This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft File: Nq6kWA8QexEmjJbqMYko1O11_5M.mft (raw, json) Hash identifier: sS2N2m9TvSELv/kjIj9Tqoh9WgAamALzJ9LQASen8KA= Subject key identifier: 6F:FA:10:63:61:AA:4F:23:6F:84:3C:42:6F:45:B0:33:34:FE:94:F8 Authority key identifier: 36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93 Certificate issuer: /CN=36aea4580f107b11268c96ea318928d4ed75ff93 Certificate serial: 019AF27740ED8CF6E01F23719EF248988DCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft Manifest number: 0619 Signing time: Sat 06 Dec 2025 07:01:32 +0000 Manifest this update: Sat 06 Dec 2025 07:01:32 +0000 Manifest next update: Sun 07 Dec 2025 07:01:32 +0000 Files and hashes: 1: Nq6kWA8QexEmjJbqMYko1O11_5M.crl (hash: +n+j90esD4DT0ffp7LqORZYkukuaL9RRWuePWCVnb/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:40:ed:8c:f6:e0:1f:23:71:9e:f2:48:98:8d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36aea4580f107b11268c96ea318928d4ed75ff93 Validity Not Before: Dec 6 07:01:32 2025 GMT Not After : Dec 7 07:01:32 2025 GMT Subject: CN=6ffa106361aa4f236f843c426f45b03334fe94f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:25:1c:62:ac:20:45:dc:4f:7c:3e:48:ec:ed: 82:0e:3a:fd:e7:60:5a:37:66:ab:53:e9:80:51:5d: 5c:74:4d:d8:33:a9:01:ad:20:09:a4:4f:19:7f:da: f1:41:79:16:9f:3f:d8:8b:c6:21:56:45:a1:23:bb: a7:34:3e:a1:b8:ea:fc:2d:56:72:c7:9c:fc:8c:92: 66:c7:d2:91:e8:72:50:de:99:7f:ff:b3:49:c7:5f: ae:87:b6:05:6d:93:92:b0:d1:f1:c3:8c:a2:6a:fa: 06:a9:38:94:6a:fe:8e:13:82:f9:e4:85:e5:08:e2: a5:ea:ad:03:d5:b7:fb:9e:af:9b:55:54:95:85:1f: 06:93:86:52:fa:b4:17:e5:b1:3b:3c:ea:73:da:64: 45:6c:41:75:3a:1d:57:aa:85:8b:9f:e3:15:c4:10: f5:92:73:b5:1d:af:4a:d6:3c:4b:e7:b5:da:5a:bb: e4:aa:cd:50:cb:95:d2:63:b6:26:a8:ef:05:69:f9: 14:4d:2b:ff:d8:8a:06:03:12:b8:e6:96:ee:26:0b: ad:e0:c4:2c:af:17:9a:1d:10:7e:be:71:d0:09:0b: cd:5f:37:2f:55:a3:0d:12:ae:17:f7:25:b8:fb:aa: a1:33:16:be:85:8a:b1:0a:7e:ee:b2:b4:72:f0:b1: 30:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:FA:10:63:61:AA:4F:23:6F:84:3C:42:6F:45:B0:33:34:FE:94:F8 X509v3 Authority Key Identifier: keyid:36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:1d:ed:51:06:e5:7b:67:e7:6d:ed:eb:69:e8:74:1b:60:8f: 2e:69:73:47:e5:51:54:d2:57:ee:26:47:9d:56:36:03:a8:c2: 1d:b3:8b:f9:da:b6:ae:2f:69:93:87:ec:57:6b:48:d2:dd:6d: 