This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft File: 6ch0aZeAldiv9jJygEuy810UkQM.mft (raw, json) Hash identifier: S2r3rDh3jXs+YVMlnpwaIZBJcMQ+zwfNPZwZ/YJ2REc= Subject key identifier: DF:CA:D4:13:C3:47:79:6E:A4:7D:91:05:50:CC:59:1A:B4:C8:77:B2 Authority key identifier: E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03 Certificate issuer: /CN=e9c87469978095d8aff63272804bb2f35d149103 Certificate serial: 019AF163DC6063EA1D85498BFC16CAD076FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft Manifest number: 0A9C Signing time: Sat 06 Dec 2025 02:00:44 +0000 Manifest this update: Sat 06 Dec 2025 02:00:44 +0000 Manifest next update: Sun 07 Dec 2025 02:00:44 +0000 Files and hashes: 1: 6ch0aZeAldiv9jJygEuy810UkQM.crl (hash: yYDq6/WmftjZ3PKjZdptKDe+nsPBQ0MohLN6i5LzVXc=) 2: zUJ5qWVbr4pmer3m739HNMffZjg.roa (hash: NJqHyM9HbL1+6lpUhrutNRFZX2Z30cCNuSy/2q+fWs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:dc:60:63:ea:1d:85:49:8b:fc:16:ca:d0:76:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9c87469978095d8aff63272804bb2f35d149103 Validity Not Before: Dec 6 02:00:44 2025 GMT Not After : Dec 7 02:00:44 2025 GMT Subject: CN=dfcad413c347796ea47d910550cc591ab4c877b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8b:5f:87:89:51:b9:92:01:98:bf:2e:16:b7: 2c:d6:38:18:87:df:34:75:77:62:03:1f:f0:a8:7c: 88:4d:1d:98:b1:0e:3c:a5:86:5f:68:59:3c:55:61: e6:53:be:e1:ee:13:35:39:1f:92:61:9d:27:a9:9e: 07:75:b0:0e:e5:dd:ba:88:81:28:a3:b6:e2:11:fd: 38:2f:24:f0:44:dc:ba:f5:35:6a:25:a7:7e:f6:e4: 25:ff:0a:98:7b:d7:04:a4:6a:10:97:95:ef:fb:14: 34:df:52:0d:f1:47:69:9f:3b:c2:aa:b2:c5:48:6f: 2a:2c:6f:cf:17:aa:4f:b7:bc:a6:db:ba:e8:53:da: 12:fb:20:f4:8f:e8:06:b6:13:9e:0f:5d:11:e4:25: fa:dd:b2:03:e4:a9:6f:c7:97:0a:7e:19:4a:da:7c: 63:45:a8:6d:7c:22:a1:6b:58:f1:95:d6:da:66:66: 02:cd:36:b3:44:0f:12:8a:89:94:b1:7c:8a:e0:cf: 41:39:41:9a:1f:7d:95:b1:fc:6a:68:80:d6:a1:7e: 7e:cf:60:1f:3d:5c:9a:a6:79:bf:5f:c8:b4:f9:02: 00:90:df:33:ce:21:89:b3:08:ba:e6:cd:ca:b1:bd: 64:9a:13:e7:28:11:6c:da:83:4f:67:2c:f3:a3:d1: c9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CA:D4:13:C3:47:79:6E:A4:7D:91:05:50:CC:59:1A:B4:C8:77:B2 X509v3 Authority Key Identifier: keyid:E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:71:d0:0d:19:62:f1:77:24:e3:ce:d8:8b:68:81:56:d4:cc: 94:14:78:1b:27:31:2b:c2:a9:e9:21:0f:7a:d8:24:6a:97:cb: 