This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft File: 6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft (raw, json) Hash identifier: nclI5k30zzwzC09w5uR6brTnqOIUpWxV9FFEpkxxkkI= Subject key identifier: C0:80:00:3C:D6:E8:C7:91:D5:38:4B:84:94:D7:19:07:46:BE:66:F4 Authority key identifier: E8:1C:EF:FA:73:05:FA:66:78:89:7A:ED:BB:BD:21:64:DF:00:8A:9C Certificate issuer: /CN=e81ceffa7305fa6678897aedbbbd2164df008a9c Certificate serial: 019AF16499476775DA56898CEADE4D23A012 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft Manifest number: 67 Signing time: Sat 06 Dec 2025 02:01:33 +0000 Manifest this update: Sat 06 Dec 2025 02:01:33 +0000 Manifest next update: Sun 07 Dec 2025 02:01:33 +0000 Files and hashes: 1: 6Bzv-nMF-mZ4iXrtu70hZN8Aipw.crl (hash: WcLb/2Qh/K10dgA54RWyKElNDxxB1FU5n/NgzmgAxhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.crl rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft rsync://rpki.ripe.net/repository/DEFAULT/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:99:47:67:75:da:56:89:8c:ea:de:4d:23:a0:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e81ceffa7305fa6678897aedbbbd2164df008a9c Validity Not Before: Dec 6 02:01:33 2025 GMT Not After : Dec 7 02:01:33 2025 GMT Subject: CN=c080003cd6e8c791d5384b8494d7190746be66f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0f:86:3c:7a:fd:34:5c:b4:52:18:b4:3c:ad: 40:7a:7a:a6:28:46:5c:d1:77:6d:f6:26:9a:3e:bb: 3e:44:04:4f:5b:04:98:1b:c9:6b:ec:e6:34:c5:69: e6:82:49:eb:63:2f:18:15:3e:67:c4:86:db:03:ee: b8:35:3c:ef:e0:60:bf:d0:f0:00:18:7a:00:9d:89: a9:0d:00:0e:9e:08:8d:8a:d0:cb:15:3a:f4:8b:b7: b1:92:43:9f:f4:5d:a7:43:fc:a6:54:69:20:7b:ed: 07:6d:e5:77:e7:ed:18:bc:41:97:46:a2:6d:5f:e8: ba:70:67:22:f8:f1:1a:c2:49:12:e0:6e:3e:53:08: f6:7f:61:0e:74:5e:10:64:b5:8b:3b:e4:d6:22:38: 72:a8:9f:da:c7:5c:21:d1:f4:de:b3:a4:8f:83:ae: 61:34:b1:44:ca:7b:f9:fb:aa:bf:99:e6:3b:78:d5: 98:99:96:6c:8f:b8:92:c9:40:7b:03:6b:82:1e:8d: 8c:d4:de:df:ec:c6:64:d2:be:48:ee:cc:a9:bf:7b: d5:50:c0:8c:80:3b:5c:5b:fc:20:d7:f3:8e:b9:0c: 16:e1:4f:2b:23:ae:dc:ab:e5:50:16:94:cb:e0:b7: 1a:2f:3e:ea:b5:a3:56:42:8f:76:97:87:cc:f3:bb: 30:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:80:00:3C:D6:E8:C7:91:D5:38:4B:84:94:D7:19:07:46:BE:66:F4 X509v3 Authority Key Identifier: keyid:E8:1C:EF:FA:73:05:FA:66:78:89:7A:ED:BB:BD:21:64:DF:00:8A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:9f:71:24:ad:5f:c1:4e:2c:f9:87:3c:24:1f:16:38:b6:26: 