This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft File: 6WR3bOxi7xOoKiFl5vjUeJDXc00.mft (raw, json) Hash identifier: uCWw6/Vcy2f5uODxthxXdx2UhZZyQlNi1ymBvt4WS64= Subject key identifier: 3D:82:0B:53:8E:3A:CC:5C:36:95:FA:B6:43:1C:85:5E:38:31:CA:09 Authority key identifier: E9:64:77:6C:EC:62:EF:13:A8:2A:21:65:E6:F8:D4:78:90:D7:73:4D Certificate issuer: /CN=e964776cec62ef13a82a2165e6f8d47890d7734d Certificate serial: 019AF164306F32D69EC90CF622ACC9F861B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft Manifest number: 0514 Signing time: Sat 06 Dec 2025 02:01:06 +0000 Manifest this update: Sat 06 Dec 2025 02:01:06 +0000 Manifest next update: Sun 07 Dec 2025 02:01:06 +0000 Files and hashes: 1: 6WR3bOxi7xOoKiFl5vjUeJDXc00.crl (hash: +eJNczu13frLkWxV8RKdS8Uv7hDcOYqxJyUlK/1flo4=) 2: gULVBnS6_qNHU7cQ0dkYMIuUayU.roa (hash: g1yDTdtovs95F32kLsCVnbkwBNkiMceKZcm5mTyCkJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.crl rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:30:6f:32:d6:9e:c9:0c:f6:22:ac:c9:f8:61:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e964776cec62ef13a82a2165e6f8d47890d7734d Validity Not Before: Dec 6 02:01:06 2025 GMT Not After : Dec 7 02:01:06 2025 GMT Subject: CN=3d820b538e3acc5c3695fab6431c855e3831ca09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:29:d0:d0:72:16:c7:8a:e5:e0:a9:9f:a8:97: 38:1e:93:95:a4:7a:81:a2:c6:56:f4:19:f7:b0:20: 2c:32:70:8f:6a:bb:1e:c6:d5:72:d3:10:5d:24:ab: 19:19:3e:8c:0c:61:15:b2:e4:e2:9e:74:d8:32:90: 4d:13:5a:a6:1a:0a:30:fb:4a:6f:6c:9d:13:e5:42: c4:ec:63:6e:cc:2f:a0:ad:15:e6:62:96:16:ff:43: 8d:b6:3c:e2:ab:02:9d:5f:1a:be:b5:96:94:09:64: 2f:b0:ab:09:88:0a:4d:57:6a:ad:46:17:f7:cc:9b: d5:71:ba:2f:96:9a:9a:1e:0f:fd:18:3d:ba:3d:06: 2c:c8:58:e6:0f:7e:d7:d4:bc:bc:e2:58:cb:f0:a9: 77:74:42:a8:b7:53:6d:02:c5:78:6f:39:ec:ec:8e: b2:a7:05:7c:58:b1:8e:5c:0d:d3:da:08:37:cb:07: c1:6f:5b:70:54:50:c3:c7:b0:63:3c:24:8f:5b:09: a4:7e:f9:d7:2e:b8:de:5b:cb:09:b2:d0:92:69:d0: 23:f6:74:29:62:a8:ab:a4:a0:58:99:d6:14:1d:b3: 7d:09:87:0e:01:f6:68:c9:8a:f8:b3:a4:22:52:92: c6:ec:72:cc:8f:68:99:07:28:7a:9f:27:19:5f:a5: 76:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:82:0B:53:8E:3A:CC:5C:36:95:FA:B6:43:1C:85:5E:38:31:CA:09 X509v3 Authority Key Identifier: keyid:E9:64:77:6C:EC:62:EF:13:A8:2A:21:65:E6:F8:D4:78:90:D7:73:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WR3bOxi7xOoKiFl5vjUeJDXc00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7dc313-42bc-4677-8e91-11a9e9922537/1/6WR3bOxi7xOoKiFl5vjUeJDXc00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d1:42:bf:86:11:b7:e3:41:4e:75:7e:70:e9:bf:14:f3:63: 