This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft File: 6ySQqKEzr8STmogtt1JsFfiS6Mg.mft (raw, json) Hash identifier: QOEodXc5yMtwMj3m8B8ZG3eKWK7saWrzuwRW6dtdg/4= Subject key identifier: 11:AA:7C:15:19:A7:6F:DF:9B:2E:F8:41:C2:AA:39:FD:5C:53:BC:39 Authority key identifier: EB:24:90:A8:A1:33:AF:C4:93:9A:88:2D:B7:52:6C:15:F8:92:E8:C8 Certificate issuer: /CN=eb2490a8a133afc4939a882db7526c15f892e8c8 Certificate serial: 019AF276B647DE666E7DA500CA9F8B9F328C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:00:57 +0000 Manifest this update: Sat 06 Dec 2025 07:00:57 +0000 Manifest next update: Sun 07 Dec 2025 07:00:57 +0000 Files and hashes: 1: 6ySQqKEzr8STmogtt1JsFfiS6Mg.crl (hash: yKG7d0MmFcQmY+OUnbuIwyCKmgars1SmVkc6+RRxm20=) 2: dp2EkQj5_zKrlsEr5C_rrbMhRyA.roa (hash: mX2VEnqBHs2wq24qAd7nrxxeH5xEJp3U/9aLReWzccA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b6:47:de:66:6e:7d:a5:00:ca:9f:8b:9f:32:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb2490a8a133afc4939a882db7526c15f892e8c8 Validity Not Before: Dec 6 07:00:57 2025 GMT Not After : Dec 7 07:00:57 2025 GMT Subject: CN=11aa7c1519a76fdf9b2ef841c2aa39fd5c53bc39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:60:6b:19:2b:07:6a:f2:fb:0a:4b:1a:2d:83: e2:45:c4:a3:ca:3d:c4:ce:7b:0a:1c:31:b2:44:d7: c4:bb:1d:8f:4e:20:b5:fd:cb:de:83:4e:29:94:5b: 40:9f:27:3d:53:dc:88:45:47:72:38:01:93:a4:81: 1b:b7:3d:97:ba:3f:cd:9c:82:8e:5e:70:89:aa:35: 0b:85:74:81:98:2a:51:5c:fa:36:9c:07:dc:b9:71: f7:81:45:5d:23:10:1b:00:9e:c9:0f:8a:04:28:cf: da:61:d4:1f:65:1d:b4:27:10:38:73:e9:cc:34:ab: a1:7a:4f:6c:5d:31:21:41:91:3c:65:2b:b1:5f:e6: d3:f6:3b:19:7f:19:fc:37:06:9a:03:c8:a7:4b:ec: 06:21:e1:f0:e1:44:e8:71:dc:02:17:24:6f:bd:53: ed:7e:f8:33:32:19:45:c8:cd:ba:a6:a1:e5:ed:75: a8:e4:32:8a:2a:c8:14:36:78:78:68:7b:a1:5c:37: 85:94:0c:e3:d4:66:6a:5e:fa:93:91:cd:ab:56:c4: 1f:ca:ab:5c:ed:9a:46:ad:2a:6b:4b:08:68:5c:4b: 45:55:b3:7c:31:46:f9:8a:35:ea:2a:13:d5:19:4f: e2:44:bc:e0:33:91:e3:63:c7:60:41:81:4b:0a:21: 8d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AA:7C:15:19:A7:6F:DF:9B:2E:F8:41:C2:AA:39:FD:5C:53:BC:39 X509v3 Authority Key Identifier: keyid:EB:24:90:A8:A1:33:AF:C4:93:9A:88:2D:B7:52:6C:15:F8:92:E8:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:28:8f:01:f2:71:eb:2c:71:76:e4:8e:12:39:27:1b:4d:22: dd:38:0f:70:e9:1d:93:d7:37:c6:f8:6f:c7:04:96:49:34:d3: 