This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft File: 6TjNfs8jrBxJYlRuG89eCDrSKaU.mft (raw, json) Hash identifier: 7OXApvaoRTXKf8oq7JavG06A0HCz0gMfp5OsuAmQFE8= Subject key identifier: CF:98:7E:2A:64:E3:FA:F0:8A:29:15:8B:7E:CE:47:65:7E:56:9B:35 Authority key identifier: E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5 Certificate issuer: /CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5 Certificate serial: 019AF31C89CC9F6F5401A3C1038DD3EBEAC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 10:02:04 +0000 Manifest this update: Sat 06 Dec 2025 10:02:04 +0000 Manifest next update: Sun 07 Dec 2025 10:02:04 +0000 Files and hashes: 1: 6TjNfs8jrBxJYlRuG89eCDrSKaU.crl (hash: m32CjHOZCnaat/jJFp/Ors0DhSDL1yt1ninTwl5sBVU=) 2: Goi94Dc_RUuC8EGWeEnJH7qqhjU.roa (hash: G+DgjuNd7tv+5EJaL+G6NuJWBrxhCutOC8EdL+rglNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:89:cc:9f:6f:54:01:a3:c1:03:8d:d3:eb:ea:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5 Validity Not Before: Dec 6 10:02:04 2025 GMT Not After : Dec 7 10:02:04 2025 GMT Subject: CN=cf987e2a64e3faf08a29158b7ece47657e569b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6e:70:69:a9:d2:3c:22:1a:48:c8:5a:b4:c1: 44:d4:67:f6:ff:93:bd:35:2a:85:e4:11:a1:8c:a9: 11:ff:44:3e:9e:e2:05:8f:c2:46:89:89:06:30:bc: 53:18:ef:bc:48:22:d2:1a:55:3e:dc:17:8d:80:6b: 44:91:97:b9:75:38:1d:02:5a:6b:ef:d7:0a:b4:ed: ae:f9:1a:21:32:a9:b4:a0:8a:98:34:16:28:06:88: 1f:ac:c6:b6:2a:e8:d9:65:ff:b7:dd:43:72:5e:2c: 71:19:e2:b4:af:eb:ff:92:70:f5:da:54:70:32:db: cc:13:f3:ee:78:ff:d6:2b:65:e8:54:9a:c7:a7:1f: 64:3c:22:63:be:7f:8a:74:c6:5c:05:66:7e:18:e4: b3:60:b3:ae:f3:88:d3:5f:3b:40:4c:25:75:e2:e3: d1:10:56:79:8b:4b:7a:1c:4d:ff:47:3b:a4:c1:03: 33:da:98:8e:60:82:d1:e3:a2:41:a5:a3:34:e2:31: 7f:51:9e:2c:d7:61:9a:86:68:94:06:4d:92:8f:46: b7:45:2c:de:24:bf:55:fd:b0:41:84:eb:3c:dd:b0: bb:f5:4b:b9:a9:0c:c2:7a:ce:13:7e:5d:a3:7f:46: f7:e6:e0:eb:6c:31:14:91:f1:65:f4:08:fb:e7:7c: ff:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:98:7E:2A:64:E3:FA:F0:8A:29:15:8B:7E:CE:47:65:7E:56:9B:35 X509v3 Authority Key Identifier: keyid:E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:fe:b2:ae:a6:d0:fc:51:fd:37:36:df:1b:a7:5d:ef:af:e3: 2d:1a:bd:4c:94:65:d3:6a:98:e8:49:b6:22:5e:09:76:8d:f7: d7:62:8c:91:0b:1c:19:06:cf:16:58:f3:98:46:7f:85:56:d9: 