWKPA4IdW50xLqLRNUBNy0cRx2 xMLwvnJ5PiwBNTtCRHRhnaejjjdu6ZfK55L/OMIdx+8TQ138q/wyI6cC+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgTDTTBDhdccOAxEJh/NeblccbSMB8GA1UdIwQY MBaAFOpRdpzoZyxW0WUr+Qpa78qBm0iKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxGMm5PaG5MRmJSWlN2NUNscnZ5b0diU0lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kYmY4YmUtNjhhMi00YjNkLTk3ZGIt ODJlMmQ1ZWU5YzkwLzEvNmxGMm5PaG5MRmJSWlN2NUNscnZ5b0diU0lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9kYmY4YmUtNjhhMi00YjNkLTk3ZGItODJlMmQ1ZWU5Yzkw LzEvNmxGMm5PaG5MRmJSWlN2NUNscnZ5b0diU0lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEh9vCTa 2ZAK4+quJ3O0rUKD4UQX3bWv8uBhYGgul4/YgL3rfiREfXdudu48R1Eii2vFaN3g Oxp0bnuUwGMntBaTk30l+wNP0HxWrDS/FHNDOwc2BG8zT8nWehoKaoEJMp/pHD52 Jc53g2KxHoegigba4dXj34gyfvUJeo0gDnqah6JnzX2ib1B7Wcg/GGrBltvjDicQ GTzgEnT9jN1LYGzvIIZUKz5DCaDF+Cq8MRcmbrYEVcEg9ci8x3LIm5JpA0dXeMAI RIiOVVLsMOQQwcNzpSIxt5ND6Ed47w7MquiLdzmVFxUAzIQLoz2yIXkh9q2q9yhC riYDl9cRH/hUgA== -----END CERTIFICATE-----Generated at Thu Dec 18 16:04:32 2025 by rpki-client