This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft File: 6EpS3W883rR4C7KZj1AWYMybiP8.mft (raw, json) Hash identifier: vAlFGXSJ8wMrGkJOt7DMxtKchdxfIXEjGtJSDEieidM= Subject key identifier: D9:4F:A4:F2:48:28:1B:22:6E:1A:12:AC:D1:04:C7:70:8E:59:71:F6 Authority key identifier: E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF Certificate issuer: /CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff Certificate serial: 019AF31C2EAB98D451B504451192ED7D9E72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft Manifest number: 0A7B Signing time: Sat 06 Dec 2025 10:01:41 +0000 Manifest this update: Sat 06 Dec 2025 10:01:41 +0000 Manifest next update: Sun 07 Dec 2025 10:01:41 +0000 Files and hashes: 1: 6EpS3W883rR4C7KZj1AWYMybiP8.crl (hash: THQDlV3KHY8AdVqQjBFoSZoVyBuqWsLWmVnA26KNHKQ=) 2: k-C92F5fBC7tzidpGResaRP_3Y8.roa (hash: cCgzC2CyBMRCMgCeDBY61Xy0TGv8/RtXgzQi7ffbn8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:2e:ab:98:d4:51:b5:04:45:11:92:ed:7d:9e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff Validity Not Before: Dec 6 10:01:41 2025 GMT Not After : Dec 7 10:01:41 2025 GMT Subject: CN=d94fa4f248281b226e1a12acd104c7708e5971f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0c:4d:ce:74:a4:1d:8c:50:9d:e5:64:28:ac: cb:03:11:57:cc:bb:32:20:a9:e1:d1:57:7d:75:c6: 2b:36:6c:bc:98:d0:96:90:38:19:c0:7c:a0:de:5f: 23:79:6f:19:44:f7:ee:20:39:23:2b:33:fc:8c:d7: 19:3c:da:c2:be:0a:e5:f3:b7:b0:58:0d:2f:23:94: f7:14:51:f4:14:43:be:8f:de:cb:48:c4:bc:a6:22: 94:0e:fe:09:ab:7b:0a:73:1f:00:e1:c1:1f:b7:7c: e9:c8:32:44:a2:7a:16:6b:3a:c3:5d:fc:49:53:23: bb:30:c9:44:f5:e5:95:5d:07:26:27:2d:f6:79:0f: 8b:d1:bf:92:15:59:91:9a:8f:da:8a:b3:d7:8e:75: 4e:05:42:39:15:ec:ec:ec:22:df:8a:7e:c5:82:95: f9:2c:28:ef:f6:1b:1a:fb:75:b3:bf:dd:1e:ec:5d: 98:2b:2f:64:ad:6b:cd:22:2f:ac:3d:3a:e4:0d:f6: e6:9f:53:db:89:73:de:ef:de:1d:b4:15:16:81:10: ee:71:de:cb:4b:1f:ba:78:c5:38:80:55:7f:8d:7f: e9:b0:dc:0a:d4:0f:9b:70:51:23:c5:ab:89:fd:79: b9:8f:7a:04:f6:b8:f6:95:93:70:f3:03:bd:2c:67: 37:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4F:A4:F2:48:28:1B:22:6E:1A:12:AC:D1:04:C7:70:8E:59:71:F6 X509v3 Authority Key Identifier: keyid:E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f9:7d:88:7a:d3:0e:48:d2:e7:2a:c2:29:0d:9d:df:9f:02: 7d:28:2f:69:dc:0b:56:fa:b3:ad:a4:77:a7:56:94:a4:8d:f4: 