8c:5b:7f:c6:18:4e:8a:3e:1d:1d:e3:ff:65:90:69:20:ac:80: 6e:d4:fd:43:a7:9e:7f:ee:94:d5:dd:15:2d:7a:4e:06:5f:a7: d6:69:3b:4d:8e:90:70:b1:16:f5:aa:c0:3a:c3:d8:35:c2:9e: 47:38:29:ff:a4:05:da:67:cc:e3:3d:ec:85:2a:df:e1:ff:c9: 92:db:7e:a1:a3:07:97:b9:92:7c:ae:39:9b:81:29:2f:cf:3e: 40:f1:0f:43:06:af:db:a0:24:0b:14:c1:f2:d2:ff:c3:7d:08: 29:0d:2f:9b:90:44:76:e8:89:00:d3:4d:f2:5b:ca:b5:24:41: 50:0f:6e:17:55:e0:9c:fc:be:f7:3b:ff:7a:32:f7:ad:1b:7f: 03:6f:58:0e:51:8e:08:89:70:b1:3c:63:d5:e7:ca:f1:16:7a: 31:ea:a7:1f:02:2c:db:14:de:3a:d4:0d:54:ad:50:eb:15:23: df:1c:34:97:55:97:9a:79:3a:69:25:a3:cb:68:f4:e6:bb:51: ac:e4:8a:d6:fa:2a:a1:da:31:47:3b:5c:2a:e9:9d:a3:b4:8f: bb:34:97:dd:72:73:40:5c:7d:9c:58:0b:66:dd:1f:79:3c:d2: 7a:d3:70:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDBvMtaeyQz2IqzJ+GG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NjQ3NzZjZWM2MmVmMTNhODJhMjE2NWU2ZjhkNDc4OTBk NzczNGQwHhcNMjUxMjA2MDIwMTA2WhcNMjUxMjA3MDIwMTA2WjAzMTEwLwYDVQQD EygzZDgyMGI1MzhlM2FjYzVjMzY5NWZhYjY0MzFjODU1ZTM4MzFjYTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlynQ0HIWx4rl4KmfqJc4HpOVpHqB osZW9Bn3sCAsMnCParsextVy0xBdJKsZGT6MDGEVsuTinnTYMpBNE1qmGgow+0pv bJ0T5ULE7GNuzC+grRXmYpYW/0ONtjziqwKdXxq+tZaUCWQvsKsJiApNV2qtRhf3 zJvVcbovlpqaHg/9GD26PQYsyFjmD37X1Ly84ljL8Kl3dEKot1NtAsV4bzns7I6y pwV8WLGOXA3T2gg3ywfBb1twVFDDx7BjPCSPWwmkfvnXLrjeW8sJstCSadAj9nQp YqirpKBYmdYUHbN9CYcOAfZoyYr4s6QiUpLG7HLMj2iZByh6nycZX6V2kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2CC1OOOsxcNpX6tkMchV44McoJMB8GA1UdIwQY MBaAFOlkd2zsYu8TqCohZeb41HiQ13NNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNldSM2JPeGk3eE9vS2lGbDV2alVlSkRYYzAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ZGMzMTMtNDJiYy00Njc3LThlOTEt MTFhOWU5OTIyNTM3LzEvNldSM2JPeGk3eE9vS2lGbDV2alVlSkRYYzAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy83ZGMzMTMtNDJiYy00Njc3LThlOTEtMTFhOWU5OTIyNTM3 LzEvNldSM2JPeGk3eE9vS2lGbDV2alVlSkRYYzAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtFCv4YR t+NBTnV+cOm/FPNjjFt/xhhOij4dHeP/ZZBpIKyAbtT9Q6eef+6U1d0VLXpOBl+n 1mk7TY6QcLEW9arAOsPYNcKeRzgp/6QF2mfM4z3shSrf4f/Jktt+oaMHl7mSfK45 m4EpL88+QPEPQwav26AkCxTB8tL/w30IKQ0vm5BEduiJANNN8lvKtSRBUA9uF1Xg nPy+9zv/ejL3rRt/A29YDlGOCIlwsTxj1efK8RZ6MeqnHwIs2xTeOtQNVK1Q6xUj 3xw0l1WXmnk6aSWjy2j05rtRrOSK1voqodoxRztcKumdo7SPuzSX3XJzQFx9nFgL Zt0feTzSetNwGg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:15 2025 by rpki-client