This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft File: 6Md5F2XIhNCFX-0_-MPycJmpoBo.mft (raw, json) Hash identifier: wqadi36fxBUOGi6Dwl86vuRwgUlJ16OlT2+H6KP/t34= Subject key identifier: 9F:90:3F:EC:A9:F8:AB:8E:C9:91:80:0E:61:C8:FE:1D:A0:12:8D:2B Authority key identifier: E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A Certificate issuer: /CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a Certificate serial: 019AF766345A5B12B06F192BA0A0F72F5C82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft Manifest number: 1761 Signing time: Sun 07 Dec 2025 06:01:01 +0000 Manifest this update: Sun 07 Dec 2025 06:01:01 +0000 Manifest next update: Mon 08 Dec 2025 06:01:01 +0000 Files and hashes: 1: 6Md5F2XIhNCFX-0_-MPycJmpoBo.crl (hash: otx0TfvSHIsc1pc/Nvzo6g3Od9YPqPmKFt9tiajsQRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:66:34:5a:5b:12:b0:6f:19:2b:a0:a0:f7:2f:5c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a Validity Not Before: Dec 7 06:01:01 2025 GMT Not After : Dec 8 06:01:01 2025 GMT Subject: CN=9f903feca9f8ab8ec991800e61c8fe1da0128d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b7:0b:8f:be:ba:f6:53:15:c7:59:a7:33:48: 65:d1:50:c8:f8:b6:e2:da:86:f5:73:4f:a6:fb:f8: 57:60:7e:25:22:92:8f:f2:b5:94:df:11:5c:df:8e: 78:0b:85:45:29:0e:4b:33:9a:8c:45:ec:f4:9b:23: 1d:dd:ef:17:c9:27:ef:3b:bb:81:42:54:67:37:54: 26:45:7e:44:61:28:e8:16:5c:a7:35:b5:26:02:d2: c0:4f:a1:ed:c2:98:0e:a9:5b:4f:e1:6b:0f:32:a3: 13:53:df:74:43:06:e3:cc:72:0f:8a:9b:c0:8d:93: b8:0f:71:17:ab:93:51:6d:f1:ed:8d:9b:58:ed:55: 6e:f5:da:67:c1:d1:1a:e3:c6:7b:12:c2:ad:b5:13: 3e:53:33:02:7b:c8:92:24:81:7a:f6:00:bc:0d:d6: 5c:da:c7:08:e3:19:da:5c:ed:85:5b:ca:bd:ed:22: 34:44:8e:9d:4c:8b:aa:d4:84:bd:08:8c:8b:90:d3: ab:ad:e9:45:e3:b5:b2:bf:85:f3:c9:a4:b9:8e:2d: 44:41:26:e1:ef:56:d0:12:1b:fc:d7:7c:cc:5c:0e: cf:e5:d1:d3:64:37:bd:20:65:40:ac:a2:4d:42:80: 4b:0d:c0:57:ed:f9:d1:20:92:cd:0b:09:29:ea:8e: 7e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:90:3F:EC:A9:F8:AB:8E:C9:91:80:0E:61:C8:FE:1D:A0:12:8D:2B X509v3 Authority Key Identifier: keyid:E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:63:fa:be:7f:15:ea:7e:99:5a:1c:6b:08:ec:84:ca:59:5d: 46:27:8a:79:05:5b:23:05:50:8d:36:2b:99:80:c7:94:55:05: 4a:22:5d:ab:ff:42:a4:89:d8:7b:f5:f6:bd:8f:e5:e8:49:54: 