2d:f9:d8:da:da:07:ae:6c:fe:64:d8:c5:cf:ee:93:44:3c:cb: 36:f7:96:a4:84:1c:2b:fb:09:5c:8c:68:31:fc:68:36:ab:16: 92:a0:2a:96:9c:8d:d0:aa:da:9e:1e:fb:98:66:45:19:a1:76: 8a:13:08:19:ed:20:ec:08:db:38:c3:ec:75:fc:b7:ff:cc:27: 67:7c:cd:80:fc:4e:36:ef:0d:ca:90:fb:0d:e1:4c:2c:4e:c6: bc:d4:1c:41:46:c0:89:0e:22:13:99:5d:17:54:93:26:c3:ea: d2:de:b8:07:92:a8:b7:e2:c2:46:bf:f1:5a:f7:31:e6:66:8e: 72:41:74:55:20:87:dd:ec:3e:3c:10:7e:f5:28:1e:1d:ae:26: 03:6f:a7:c6:a3:80:5b:7e:25:3d:70:ad:e2:7c:f7:c8:0d:d0: ca:fa:b7:71:45:1e:7b:f2:15:56:f9:0a:1a:60:a8:00:72:ff: 29:51:9c:a1:ac:ae:c0:ee:3f:58:17:4e:53:07:0b:0e:00:11: 5f:24:9f:37:cb:15:61:1e:08:47:d1:2a:2f:43:2e:01:d1:06: 78:35:3a:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHC6rmNRRtQRFEZLtfZ5yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NGE1MmRkNmYzY2RlYjQ3ODBiYjI5OThmNTAxNjYwY2M5 Yjg4ZmYwHhcNMjUxMjA2MTAwMTQxWhcNMjUxMjA3MTAwMTQxWjAzMTEwLwYDVQQD EyhkOTRmYTRmMjQ4MjgxYjIyNmUxYTEyYWNkMTA0Yzc3MDhlNTk3MWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwxNznSkHYxQneVkKKzLAxFXzLsy IKnh0Vd9dcYrNmy8mNCWkDgZwHyg3l8jeW8ZRPfuIDkjKzP8jNcZPNrCvgrl87ew WA0vI5T3FFH0FEO+j97LSMS8piKUDv4Jq3sKcx8A4cEft3zpyDJEonoWazrDXfxJ UyO7MMlE9eWVXQcmJy32eQ+L0b+SFVmRmo/airPXjnVOBUI5Fezs7CLfin7FgpX5 LCjv9hsa+3Wzv90e7F2YKy9krWvNIi+sPTrkDfbmn1PbiXPe794dtBUWgRDucd7L Sx+6eMU4gFV/jX/psNwK1A+bcFEjxauJ/Xm5j3oE9rj2lZNw8wO9LGc3RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlPpPJIKBsibhoSrNEEx3COWXH2MB8GA1UdIwQY MBaAFOhKUt1vPN60eAuymY9QFmDMm4j/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVwUzNXODgzclI0QzdLWmoxQVdZTXliaVA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mMzlmMzAtMTRmMC00MjI2LWJlNmYt YjI2OWY4OTVlN2Y3LzEvNkVwUzNXODgzclI0QzdLWmoxQVdZTXliaVA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mMzlmMzAtMTRmMC00MjI2LWJlNmYtYjI2OWY4OTVlN2Y3 LzEvNkVwUzNXODgzclI0QzdLWmoxQVdZTXliaVA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/l9iHrT DkjS5yrCKQ2d358CfSgvadwLVvqzraR3p1aUpI30LfnY2toHrmz+ZNjFz+6TRDzL NveWpIQcK/sJXIxoMfxoNqsWkqAqlpyN0Kranh77mGZFGaF2ihMIGe0g7AjbOMPs dfy3/8wnZ3zNgPxONu8NypD7DeFMLE7GvNQcQUbAiQ4iE5ldF1STJsPq0t64B5Ko t+LCRr/xWvcx5maOckF0VSCH3ew+PBB+9SgeHa4mA2+nxqOAW34lPXCt4nz3yA3Q yvq3cUUee/IVVvkKGmCoAHL/KVGcoayuwO4/WBdOUwcLDgARXySfN8sVYR4IR9Eq L0MuAdEGeDU6tA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:50:22 2025 by rpki-client