This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft File: 6sw7q9U8RM12FFr4fUI3Axfo0ME.mft (raw, json) Hash identifier: Oi0vMtQwV6AWh/+5/3aBwz7EGZFtfh7FO320uPq1EWc= Subject key identifier: 2B:C0:52:CB:6F:09:9A:A3:8B:F9:49:DC:5D:9B:52:7B:D6:A7:EC:73 Authority key identifier: EA:CC:3B:AB:D5:3C:44:CD:76:14:5A:F8:7D:42:37:03:17:E8:D0:C1 Certificate issuer: /CN=eacc3babd53c44cd76145af87d42370317e8d0c1 Certificate serial: 019AF389617ED6BB119BCC9A7CE2D3E58B7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft Manifest number: 0EAF Signing time: Sat 06 Dec 2025 12:00:58 +0000 Manifest this update: Sat 06 Dec 2025 12:00:58 +0000 Manifest next update: Sun 07 Dec 2025 12:00:58 +0000 Files and hashes: 1: 6sw7q9U8RM12FFr4fUI3Axfo0ME.crl (hash: 60zd7K307OaWuuSQJae0rLXBgxibGnj7ZA2xmw0uYCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:61:7e:d6:bb:11:9b:cc:9a:7c:e2:d3:e5:8b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eacc3babd53c44cd76145af87d42370317e8d0c1 Validity Not Before: Dec 6 12:00:58 2025 GMT Not After : Dec 7 12:00:58 2025 GMT Subject: CN=2bc052cb6f099aa38bf949dc5d9b527bd6a7ec73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e7:17:c2:2b:75:69:9d:ca:93:e6:ba:43:28: 3d:8f:8e:1f:67:26:26:d0:de:ec:96:3f:ac:2b:91: 36:41:4e:fc:79:ae:65:5c:a7:4e:8a:97:62:09:d6: 81:c9:71:73:43:b4:f7:a0:ff:f7:18:1b:aa:47:5c: 0d:3b:16:f0:78:06:f8:b9:3a:ff:3c:0a:e1:12:ac: a2:16:2d:90:ca:e9:96:06:88:bf:2a:91:7e:f0:32: ba:0a:49:d2:5d:a6:7d:d0:9c:1e:9a:1a:1a:54:cc: 6c:ac:a1:a7:8a:69:64:95:8a:81:4e:e2:01:98:30: 58:10:05:25:00:85:59:50:b6:d8:45:c1:29:bd:92: 80:25:88:e2:c5:32:26:f0:c3:2c:cf:42:2b:91:5a: 90:63:8d:a6:05:f6:38:db:5a:4e:52:3a:7c:be:18: 75:06:fc:8d:97:c9:de:7a:71:12:0d:27:41:50:9d: ce:11:bb:b6:21:b3:c1:c9:88:07:a0:9f:25:87:66: d1:d2:9d:7f:05:86:5f:cf:c5:0d:46:96:47:2c:ee: f8:ea:bd:ce:69:95:01:20:8d:13:3b:25:cc:1a:52: 88:60:da:40:2f:a0:6a:34:c3:af:10:98:65:3d:63: 8c:48:58:85:cf:b8:26:43:9b:fb:7c:13:2f:10:72: 6b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C0:52:CB:6F:09:9A:A3:8B:F9:49:DC:5D:9B:52:7B:D6:A7:EC:73 X509v3 Authority Key Identifier: keyid:EA:CC:3B:AB:D5:3C:44:CD:76:14:5A:F8:7D:42:37:03:17:E8:D0:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b6:b9:df:c6:d8:fa:7a:96:be:a7:23:e0:a4:0b:a8:dd:b1: ae:f0:4d:d0:0a:c9:02:63:a7:5d:de:fc:6b:5c:ee:9b:f0:43: d5:0f:55:0d:0e:6d:de:99:c1:57:48:6d:d3:24:1c:48:7d:40: 03:af:62:5a:33:2c:ee:a2:27:ac:e0:ba:5f:bd:7a:27:70:a8: 71:ff:c8:aa:76:8c:cf:2b:f5:ec:47:8f:08:3c:41:60:1a:cd: 96:cd:07:30:93:eb:91:e1:11:a6:1a:18:e8:6e:ef:e4:58:d9: e8:0c:de:2f:54:3f:1b:b2:77:78:70:6d:96:83:bc:cb:a4:5e: f5:cf:46:e7:42:bc:15:de:ba:39:11:fe:2a:79:51:93:c2:09: 8f:6f:5a:b1:62:fe:c6:f1:60:39:9b:30:5c:e3:a4:ab:f7:c0: a1:cf:91:34:46:f6:de:d0:d5:84:42:fc:05:28:2c:27:4a:87: f9:60:96:d9:dc:c2:e1:de:92:c9:f9:e2:18:18:ab:6c:ec:a1: 35:b1:02:50:1f:f4:86:dd:8d:38:d1:2b:e5:8d:b2:f8:6f:08: df:74:8d:ba:ab:23:cc:8e:cf:92:ff:4a:2f:ac:85:48:03:d2: b8:af:7a:92:fc:bd:f9:08:9a:74:91:50:79:59:d3:6b:39:49: 83:7b:1b:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWF+1rsRm8yafOLT5Yt/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhY2MzYmFiZDUzYzQ0Y2Q3NjE0NWFmODdkNDIzNzAzMTdl OGQwYzEwHhcNMjUxMjA2MTIwMDU4WhcNMjUxMjA3MTIwMDU4WjAzMTEwLwYDVQQD EygyYmMwNTJjYjZmMDk5YWEzOGJmOTQ5ZGM1ZDliNTI3YmQ2YTdlYzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ecXwit1aZ3Kk+a6Qyg9j44fZyYm 0N7slj+sK5E2QU78ea5lXKdOipdiCdaByXFzQ7T3oP/3GBuqR1wNOxbweAb4uTr/ PArhEqyiFi2QyumWBoi/KpF+8DK6CknSXaZ90JwemhoaVMxsrKGnimlklYqBTuIB mDBYEAUlAIVZULbYRcEpvZKAJYjixTIm8MMsz0IrkVqQY42mBfY421pOUjp8vhh1 BvyNl8neenESDSdBUJ3OEbu2IbPByYgHoJ8lh2bR0p1/BYZfz8UNRpZHLO746r3O aZUBII0TOyXMGlKIYNpAL6BqNMOvEJhlPWOMSFiFz7gmQ5v7fBMvEHJrqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvAUstvCZqji/lJ3F2bUnvWp+xzMB8GA1UdIwQY MBaAFOrMO6vVPETNdhRa+H1CNwMX6NDBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnN3N3E5VThSTTEyRkZyNGZVSTNBeGZvME1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yMGQxZDUtMzE0MS00MGIxLThmMzUt M2I0YzUwMTkyOWM1LzEvNnN3N3E5VThSTTEyRkZyNGZVSTNBeGZvME1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yMGQxZDUtMzE0MS00MGIxLThmMzUtM2I0YzUwMTkyOWM1 LzEvNnN3N3E5VThSTTEyRkZyNGZVSTNBeGZvME1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7a538bY +nqWvqcj4KQLqN2xrvBN0ArJAmOnXd78a1zum/BD1Q9VDQ5t3pnBV0ht0yQcSH1A A69iWjMs7qInrOC6X716J3Cocf/IqnaMzyv17EePCDxBYBrNls0HMJPrkeERphoY 6G7v5FjZ6AzeL1Q/G7J3eHBtloO8y6Re9c9G50K8Fd66ORH+KnlRk8IJj29asWL+ xvFgOZswXOOkq/fAoc+RNEb23tDVhEL8BSgsJ0qH+WCW2dzC4d6SyfniGBirbOyh NbECUB/0ht2NONEr5Y2y+G8I33SNuqsjzI7Pkv9KL6yFSAPSuK96kvy9+QiadJFQ eVnTazlJg3sbaA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:31:36 2025 by rpki-client