2b:59:52:9e:43:1f:47:c4:0f:64:de:f4:35:a1:2f:70:e5:da: a4:3f:fe:ef:51:09:a2:1d:1e:a8:0a:3b:e5:cf:b5:b8:b0:e7: 72:a4:d1:d4:2b:f4:50:6f:d5:dc:ca:19:14:c6:1b:48:17:1d: 39:79:21:00:1d:62:3d:eb:e6:b0:94:a8:f8:8a:10:0b:ec:c9: 01:f5:4c:27:eb:2d:32:35:c2:7c:87:c9:7b:c9:80:cd:9c:81: f1:62:19:4a:41:84:f1:53:3a:9a:4c:4b:9b:65:83:e7:b4:ea: 09:f7:10:cf:7a:3e:20:59:87:c8:86:43:90:c8:f4:e4:52:d3: 3f:9b:b7:ac:6e:53:68:c5:1a:bf:00:7a:1e:16:5d:5b:3b:04: 0e:51:84:25:dd:c4:b8:60:65:c4:16:3e:b5:f6:d9:7e:69:fb: a3:1b:d7:6e:0f:d1:50:51:8a:6f:de:98:04:7a:f4:5d:06:f1: 71:2e:75:0c:06:7f:0b:a5:65:06:80:ab:c2:5f:c8:a5:63:46: 95:fd:3a:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHInMn29UAaPBA43T6+rCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MzhjZDdlY2YyM2FjMWM0OTYyNTQ2ZTFiY2Y1ZTA4M2Fk MjI5YTUwHhcNMjUxMjA2MTAwMjA0WhcNMjUxMjA3MTAwMjA0WjAzMTEwLwYDVQQD EyhjZjk4N2UyYTY0ZTNmYWYwOGEyOTE1OGI3ZWNlNDc2NTdlNTY5YjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW5waanSPCIaSMhatMFE1Gf2/5O9 NSqF5BGhjKkR/0Q+nuIFj8JGiYkGMLxTGO+8SCLSGlU+3BeNgGtEkZe5dTgdAlpr 79cKtO2u+RohMqm0oIqYNBYoBogfrMa2KujZZf+33UNyXixxGeK0r+v/knD12lRw MtvME/PueP/WK2XoVJrHpx9kPCJjvn+KdMZcBWZ+GOSzYLOu84jTXztATCV14uPR EFZ5i0t6HE3/RzukwQMz2piOYILR46JBpaM04jF/UZ4s12GahmiUBk2Sj0a3RSze JL9V/bBBhOs83bC79Uu5qQzCes4Tfl2jf0b35uDrbDEUkfFl9Aj753z/7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+Yfipk4/rwiikVi37OR2V+Vps1MB8GA1UdIwQY MBaAFOk4zX7PI6wcSWJUbhvPXgg60imlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlRqTmZzOGpyQnhKWWxSdUc4OWVDRHJTS2FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83NjFiZjUtMDM3ZS00ODA3LTg4YzAt ZmVlZTg2YzZiNjAwLzEvNlRqTmZzOGpyQnhKWWxSdUc4OWVDRHJTS2FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi83NjFiZjUtMDM3ZS00ODA3LTg4YzAtZmVlZTg2YzZiNjAw LzEvNlRqTmZzOGpyQnhKWWxSdUc4OWVDRHJTS2FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKP6yrqbQ /FH9NzbfG6dd76/jLRq9TJRl02qY6Em2Il4Jdo3312KMkQscGQbPFljzmEZ/hVbZ K1lSnkMfR8QPZN70NaEvcOXapD/+71EJoh0eqAo75c+1uLDncqTR1Cv0UG/V3MoZ FMYbSBcdOXkhAB1iPevmsJSo+IoQC+zJAfVMJ+stMjXCfIfJe8mAzZyB8WIZSkGE 8VM6mkxLm2WD57TqCfcQz3o+IFmHyIZDkMj05FLTP5u3rG5TaMUavwB6HhZdWzsE DlGEJd3EuGBlxBY+tfbZfmn7oxvXbg/RUFGKb96YBHr0XQbxcS51DAZ/C6VlBoCr wl/IpWNGlf064Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:39 2025 by rpki-client