This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft File: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft (raw, json) Hash identifier: 4WTgw2+/73NCHg0aqttLRpBFjR2C61esV2cJoLzIHD8= Subject key identifier: DC:D2:B6:DB:89:95:93:40:DC:0A:DB:4C:24:23:BC:AE:D8:97:BB:5F Authority key identifier: E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24 Certificate issuer: /CN=e847e88749704294552fef54886111ed0586ec24 Certificate serial: 019AF23FE3C98D1650AC4A3FABE7A73C0542 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft Manifest number: 04F1 Signing time: Sat 06 Dec 2025 06:01:04 +0000 Manifest this update: Sat 06 Dec 2025 06:01:04 +0000 Manifest next update: Sun 07 Dec 2025 06:01:04 +0000 Files and hashes: 1: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl (hash: /+Ae3HTBSS4asbG/uNwXMXcHmNX4+FbcvLglvdSnvBA=) 2: fcrIgsFTuq19FBKqvOpJqv38n8M.roa (hash: NL7GdVXSlx1fCyZ9yJikitlzZCSr51QpP5vN2zoZyfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e3:c9:8d:16:50:ac:4a:3f:ab:e7:a7:3c:05:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e847e88749704294552fef54886111ed0586ec24 Validity Not Before: Dec 6 06:01:04 2025 GMT Not After : Dec 7 06:01:04 2025 GMT Subject: CN=dcd2b6db89959340dc0adb4c2423bcaed897bb5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e4:01:99:6d:16:4e:ac:13:5d:2b:66:d8:f7: b5:72:fe:a5:cc:18:ed:68:a9:36:f6:e2:19:61:5d: a4:e5:1e:ac:b3:7f:78:ec:6d:2f:93:c6:45:16:44: ca:aa:e4:84:6a:fa:f4:5b:43:40:88:e3:38:c5:fe: f8:fc:68:d0:53:eb:74:65:da:99:b6:9d:7f:d4:09: 6a:42:a3:ed:f5:ac:4b:a5:a2:d0:72:d6:6f:f5:18: bc:52:9f:08:dc:e5:78:e6:73:dd:c1:62:14:b9:10: 10:61:01:0d:11:4a:7e:78:b0:bd:0d:48:ce:bf:ad: 3d:24:e4:d3:3d:d7:a3:60:4b:53:15:3d:36:1e:73: 65:1d:95:50:52:0d:8d:6d:91:d1:1f:e7:12:ba:b4: 4b:9a:fc:67:f1:64:19:d3:99:23:ee:ac:63:32:3c: 32:8d:96:b7:6e:2a:0a:60:a5:e4:c7:85:39:71:6e: 64:d4:25:57:12:1f:94:36:d2:4b:88:43:c5:e4:8f: f9:31:a3:ee:66:42:e5:41:2d:ed:bd:e2:cb:15:56: 57:1c:a5:50:a3:c1:26:e7:b8:c0:05:5c:63:2b:91: ba:70:4d:80:0f:60:c8:10:53:43:0d:09:d7:80:be: 16:48:c2:38:da:39:c4:70:bb:9c:50:9b:2b:7d:5b: 7c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D2:B6:DB:89:95:93:40:DC:0A:DB:4C:24:23:BC:AE:D8:97:BB:5F X509v3 Authority Key Identifier: keyid:E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c3:ab:cd:77:96:d8:35:cd:64:be:9b:1c:00:dd:98:47:ae: