This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft File: 6y7LDykkUqe-lOaWD3znIBa9GAU.mft (raw, json) Hash identifier: KD9tn+rO7QwbV3ZlAj3aCMrQIWAf+TkQIvoF8oGm8yg= Subject key identifier: B0:BE:96:05:ED:33:12:BA:CC:D3:1E:76:E3:C4:42:C4:79:C8:A4:6B Authority key identifier: EB:2E:CB:0F:29:24:52:A7:BE:94:E6:96:0F:7C:E7:20:16:BD:18:05 Certificate issuer: /CN=eb2ecb0f292452a7be94e6960f7ce72016bd1805 Certificate serial: 019AF12E91E40B704936E4310E1E27E165CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft Manifest number: 050D Signing time: Sat 06 Dec 2025 01:02:32 +0000 Manifest this update: Sat 06 Dec 2025 01:02:32 +0000 Manifest next update: Sun 07 Dec 2025 01:02:32 +0000 Files and hashes: 1: 6y7LDykkUqe-lOaWD3znIBa9GAU.crl (hash: FpIVsmr8KLh7AMuZ3X02Cjo8hn9d+WFZbG/NK6qSVug=) 2: Aa0efsIBSZxQ_4T_iZQY03PtXFg.roa (hash: OuiSoz74OGRgJiBoShoGAfl/wamUvwrfazeBnaRaH+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft rsync://rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:91:e4:0b:70:49:36:e4:31:0e:1e:27:e1:65:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb2ecb0f292452a7be94e6960f7ce72016bd1805 Validity Not Before: Dec 6 01:02:32 2025 GMT Not After : Dec 7 01:02:32 2025 GMT Subject: CN=b0be9605ed3312baccd31e76e3c442c479c8a46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e2:a8:a5:80:30:1c:c5:a1:69:68:5f:2e:d0: 79:a4:6e:12:7e:1d:bb:08:96:d2:e1:20:7d:72:9b: f2:f2:ea:30:fd:b0:87:5d:03:f6:bd:aa:be:54:72: 90:33:99:a3:23:4b:e3:bf:4e:64:e7:5e:eb:45:b9: ae:3f:05:6a:f1:49:0b:06:72:70:af:73:27:06:e0: 44:64:6e:e7:e5:01:54:2c:66:a0:77:88:d4:98:94: ae:27:86:a5:ed:7d:50:7c:32:f8:8e:e2:18:52:99: 9c:4e:6e:cd:00:fd:75:91:d8:c0:93:0c:54:7a:b0: 14:da:32:1e:9e:cb:3f:13:ce:bd:94:da:ca:b3:6c: 88:6c:86:b5:ae:11:26:c3:b0:5a:52:e7:0d:aa:0e: 46:22:ee:f5:72:d4:59:fd:2b:b6:4b:21:fd:45:51: 5a:b5:d4:e8:1a:8a:cc:d3:95:9c:c9:f4:6c:64:3a: f8:89:59:26:86:fa:45:09:43:2d:bb:29:41:2c:2d: 20:2d:6a:5a:8a:97:fa:d5:02:17:70:6d:91:11:7a: 94:23:77:74:be:24:76:72:07:16:4a:04:98:66:5b: 8e:46:85:4a:fd:2c:db:fd:e4:e2:8f:33:46:5b:59: 5d:b9:6a:61:43:dd:01:c5:5e:b7:04:17:dd:2e:39: 54:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BE:96:05:ED:33:12:BA:CC:D3:1E:76:E3:C4:42:C4:79:C8:A4:6B X509v3 Authority Key Identifier: keyid:EB:2E:CB:0F:29:24:52:A7:BE:94:E6:96:0F:7C:E7:20:16:BD:18:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:12:b2:65:5c:d6:16:59:e4:01:3e:61:e7:36:b3:d4:45:18: 