44:dd:4d:aa:86:3c:60:82:86:bc:c4:07:93:c6:d4:06:a1:c1: 31:ef:ed:03:c9:38:fe:be:e1:90:38:34:bb:a9:6d:95:59:a6: 9b:b1:61:24:c3:66:1c:6b:28:0c:5a:1a:54:4a:12:43:3f:9e: db:6e:f5:05:b7:63:35:8a:e9:56:80:d0:2e:6f:56:60:a5:1a: a0:b4:03:90:cf:36:85:de:f0:9a:38:19:e4:ca:39:b8:61:f8: 98:42:17:88:4b:dc:6b:f5:af:8c:2c:84:a0:d9:f4:03:86:a7: 0a:cd:83:c4:6f:67:d0:e2:2c:a1:9e:3e:49:84:b8:7a:53:be: 75:17:08:81:62:7e:58:61:f2:8f:fa:e9:dc:35:b4:3e:71:4d: 1e:77:0b:95:91:34:35:75:c0:6c:79:90:53:9d:c3:12:b6:b6: 92:c8:29:4c:31:da:0a:0c:f0:f5:fb:d3:5b:5b:87:51:7a:b3: 22:02:be:78:8a:89:c9:cb:a5:13:41:0a:47:26:f2:06:96:e8: 99:12:b9:92:fd:d5:6e:e2:83:f4:2a:62:c8:09:1d:93:7e:00: 26:78:53:ae:5f:11:33:ba:9c:1f:95:16:a6:ce:21:f6:24:86: 94:69:5c:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZJlHZ3XaVomM6t5NI6ASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MWNlZmZhNzMwNWZhNjY3ODg5N2FlZGJiYmQyMTY0ZGYw MDhhOWMwHhcNMjUxMjA2MDIwMTMzWhcNMjUxMjA3MDIwMTMzWjAzMTEwLwYDVQQD EyhjMDgwMDAzY2Q2ZThjNzkxZDUzODRiODQ5NGQ3MTkwNzQ2YmU2NmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w+GPHr9NFy0Uhi0PK1AenqmKEZc 0Xdt9iaaPrs+RARPWwSYG8lr7OY0xWnmgknrYy8YFT5nxIbbA+64NTzv4GC/0PAA GHoAnYmpDQAOngiNitDLFTr0i7exkkOf9F2nQ/ymVGkge+0HbeV35+0YvEGXRqJt X+i6cGci+PEawkkS4G4+Uwj2f2EOdF4QZLWLO+TWIjhyqJ/ax1wh0fTes6SPg65h NLFEynv5+6q/meY7eNWYmZZsj7iSyUB7A2uCHo2M1N7f7MZk0r5I7sypv3vVUMCM gDtcW/wg1/OOuQwW4U8rI67cq+VQFpTL4LcaLz7qtaNWQo92l4fM87swiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCAADzW6MeR1ThLhJTXGQdGvmb0MB8GA1UdIwQY MBaAFOgc7/pzBfpmeIl67bu9IWTfAIqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkJ6di1uTUYtbVo0aVhydHU3MGhaTjhBaXB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9hMjlkMTctYjU5OC00NDI3LWJhNjgt MmFhZGM4NjMxZjJhLzEvNkJ6di1uTUYtbVo0aVhydHU3MGhaTjhBaXB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9hMjlkMTctYjU5OC00NDI3LWJhNjgtMmFhZGM4NjMxZjJh LzEvNkJ6di1uTUYtbVo0aVhydHU3MGhaTjhBaXB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJ9xJK1f wU4s+Yc8JB8WOLYmRN1NqoY8YIKGvMQHk8bUBqHBMe/tA8k4/r7hkDg0u6ltlVmm m7FhJMNmHGsoDFoaVEoSQz+e2271BbdjNYrpVoDQLm9WYKUaoLQDkM82hd7wmjgZ 5Mo5uGH4mEIXiEvca/WvjCyEoNn0A4anCs2DxG9n0OIsoZ4+SYS4elO+dRcIgWJ+ WGHyj/rp3DW0PnFNHncLlZE0NXXAbHmQU53DEra2ksgpTDHaCgzw9fvTW1uHUXqz IgK+eIqJyculE0EKRybyBpbomRK5kv3VbuKD9CpiyAkdk34AJnhTrl8RM7qcH5UW ps4h9iSGlGlcRg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:19 2025 by rpki-client