e8:05:fc:10:01:8a:f0:e5:be:ed:58:84:6a:e8:af:98:18:ec: a0:0d:2b:87:6b:67:c5:ba:91:aa:4a:6e:5d:be:6f:4e:eb:a2: 57:a0:3d:c8:fa:74:90:7a:85:85:01:d2:36:df:72:eb:92:a9: 68:5d:77:62:ee:dd:67:e5:87:75:2c:f4:8c:16:f2:19:02:77: b1:99:60:33:5b:41:9a:a2:bd:b7:40:69:09:51:1e:55:a6:64: ce:f3:22:93:d2:f9:0c:ef:e1:99:c4:f3:61:30:de:10:19:b7: 64:9d:ee:58:3c:74:f6:cd:6b:0a:d3:68:2f:ba:c6:08:30:43: 49:42:49:ff:e3:4a:4a:c3:1a:7b:3f:7e:c2:34:6d:cc:3f:55: 9b:f4:b9:8c:0d:4a:74:c2:09:ad:69:98:b0:a3:03:e8:6b:15: c6:3c:81:49:69:94:b0:66:91:a6:34:7d:a5:a8:f3:fa:3c:63: 0a:0a:d5:b0:81:ba:aa:c7:bc:5b:57:b2:1a:02:b3:5b:98:76: 0d:a5:ba:42:b2:a1:b3:97:56:c1:a1:bc:b5:7b:42:57:02:eb: c2:b4:c3:38:57:45:dd:67:6e:b3:41:70:74:48:48:29:79:16: 7b:3a:df:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+PJjRZQrEo/q+enPAVCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDdlODg3NDk3MDQyOTQ1NTJmZWY1NDg4NjExMWVkMDU4 NmVjMjQwHhcNMjUxMjA2MDYwMTA0WhcNMjUxMjA3MDYwMTA0WjAzMTEwLwYDVQQD EyhkY2QyYjZkYjg5OTU5MzQwZGMwYWRiNGMyNDIzYmNhZWQ4OTdiYjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeQBmW0WTqwTXStm2Pe1cv6lzBjt aKk29uIZYV2k5R6ss3947G0vk8ZFFkTKquSEavr0W0NAiOM4xf74/GjQU+t0ZdqZ tp1/1AlqQqPt9axLpaLQctZv9Ri8Up8I3OV45nPdwWIUuRAQYQENEUp+eLC9DUjO v609JOTTPdejYEtTFT02HnNlHZVQUg2NbZHRH+cSurRLmvxn8WQZ05kj7qxjMjwy jZa3bioKYKXkx4U5cW5k1CVXEh+UNtJLiEPF5I/5MaPuZkLlQS3tveLLFVZXHKVQ o8Em57jABVxjK5G6cE2AD2DIEFNDDQnXgL4WSMI42jnEcLucUJsrfVt8LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzSttuJlZNA3ArbTCQjvK7Yl7tfMB8GA1UdIwQY MBaAFOhH6IdJcEKUVS/vVIhhEe0FhuwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVmb2gwbHdRcFJWTC05VWlHRVI3UVdHN0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83N2Y1MzItMzk4Zi00YWQ4LWIzNDgt YmRhZDdlZjc3NmM0LzEvNkVmb2gwbHdRcFJWTC05VWlHRVI3UVdHN0NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS83N2Y1MzItMzk4Zi00YWQ4LWIzNDgtYmRhZDdlZjc3NmM0 LzEvNkVmb2gwbHdRcFJWTC05VWlHRVI3UVdHN0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8OrzXeW 2DXNZL6bHADdmEeu6AX8EAGK8OW+7ViEauivmBjsoA0rh2tnxbqRqkpuXb5vTuui V6A9yPp0kHqFhQHSNt9y65KpaF13Yu7dZ+WHdSz0jBbyGQJ3sZlgM1tBmqK9t0Bp CVEeVaZkzvMik9L5DO/hmcTzYTDeEBm3ZJ3uWDx09s1rCtNoL7rGCDBDSUJJ/+NK SsMaez9+wjRtzD9Vm/S5jA1KdMIJrWmYsKMD6GsVxjyBSWmUsGaRpjR9pajz+jxj CgrVsIG6qse8W1eyGgKzW5h2DaW6QrKhs5dWwaG8tXtCVwLrwrTDOFdF3Wdus0Fw dEhIKXkWezrf/A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:39 2025 by rpki-client