This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft File: 6QOzpacoCqn-K_-pBlwrKgGld8w.mft (raw, json) Hash identifier: +essMJx0kW6hlIsGwrGcHhYI25I4IztETWnsnTGDUik= Subject key identifier: F7:FF:6A:E0:FC:E1:2E:01:50:36:41:2E:BC:83:9A:14:3D:AA:96:40 Authority key identifier: E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC Certificate issuer: /CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc Certificate serial: 019AF19BC2AD546591593D6EC31E07DD9574 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 03:01:48 +0000 Manifest this update: Sat 06 Dec 2025 03:01:48 +0000 Manifest next update: Sun 07 Dec 2025 03:01:48 +0000 Files and hashes: 1: 6QOzpacoCqn-K_-pBlwrKgGld8w.crl (hash: FuGFxB+X/hxcBb2Juc01/Z6ub85J+qFHGKdv4kQVIzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:c2:ad:54:65:91:59:3d:6e:c3:1e:07:dd:95:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc Validity Not Before: Dec 6 03:01:48 2025 GMT Not After : Dec 7 03:01:48 2025 GMT Subject: CN=f7ff6ae0fce12e015036412ebc839a143daa9640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:2c:fc:ea:20:33:87:ad:38:c1:2b:19:68: 67:51:7b:3e:fd:e8:e2:79:bf:f9:6d:33:9f:bb:2b: 7c:98:2e:03:b8:9b:7b:1a:2a:f4:66:ea:28:5f:ba: c2:18:33:b7:ab:3f:7b:49:fe:e6:91:db:d0:d6:f6: 0f:49:4d:41:31:be:14:c5:b3:fc:7a:f4:ae:4b:cd: 05:29:9f:90:ed:e8:18:d2:7e:54:99:33:06:34:96: 04:79:3e:91:39:c9:62:62:ee:e9:4f:b9:1e:9a:25: 44:88:e5:fb:0c:57:77:db:94:ed:4b:4a:17:95:88: 0a:99:2b:1a:bb:09:b0:28:55:d6:49:d1:63:da:63: 01:5c:50:79:a2:e9:7d:62:03:0f:b9:8b:c7:83:a1: 36:3f:36:45:0d:a5:b1:eb:6f:0e:56:84:a2:d5:44: 1f:47:f6:84:a7:6a:f5:0c:d3:11:85:a7:87:44:2f: 70:f6:78:cc:23:94:93:97:37:72:3f:77:a0:db:5f: 48:d0:b3:27:3c:cd:aa:3c:b7:8c:04:26:a1:7e:5c: dc:4f:8d:b1:f8:85:df:dc:13:7f:82:48:4e:55:33: 97:16:71:2e:b5:c6:62:17:03:cb:02:d7:d4:10:b0: 39:a9:8b:8b:10:71:d4:7b:88:54:30:bb:1f:d4:3c: 56:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FF:6A:E0:FC:E1:2E:01:50:36:41:2E:BC:83:9A:14:3D:AA:96:40 X509v3 Authority Key Identifier: keyid:E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:40:13:b7:4e:d1:e0:e0:89:7a:73:d9:10:da:4f:be:5c:c0: 53:5c:51:c7:b6:07:3b:1a:be:23:1e:e7:4c:8d:c9:9f:dd:8c: 1f:9c:54:13:eb:e0:28:8c:1c:97:5c:6d:7d:3b:5b:26:93:30: d2:ad:4a:80:fc:8b:49:63:e3:88:e3:bd:86:bd:ad:d0:99:c0: 30:1b:cd:b5:b1:5c:be:ca:e1:be:da:79:64:ea:5f:da:9c:31: 76:07:b5:da:44:f3:35:05:36:c6:11:6f:6b:4c:d9:33:d8:94: 1c:3d:54:bf:fc:0f:86:5d:d9:37:43:60:47:55:46:e5:45:44: 2f:d2:b1:30:74:e8:20:8a:9e:f9:83:13:36:f8:d7:80:fd:a7: 8f:3f:14:da:e9:3f:cb:24:88:99:0b:32:64:08:6c:9d:9a:15: 60:0d:bf:bc:48:3b:50:72:8f:9f:07:00:39:bd:74:ca:cf:e6: d6:60:3d:75:33:29:0b:2e:5b:b4:1e:82:99:6e:fd:9b:5e:07: dc:29:e3:ce:0e:ec:b9:36:3e:ea:5c:22:a0:68:e7:cb:d7:6e: 80:4d:bb:b6:6a:00:fb:aa:88:d8:2a:51:26:f1:c9:a1:6b:c6: 87:91:66:d0:e6:91:b3:22:40:2f:17:f9:eb:ae:81:2c:bd:b6: 29:9f:84:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm8KtVGWRWT1uwx4H3ZV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDNiM2E1YTcyODBhYTlmZTJiZmZhOTA2NWMyYjJhMDFh NTc3Y2MwHhcNMjUxMjA2MDMwMTQ4WhcNMjUxMjA3MDMwMTQ4WjAzMTEwLwYDVQQD EyhmN2ZmNmFlMGZjZTEyZTAxNTAzNjQxMmViYzgzOWExNDNkYWE5NjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF4s/OogM4etOMErGWhnUXs+/eji eb/5bTOfuyt8mC4DuJt7Gir0ZuooX7rCGDO3qz97Sf7mkdvQ1vYPSU1BMb4UxbP8 evSuS80FKZ+Q7egY0n5UmTMGNJYEeT6ROcliYu7pT7kemiVEiOX7DFd325TtS0oX lYgKmSsauwmwKFXWSdFj2mMBXFB5oul9YgMPuYvHg6E2PzZFDaWx628OVoSi1UQf R/aEp2r1DNMRhaeHRC9w9njMI5STlzdyP3eg219I0LMnPM2qPLeMBCahflzcT42x +IXf3BN/gkhOVTOXFnEutcZiFwPLAtfUELA5qYuLEHHUe4hUMLsf1DxW5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPf/auD84S4BUDZBLryDmhQ9qpZAMB8GA1UdIwQY MBaAFOkDs6WnKAqp/iv/qQZcKyoBpXfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGI1NTctMjdhOS00NmFhLTlkZWUt NGNlYzY5NjgzM2VkLzEvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS81OGI1NTctMjdhOS00NmFhLTlkZWUtNGNlYzY5NjgzM2Vk LzEvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEATt07R 4OCJenPZENpPvlzAU1xRx7YHOxq+Ix7nTI3Jn92MH5xUE+vgKIwcl1xtfTtbJpMw 0q1KgPyLSWPjiOO9hr2t0JnAMBvNtbFcvsrhvtp5ZOpf2pwxdge12kTzNQU2xhFv a0zZM9iUHD1Uv/wPhl3ZN0NgR1VG5UVEL9KxMHToIIqe+YMTNvjXgP2njz8U2uk/ yySImQsyZAhsnZoVYA2/vEg7UHKPnwcAOb10ys/m1mA9dTMpCy5btB6CmW79m14H 3Cnjzg7suTY+6lwioGjny9dugE27tmoA+6qI2CpRJvHJoWvGh5Fm0OaRsyJALxf5 666BLL22KZ+Evg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:42 2025 by rpki-client