This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft File: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft (raw, json) Hash identifier: BDz6MjT21Uiau2tgyFok5ZOVE9IVW2IahDhWyxfjJpI= Subject key identifier: 91:6F:96:0A:B6:6A:B8:80:8B:E9:C0:16:A0:84:5D:6D:E5:F3:EB:49 Authority key identifier: E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C Certificate issuer: /CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c Certificate serial: 019AF50AD77813F41A90B7525D8B02EDA8D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft Manifest number: 0E34 Signing time: Sat 06 Dec 2025 19:01:59 +0000 Manifest this update: Sat 06 Dec 2025 19:01:59 +0000 Manifest next update: Sun 07 Dec 2025 19:01:59 +0000 Files and hashes: 1: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl (hash: oNTmfyLrdO3s5h1XAlHRhxWdWHihM1wcy/bwnYRdPKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:d7:78:13:f4:1a:90:b7:52:5d:8b:02:ed:a8:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c Validity Not Before: Dec 6 19:01:59 2025 GMT Not After : Dec 7 19:01:59 2025 GMT Subject: CN=916f960ab66ab8808be9c016a0845d6de5f3eb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:79:75:a3:42:cc:d7:b7:bb:37:0d:63:1c:e0: 58:dd:26:2c:b5:79:30:b0:d4:9b:5f:90:ac:b1:15: b5:11:75:d9:05:5f:08:d8:3a:f0:97:e3:02:b4:06: c2:94:df:85:dd:dc:f6:4f:77:fe:2a:64:43:99:77: be:7b:b0:98:ec:9f:a7:f1:a2:e2:03:f1:eb:f4:2b: fc:da:6b:24:68:bd:12:69:5d:4a:59:f7:4d:ad:ca: 0e:5d:93:ed:79:be:cc:6b:bb:df:84:ae:92:90:9e: 17:ce:36:4f:ee:d5:8a:d7:7a:66:72:88:42:64:4c: 11:28:43:0b:1e:a6:f3:f4:aa:e5:8c:56:24:6f:93: dc:cf:cc:10:06:0c:97:c1:b1:5f:cf:c2:41:3f:e1: 02:0c:c6:40:9b:92:de:89:5e:93:dc:20:33:37:74: 3f:92:ae:9b:0b:44:4c:49:1c:a1:02:f6:40:0f:a8: a7:14:bd:28:8e:cb:b9:da:5e:2d:96:29:13:74:0d: cd:ee:d5:45:0e:ae:3f:9e:e2:90:41:a6:03:15:76: d5:d6:2e:c9:cf:0e:1e:0f:84:48:c5:61:71:9d:c5: 07:52:c2:f6:a8:d4:9b:67:14:72:a5:55:41:48:2b: 5c:5f:a7:ef:57:54:6b:a1:19:d9:8b:05:4b:1e:2c: 72:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6F:96:0A:B6:6A:B8:80:8B:E9:C0:16:A0:84:5D:6D:E5:F3:EB:49 X509v3 Authority Key Identifier: keyid:E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e8:f6:c5:8c:40:f1:e1:30:55:f8:20:cb:d8:3c:5d:2f:84: 8a:82:12:ba:ca:9b:e7:2a:d8:86:b3:10:c1:8b:e6:ce:8f:97: 66:c8:4b:fe:ce:9d:a9:d0:bd:88:c9:8a:8e:69:0c:93:24:89: e9:6f:ea:b6:af:52:4a:f1:41:b7:14:50:77:47:a2:00:18:c7: fa:d2:52:e1:82:a7:f0:dd:05:c7:15:f1:23:08:96:cc:f7:79: cf:24:e9:ab:2c:da:ce:1f:64:52:e9:4d:03:ac:2c:27:f5:f6: e1:2c:af:2e:07:b9:de:30:fc:8b:08:45:2c:ae:a8:4f:75:7b: 84:89:69:f8:2a:81:35:07:4f:b3:83:01:90:de:50:92:7f:53: 2e:cd:12:9b:3c:67:0e:2e:72:24:9c:c0:b5:2a:c8:3a:53:70: 09:3f:1d:98:ae:3d:c3:01:d4:cb:e9:a7:35:26:ed:99:4e:18: 79:c2:7b:66:eb:3a:e5:97:f6:5e:d9:9d:02:0f:3b:3c:5d:cb: bb:d2:33:97:f0:b7:af:9a:ce:30:35:38:61:5a:db:a1:3e:7d: 7b:eb:e2:0f:8c:36:3f:3c:62:11:14:c2:c1:a5:e9:d5:75:28: ab:51:17:ff:7a:35:30:5b:4b:c2:b1:be:ea:d9:91:77:58:e7: b3:d2:55:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ctd4E/QakLdSXYsC7ajXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NmIwMjEyZTMzMmRjYThmYzdkMWVlNWE4MTUwYmEzODU2 OTljOGMwHhcNMjUxMjA2MTkwMTU5WhcNMjUxMjA3MTkwMTU5WjAzMTEwLwYDVQQD Eyg5MTZmOTYwYWI2NmFiODgwOGJlOWMwMTZhMDg0NWQ2ZGU1ZjNlYjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33l1o0LM17e7Nw1jHOBY3SYstXkw sNSbX5CssRW1EXXZBV8I2Drwl+MCtAbClN+F3dz2T3f+KmRDmXe+e7CY7J+n8aLi A/Hr9Cv82mskaL0SaV1KWfdNrcoOXZPteb7Ma7vfhK6SkJ4XzjZP7tWK13pmcohC ZEwRKEMLHqbz9KrljFYkb5Pcz8wQBgyXwbFfz8JBP+ECDMZAm5LeiV6T3CAzN3Q/ kq6bC0RMSRyhAvZAD6inFL0ojsu52l4tlikTdA3N7tVFDq4/nuKQQaYDFXbV1i7J zw4eD4RIxWFxncUHUsL2qNSbZxRypVVBSCtcX6fvV1RroRnZiwVLHixySwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFvlgq2ariAi+nAFqCEXW3l8+tJMB8GA1UdIwQY MBaAFOlrAhLjMtyo/H0e5agVC6OFaZyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iMjA1NjEtODcwZC00ZTkyLWJjMGUt OTA5MTAyNmFiYzcxLzEvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9iMjA1NjEtODcwZC00ZTkyLWJjMGUtOTA5MTAyNmFiYzcx LzEvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+j2xYxA 8eEwVfggy9g8XS+EioISusqb5yrYhrMQwYvmzo+XZshL/s6dqdC9iMmKjmkMkySJ 6W/qtq9SSvFBtxRQd0eiABjH+tJS4YKn8N0FxxXxIwiWzPd5zyTpqyzazh9kUulN A6wsJ/X24SyvLge53jD8iwhFLK6oT3V7hIlp+CqBNQdPs4MBkN5Qkn9TLs0Smzxn Di5yJJzAtSrIOlNwCT8dmK49wwHUy+mnNSbtmU4YecJ7Zus65Zf2XtmdAg87PF3L u9Izl/C3r5rOMDU4YVrboT59e+viD4w2PzxiERTCwaXp1XUoq1EX/3o1MFtLwrG+ 6tmRd1jns9JVyw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:19:52 2025 by rpki-client