0c:86:a6:50:87:c5:7f:a6:57:1f:4f:da:77:b6:67:7a:aa:fd: f2:f5:67:8d:e0:11:ab:72:86:7e:aa:54:54:06:72:6b:63:a0: 24:a5:e4:a4:ac:63:e6:ab:04:e9:df:96:1c:b7:87:34:99:28: 86:fa:db:18:22:3c:37:3c:cd:43:05:65:7d:06:f7:3e:cb:8e: 4b:9e:a6:a4:ca:c7:40:d8:63:e6:35:02:0e:5d:b1:07:0b:8b: 85:fe:0d:b1:7a:80:bc:7d:b2:7a:2e:10:2f:fc:59:ad:fd:a6: 4f:f2:a1:9d:65:a6:ac:d3:6e:86:d3:f2:b3:9a:e8:e9:54:19: 46:6e:25:3c:08:2b:ba:17:a9:c8:9a:23:30:8b:97:eb:dc:d5: 09:1f:ac:5e:03:82:58:cf:87:9f:b0:32:e0:57:60:2a:96:14: 7d:31:08:d8:b5:34:eb:1f:13:42:54:52:3c:90:24:d0:e3:23: 67:97:e8:76:3e:80:7b:1b:88:e6:0a:d5:c2:47:0e:89:a4:61: d2:46:c4:8f:29:f7:c9:d8:08:1c:f0:8e:c9:08:8e:08:84:b4: 0f:bb:d3:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9xgY+odhUmL/BbK0Hb+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5Yzg3NDY5OTc4MDk1ZDhhZmY2MzI3MjgwNGJiMmYzNWQx NDkxMDMwHhcNMjUxMjA2MDIwMDQ0WhcNMjUxMjA3MDIwMDQ0WjAzMTEwLwYDVQQD EyhkZmNhZDQxM2MzNDc3OTZlYTQ3ZDkxMDU1MGNjNTkxYWI0Yzg3N2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnotfh4lRuZIBmL8uFrcs1jgYh980 dXdiAx/wqHyITR2YsQ48pYZfaFk8VWHmU77h7hM1OR+SYZ0nqZ4HdbAO5d26iIEo o7biEf04LyTwRNy69TVqJad+9uQl/wqYe9cEpGoQl5Xv+xQ031IN8UdpnzvCqrLF SG8qLG/PF6pPt7ym27roU9oS+yD0j+gGthOeD10R5CX63bID5Klvx5cKfhlK2nxj RahtfCKha1jxldbaZmYCzTazRA8SiomUsXyK4M9BOUGaH32VsfxqaIDWoX5+z2Af PVyapnm/X8i0+QIAkN8zziGJswi65s3Ksb1kmhPnKBFs2oNPZyzzo9HJvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/K1BPDR3lupH2RBVDMWRq0yHeyMB8GA1UdIwQY MBaAFOnIdGmXgJXYr/YycoBLsvNdFJEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmNoMGFaZUFsZGl2OWpKeWdFdXk4MTBVa1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85YWQ5ZGMtYjg0Yy00YTU5LWJiMWMt MGNjM2I0Y2FmNjgzLzEvNmNoMGFaZUFsZGl2OWpKeWdFdXk4MTBVa1FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85YWQ5ZGMtYjg0Yy00YTU5LWJiMWMtMGNjM2I0Y2FmNjgz LzEvNmNoMGFaZUFsZGl2OWpKeWdFdXk4MTBVa1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsXHQDRli 8Xck487Yi2iBVtTMlBR4GycxK8Kp6SEPetgkapfLDIamUIfFf6ZXH0/ad7Zneqr9 8vVnjeARq3KGfqpUVAZya2OgJKXkpKxj5qsE6d+WHLeHNJkohvrbGCI8NzzNQwVl fQb3PsuOS56mpMrHQNhj5jUCDl2xBwuLhf4NsXqAvH2yei4QL/xZrf2mT/KhnWWm rNNuhtPys5ro6VQZRm4lPAgruhepyJojMIuX69zVCR+sXgOCWM+Hn7Ay4FdgKpYU fTEI2LU06x8TQlRSPJAk0OMjZ5fodj6AexuI5grVwkcOiaRh0kbEjyn3ydgIHPCO yQiOCIS0D7vTOg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:39 2025 by rpki-client