This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft File: 6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft (raw, json) Hash identifier: N0d26tYwVSoFasL7RuU72s3wUdFJzwAhzmt+3cRLTFY= Subject key identifier: B2:68:38:93:5C:69:6F:1D:02:35:29:4B:4F:E1:FF:96:31:32:1E:C7 Authority key identifier: E8:69:7E:EB:84:67:3D:81:C3:B7:C0:71:66:D9:6C:AC:16:45:F8:33 Certificate issuer: /CN=e8697eeb84673d81c3b7c07166d96cac1645f833 Certificate serial: 019AF19BD713713E757EC80EA4529C0E76A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft Manifest number: 0287 Signing time: Sat 06 Dec 2025 03:01:53 +0000 Manifest this update: Sat 06 Dec 2025 03:01:53 +0000 Manifest next update: Sun 07 Dec 2025 03:01:53 +0000 Files and hashes: 1: 6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl (hash: +FJF/Ev7cH/HJjvyU194BJyF8Hfn9tP++wSwyH0enKA=) 2: gPEIYB37Zc_OzakKWk3m7XL2shI.roa (hash: ogeQ+ihI5RkgX54TXQ3mk3J6Yi4w+GDOualWoIRTMes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:d7:13:71:3e:75:7e:c8:0e:a4:52:9c:0e:76:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8697eeb84673d81c3b7c07166d96cac1645f833 Validity Not Before: Dec 6 03:01:53 2025 GMT Not After : Dec 7 03:01:53 2025 GMT Subject: CN=b26838935c696f1d0235294b4fe1ff9631321ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:88:7e:47:37:59:68:39:c4:29:34:b8:50:b9: 66:dd:25:c9:d6:69:aa:28:77:e6:2c:68:89:0c:ca: e1:c6:b5:a4:7b:1e:65:d1:f2:be:fb:50:90:5f:11: 48:96:dd:da:39:bb:f1:9e:26:5b:d1:91:ad:57:5c: f0:b0:3d:24:26:bd:0e:a1:3a:b2:f1:76:98:51:77: 53:5d:2e:7c:b1:47:96:cf:ac:0c:57:53:10:fe:ef: 38:4c:7a:83:94:d3:44:f1:2e:40:6c:22:da:16:78: 3a:68:da:98:69:0e:a2:20:7f:60:58:4a:29:16:ae: 0c:40:4c:28:de:72:25:d7:f1:72:00:09:a8:e3:e1: f8:79:4d:ac:e2:14:95:8e:83:bf:d7:b0:fe:29:6c: d4:20:3a:3a:1d:dc:6e:86:61:19:c0:ef:36:5f:78: b3:33:8a:a1:9b:6e:be:6e:6d:fa:40:c6:34:8f:2d: 42:e5:46:8f:33:2e:47:df:ef:ae:bc:c8:40:9b:2e: 30:8f:c1:d0:84:0a:4c:4e:6b:05:22:37:0c:eb:7d: 99:1d:3d:b4:5b:fe:0e:b5:ee:10:94:bf:51:28:d0: d8:27:b8:db:8a:00:6a:8e:38:8a:64:d4:ee:92:df: 4c:ea:8b:a1:b2:dc:4c:67:d5:5a:6a:5c:ae:23:50: 8f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:68:38:93:5C:69:6F:1D:02:35:29:4B:4F:E1:FF:96:31:32:1E:C7 X509v3 Authority Key Identifier: keyid:E8:69:7E:EB:84:67:3D:81:C3:B7:C0:71:66:D9:6C:AC:16:45:F8:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:48:5d:44:ad:15:29:78:94:6b:81:8f:bb:60:75:f3:1f:94: