This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft File: 6gYhpKcsclr8dUFej4rPdTPUIH0.mft (raw, json) Hash identifier: NDf0BWvWb6xIIBIvEapH1rRTVzwt8HYI4iHNaN4KEec= Subject key identifier: 15:B0:AE:E4:AA:4B:8A:58:FA:C8:9E:05:6C:3A:E4:9E:C8:4E:9A:38 Authority key identifier: EA:06:21:A4:A7:2C:72:5A:FC:75:41:5E:8F:8A:CF:75:33:D4:20:7D Certificate issuer: /CN=ea0621a4a72c725afc75415e8f8acf7533d4207d Certificate serial: 019AF12F47AEB68F9C0550BE05B0EF702BE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft Manifest number: 15AC Signing time: Sat 06 Dec 2025 01:03:18 +0000 Manifest this update: Sat 06 Dec 2025 01:03:18 +0000 Manifest next update: Sun 07 Dec 2025 01:03:18 +0000 Files and hashes: 1: 6gYhpKcsclr8dUFej4rPdTPUIH0.crl (hash: cutYeVlqfZwQ26tNT/vcueBxT0rsd/nSFJYaMUeQn1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.crl rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:47:ae:b6:8f:9c:05:50:be:05:b0:ef:70:2b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea0621a4a72c725afc75415e8f8acf7533d4207d Validity Not Before: Dec 6 01:03:18 2025 GMT Not After : Dec 7 01:03:18 2025 GMT Subject: CN=15b0aee4aa4b8a58fac89e056c3ae49ec84e9a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:db:42:ab:7b:04:05:1b:a1:54:3e:ea:76:08: de:2f:c1:51:65:b6:8f:32:a5:8c:4b:d8:f0:53:d3: ff:fc:af:26:06:fc:5c:4a:bb:9d:f5:36:c2:51:4e: 3e:dd:be:bf:fa:b1:d7:a2:e8:e6:54:bd:3b:c1:7e: 27:54:b7:f0:b6:03:18:7b:31:da:f5:ea:da:6e:1d: cd:c6:b6:15:b7:51:c2:39:cd:31:89:48:d2:1c:53: d8:3c:ea:75:65:80:74:0e:4a:90:6d:a9:c0:62:75: a9:ad:b6:53:6e:8c:a5:7b:f1:c2:cc:a0:4d:05:9e: d9:ce:b5:71:f7:aa:a2:5a:76:13:ee:47:e3:6d:13: fc:7c:52:7c:65:d1:e0:28:02:40:d5:6c:e4:30:28: 48:8b:54:6a:c5:36:97:da:77:62:67:43:d3:f9:29: d4:81:56:e1:02:ef:06:bf:7c:07:1b:41:04:55:e5: 47:90:96:90:b1:28:09:83:37:f1:4e:83:59:db:b3: 57:39:76:d9:11:b6:0c:5e:0c:d8:4c:cd:66:b6:d1: 83:80:be:b3:cb:d3:cf:66:ce:6e:97:e7:bd:78:5d: 07:0e:98:d2:4c:07:85:fe:be:f6:6d:c8:fb:5e:b1: 8e:77:84:ae:01:26:a5:1f:c9:f9:39:2c:af:54:fb: f4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B0:AE:E4:AA:4B:8A:58:FA:C8:9E:05:6C:3A:E4:9E:C8:4E:9A:38 X509v3 Authority Key Identifier: keyid:EA:06:21:A4:A7:2C:72:5A:FC:75:41:5E:8F:8A:CF:75:33:D4:20:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gYhpKcsclr8dUFej4rPdTPUIH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/31158e-9ca6-44e3-9853-c384d8bc3bef/1/6gYhpKcsclr8dUFej4rPdTPUIH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:f3:b0:2a:78:ec:9a:bf:82:01:8f:ac:36:4d:9b:1a:dd:39: 