This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft File: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft (raw, json) Hash identifier: 3uw/C5kL9lxUBt5QDwiZ4HhWVPWUQ+gWuDgZ8e/NTw8= Subject key identifier: 84:B5:99:7F:2A:B7:94:DD:90:A0:55:DA:D4:A1:5B:FD:12:06:CE:89 Authority key identifier: E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72 Certificate issuer: /CN=e8d672fa60aee4c273a11507f49b584dc552c472 Certificate serial: 019AF3F7EDD34078698C3EDE6D4B5943675F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft Manifest number: 06AB Signing time: Sat 06 Dec 2025 14:01:42 +0000 Manifest this update: Sat 06 Dec 2025 14:01:42 +0000 Manifest next update: Sun 07 Dec 2025 14:01:42 +0000 Files and hashes: 1: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl (hash: tXbCwmrghfMzUw2xRtz8cj714+ZwtjM3MYObgQSD+Oo=) 2: CRKNGf_xuZYF0kNapyVmFyPmlEw.roa (hash: No5hma8g70yPMrFd8Y5GeYsaZ5JGY9aPRg048GjHko8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:ed:d3:40:78:69:8c:3e:de:6d:4b:59:43:67:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8d672fa60aee4c273a11507f49b584dc552c472 Validity Not Before: Dec 6 14:01:42 2025 GMT Not After : Dec 7 14:01:42 2025 GMT Subject: CN=84b5997f2ab794dd90a055dad4a15bfd1206ce89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fb:17:ee:6d:28:75:08:af:0e:63:6b:38:00: 5d:c8:90:ef:4b:90:63:f2:3b:87:c4:34:4e:1c:ef: 4a:58:78:28:ad:5e:70:ea:61:86:05:67:4c:63:52: ba:e0:35:4f:91:3a:de:92:07:96:30:e1:76:07:b7: d0:2d:25:ce:a9:93:82:5b:e6:f7:3c:57:0d:f2:b0: 8e:35:5b:23:ae:c1:f7:b7:06:29:0c:57:26:04:b9: 97:0c:27:8a:c8:ff:03:58:1a:1b:6c:79:de:7d:ac: 18:fd:d6:6d:e8:6f:d7:14:33:ab:a3:e5:71:ff:9d: cb:30:58:4d:89:1d:89:e4:03:0f:f8:2a:9f:13:ea: 56:00:e9:75:39:da:1d:fe:57:ca:05:3d:3b:f1:fa: ab:f5:0c:c4:19:87:2b:4d:b3:cc:ab:b5:79:46:b5: e1:ae:39:52:f1:63:d0:09:9e:bb:3c:67:62:fe:79: cf:3a:a9:0d:96:12:49:2e:2d:08:9f:59:fb:f2:87: 16:7b:ed:da:6f:57:bc:eb:24:ba:46:fa:b9:88:fe: 9b:cf:dd:83:6c:0d:f1:35:f7:41:fd:85:06:c7:a4: 20:d2:8c:4c:01:a7:24:37:4a:35:38:a0:8b:1a:ef: 99:0a:d1:4c:11:5a:39:be:9a:22:78:c0:c1:fe:93: 98:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B5:99:7F:2A:B7:94:DD:90:A0:55:DA:D4:A1:5B:FD:12:06:CE:89 X509v3 Authority Key Identifier: keyid:E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:50:a5:22:9e:c9:31:38:31:98:86:9e:40:88:04:00:ad:76: 