This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft File: 6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json) Hash identifier: lyk0UbhZRGKv2dI6e7dPScdj/mQA2bxZ8Ezg7d+oe4c= Subject key identifier: FC:A6:3B:9C:A7:FE:90:2C:E4:23:86:DF:5A:F0:02:74:9A:C8:DE:07 Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9 Certificate issuer: /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9 Certificate serial: 019AF20952F422B5C2D8DDA4050A1FDF5FC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 05:01:28 +0000 Manifest this update: Sat 06 Dec 2025 05:01:28 +0000 Manifest next update: Sun 07 Dec 2025 05:01:28 +0000 Files and hashes: 1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: zvjpuasInI7O8iJnrn+0kAB3lRUs4ZBzsClvFOzmHIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:52:f4:22:b5:c2:d8:dd:a4:05:0a:1f:df:5f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9 Validity Not Before: Dec 6 05:01:28 2025 GMT Not After : Dec 7 05:01:28 2025 GMT Subject: CN=fca63b9ca7fe902ce42386df5af002749ac8de07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:71:24:e0:1d:d9:0f:3f:8d:6c:3c:a0:c6:16: cf:00:4a:f4:d8:22:66:16:c2:6e:b0:a7:f6:b2:6b: 5f:a0:f9:8d:7a:b4:23:19:d5:d1:59:88:72:ed:97: 65:0e:46:d8:08:36:80:86:e5:12:d0:b7:22:8c:b5: 4f:c2:9e:05:bf:28:94:a9:0c:5b:b3:fe:4f:4a:64: 82:7e:51:dc:cb:37:f3:f8:dd:e1:87:df:f4:74:51: 37:ad:d3:a9:e1:e4:ef:12:04:db:38:93:15:3f:ed: b6:da:d0:87:6a:41:88:52:40:c7:2a:44:00:03:ff: e2:9e:cc:1a:cc:ea:8d:cb:61:76:92:00:55:1d:03: 38:49:31:b0:27:23:be:a4:a0:40:46:12:42:19:b0: d8:8f:83:2b:d2:89:8b:40:6b:a2:9e:a0:03:8e:7d: cf:98:2a:d1:49:ad:46:64:15:dd:7c:95:ae:6e:e1: ee:54:02:0b:f9:57:44:ef:7a:bf:79:35:25:50:6f: d5:38:ce:ad:65:0b:8e:ad:cd:99:d8:53:a9:dc:21: 9f:4d:66:2d:39:40:c1:c6:06:f4:14:18:a8:b3:a3: 31:1f:82:8f:bb:2b:88:71:d1:a0:a9:f4:65:73:20: 17:53:bf:38:9e:78:d8:5c:fc:17:4f:e8:80:a2:ad: 85:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A6:3B:9C:A7:FE:90:2C:E4:23:86:DF:5A:F0:02:74:9A:C8:DE:07 X509v3 Authority Key Identifier: keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f7:c5:24:60:7c:0f:5b:11:24:fa:fc:76:2d:3c:47:30:fb: ca:f7:0b:47:25:d8:81:fa:7a:b3:60:a8:81:6e:e4:f3:c7:f1: f5:28:2b:57:49:7b:32:d9:c0:15:42:86:97:4a:56:4c:5a:42: ed:f4:84:33:33:86:7f:51:bb:ba:68:87:75:f7:50:d9:e8:82: 72:ef:e9:83:a2:59:98:0f:6a:9f:48:5c:43:dd:89:a7:ee:df: 49:a9:16:5d:7f:ed:b1:44:6c:e1:c7:05:bf:58:a9:d4:7e:ab: a4:60:5f:ae:83:48:2d:33:75:c0:53:da:fd:8b:81:3e:24:24: ff:50:4b:f0:90:24:ec:aa:b2:f5:ea:d7:57:99:cb:db:ae:60: 75:d3:e5:bf:fd:20:fb:72:f1:94:54:ae:06:c0:0b:79:93:75: 0a:df:f8:d1:62:20:be:70:f4:aa:8f:70:d1:26:ee:8b:39:fb: 8e:ab:b3:7a:4b:ad:34:fd:61:50:fd:0c:2c:c2:37:c7:a4:39: bd:05:75:c2:dc:05:d0:43:da:6d:e3:04:ea:06:cd:81:5c:bd: de:a5:40:17:9c:8e:ad:9a:e5:b6:4e:c3:ef:e6:f2:29:af:88: 18:be:f1:08:14:99:78:c3:0d:8b:92:d5:dc:1d:dd:88:f6:19: 62:ee:37:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVL0IrXC2N2kBQof31/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YTBhNDAzNjY5YmVhYmYyYWQ3NmUwMDFjYjk3ZDE1ZDA3 ZTI5ZDkwHhcNMjUxMjA2MDUwMTI4WhcNMjUxMjA3MDUwMTI4WjAzMTEwLwYDVQQD EyhmY2E2M2I5Y2E3ZmU5MDJjZTQyMzg2ZGY1YWYwMDI3NDlhYzhkZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinEk4B3ZDz+NbDygxhbPAEr02CJm FsJusKf2smtfoPmNerQjGdXRWYhy7ZdlDkbYCDaAhuUS0LcijLVPwp4FvyiUqQxb s/5PSmSCflHcyzfz+N3hh9/0dFE3rdOp4eTvEgTbOJMVP+222tCHakGIUkDHKkQA A//inswazOqNy2F2kgBVHQM4STGwJyO+pKBARhJCGbDYj4Mr0omLQGuinqADjn3P mCrRSa1GZBXdfJWubuHuVAIL+VdE73q/eTUlUG/VOM6tZQuOrc2Z2FOp3CGfTWYt OUDBxgb0FBios6MxH4KPuyuIcdGgqfRlcyAXU784nnjYXPwXT+iAoq2FPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPymO5yn/pAs5COG31rwAnSayN4HMB8GA1UdIwQY MBaAFOigpANmm+q/KtduABy5fRXQfinZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNktDa0EyYWI2cjhxMTI0QUhMbDlGZEItS2RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS81MGUwMjYtMjU1OC00NTlhLWI2ZDIt NmFlM2QwMDZjNjRjLzEvNktDa0EyYWI2cjhxMTI0QUhMbDlGZEItS2RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS81MGUwMjYtMjU1OC00NTlhLWI2ZDItNmFlM2QwMDZjNjRj LzEvNktDa0EyYWI2cjhxMTI0QUhMbDlGZEItS2RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvfFJGB8 D1sRJPr8di08RzD7yvcLRyXYgfp6s2CogW7k88fx9SgrV0l7MtnAFUKGl0pWTFpC 7fSEMzOGf1G7umiHdfdQ2eiCcu/pg6JZmA9qn0hcQ92Jp+7fSakWXX/tsURs4ccF v1ip1H6rpGBfroNILTN1wFPa/YuBPiQk/1BL8JAk7Kqy9erXV5nL265gddPlv/0g +3LxlFSuBsALeZN1Ct/40WIgvnD0qo9w0Sbuizn7jquzekutNP1hUP0MLMI3x6Q5 vQV1wtwF0EPabeME6gbNgVy93qVAF5yOrZrltk7D7+byKa+IGL7xCBSZeMMNi5LV 3B3diPYZYu43zg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:48 2025 by rpki-client