39:ce:c9:21:7c:a7:89:cb:97:42:49:e9:f6:50:0e:65:40:97: f2:00:39:fb:8c:01:c3:a8:c8:bc:96:cd:a6:01:19:03:3b:1b: 65:d5:83:37:be:c2:f2:a6:02:5a:9e:af:88:0a:f1:79:5b:d0: c5:06:ac:9d:d0:71:e0:46:c1:09:f0:83:a4:e3:20:81:d7:8e: 0a:bf:37:d0:a4:60:b6:ee:d7:93:82:2f:15:0b:21:8a:5d:e6: cf:c5:70:08:8b:4b:90:b5:fb:4b:ca:e1:7b:c2:45:1a:44:17: 4a:1e:37:5e:c3:20:91:80:10:77:aa:53:54:b6:c0:f9:49:19: e2:95:71:a0:6a:fe:09:b9:c7:27:46:64:4d:7f:48:41:e1:94: 57:b5:3b:ac:fa:e2:c4:41:81:c2:40:93:29:8b:f5:09:57:5c: 21:8c:40:1e:fe:96:c7:f4:c6:f9:8e:f0:44:4c:a5:cb:28:48: 6b:56:c7:e6:fb:dd:e2:5e:0d:52:b5:b2:a5:a6:f8:8e:32:00: ea:c2:19:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3ZjRaWxKwbxkroKD3L1yCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Yzc3OTE3NjVjODg0ZDA4NTVmZWQzZmY4YzNmMjcwOTlh OWEwMWEwHhcNMjUxMjA3MDYwMTAxWhcNMjUxMjA4MDYwMTAxWjAzMTEwLwYDVQQD Eyg5ZjkwM2ZlY2E5ZjhhYjhlYzk5MTgwMGU2MWM4ZmUxZGEwMTI4ZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrcLj7669lMVx1mnM0hl0VDI+Lbi 2ob1c0+m+/hXYH4lIpKP8rWU3xFc3454C4VFKQ5LM5qMRez0myMd3e8XySfvO7uB QlRnN1QmRX5EYSjoFlynNbUmAtLAT6HtwpgOqVtP4WsPMqMTU990QwbjzHIPipvA jZO4D3EXq5NRbfHtjZtY7VVu9dpnwdEa48Z7EsKttRM+UzMCe8iSJIF69gC8DdZc 2scI4xnaXO2FW8q97SI0RI6dTIuq1IS9CIyLkNOrrelF47Wyv4XzyaS5ji1EQSbh 71bQEhv813zMXA7P5dHTZDe9IGVArKJNQoBLDcBX7fnRIJLNCwkp6o5+wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+QP+yp+KuOyZGADmHI/h2gEo0rMB8GA1UdIwQY MBaAFOjHeRdlyITQhV/tP/jD8nCZqaAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk1kNUYyWEloTkNGWC0wXy1NUHljSm1wb0JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80YmRmY2ItNDM4NS00N2NjLWIwODEt OTViMWQ3MWJjYzg5LzEvNk1kNUYyWEloTkNGWC0wXy1NUHljSm1wb0JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi80YmRmY2ItNDM4NS00N2NjLWIwODEtOTViMWQ3MWJjYzg5 LzEvNk1kNUYyWEloTkNGWC0wXy1NUHljSm1wb0JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2P6vn8V 6n6ZWhxrCOyEylldRieKeQVbIwVQjTYrmYDHlFUFSiJdq/9CpInYe/X2vY/l6ElU Oc7JIXynicuXQknp9lAOZUCX8gA5+4wBw6jIvJbNpgEZAzsbZdWDN77C8qYCWp6v iArxeVvQxQasndBx4EbBCfCDpOMggdeOCr830KRgtu7Xk4IvFQshil3mz8VwCItL kLX7S8rhe8JFGkQXSh43XsMgkYAQd6pTVLbA+UkZ4pVxoGr+CbnHJ0ZkTX9IQeGU V7U7rPrixEGBwkCTKYv1CVdcIYxAHv6Wx/TG+Y7wREylyyhIa1bH5vvd4l4NUrWy pab4jjIA6sIZmw== -----END CERTIFICATE-----Generated at Sun Dec 7 09:00:46 2025 by rpki-client