4d:42:92:c9:38:22:58:56:a2:b4:70:6e:ab:bb:a6:c5:15:ec: e8:f0:0a:ff:ac:e6:fc:37:54:eb:c8:e2:c0:76:9d:64:d0:dd: 1d:37:2c:79:95:5f:70:d5:45:5e:90:60:05:7a:da:d7:2f:7b: a7:57:94:42:56:02:0d:62:ff:f8:e5:af:54:3b:da:86:6f:f6: fa:9c:64:0d:71:b0:c5:8c:4c:e3:21:09:7d:0d:91:13:bb:14: 83:18:ca:3a:3e:06:1c:39:75:e0:85:5c:cf:0b:e8:74:41:93: fa:b1:9d:e3:88:dd:46:ce:aa:3c:b2:20:4d:4a:5e:98:81:f0: 9f:e6:11:64:d1:b6:09:6b:09:a6:80:16:14:b0:2a:8f:c1:2b: 90:2c:9d:64:81:1b:f4:2d:fc:66:5c:c0:13:30:8b:04:a9:1b: 65:f3:06:ba:d4:bf:a6:39:8a:22:4a:59:9f:6d:64:51:32:f0: 81:31:3a:01:4d:04:0f:13:d7:b3:b3:c7:3b:26:d9:a7:7a:d6: 4f:70:a7:e1:ce:df:17:e7:97:4a:b0:c4:b2:0d:db:58:fc:f8: c2:82:a0:e0:12:59:f0:f2:60:74:ad:9a:93:a4:9c:9c:87:ea: 62:c7:ea:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9+3TQHhpjD7ebUtZQ2dfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZDY3MmZhNjBhZWU0YzI3M2ExMTUwN2Y0OWI1ODRkYzU1 MmM0NzIwHhcNMjUxMjA2MTQwMTQyWhcNMjUxMjA3MTQwMTQyWjAzMTEwLwYDVQQD Eyg4NGI1OTk3ZjJhYjc5NGRkOTBhMDU1ZGFkNGExNWJmZDEyMDZjZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fsX7m0odQivDmNrOABdyJDvS5Bj 8juHxDROHO9KWHgorV5w6mGGBWdMY1K64DVPkTrekgeWMOF2B7fQLSXOqZOCW+b3 PFcN8rCONVsjrsH3twYpDFcmBLmXDCeKyP8DWBobbHnefawY/dZt6G/XFDOro+Vx /53LMFhNiR2J5AMP+CqfE+pWAOl1Odod/lfKBT078fqr9QzEGYcrTbPMq7V5RrXh rjlS8WPQCZ67PGdi/nnPOqkNlhJJLi0In1n78ocWe+3ab1e86yS6Rvq5iP6bz92D bA3xNfdB/YUGx6Qg0oxMAackN0o1OKCLGu+ZCtFMEVo5vpoieMDB/pOYNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIS1mX8qt5TdkKBV2tShW/0SBs6JMB8GA1UdIwQY MBaAFOjWcvpgruTCc6EVB/SbWE3FUsRyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk5aeS1tQ3U1TUp6b1JVSDlKdFlUY1ZTeEhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNDE2MGQtNzcyYi00NTY3LWE1NGUt NzUxYWM2ODA3YjA0LzEvNk5aeS1tQ3U1TUp6b1JVSDlKdFlUY1ZTeEhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jNDE2MGQtNzcyYi00NTY3LWE1NGUtNzUxYWM2ODA3YjA0 LzEvNk5aeS1tQ3U1TUp6b1JVSDlKdFlUY1ZTeEhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVClIp7J MTgxmIaeQIgEAK12TUKSyTgiWFaitHBuq7umxRXs6PAK/6zm/DdU68jiwHadZNDd HTcseZVfcNVFXpBgBXra1y97p1eUQlYCDWL/+OWvVDvahm/2+pxkDXGwxYxM4yEJ fQ2RE7sUgxjKOj4GHDl14IVczwvodEGT+rGd44jdRs6qPLIgTUpemIHwn+YRZNG2 CWsJpoAWFLAqj8ErkCydZIEb9C38ZlzAEzCLBKkbZfMGutS/pjmKIkpZn21kUTLw gTE6AU0EDxPXs7PHOybZp3rWT3Cn4c7fF+eXSrDEsg3bWPz4woKg4BJZ8PJgdK2a k6ScnIfqYsfqWA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:49 2025 by rpki-client