This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft File: 6MibPc36Jpe0hyEwjHa2c3KhOxU.mft (raw, json) Hash identifier: YUVAPzjLx7pJsmhL6N/f9ULH39T7+ymKTmsOR4w3Ojs= Subject key identifier: 65:FE:CD:2F:A3:95:A0:10:CD:CE:7E:EA:90:B5:DB:40:5A:90:52:50 Authority key identifier: E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15 Certificate issuer: /CN=e8c89b3dcdfa2697b48721308c76b67372a13b15 Certificate serial: 019AF2096DAB12FDE01E942277269658831B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft Manifest number: 0F39 Signing time: Sat 06 Dec 2025 05:01:35 +0000 Manifest this update: Sat 06 Dec 2025 05:01:35 +0000 Manifest next update: Sun 07 Dec 2025 05:01:35 +0000 Files and hashes: 1: 6MibPc36Jpe0hyEwjHa2c3KhOxU.crl (hash: rxkKUWxG9ffXQ0AMog88Hmj2rRQ/zL7GedoMeWLkbPQ=) 2: jJb63WHX8LsB3QDuigxBrD65ZR0.roa (hash: +ilD7JtRRxaEC6UNmKq5fdG6fZrQuNb1tHL4KgM7JRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:6d:ab:12:fd:e0:1e:94:22:77:26:96:58:83:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c89b3dcdfa2697b48721308c76b67372a13b15 Validity Not Before: Dec 6 05:01:35 2025 GMT Not After : Dec 7 05:01:35 2025 GMT Subject: CN=65fecd2fa395a010cdce7eea90b5db405a905250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c3:62:0e:53:07:7b:7f:35:9f:6b:46:23:39: 06:a7:64:46:a2:3b:00:ef:bd:69:21:83:ad:df:d2: 77:f1:0f:5c:41:10:b0:30:4f:09:09:cc:52:64:85: 7d:78:54:7f:0d:2f:46:4c:4d:28:34:8d:00:b2:1f: ce:a9:bc:97:f5:bf:89:27:5f:4a:71:0d:a9:f6:ec: 04:bb:7e:64:d8:1e:d7:f1:83:f5:17:ab:22:2c:73: 57:c2:c6:76:96:f6:e5:69:ea:60:d2:6c:1d:07:a9: 87:a4:e2:a2:2d:bd:54:07:81:39:2b:0c:21:6e:a4: af:1f:47:7f:37:98:9d:9a:6c:3b:30:03:6d:8c:15: 69:45:e0:16:80:b7:6d:ce:e5:3d:d6:bd:ac:8c:f7: 9d:16:75:9e:34:2b:77:ff:23:34:75:05:11:fa:24: bf:09:31:1b:b7:7d:00:19:9d:1d:8f:a6:a0:2d:3a: 9d:67:69:c4:bd:d6:93:0a:b6:7c:28:d1:f4:a7:2c: b2:04:86:7d:34:46:6b:c5:e1:31:51:11:93:f7:fd: e4:85:3d:09:5b:ea:17:b5:19:af:b8:8c:d0:28:83: 0e:34:55:d7:8f:42:8d:46:c3:6c:80:b3:99:94:fb: 5f:d1:77:30:6b:b3:a4:32:75:c7:ef:a7:c0:ab:6a: d8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FE:CD:2F:A3:95:A0:10:CD:CE:7E:EA:90:B5:DB:40:5A:90:52:50 X509v3 Authority Key Identifier: keyid:E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:98:ad:67:0e:bc:1a:f3:77:bf:69:6f:29:9a:0c:0e:05:04: bf:11:e4:ec:76:23:9f:30:ce:71:41:02:22:70:32:68:fa:f4: 