This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft File: 6wkUma3HabD7qf7TKEVDp0JcI1E.mft (raw, json) Hash identifier: PrahahPtq9jufy3UfT1SGKcwQykD12f+iIFL+MIs6Gc= Subject key identifier: 48:70:6B:39:F2:92:A7:40:6C:84:91:FD:A4:CD:7D:42:F7:94:77:4D Authority key identifier: EB:09:14:99:AD:C7:69:B0:FB:A9:FE:D3:28:45:43:A7:42:5C:23:51 Certificate issuer: /CN=eb091499adc769b0fba9fed3284543a7425c2351 Certificate serial: 019AF31D7DD6C600345E2F42EE65810FD626 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft Manifest number: 1752 Signing time: Sat 06 Dec 2025 10:03:07 +0000 Manifest this update: Sat 06 Dec 2025 10:03:07 +0000 Manifest next update: Sun 07 Dec 2025 10:03:07 +0000 Files and hashes: 1: 6wkUma3HabD7qf7TKEVDp0JcI1E.crl (hash: renuBHf/ITWcJAOqItTY+XcXQTXozJzi9Zas9IhxVUg=) 2: GAIwhqy9s--sK4fAUb5ZmX0AYwU.roa (hash: Ns47X0wI0O3MuVbdsHwm7ba7lckhv6ZFSEeB9gRrT7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:7d:d6:c6:00:34:5e:2f:42:ee:65:81:0f:d6:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb091499adc769b0fba9fed3284543a7425c2351 Validity Not Before: Dec 6 10:03:07 2025 GMT Not After : Dec 7 10:03:07 2025 GMT Subject: CN=48706b39f292a7406c8491fda4cd7d42f794774d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3b:15:88:df:3a:f3:33:bf:ed:a1:5c:2a:f6: 22:9c:1b:f7:ec:c9:15:b2:9b:1a:2b:d9:f9:44:c4: 09:ba:43:04:46:d7:42:e9:2f:ba:b7:9c:9a:fe:c8: 89:15:a5:68:a7:d9:2d:de:1c:9d:ab:ac:73:e1:b6: d3:6b:4b:5d:a2:ce:b8:44:f3:9d:c0:db:1a:8c:67: 6c:6c:f2:bd:62:86:96:69:32:c3:97:25:7d:39:b5: 85:ef:f5:33:36:55:ed:65:71:48:74:8b:62:10:88: 70:64:53:df:5e:55:15:0b:59:89:55:23:b5:ab:e8: 4f:f2:2e:54:af:6e:60:8c:26:60:af:fd:a3:49:47: 10:27:f5:12:b0:11:2f:06:5d:81:e2:bf:34:ff:d2: 33:9a:44:e6:e6:19:0e:a0:4a:03:c3:c4:d9:83:b5: 43:c6:d1:c3:dd:88:73:65:88:c2:b7:a1:15:d9:96: a1:f3:c9:29:af:18:b7:8f:a0:03:86:0a:a1:c6:54: f2:06:87:21:bd:e0:22:34:0d:78:3a:49:62:82:b6: 19:f4:05:18:cc:54:a9:56:f4:0e:67:cf:9f:f3:61: aa:e5:a9:ce:cf:db:11:c8:6b:79:0e:75:bb:80:21: c7:c1:89:3b:8f:c8:f9:5e:5f:05:bb:02:14:62:be: 2e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:70:6B:39:F2:92:A7:40:6C:84:91:FD:A4:CD:7D:42:F7:94:77:4D X509v3 Authority Key Identifier: keyid:EB:09:14:99:AD:C7:69:B0:FB:A9:FE:D3:28:45:43:A7:42:5C:23:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:aa:fe:60:f4:50:9c:99:27:e8:be:77:44:75:82:8a:25:6b: 