This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json) Hash identifier: q/aiLHiXIpeGDDHbN0eKmexC57E5CQPDHlyJWmoEr9k= Subject key identifier: 00:06:41:B0:84:52:1A:59:FB:E8:47:0E:58:88:7E:D2:51:88:4F:06 Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66 Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866 Certificate serial: 019AF509FC0EAB90F6AB1DEFC405D0C7D5BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 19:01:03 +0000 Manifest this update: Sat 06 Dec 2025 19:01:03 +0000 Manifest next update: Sun 07 Dec 2025 19:01:03 +0000 Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: Avc/sS82ZZW6PLMXU1H2D1/qt2tuzeso0SGvmsvZA4c=) 2: EdM8mT-itEKC9G8RLMrDLsNcS3o.roa (hash: aC1rODFSDGloRhxUO+L4zBSj1xyAZL+tlsZ8+nVllOY=) 3: LKntu7OdIVDRUeVXjemgx5JdRkc.roa (hash: kna/rCNXXypoDbewR/02DlClr5ejgsrzdo1XT3WKJ6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:fc:0e:ab:90:f6:ab:1d:ef:c4:05:d0:c7:d5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866 Validity Not Before: Dec 6 19:01:03 2025 GMT Not After : Dec 7 19:01:03 2025 GMT Subject: CN=000641b084521a59fbe8470e58887ed251884f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:66:5e:de:ce:8e:a2:fc:65:12:5f:e1:0e:d6: 9c:93:e3:cc:9b:2d:0b:8b:62:67:3a:9d:09:c0:87: b8:f7:a1:df:29:7e:cd:f8:7c:ca:51:b5:ca:87:e9: 75:41:e9:19:34:05:59:cf:8d:a7:40:66:73:4c:18: 96:75:9e:bb:b1:45:27:c3:90:e7:69:1d:eb:79:2f: e7:4a:38:ba:fe:cc:e7:3b:0a:00:ea:66:da:e9:fa: d7:20:ee:02:38:73:06:7b:2a:5e:11:a8:4c:6f:15: c1:a8:a1:e2:99:c7:c9:64:5e:37:96:f8:a3:03:2e: ac:44:b9:ea:85:5c:76:72:31:45:9d:0a:b4:76:eb: 54:30:20:a8:40:91:6c:99:ab:7d:ac:e1:5f:d2:1b: b2:6d:43:a3:9a:71:f0:3f:34:70:70:63:8a:29:b5: 39:cd:80:10:4f:4a:0e:2d:59:b2:b6:84:5f:a0:7c: 17:75:fd:7e:3a:ca:53:a0:43:1b:40:54:00:94:fe: 4d:bf:51:dd:13:9c:af:ef:b3:e1:bd:cc:0f:2f:57: 7e:55:d0:dc:b8:59:d4:b3:20:0e:72:69:07:32:d5: d9:d3:da:4b:54:bb:13:a2:19:38:78:9e:55:40:b8: e1:11:0a:c5:6e:f3:a5:bc:8a:3e:1c:e6:9f:50:b6: 30:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:06:41:B0:84:52:1A:59:FB:E8:47:0E:58:88:7E:D2:51:88:4F:06 X509v3 Authority Key Identifier: keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3a:00:c0:5b:21:9a:3a:f0:e6:8f:6e:ff:30:5e:e1:18:94: bf:f9:f2:73:de:42:62:4e:21:ad:de:46:d0:c2:40:5b:f8:a4: 1b:25:2f:24:d6:2c:8e:44:35:54:63:3a:51:bf:08:a9:98:57: b2:e6:68:44:47:34:6b:c7:e3:82:cc:ff:5e:a5:5e:c4:81:2c: e8:0f:eb:ad:d2:b3:83:bb:7f:d0:2d:71:2a:85:ca:ec:22:49: 5e:99:57:f0:6e:e5:50:eb:4c:1e:e0:3e:6b:ca:ea:b1:f4:b1: c5:1a:e6:33:01:7b:4c:6a:63:4a:70:b2:59:fc:ba:2a:f7:75: 1e:f7:a7:b5:2e:78:d3:6a:21:d0:2d:b1:13:49:a6:c8:32:21: 29:57:af:28:29:f9:dc:5f:10:eb:7a:e3:fb:be:8a:0a:9d:eb: 11:f5:f0:3d:57:4d:ef:ec:8a:23:26:c0:71:3c:d3:b0:92:7c: 98:da:9b:13:2d:36:61:c1:46:9c:80:f1:ab:82:94:42:13:da: 7b:06:a9:2e:e7:f7:b6:da:35:bb:b9:d0:2c:9f:eb:b5:4c:3e: 7c:9a:5d:55:9d:b4:96:bf:94:02:58:cf:53:6c:13:31:bb:3b: 19:0c:85:f5:ec:fd:2c:be:f8:0d:ac:c7:a1:e7:93:72:cb:76: 37:3a:66:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CfwOq5D2qx3vxAXQx9W7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMGYwOGQ0ZWUxZjk0Zjk4NDQ5M2I0NjdiZDhhY2EyYWRm YTI4NjYwHhcNMjUxMjA2MTkwMTAzWhcNMjUxMjA3MTkwMTAzWjAzMTEwLwYDVQQD EygwMDA2NDFiMDg0NTIxYTU5ZmJlODQ3MGU1ODg4N2VkMjUxODg0ZjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WZe3s6OovxlEl/hDtack+PMmy0L i2JnOp0JwIe496HfKX7N+HzKUbXKh+l1QekZNAVZz42nQGZzTBiWdZ67sUUnw5Dn aR3reS/nSji6/sznOwoA6mba6frXIO4COHMGeypeEahMbxXBqKHimcfJZF43lvij Ay6sRLnqhVx2cjFFnQq0dutUMCCoQJFsmat9rOFf0huybUOjmnHwPzRwcGOKKbU5 zYAQT0oOLVmytoRfoHwXdf1+OspToEMbQFQAlP5Nv1HdE5yv77PhvcwPL1d+VdDc uFnUsyAOcmkHMtXZ09pLVLsTohk4eJ5VQLjhEQrFbvOlvIo+HOafULYwnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAGQbCEUhpZ++hHDliIftJRiE8GMB8GA1UdIwQY MBaAFOoPCNTuH5T5hEk7RnvYrKKt+ihmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUt MmVmYjQ2MWZkNDEzLzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUtMmVmYjQ2MWZkNDEz LzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjoAwFsh mjrw5o9u/zBe4RiUv/nyc95CYk4hrd5G0MJAW/ikGyUvJNYsjkQ1VGM6Ub8IqZhX suZoREc0a8fjgsz/XqVexIEs6A/rrdKzg7t/0C1xKoXK7CJJXplX8G7lUOtMHuA+ a8rqsfSxxRrmMwF7TGpjSnCyWfy6Kvd1HventS5402oh0C2xE0mmyDIhKVevKCn5 3F8Q63rj+76KCp3rEfXwPVdN7+yKIybAcTzTsJJ8mNqbEy02YcFGnIDxq4KUQhPa ewapLuf3tto1u7nQLJ/rtUw+fJpdVZ20lr+UAljPU2wTMbs7GQyF9ez9LL74DazH oeeTcst2NzpmeQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:04 2025 by rpki-client