3d:f2:f3:9c:fd:b9:6a:94:bd:85:24:68:33:f2:26:a6:47:c0: 03:a5:e4:d8:bc:c9:0f:64:54:9b:84:6e:45:ab:1c:24:53:6b: fa:86:01:cc:01:9b:f3:6a:2a:ab:cc:e0:7b:ff:3b:37:0c:e7: 85:7d:ff:d8:ef:c2:e0:61:2f:cd:b1:b7:4c:08:22:ac:50:c6: c0:88:93:b7:7f:cd:e5:90:b1:ca:d0:cc:67:b5:cd:a2:9e:17: 10:6c:70:77:d3:0e:2a:f4:e4:2e:93:9e:a7:85:16:67:43:fd: a6:65:e9:73:b7:d4:61:52:b3:22:4b:f1:68:40:c2:ff:c2:3d: 8a:52:46:ee:f0:69:62:1c:26:23:da:79:6a:13:19:00:42:0f: 19:5b:d0:df:4b:ca:d3:be:8d:cc:85:de:39:dc:a5:6c:fb:e4: 72:aa:43:68:98:36:f3:ad:ee:87:cf:d1:90:4d:3c:c0:93:78: e0:88:f4:a7:9b:a7:71:c8:5b:4b:8b:c2:bb:88:f6:2d:95:9f: 22:32:c1:e2:6d:65:53:d9:66:f8:2d:5a:14:bf:e9:cc:fc:8c: 8b:0a:6c:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCW2rEv3gHpQidyaWWIMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Yzg5YjNkY2RmYTI2OTdiNDg3MjEzMDhjNzZiNjczNzJh MTNiMTUwHhcNMjUxMjA2MDUwMTM1WhcNMjUxMjA3MDUwMTM1WjAzMTEwLwYDVQQD Eyg2NWZlY2QyZmEzOTVhMDEwY2RjZTdlZWE5MGI1ZGI0MDVhOTA1MjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38NiDlMHe381n2tGIzkGp2RGojsA 771pIYOt39J38Q9cQRCwME8JCcxSZIV9eFR/DS9GTE0oNI0Ash/OqbyX9b+JJ19K cQ2p9uwEu35k2B7X8YP1F6siLHNXwsZ2lvblaepg0mwdB6mHpOKiLb1UB4E5Kwwh bqSvH0d/N5idmmw7MANtjBVpReAWgLdtzuU91r2sjPedFnWeNCt3/yM0dQUR+iS/ CTEbt30AGZ0dj6agLTqdZ2nEvdaTCrZ8KNH0pyyyBIZ9NEZrxeExURGT9/3khT0J W+oXtRmvuIzQKIMONFXXj0KNRsNsgLOZlPtf0Xcwa7OkMnXH76fAq2rYnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGX+zS+jlaAQzc5+6pC120BakFJQMB8GA1UdIwQY MBaAFOjImz3N+iaXtIchMIx2tnNyoTsVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk1pYlBjMzZKcGUwaHlFd2pIYTJjM0toT3hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mMjMxZTQtNjdhNi00YzU1LTkxZjUt OTM0YjQ0MzkwOTJkLzEvNk1pYlBjMzZKcGUwaHlFd2pIYTJjM0toT3hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9mMjMxZTQtNjdhNi00YzU1LTkxZjUtOTM0YjQ0MzkwOTJk LzEvNk1pYlBjMzZKcGUwaHlFd2pIYTJjM0toT3hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs5itZw68 GvN3v2lvKZoMDgUEvxHk7HYjnzDOcUECInAyaPr0PfLznP25apS9hSRoM/ImpkfA A6Xk2LzJD2RUm4RuRascJFNr+oYBzAGb82oqq8zge/87NwznhX3/2O/C4GEvzbG3 TAgirFDGwIiTt3/N5ZCxytDMZ7XNop4XEGxwd9MOKvTkLpOep4UWZ0P9pmXpc7fU YVKzIkvxaEDC/8I9ilJG7vBpYhwmI9p5ahMZAEIPGVvQ30vK076NzIXeOdylbPvk cqpDaJg2863uh8/RkE08wJN44Ij0p5uncchbS4vCu4j2LZWfIjLB4m1lU9lm+C1a FL/pzPyMiwps0w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:03 2025 by rpki-client