9e:dd:7a:64:20:2b:ef:f2:6a:92:c7:9c:b7:13:f4:e3:b5:29: 63:9f:1a:81:08:8c:ff:92:a9:1b:31:65:9f:64:c8:cf:24:f1: fa:ce:44:44:45:1d:67:57:f3:d1:40:ea:0d:48:08:35:b1:fb: db:3d:b6:35:5e:eb:fb:3b:36:ab:1d:92:9e:6e:90:f3:47:07: 04:04:18:0c:81:c1:de:b3:c5:42:97:08:8d:f3:f2:0f:f7:d4: 9d:f6:01:87:08:c8:18:d1:31:21:23:7a:9b:ee:23:ac:52:69: b0:bd:b4:f3:cf:55:7c:dc:e7:ab:d8:c1:3a:22:f3:af:aa:b4: c6:da:68:2c:8a:d9:8f:69:f2:35:29:3a:68:81:3c:d3:33:a0: 68:b7:7b:92:8e:31:90:27:6a:50:8e:58:02:36:53:37:cd:34: 93:8c:59:f7:05:5e:37:ab:96:63:4e:7e:bb:ef:a7:71:0b:9c: c8:cb:d5:c6:71:4f:c3:e3:3e:de:e9:3b:b0:71:5f:16:fc:ee: b2:4f:de:94:3b:07:6e:d5:3c:11:0d:7b:c4:72:7a:85:7f:5c: c6:b7:3d:8b:4b:e8:d7:92:5b:87:25:6e:a1:08:64:8e:f1:59: 25:a3:dd:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxL0euto+cBVC+BbDvcCvmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMDYyMWE0YTcyYzcyNWFmYzc1NDE1ZThmOGFjZjc1MzNk NDIwN2QwHhcNMjUxMjA2MDEwMzE4WhcNMjUxMjA3MDEwMzE4WjAzMTEwLwYDVQQD EygxNWIwYWVlNGFhNGI4YTU4ZmFjODllMDU2YzNhZTQ5ZWM4NGU5YTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndtCq3sEBRuhVD7qdgjeL8FRZbaP MqWMS9jwU9P//K8mBvxcSrud9TbCUU4+3b6/+rHXoujmVL07wX4nVLfwtgMYezHa 9erabh3NxrYVt1HCOc0xiUjSHFPYPOp1ZYB0DkqQbanAYnWprbZTboyle/HCzKBN BZ7ZzrVx96qiWnYT7kfjbRP8fFJ8ZdHgKAJA1WzkMChIi1RqxTaX2ndiZ0PT+SnU gVbhAu8Gv3wHG0EEVeVHkJaQsSgJgzfxToNZ27NXOXbZEbYMXgzYTM1mttGDgL6z y9PPZs5ul+e9eF0HDpjSTAeF/r72bcj7XrGOd4SuASalH8n5OSyvVPv0owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWwruSqS4pY+sieBWw65J7ITpo4MB8GA1UdIwQY MBaAFOoGIaSnLHJa/HVBXo+Kz3Uz1CB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmdZaHBLY3NjbHI4ZFVGZWo0clBkVFBVSUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zMTE1OGUtOWNhNi00NGUzLTk4NTMt YzM4NGQ4YmMzYmVmLzEvNmdZaHBLY3NjbHI4ZFVGZWo0clBkVFBVSUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zMTE1OGUtOWNhNi00NGUzLTk4NTMtYzM4NGQ4YmMzYmVm LzEvNmdZaHBLY3NjbHI4ZFVGZWo0clBkVFBVSUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsfOwKnjs mr+CAY+sNk2bGt05nt16ZCAr7/JqksectxP047UpY58agQiM/5KpGzFln2TIzyTx +s5EREUdZ1fz0UDqDUgINbH72z22NV7r+zs2qx2Snm6Q80cHBAQYDIHB3rPFQpcI jfPyD/fUnfYBhwjIGNExISN6m+4jrFJpsL20889VfNznq9jBOiLzr6q0xtpoLIrZ j2nyNSk6aIE80zOgaLd7ko4xkCdqUI5YAjZTN800k4xZ9wVeN6uWY05+u++ncQuc yMvVxnFPw+M+3uk7sHFfFvzusk/elDsHbtU8EQ17xHJ6hX9cxrc9i0vo15JbhyVu oQhkjvFZJaPdxw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:36 2025 by rpki-client