This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft File: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json) Hash identifier: h09YdIFSyfx7+1OJc4Uki8D/Z1Dfg7qA60ihjx/MpW4= Subject key identifier: 91:E7:9D:F2:DB:5A:9F:4E:7C:14:26:96:1C:A0:39:D1:D6:45:5A:2E Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED Certificate issuer: /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed Certificate serial: 019AF23FE985E11B8E6A163B58943E5036DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft Manifest number: 0E57 Signing time: Sat 06 Dec 2025 06:01:06 +0000 Manifest this update: Sat 06 Dec 2025 06:01:06 +0000 Manifest next update: Sun 07 Dec 2025 06:01:06 +0000 Files and hashes: 1: 534vF5sjkwJDGuUSMSbyeoXyx-w.roa (hash: yaE3+RBNj5kJXWkdpo0vdtCXgmh99gzWa0o0cozuQ7M=) 2: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: 25eFQnmzjByQFbM9uNojje9Y2bLOnBE1eH22bmcwstA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e9:85:e1:1b:8e:6a:16:3b:58:94:3e:50:36:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed Validity Not Before: Dec 6 06:01:06 2025 GMT Not After : Dec 7 06:01:06 2025 GMT Subject: CN=91e79df2db5a9f4e7c1426961ca039d1d6455a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3a:c3:5e:25:54:4a:12:31:7b:b9:c2:25:63: f3:50:b6:bb:8e:e1:30:56:15:00:cb:ca:90:51:22: f0:91:3b:4c:3a:da:19:aa:36:b8:76:71:d9:c2:63: e5:be:63:4e:14:2e:95:b5:28:22:b6:ea:59:98:01: d5:57:58:2a:ea:9f:99:3c:7f:d6:01:ed:0d:8f:d4: 33:2f:7d:a8:4a:23:fe:16:b8:35:db:12:b9:04:d3: 50:d4:bf:07:9c:8d:4e:f5:84:84:38:fc:ab:ab:2d: 5f:84:50:43:ab:5a:29:9f:12:db:3a:7c:94:de:9d: 1e:dc:29:12:18:2e:57:f6:78:d3:4a:c4:16:b4:bb: 59:a5:c7:cd:2b:a9:75:6d:1f:7c:c9:cc:d9:c2:d2: de:d6:5e:c0:ce:3a:b2:4e:6d:70:aa:25:c7:53:46: 53:86:5f:c8:fa:7c:35:6f:8f:51:b4:d4:e8:77:51: a3:96:c8:45:7f:cc:e6:d3:ec:0d:fd:d4:0b:d3:0e: 6e:0c:56:86:cc:78:56:e5:c4:9b:8e:b2:99:f3:50: c8:ea:7b:9b:86:14:f8:0d:ad:95:56:69:59:ea:73: fe:23:2d:03:62:fb:b9:e6:67:ef:6a:ab:87:52:0f: 9c:77:3a:39:a9:da:43:04:35:8e:2e:7c:4c:19:0d: 21:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E7:9D:F2:DB:5A:9F:4E:7C:14:26:96:1C:A0:39:D1:D6:45:5A:2E X509v3 Authority Key Identifier: keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:26:4d:26:bd:9f:23:7b:43:95:42:c6:d2:b2:88:e6:ce:18: b8:de:fc:15:9d:40:43:83:83:bb:80:d0:2a:00:89:5b:b6:28: 93:a1:0c:62:9c:88:c1:1a:a2:ed:c8:41:ff:5b:61:c8:0d:88: dc:0a:43:26:72:d3:6a:5c:28:2c:69:42:a4:07:1b:08:a0:72: cb:b8:2c:6e:60:9e:87:96:a2:77:2b:a7:e3:eb:9d:0b:d8:8b: c7:b2:7e:25:35:01:b7:5f:17:26:30:98:c4:de:1e:4c:a7:31: 21:e0:0e:41:4f:9b:ce:3f:63:ac:fb:58:79:e4:7e:a0:77:aa: fd:32:58:43:39:47:4f:d0:5d:c1:ff:3f:dc:2a:f4:30:6f:e1: 13:f4:e5:b8:e7:c5:8f:5c:5a:4a:c1:99:c6:df:41:2e:74:cf: 89:f5:b2:fb:2c:4e:84:21:57:db:70:76:3b:ff:f1:b1:d4:1e: 77:c8:a6:b4:72:02:53:ea:af:fe:99:05:fb:cf:e1:ed:87:a8: 28:ae:14:90:ec:9a:11:82:c8:5a:ed:e4:5f:c1:5a:3f:31:20: 6b:e0:82:af:ce:8e:37:d5:dd:c8:e2:27:f6:14:53:1d:ad:81: 24:88:64:fc:fd:52:a5:24:3f:94:5f:6d:b2:14:28:06:f4:40: 94:6c:dc:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+mF4RuOahY7WJQ+UDbcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNzUwM2I4M2ZhMDlhNzViY2I5MTA3NTQwMGY4MzA3YTY2 N2I4ZWQwHhcNMjUxMjA2MDYwMTA2WhcNMjUxMjA3MDYwMTA2WjAzMTEwLwYDVQQD Eyg5MWU3OWRmMmRiNWE5ZjRlN2MxNDI2OTYxY2EwMzlkMWQ2NDU1YTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjrDXiVUShIxe7nCJWPzULa7juEw VhUAy8qQUSLwkTtMOtoZqja4dnHZwmPlvmNOFC6VtSgitupZmAHVV1gq6p+ZPH/W Ae0Nj9QzL32oSiP+Frg12xK5BNNQ1L8HnI1O9YSEOPyrqy1fhFBDq1opnxLbOnyU 3p0e3CkSGC5X9njTSsQWtLtZpcfNK6l1bR98yczZwtLe1l7AzjqyTm1wqiXHU0ZT hl/I+nw1b49RtNTod1GjlshFf8zm0+wN/dQL0w5uDFaGzHhW5cSbjrKZ81DI6nub hhT4Da2VVmlZ6nP+Iy0DYvu55mfvaquHUg+cdzo5qdpDBDWOLnxMGQ0hiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHnnfLbWp9OfBQmlhygOdHWRVouMB8GA1UdIwQY MBaAFOp1A7g/oJp1vLkQdUAPgwemZ7jtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jNDIxNjAtZDZmNC00ODJjLWJmNjIt NjIxNDBiMjAyZWI0LzEvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jNDIxNjAtZDZmNC00ODJjLWJmNjItNjIxNDBiMjAyZWI0 LzEvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyZNJr2f I3tDlULG0rKI5s4YuN78FZ1AQ4ODu4DQKgCJW7Yok6EMYpyIwRqi7chB/1thyA2I 3ApDJnLTalwoLGlCpAcbCKByy7gsbmCeh5aidyun4+udC9iLx7J+JTUBt18XJjCY xN4eTKcxIeAOQU+bzj9jrPtYeeR+oHeq/TJYQzlHT9Bdwf8/3Cr0MG/hE/TluOfF j1xaSsGZxt9BLnTPifWy+yxOhCFX23B2O//xsdQed8imtHICU+qv/pkF+8/h7Yeo KK4UkOyaEYLIWu3kX8FaPzEga+CCr86ON9XdyOIn9hRTHa2BJIhk/P1SpSQ/lF9t shQoBvRAlGzcWg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:34 2025 by rpki-client