fe:d8:cc:77:bb:4d:3b:46:28:9c:fc:52:c9:81:a5:e1:1f:ed: ac:eb:8b:33:ab:4d:93:e9:67:07:00:50:8c:31:a2:56:db:88: 9f:1b:98:6b:31:7d:d8:be:78:de:fd:90:81:1b:bd:45:55:5a: 69:96:b0:2b:8c:76:c5:64:37:7e:aa:29:48:21:69:73:66:3c: be:2a:56:a9:30:df:a3:78:29:d3:c6:ad:c2:6b:c5:6c:79:d9: b1:de:bf:51:54:8a:54:d3:7b:a4:21:8e:96:bb:0c:a9:4b:0b: 9f:22:8c:18:d2:40:8e:27:89:ef:5d:e9:fc:10:bc:b5:c9:9a: 41:05:16:48:76:48:f5:61:82:b0:79:9c:e2:ad:be:7a:6b:68: a3:d4:9d:4c:22:fc:ab:d4:dd:47:af:12:11:26:9d:e7:f7:50: f8:4c:de:77:42:73:62:b9:1c:40:ee:7a:5e:0d:42:39:2b:54: 28:5a:1f:41:ff:49:d8:ca:41:52:b9:1d:11:5b:5c:63:82:63: b1:95:9a:20:b3:28:3d:d7:95:4f:05:2f:da:d7:ca:8a:47:de: b0:52:a6:29:02:5e:f8:23:96:3b:f2:9c:d4:62:ee:aa:15:dc: a9:b9:0b:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm9cTcT51fsgOpFKcDnahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Njk3ZWViODQ2NzNkODFjM2I3YzA3MTY2ZDk2Y2FjMTY0 NWY4MzMwHhcNMjUxMjA2MDMwMTUzWhcNMjUxMjA3MDMwMTUzWjAzMTEwLwYDVQQD EyhiMjY4Mzg5MzVjNjk2ZjFkMDIzNTI5NGI0ZmUxZmY5NjMxMzIxZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoh+RzdZaDnEKTS4ULlm3SXJ1mmq KHfmLGiJDMrhxrWkex5l0fK++1CQXxFIlt3aObvxniZb0ZGtV1zwsD0kJr0OoTqy 8XaYUXdTXS58sUeWz6wMV1MQ/u84THqDlNNE8S5AbCLaFng6aNqYaQ6iIH9gWEop Fq4MQEwo3nIl1/FyAAmo4+H4eU2s4hSVjoO/17D+KWzUIDo6HdxuhmEZwO82X3iz M4qhm26+bm36QMY0jy1C5UaPMy5H3++uvMhAmy4wj8HQhApMTmsFIjcM632ZHT20 W/4Ote4QlL9RKNDYJ7jbigBqjjiKZNTukt9M6ouhstxMZ9VaalyuI1CPjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJoOJNcaW8dAjUpS0/h/5YxMh7HMB8GA1UdIwQY MBaAFOhpfuuEZz2Bw7fAcWbZbKwWRfgzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkdsLTY0Um5QWUhEdDhCeFp0bHNyQlpGLURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84YmZhYjMtMDY3MS00NzVlLTgyMDMt OTM3Mzc2ZWIyM2RhLzEvNkdsLTY0Um5QWUhEdDhCeFp0bHNyQlpGLURNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy84YmZhYjMtMDY3MS00NzVlLTgyMDMtOTM3Mzc2ZWIyM2Rh LzEvNkdsLTY0Um5QWUhEdDhCeFp0bHNyQlpGLURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkhdRK0V KXiUa4GPu2B18x+U/tjMd7tNO0YonPxSyYGl4R/trOuLM6tNk+lnBwBQjDGiVtuI nxuYazF92L543v2QgRu9RVVaaZawK4x2xWQ3fqopSCFpc2Y8vipWqTDfo3gp08at wmvFbHnZsd6/UVSKVNN7pCGOlrsMqUsLnyKMGNJAjieJ713p/BC8tcmaQQUWSHZI 9WGCsHmc4q2+emtoo9SdTCL8q9TdR68SESad5/dQ+Ezed0JzYrkcQO56Xg1COStU KFofQf9J2MpBUrkdEVtcY4JjsZWaILMoPdeVTwUv2tfKikfesFKmKQJe+COWO/Kc 1GLuqhXcqbkL5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:18:57 2025 by rpki-client