This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft File: 6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json) Hash identifier: 5bYFDzq4RFVJTAz7fSVbQd+iFj+TTg4l5ak4AyRMqlE= Subject key identifier: 8D:5E:38:D8:67:B7:36:A3:08:F3:0E:77:74:7C:94:10:29:D7:09:63 Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36 Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136 Certificate serial: 019AF12E70ECA2D630ED41035D391E4B6603 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft Manifest number: 0F64 Signing time: Sat 06 Dec 2025 01:02:23 +0000 Manifest this update: Sat 06 Dec 2025 01:02:23 +0000 Manifest next update: Sun 07 Dec 2025 01:02:23 +0000 Files and hashes: 1: 1caWY1h99shWYECynlPTo8_1vrA.roa (hash: Aon6FQO3a7yW1GjMXQDU5WdJ0X3x57CSJl9oOPxCpMk=) 2: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: u0u+O6FXRLA2/aM6mV4KoTJdXD5mmjWOLB5oHyPMfPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:70:ec:a2:d6:30:ed:41:03:5d:39:1e:4b:66:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136 Validity Not Before: Dec 6 01:02:23 2025 GMT Not After : Dec 7 01:02:23 2025 GMT Subject: CN=8d5e38d867b736a308f30e77747c941029d70963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ca:6f:1e:c3:87:52:77:58:b9:e2:30:c2:62: 02:b4:eb:65:67:db:11:31:71:a5:17:80:dd:e0:86: 10:13:9e:6a:d1:2c:ed:89:88:9f:cb:d1:ee:0c:fb: 6e:77:52:28:69:43:57:76:74:16:7d:19:f3:52:8c: 69:f1:67:42:2e:9c:a3:09:7b:9d:8a:f2:ee:3c:57: 9c:78:9e:f8:ab:82:86:75:c6:55:38:87:b3:ae:39: c5:47:c2:79:fd:a3:59:92:52:99:fd:6b:e9:37:6b: 9e:9e:da:cd:ed:bc:42:e5:cb:eb:36:c1:83:36:7f: 49:38:5b:cc:e1:81:a0:7c:85:e6:0e:62:e0:a7:6d: 8f:da:c5:ba:18:96:5e:6a:45:a8:7b:28:0b:0e:aa: 62:ed:2b:ac:c1:8e:9d:90:f1:00:ea:a3:1d:85:ac: c9:c8:9f:6d:fd:9c:c7:a1:ac:fb:45:2a:b8:cb:85: 60:27:9e:72:d9:98:48:07:d6:f0:28:4f:16:70:8b: dd:69:9b:54:8f:a2:c3:22:18:f8:79:d8:8f:43:12: 61:32:19:51:f5:73:ba:06:b7:cb:39:0b:78:cf:41: c0:37:9c:6e:9a:65:e8:c7:b7:49:71:8c:93:c1:9c: 31:16:fc:e0:1d:ac:a3:32:f6:51:a6:f7:ec:26:05: 14:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5E:38:D8:67:B7:36:A3:08:F3:0E:77:74:7C:94:10:29:D7:09:63 X509v3 Authority Key Identifier: keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:37:4a:45:6f:75:e1:09:46:c9:6a:94:26:ce:79:32:aa:e4: d9:17:8a:6a:c2:c9:6e:05:22:ed:cf:ec:de:48:7e:a7:cc:03: aa:3d:80:74:35:65:d7:a6:28:b8:27:64:51:2d:8a:b1:f2:55: 62:66:61:01:f9:9a:cf:f7:06:14:cf:5e:92:70:06:f0:e9:f9: eb:08:3f:ae:37:cf:d6:1a:f5:d0:b3:d7:3d:8e:cc:69:ee:d0: 36:10:ea:89:5d:eb:6a:d1:61:3b:7f:c7:2f:79:fe:92:c8:d9: 58:cc:16:60:9f:c7:90:d9:67:d9:4f:a5:ab:71:48:bd:30:ba: 72:de:f2:3e:36:2b:0f:77:a3:15:84:38:fa:c4:78:ce:4a:30: 0e:6f:ac:2b:fe:b1:43:6e:3b:65:82:77:43:8d:06:aa:2f:80: 09:04:62:59:01:ae:1c:d4:3c:19:c3:6c:b1:bb:a6:14:aa:01: 7f:85:f1:0f:ce:06:92:36:43:1b:13:20:66:1b:d8:0c:30:cc: 4f:86:2d:4b:fb:a0:ee:90:7a:dc:ef:cf:f4:13:6c:11:43:33: ff:31:d0:28:0c:bb:6f:00:df:07:e1:6f:1a:67:a2:d9:e0:e9: 22:38:94:44:4d:6e:68:fd:2a:0a:59:f1:36:da:63:dd:d0:b4: 55:6a:f6:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnDsotYw7UEDXTkeS2YDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhODQ2MDA2Y2Y4YjllMzg4ZjMxNDUxMzU4MDkyNTAyY2Vj YzExMzYwHhcNMjUxMjA2MDEwMjIzWhcNMjUxMjA3MDEwMjIzWjAzMTEwLwYDVQQD Eyg4ZDVlMzhkODY3YjczNmEzMDhmMzBlNzc3NDdjOTQxMDI5ZDcwOTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzspvHsOHUndYueIwwmICtOtlZ9sR MXGlF4Dd4IYQE55q0SztiYify9HuDPtud1IoaUNXdnQWfRnzUoxp8WdCLpyjCXud ivLuPFeceJ74q4KGdcZVOIezrjnFR8J5/aNZklKZ/WvpN2uentrN7bxC5cvrNsGD Nn9JOFvM4YGgfIXmDmLgp22P2sW6GJZeakWoeygLDqpi7SuswY6dkPEA6qMdhazJ yJ9t/ZzHoaz7RSq4y4VgJ55y2ZhIB9bwKE8WcIvdaZtUj6LDIhj4ediPQxJhMhlR 9XO6BrfLOQt4z0HAN5xummXox7dJcYyTwZwxFvzgHayjMvZRpvfsJgUU+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1eONhntzajCPMOd3R8lBAp1wljMB8GA1UdIwQY MBaAFOqEYAbPi544jzFFE1gJJQLOzBE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yMWNkNzctMWVjYS00NmI5LTlhYmEt Zjc0Y2NjYzRlMGExLzEvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yMWNkNzctMWVjYS00NmI5LTlhYmEtZjc0Y2NjYzRlMGEx LzEvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTdKRW91 4QlGyWqUJs55Mqrk2ReKasLJbgUi7c/s3kh+p8wDqj2AdDVl16YouCdkUS2KsfJV YmZhAfmaz/cGFM9eknAG8On56wg/rjfP1hr10LPXPY7Mae7QNhDqiV3ratFhO3/H L3n+ksjZWMwWYJ/HkNln2U+lq3FIvTC6ct7yPjYrD3ejFYQ4+sR4zkowDm+sK/6x Q247ZYJ3Q40Gqi+ACQRiWQGuHNQ8GcNssbumFKoBf4XxD84GkjZDGxMgZhvYDDDM T4YtS/ug7pB63O/P9BNsEUMz/zHQKAy7bwDfB+FvGmei2eDpIjiURE1uaP0qClnx Ntpj3dC0VWr2GQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:08 2025 by rpki-client