89:90:c7:be:17:84:38:66:5f:b7:c6:ab:af:e6:5a:10:8f:e8: 19:cd:f6:cd:8f:a7:98:10:01:df:fa:54:eb:09:6a:45:87:af: ab:72:f5:b8:3d:92:73:13:4e:08:6d:3d:b2:f1:d5:50:8f:93: da:2f:19:92:76:20:18:a1:78:16:68:c2:84:41:fc:1c:5c:ad: f9:f6:b9:be:1a:d9:65:a8:96:6c:4b:18:c7:c6:b4:ce:70:0c: cc:7b:72:a9:56:90:a0:81:73:73:02:f4:41:41:c5:9b:98:9a: fb:8a:d3:1c:8a:d9:5f:5e:67:8a:5b:8f:71:03:f7:df:64:ac: f1:fc:8e:9a:8e:77:48:1b:c3:19:20:d7:1c:38:59:fb:3f:3e: 95:35:e8:5c:05:a1:5b:4a:67:15:1e:fb:47:e8:54:fa:0a:16: ec:2e:0c:b7:cc:04:6e:3f:a9:7f:2b:cf:98:1b:72:f0:df:99: ad:40:c0:02:ef:7a:d0:ac:c4:e3:fd:2c:23:0e:01:d1:88:79: ab:53:19:f7:b1:a6:60:0d:c2:81:d3:6b:66:27:d4:50:05:04: 20:8d:17:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrZH3mZufaUAyp+LnzKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMjQ5MGE4YTEzM2FmYzQ5MzlhODgyZGI3NTI2YzE1Zjg5 MmU4YzgwHhcNMjUxMjA2MDcwMDU3WhcNMjUxMjA3MDcwMDU3WjAzMTEwLwYDVQQD EygxMWFhN2MxNTE5YTc2ZmRmOWIyZWY4NDFjMmFhMzlmZDVjNTNiYzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumBrGSsHavL7CksaLYPiRcSjyj3E znsKHDGyRNfEux2PTiC1/cveg04plFtAnyc9U9yIRUdyOAGTpIEbtz2Xuj/NnIKO XnCJqjULhXSBmCpRXPo2nAfcuXH3gUVdIxAbAJ7JD4oEKM/aYdQfZR20JxA4c+nM NKuhek9sXTEhQZE8ZSuxX+bT9jsZfxn8NwaaA8inS+wGIeHw4UTocdwCFyRvvVPt fvgzMhlFyM26pqHl7XWo5DKKKsgUNnh4aHuhXDeFlAzj1GZqXvqTkc2rVsQfyqtc 7ZpGrSprSwhoXEtFVbN8MUb5ijXqKhPVGU/iRLzgM5HjY8dgQYFLCiGNYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGqfBUZp2/fmy74QcKqOf1cU7w5MB8GA1UdIwQY MBaAFOskkKihM6/Ek5qILbdSbBX4kujIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnlTUXFLRXpyOFNUbW9ndHQxSnNGZmlTNk1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83NDU5MmUtYWE4MC00MDBiLWI0Nzkt MzljNTUwZjBhNGU0LzEvNnlTUXFLRXpyOFNUbW9ndHQxSnNGZmlTNk1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83NDU5MmUtYWE4MC00MDBiLWI0NzktMzljNTUwZjBhNGU0 LzEvNnlTUXFLRXpyOFNUbW9ndHQxSnNGZmlTNk1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAviiPAfJx 6yxxduSOEjknG00i3TgPcOkdk9c3xvhvxwSWSTTTiZDHvheEOGZft8arr+ZaEI/o Gc32zY+nmBAB3/pU6wlqRYevq3L1uD2ScxNOCG09svHVUI+T2i8ZknYgGKF4FmjC hEH8HFyt+fa5vhrZZaiWbEsYx8a0znAMzHtyqVaQoIFzcwL0QUHFm5ia+4rTHIrZ X15niluPcQP332Ss8fyOmo53SBvDGSDXHDhZ+z8+lTXoXAWhW0pnFR77R+hU+goW 7C4Mt8wEbj+pfyvPmBty8N+ZrUDAAu960KzE4/0sIw4B0Yh5q1MZ97GmYA3CgdNr ZifUUAUEII0X4w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:28:34 2025 by rpki-client