This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft File: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json) Hash identifier: N/Ch8jYktKKBuHLwJEEeai4I5kI8IViKSK3GQMUH1NQ= Subject key identifier: 0E:2B:76:A2:89:6C:5D:51:68:CE:3F:F7:C6:4A:CC:65:9D:58:83:20 Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD Certificate issuer: /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd Certificate serial: 019AF12EDE18BF0C7C2AE46CD231640797C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft Manifest number: 0DB8 Signing time: Sat 06 Dec 2025 01:02:51 +0000 Manifest this update: Sat 06 Dec 2025 01:02:51 +0000 Manifest next update: Sun 07 Dec 2025 01:02:51 +0000 Files and hashes: 1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: TsrpBMs9qbDHWqMfXOMXCxnpETvhIfZd3hMWmAn8Mc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:de:18:bf:0c:7c:2a:e4:6c:d2:31:64:07:97:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd Validity Not Before: Dec 6 01:02:51 2025 GMT Not After : Dec 7 01:02:51 2025 GMT Subject: CN=0e2b76a2896c5d5168ce3ff7c64acc659d588320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:75:6d:f4:a9:21:53:03:a0:c8:50:c2:e1:b7: 32:fd:2a:26:84:78:1b:ed:c7:8f:6e:c2:74:6a:20: c5:ca:27:62:dd:1e:7a:29:d5:74:87:2d:07:6a:ae: 44:bb:c7:71:91:f2:74:5b:2b:e5:15:d2:8b:d9:b2: a2:30:05:6a:36:32:a2:d3:32:39:c0:80:e4:f8:f9: 3c:7d:20:66:32:5c:e5:8a:14:a1:25:8e:a0:9f:d9: 43:20:0f:ff:31:f1:aa:4f:9c:c3:4d:b1:e0:ca:59: 3c:63:dc:3f:f5:ee:eb:7c:a2:09:99:39:e9:a8:ad: b8:40:13:fe:4b:ea:67:1e:9b:39:b9:e2:d8:07:ac: 4d:8f:55:49:0b:04:d8:e0:db:dc:97:95:02:bd:d7: cc:68:17:e2:bd:7b:82:e7:0b:a3:dc:65:c5:e6:47: ae:43:31:45:80:85:e8:e3:bf:9a:ee:bb:96:8e:3d: 29:75:95:dc:6b:6e:76:59:5b:67:46:3e:de:28:9a: 4c:98:6b:1d:20:d1:fa:16:59:4c:27:c4:c3:2b:8b: cc:a3:0a:a9:bb:9e:a1:28:30:f6:aa:d1:31:39:65: ca:a3:a2:83:c9:2c:cb:20:d7:5a:6d:c1:d8:32:68: be:bf:f4:3b:64:fe:28:34:0f:ae:b2:12:00:8f:ab: 38:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2B:76:A2:89:6C:5D:51:68:CE:3F:F7:C6:4A:CC:65:9D:58:83:20 X509v3 Authority Key Identifier: keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:13:a0:72:b4:f0:a7:1e:66:4a:e7:3e:09:28:7e:ca:f8:7d: 6a:2d:9c:15:17:0c:75:19:c2:25:0b:29:88:6a:0e:4d:3f:fb: 23:8c:0d:6c:dd:a0:c6:49:ef:20:c7:f4:aa:e8:22:77:c2:64: fd:25:2e:86:cf:97:cb:b5:88:a8:78:5d:86:04:70:30:6d:6a: ac:47:ae:dd:73:6a:9e:cb:1b:e4:12:44:2a:67:64:29:a1:dc: 83:8e:e9:a8:c2:1b:63:69:37:c0:4e:0f:25:71:44:d5:e4:26: 49:1d:95:a7:93:f4:55:cf:fa:0e:18:ef:04:ac:3b:8e:bb:c6: 54:fd:d2:21:68:1c:88:0a:1d:59:a5:58:53:7a:c2:f6:fb:da: 43:67:e2:75:65:5d:f3:75:7f:0c:18:a4:a0:01:d7:08:a8:75: cb:98:f5:5f:c7:58:48:cc:4a:dc:9a:24:fe:08:ab:58:0f:50: 24:34:ea:b3:2b:cf:f6:20:53:f7:c8:23:b5:d4:b7:51:8e:81: 71:63:78:0c:84:98:31:d4:4a:6f:78:ea:d2:41:d8:bb:8d:94: 35:61:46:f7:32:49:bc:5b:e0:69:55:3b:39:15:7c:21:39:a1: b1:c5:a1:c2:ed:93:a6:37:a5:27:96:aa:18:1b:f6:c7:2f:6d: c9:65:2f:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLt4Yvwx8KuRs0jFkB5fEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZWU0OThhZWFiYTE0NTU3NmE2MWI2MzdmMTM2ZWMxYzNm NDMwZGQwHhcNMjUxMjA2MDEwMjUxWhcNMjUxMjA3MDEwMjUxWjAzMTEwLwYDVQQD EygwZTJiNzZhMjg5NmM1ZDUxNjhjZTNmZjdjNjRhY2M2NTlkNTg4MzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XVt9KkhUwOgyFDC4bcy/SomhHgb 7cePbsJ0aiDFyidi3R56KdV0hy0Haq5Eu8dxkfJ0WyvlFdKL2bKiMAVqNjKi0zI5 wIDk+Pk8fSBmMlzlihShJY6gn9lDIA//MfGqT5zDTbHgylk8Y9w/9e7rfKIJmTnp qK24QBP+S+pnHps5ueLYB6xNj1VJCwTY4Nvcl5UCvdfMaBfivXuC5wuj3GXF5keu QzFFgIXo47+a7ruWjj0pdZXca252WVtnRj7eKJpMmGsdINH6FllMJ8TDK4vMowqp u56hKDD2qtExOWXKo6KDySzLINdabcHYMmi+v/Q7ZP4oNA+ushIAj6s4UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4rdqKJbF1RaM4/98ZKzGWdWIMgMB8GA1UdIwQY MBaAFOjuSYrquhRVdqYbY38TbsHD9DDdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk81Sml1cTZGRlYycGh0amZ4TnV3Y1AwTU4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8wZWM5MDUtNjc0MC00NmY0LWIwZTgt YTA2OGFjOGIxMDI4LzEvNk81Sml1cTZGRlYycGh0amZ4TnV3Y1AwTU4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8wZWM5MDUtNjc0MC00NmY0LWIwZTgtYTA2OGFjOGIxMDI4 LzEvNk81Sml1cTZGRlYycGh0amZ4TnV3Y1AwTU4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxOgcrTw px5mSuc+CSh+yvh9ai2cFRcMdRnCJQspiGoOTT/7I4wNbN2gxknvIMf0qugid8Jk /SUuhs+Xy7WIqHhdhgRwMG1qrEeu3XNqnssb5BJEKmdkKaHcg47pqMIbY2k3wE4P JXFE1eQmSR2Vp5P0Vc/6DhjvBKw7jrvGVP3SIWgciAodWaVYU3rC9vvaQ2fidWVd 83V/DBikoAHXCKh1y5j1X8dYSMxK3Jok/girWA9QJDTqsyvP9iBT98gjtdS3UY6B cWN4DISYMdRKb3jq0kHYu42UNWFG9zJJvFvgaVU7ORV8ITmhscWhwu2TpjelJ5aq GBv2xy9tyWUvww== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:16 2025 by rpki-client