2e:c3:29:63:13:9b:3a:74:1d:59:f0:6f:a4:b3:0e:c0:86:fc: b0:fc:21:8d:36:9a:38:a4:c2:81:fe:53:0f:94:47:88:5d:3e: 8c:e5:b8:4a:4a:ee:41:76:23:b1:63:0c:89:17:04:f1:c7:f3: 11:84:eb:f0:9b:9e:dc:3e:07:f0:d7:f7:32:01:ca:59:ee:97: 5d:35:7b:2b:fa:3a:09:36:b2:82:da:67:d2:82:13:2d:20:6d: f3:6d:ef:54:58:57:41:21:0c:1f:de:fb:91:98:43:91:0b:44: 6d:fe:dd:e0:2e:64:88:7f:72:a5:ef:a5:3b:98:5f:0b:8d:bc: ec:d1:91:a1:83:29:d4:d7:c3:5a:a1:00:05:3f:3c:11:c5:51: e9:0d:c9:67:cd:fc:c1:c5:f0:3b:ba:a2:5e:a8:08:8d:0b:8b: 9b:12:51:c6:de:a1:71:02:4c:5f:95:85:4a:f3:41:9c:ed:8d: 8e:e7:ec:37:41:a8:f3:d3:04:f1:e1:d2:4d:30:fd:6e:b8:7b: 9c:32:a5:96:17:f8:7b:d3:84:87:c2:7b:57:ee:cf:85:f4:a4: d9:9d:26:a8:77:ad:c6:51:62:73:6e:41:90:8c:ac:d9:4e:ac: ad:df:69:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLpHkC3BJNuQxDh4n4WXKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMmVjYjBmMjkyNDUyYTdiZTk0ZTY5NjBmN2NlNzIwMTZi ZDE4MDUwHhcNMjUxMjA2MDEwMjMyWhcNMjUxMjA3MDEwMjMyWjAzMTEwLwYDVQQD EyhiMGJlOTYwNWVkMzMxMmJhY2NkMzFlNzZlM2M0NDJjNDc5YzhhNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+KopYAwHMWhaWhfLtB5pG4Sfh27 CJbS4SB9cpvy8uow/bCHXQP2vaq+VHKQM5mjI0vjv05k517rRbmuPwVq8UkLBnJw r3MnBuBEZG7n5QFULGagd4jUmJSuJ4al7X1QfDL4juIYUpmcTm7NAP11kdjAkwxU erAU2jIenss/E869lNrKs2yIbIa1rhEmw7BaUucNqg5GIu71ctRZ/Su2SyH9RVFa tdToGorM05WcyfRsZDr4iVkmhvpFCUMtuylBLC0gLWpaipf61QIXcG2REXqUI3d0 viR2cgcWSgSYZluORoVK/Szb/eTijzNGW1lduWphQ90BxV63BBfdLjlUIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLC+lgXtMxK6zNMeduPEQsR5yKRrMB8GA1UdIwQY MBaAFOsuyw8pJFKnvpTmlg985yAWvRgFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnk3TER5a2tVcWUtbE9hV0Qzem5JQmE5R0FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81NDhlZjYtZTcyZS00NTAzLThhZjkt YjU1ZDg4ZjdjOWRlLzEvNnk3TER5a2tVcWUtbE9hV0Qzem5JQmE5R0FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81NDhlZjYtZTcyZS00NTAzLThhZjktYjU1ZDg4ZjdjOWRl LzEvNnk3TER5a2tVcWUtbE9hV0Qzem5JQmE5R0FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRKyZVzW FlnkAT5h5zaz1EUYLsMpYxObOnQdWfBvpLMOwIb8sPwhjTaaOKTCgf5TD5RHiF0+ jOW4SkruQXYjsWMMiRcE8cfzEYTr8Jue3D4H8Nf3MgHKWe6XXTV7K/o6CTaygtpn 0oITLSBt823vVFhXQSEMH977kZhDkQtEbf7d4C5kiH9ype+lO5hfC4287NGRoYMp 1NfDWqEABT88EcVR6Q3JZ838wcXwO7qiXqgIjQuLmxJRxt6hcQJMX5WFSvNBnO2N jufsN0Go89ME8eHSTTD9brh7nDKllhf4e9OEh8J7V+7PhfSk2Z0mqHetxlFic25B kIys2U6srd9pYg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:43 2025 by rpki-client