This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft File: 6oPjDy1vznWmZqLQtja0bsmYocs.mft (raw, json) Hash identifier: fk857qSGR+eRK2N6MSYmnt3i111Ei+Clu3dhhj7Vvpo= Subject key identifier: 2C:3A:51:E6:AE:0C:FA:77:CF:4B:4E:2C:F3:B0:D4:D2:73:3C:2E:86 Authority key identifier: EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB Certificate issuer: /CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb Certificate serial: 019AF12CB4FBB4A875B6936EC1C58C8FA7C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft Manifest number: 0F82 Signing time: Sat 06 Dec 2025 01:00:30 +0000 Manifest this update: Sat 06 Dec 2025 01:00:30 +0000 Manifest next update: Sun 07 Dec 2025 01:00:30 +0000 Files and hashes: 1: 6oPjDy1vznWmZqLQtja0bsmYocs.crl (hash: 9k+4Xd7kPwX9BoWU1qzB6QelN4jlJJ2gcr/0FPau2F0=) 2: okg73byO9ZwK73bf1nHKxWy9BQc.roa (hash: UhLrY21oOL3tD3JEsUSjif+xKx57LK0Vj7G+Yv+lBBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:b4:fb:b4:a8:75:b6:93:6e:c1:c5:8c:8f:a7:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb Validity Not Before: Dec 6 01:00:30 2025 GMT Not After : Dec 7 01:00:30 2025 GMT Subject: CN=2c3a51e6ae0cfa77cf4b4e2cf3b0d4d2733c2e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f6:bc:ac:0f:94:6c:6a:b8:7e:8c:63:13:b1: 70:e9:7e:85:4a:ff:50:72:75:14:7e:d9:7f:27:b8: c0:9b:c9:dd:4d:af:92:19:ea:90:11:92:67:28:6b: 6c:3c:fe:8a:ac:dd:77:ff:29:bc:d8:70:02:f1:97: 9c:92:b9:c0:28:23:49:12:ff:89:06:ab:74:49:de: 2a:bc:7a:93:e5:5b:cf:dd:ac:89:32:4a:50:bc:67: 38:be:ad:66:6a:b7:9b:e8:db:e0:d9:74:29:c3:2a: b4:37:23:54:b0:48:9f:5e:b4:58:52:f2:e3:54:93: 93:d1:74:8b:01:a9:a2:8c:50:fa:cd:e3:8c:f0:20: df:04:9e:f3:3a:2e:ce:ba:2a:d9:fe:85:bd:b5:85: 73:e9:2a:1d:14:43:f5:0b:6a:61:00:cf:a2:0b:e0: 82:96:9e:7e:11:cb:d7:af:08:5f:09:e8:cf:0e:c4: bc:fc:76:e4:8d:fb:84:92:21:e3:f4:93:3c:e9:0c: 82:b3:56:7d:6c:4e:54:46:ea:b0:6b:36:bc:4d:00: df:51:62:bd:f1:9b:6c:0c:e6:a9:68:96:86:db:22: 6e:32:28:95:bf:21:76:3a:c3:65:d6:2e:e1:58:23: 6f:f2:51:78:a1:95:82:f0:6b:b2:92:67:41:34:00: 15:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3A:51:E6:AE:0C:FA:77:CF:4B:4E:2C:F3:B0:D4:D2:73:3C:2E:86 X509v3 Authority Key Identifier: keyid:EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:00:e6:3d:c2:70:d3:d6:72:49:92:a9:0b:0a:cf:45:bd:c5: bb:06:00:6b:26:60:a5:b2:6a:47:51:23:3d:3c:60:06:f1:9f: 0f:75:7e:b4:2a:1a:d5:30:85:be:bd:3e:48:bd:e2:4c:a0:d7: d4:2a:08:f9:a8:2f:f3:6a:05:e2:e5:b5:7c:7b:f3:42:c0:15: c2:fb:6e:22:5e:9f:34:1e:89:cb:b9:1c:42:24:1c:39:2e:31: a9:80:1a:04:26:98:ee:c1:bb:bc:cf:1d:77:a9:cf:d7:d1:b4: 9a:df:ac:c1:df:85:15:7c:ad:f5:04:26:24:9c:0f:ee:c9:b7: e3:32:36:5b:01:0d:f5:97:ad:ac:68:8c:b4:ac:45:87:ca:1f: 7d:29:a1:e2:6b:d3:02:df:ac:34:ba:3a:8a:b1:94:b3:23:ef: 1a:67:0c:db:1c:0d:31:fd:df:84:af:79:b8:43:44:67:21:d1: e2:e1:bb:be:3f:46:04:30:9a:69:0c:eb:b3:7e:45:d7:a4:0d: 55:70:87:23:96:f6:44:f2:7f:8c:5f:6a:b3:c1:60:de:bf:ad: 3a:83:b5:f4:f2:40:13:89:2c:90:1e:44:38:45:dd:d4:f0:ef: 1d:c1:fe:29:cf:30:d8:05:7a:cf:7a:38:5e:13:eb:55:02:8b: 92:fc:c1:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLT7tKh1tpNuwcWMj6fIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhODNlMzBmMmQ2ZmNlNzVhNjY2YTJkMGI2MzZiNDZlYzk5 OGExY2IwHhcNMjUxMjA2MDEwMDMwWhcNMjUxMjA3MDEwMDMwWjAzMTEwLwYDVQQD EygyYzNhNTFlNmFlMGNmYTc3Y2Y0YjRlMmNmM2IwZDRkMjczM2MyZTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/a8rA+UbGq4foxjE7Fw6X6FSv9Q cnUUftl/J7jAm8ndTa+SGeqQEZJnKGtsPP6KrN13/ym82HAC8ZeckrnAKCNJEv+J Bqt0Sd4qvHqT5VvP3ayJMkpQvGc4vq1mareb6Nvg2XQpwyq0NyNUsEifXrRYUvLj VJOT0XSLAamijFD6zeOM8CDfBJ7zOi7OuirZ/oW9tYVz6SodFEP1C2phAM+iC+CC lp5+EcvXrwhfCejPDsS8/HbkjfuEkiHj9JM86QyCs1Z9bE5URuqwaza8TQDfUWK9 8ZtsDOapaJaG2yJuMiiVvyF2OsNl1i7hWCNv8lF4oZWC8GuykmdBNAAVQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCw6UeauDPp3z0tOLPOw1NJzPC6GMB8GA1UdIwQY MBaAFOqD4w8tb851pmai0LY2tG7JmKHLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNjljNzUtODM5MS00ZDkzLWIzNzgt M2ZhMTVhMzNmNDI5LzEvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jNjljNzUtODM5MS00ZDkzLWIzNzgtM2ZhMTVhMzNmNDI5 LzEvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQDmPcJw 09ZySZKpCwrPRb3FuwYAayZgpbJqR1EjPTxgBvGfD3V+tCoa1TCFvr0+SL3iTKDX 1CoI+agv82oF4uW1fHvzQsAVwvtuIl6fNB6Jy7kcQiQcOS4xqYAaBCaY7sG7vM8d d6nP19G0mt+swd+FFXyt9QQmJJwP7sm34zI2WwEN9ZetrGiMtKxFh8offSmh4mvT At+sNLo6irGUsyPvGmcM2xwNMf3fhK95uENEZyHR4uG7vj9GBDCaaQzrs35F16QN VXCHI5b2RPJ/jF9qs8Fg3r+tOoO19PJAE4kskB5EOEXd1PDvHcH+Kc8w2AV6z3o4 XhPrVQKLkvzBpg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:18 2025 by rpki-client