79:1e:c2:bf:14:23:10:5a:a7:5c:18:ce:2a:06:19:23:b7:1c: cf:9e:c3:dd:1a:68:8a:64:49:91:ec:2f:b6:98:08:5d:94:a2: d1:14:de:66:8c:1a:0a:4c:5b:a1:1c:d2:14:98:92:c1:bb:ac: 88:94:9e:d8:86:24:73:9c:d8:df:6d:4d:97:13:1c:ec:22:3d: bd:c9:8b:c6:cc:3a:29:2d:2c:10:fc:27:3e:e7:42:a9:e7:74: ae:89:02:7f:bc:b6:a7:cd:6e:74:19:e4:d0:83:f4:e8:40:fa: 2f:fa:66:58:e7:6a:e9:bf:8c:2a:b4:e3:62:d8:d4:60:f8:e5: a8:36:39:c9:e7:74:ce:1a:d7:2a:f9:55:62:7b:c3:08:b3:ea: cf:8a:66:17:77:0f:86:2f:22:db:5c:3f:d7:2a:0a:fc:53:3b: ac:d2:09:09:ab:63:60:41:7a:74:22:a3:f6:6d:3e:12:89:9a: 09:c1:1f:4a:fd:01:52:88:87:8a:78:41:b2:62:f9:fd:7b:cc: 20:92:fe:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryd0DtjPbgHyNxnvJImI3PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YWVhNDU4MGYxMDdiMTEyNjhjOTZlYTMxODkyOGQ0ZWQ3 NWZmOTMwHhcNMjUxMjA2MDcwMTMyWhcNMjUxMjA3MDcwMTMyWjAzMTEwLwYDVQQD Eyg2ZmZhMTA2MzYxYWE0ZjIzNmY4NDNjNDI2ZjQ1YjAzMzM0ZmU5NGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyUcYqwgRdxPfD5I7O2CDjr952Ba N2arU+mAUV1cdE3YM6kBrSAJpE8Zf9rxQXkWnz/Yi8YhVkWhI7unND6huOr8LVZy x5z8jJJmx9KR6HJQ3pl//7NJx1+uh7YFbZOSsNHxw4yiavoGqTiUav6OE4L55IXl COKl6q0D1bf7nq+bVVSVhR8Gk4ZS+rQX5bE7POpz2mRFbEF1Oh1XqoWLn+MVxBD1 knO1Ha9K1jxL57XaWrvkqs1Qy5XSY7YmqO8FafkUTSv/2IoGAxK45pbuJgut4MQs rxeaHRB+vnHQCQvNXzcvVaMNEq4X9yW4+6qhMxa+hYqxCn7usrRy8LEwyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/6EGNhqk8jb4Q8Qm9FsDM0/pT4MB8GA1UdIwQY MBaAFDaupFgPEHsRJoyW6jGJKNTtdf+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnE2a1dBOFFleEVtakpicU1Za28xTzExXzVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zMDU5ZGUtYmFmYy00YTRiLTg2YjYt ZjI4ZDk3MmM4ODA4LzEvTnE2a1dBOFFleEVtakpicU1Za28xTzExXzVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8zMDU5ZGUtYmFmYy00YTRiLTg2YjYtZjI4ZDk3MmM4ODA4 LzEvTnE2a1dBOFFleEVtakpicU1Za28xTzExXzVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsR3tUQbl e2fnbe3raeh0G2CPLmlzR+VRVNJX7iZHnVY2A6jCHbOL+dq2ri9pk4fsV2tI0t1t eR7CvxQjEFqnXBjOKgYZI7ccz57D3RpoimRJkewvtpgIXZSi0RTeZowaCkxboRzS FJiSwbusiJSe2IYkc5zY321NlxMc7CI9vcmLxsw6KS0sEPwnPudCqed0rokCf7y2 p81udBnk0IP06ED6L/pmWOdq6b+MKrTjYtjUYPjlqDY5yed0zhrXKvlVYnvDCLPq z4pmF3cPhi8i21w/1yoK/FM7rNIJCatjYEF6dCKj9m0+EomaCcEfSv0BUoiHinhB smL5/XvMIJL+Dg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:48 2025 by rpki-client