0e:a1:58:71:a3:22:4d:12:e8:70:70:bf:c3:9d:80:cf:63:6a: 2d:41:9f:53:9e:cc:47:2d:a8:81:2b:87:28:de:82:65:ad:c4: 7a:20:e9:1f:cb:d3:ec:de:83:dd:16:e6:26:90:4c:24:70:d8: e2:b8:48:ef:28:99:35:0f:77:0f:ed:78:28:58:40:c6:9e:f7: 6d:6c:76:02:15:01:7f:ea:df:ba:b0:46:68:64:0d:c2:65:b7: 7d:51:60:3a:6d:4d:a6:ff:9d:e4:e7:cb:eb:f8:a7:d1:3c:77: 69:b5:b2:69:de:02:df:a5:8d:1d:a8:81:73:db:de:99:ee:17: 58:a5:42:2c:7b:d3:74:41:41:3a:db:8b:60:8d:6a:19:9d:79: 5e:e0:5f:c9:bc:a8:8f:60:2d:3c:13:d5:ff:84:9b:e2:50:9f: d5:26:dc:3f:2e:a2:f1:de:ed:cc:e6:62:41:38:fa:95:d2:5b: aa:57:6c:c7:7c:35:83:4f:f1:7d:83:55:0d:dc:c9:94:8a:e7: 81:64:4c:27:0e:df:64:e5:c4:84:19:66:64:6f:4a:f1:73:a4: 75:f0:33:d7:07:a5:b7:a6:84:b0:18:91:66:b0:9b:7c:ef:44: a5:80:ef:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHX3WxgA0Xi9C7mWBD9YmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMDkxNDk5YWRjNzY5YjBmYmE5ZmVkMzI4NDU0M2E3NDI1 YzIzNTEwHhcNMjUxMjA2MTAwMzA3WhcNMjUxMjA3MTAwMzA3WjAzMTEwLwYDVQQD Eyg0ODcwNmIzOWYyOTJhNzQwNmM4NDkxZmRhNGNkN2Q0MmY3OTQ3NzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjsViN868zO/7aFcKvYinBv37MkV spsaK9n5RMQJukMERtdC6S+6t5ya/siJFaVop9kt3hydq6xz4bbTa0tdos64RPOd wNsajGdsbPK9YoaWaTLDlyV9ObWF7/UzNlXtZXFIdItiEIhwZFPfXlUVC1mJVSO1 q+hP8i5Ur25gjCZgr/2jSUcQJ/USsBEvBl2B4r80/9IzmkTm5hkOoEoDw8TZg7VD xtHD3YhzZYjCt6EV2Zah88kprxi3j6ADhgqhxlTyBochveAiNA14OkligrYZ9AUY zFSpVvQOZ8+f82Gq5anOz9sRyGt5DnW7gCHHwYk7j8j5Xl8FuwIUYr4uxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhwaznykqdAbISR/aTNfUL3lHdNMB8GA1UdIwQY MBaAFOsJFJmtx2mw+6n+0yhFQ6dCXCNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNndrVW1hM0hhYkQ3cWY3VEtFVkRwMEpjSTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hZDQ2YTUtZjkwMC00YWQxLWIyMjkt ZTE4NDM1ZTQzMmRjLzEvNndrVW1hM0hhYkQ3cWY3VEtFVkRwMEpjSTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hZDQ2YTUtZjkwMC00YWQxLWIyMjktZTE4NDM1ZTQzMmRj LzEvNndrVW1hM0hhYkQ3cWY3VEtFVkRwMEpjSTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARar+YPRQ nJkn6L53RHWCiiVrDqFYcaMiTRLocHC/w52Az2NqLUGfU57MRy2ogSuHKN6CZa3E eiDpH8vT7N6D3RbmJpBMJHDY4rhI7yiZNQ93D+14KFhAxp73bWx2AhUBf+rfurBG aGQNwmW3fVFgOm1Npv+d5OfL6/in0Tx3abWyad4C36WNHaiBc9veme4XWKVCLHvT dEFBOtuLYI1qGZ15XuBfybyoj2AtPBPV/4Sb4lCf1SbcPy6i8d7tzOZiQTj6ldJb qldsx3w1g0/xfYNVDdzJlIrngWRMJw7fZOXEhBlmZG9K8XOkdfAz1welt6aEsBiR ZrCbfO9EpYDvuw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:14 2025 by rpki-client