This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft File: c6G3ZmRxfipNLlzyveO5cxkH-MI.mft (raw, json) Hash identifier: Ev6NYxaPn7DVWw453nEtVOOrvXhJxCd/DnKNF5nMhO0= Subject key identifier: D6:4B:B8:D7:7E:79:B6:8A:63:20:FA:7D:53:15:3B:58:68:0E:62:23 Authority key identifier: 73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2 Certificate issuer: /CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2 Certificate serial: 019AF352A9D7E1BAA6B5AA7C10E18C2F0F58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 11:01:12 +0000 Manifest this update: Sat 06 Dec 2025 11:01:12 +0000 Manifest next update: Sun 07 Dec 2025 11:01:12 +0000 Files and hashes: 1: F9Es2mSBeEPcByc2eF_egK6MKLM.roa (hash: Eg2cQe6ayySWIx0OqzxZdVZLUVHyOu5zCl7u6iMfiyU=) 2: c6G3ZmRxfipNLlzyveO5cxkH-MI.crl (hash: yAyNxIowcruzbtz+fHmCc+9FLCXRfDRUO3bWcGdCXPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:a9:d7:e1:ba:a6:b5:aa:7c:10:e1:8c:2f:0f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2 Validity Not Before: Dec 6 11:01:12 2025 GMT Not After : Dec 7 11:01:12 2025 GMT Subject: CN=d64bb8d77e79b68a6320fa7d53153b58680e6223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:84:d6:c4:3b:10:ad:be:97:a6:87:42:0a:ec: ce:12:48:e0:5d:42:b9:b5:3e:86:cb:a2:76:4b:67: 49:98:ce:de:7e:c8:d8:a4:9f:41:30:d1:24:e5:8b: 47:21:e3:09:4a:ec:57:0c:2b:15:33:34:73:0e:b1: e0:7d:b2:99:65:45:d6:74:85:68:59:1f:ae:b2:5d: 8c:09:91:76:b3:4a:cb:a0:b9:b8:c8:b0:f5:08:b0: 76:ef:05:10:fa:a4:c8:eb:c3:8d:e3:d1:00:c4:77: f1:df:de:96:4b:0c:e8:77:1c:83:11:aa:25:36:db: ed:a4:9c:41:44:14:ad:9a:e7:b5:47:11:fb:19:da: 4c:43:c1:cf:8f:4a:48:bc:cc:d1:34:59:02:5a:cf: 2c:8a:f6:37:81:ff:30:e7:94:6a:59:a1:e5:e8:d4: 26:b8:a0:bf:ff:4d:27:82:44:3a:de:8c:91:b7:45: b9:89:20:64:5e:ae:28:e3:5e:08:b2:d6:30:8e:e5: 83:17:91:82:4d:e0:f7:76:6c:36:a9:8d:0a:8a:43: 08:f6:f6:0b:7e:33:03:54:3d:7e:c7:7e:d3:71:0f: 0f:3b:14:95:06:60:db:9a:4d:d0:ad:df:b5:de:9a: d1:82:b9:a0:2a:c3:8e:40:30:3f:3f:76:67:7f:27: 29:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4B:B8:D7:7E:79:B6:8A:63:20:FA:7D:53:15:3B:58:68:0E:62:23 X509v3 Authority Key Identifier: keyid:73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:65:ac:f0:f7:57:0f:5f:67:84:cc:43:94:a6:6a:2b:c9:48: 59:7d:75:0b:bb:f0:e7:c0:e5:68:ed:62:77:91:a3:bf:24:17: 37:c6:db:c5:a4:25:1a:66:fc:d2:57:6e:f0:55:f6:34:bb:1d: 85:5c:7d:8f:e5:75:6c:9e:14:d3:41:56:fd:70:6a:5c:5e:98: f7:28:7b:aa:d4:29:be:d7:59:28:5a:96:f6:09:3e:94:2b:4d: 0c:91:bb:ef:d4:d8:97:91:28:47:91:df:65:4e:4f:e9:88:f4: 0c:35:bd:e9:d9:12:54:c1:ad:fd:75:cd:f4:4c:ec:99:ec:67: e9:0d:68:05:5d:fc:ce:d5:a1:91:ce:42:d7:12:2b:e3:9a:d0: 09:a5:35:ae:43:90:19:2f:c1:53:a9:bd:af:d3:6d:dd:f5:ff: e9:39:91:81:2e:da:4a:94:ed:5c:79:14:21:25:dd:2b:00:50: 6b:3d:30:3c:ca:60:87:08:b4:8a:c5:6b:c7:3e:42:5f:dd:32: 07:62:8c:ac:7b:ba:e0:45:35:6a:2d:2f:a9:49:3e:5b:ae:64: 3c:49:e8:b2:b3:44:ad:57:b4:56:93:1b:e6:2f:44:2f:e2:54: d2:25:9c:79:52:15:c1:f6:d6:a6:99:7f:fa:27:3e:ac:e7:d6: a7:ee:f5:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUqnX4bqmtap8EOGMLw9YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYTFiNzY2NjQ3MTdlMmE0ZDJlNWNmMmJkZTNiOTczMTkw N2Y4YzIwHhcNMjUxMjA2MTEwMTEyWhcNMjUxMjA3MTEwMTEyWjAzMTEwLwYDVQQD EyhkNjRiYjhkNzdlNzliNjhhNjMyMGZhN2Q1MzE1M2I1ODY4MGU2MjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+oTWxDsQrb6XpodCCuzOEkjgXUK5 tT6Gy6J2S2dJmM7efsjYpJ9BMNEk5YtHIeMJSuxXDCsVMzRzDrHgfbKZZUXWdIVo WR+usl2MCZF2s0rLoLm4yLD1CLB27wUQ+qTI68ON49EAxHfx396WSwzodxyDEaol NtvtpJxBRBStmue1RxH7GdpMQ8HPj0pIvMzRNFkCWs8sivY3gf8w55RqWaHl6NQm uKC//00ngkQ63oyRt0W5iSBkXq4o414IstYwjuWDF5GCTeD3dmw2qY0KikMI9vYL fjMDVD1+x37TcQ8POxSVBmDbmk3Qrd+13prRgrmgKsOOQDA/P3Znfycp6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZLuNd+ebaKYyD6fVMVO1hoDmIjMB8GA1UdIwQY MBaAFHOht2ZkcX4qTS5c8r3juXMZB/jCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zZDI0MTUtODEzMy00MGEwLTlkOGMt YTYzMTlhYjE3OWJmLzEvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8zZDI0MTUtODEzMy00MGEwLTlkOGMtYTYzMTlhYjE3OWJm LzEvYzZHM1ptUnhmaXBOTGx6eXZlTzVjeGtILU1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWWs8PdX D19nhMxDlKZqK8lIWX11C7vw58DlaO1id5GjvyQXN8bbxaQlGmb80ldu8FX2NLsd hVx9j+V1bJ4U00FW/XBqXF6Y9yh7qtQpvtdZKFqW9gk+lCtNDJG779TYl5EoR5Hf ZU5P6Yj0DDW96dkSVMGt/XXN9Ezsmexn6Q1oBV38ztWhkc5C1xIr45rQCaU1rkOQ GS/BU6m9r9Nt3fX/6TmRgS7aSpTtXHkUISXdKwBQaz0wPMpghwi0isVrxz5CX90y B2KMrHu64EU1ai0vqUk+W65kPEnosrNErVe0VpMb5i9EL+JU0iWceVIVwfbWppl/ +ic+rOfWp+71Sg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:24:01 2025 by rpki-client