This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft File: 6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json) Hash identifier: N850/6zelN1B98HbmlDbN+IxrsYSxoUHIkVdb3jjPbE= Subject key identifier: 9A:BE:E5:02:72:4D:65:6A:A5:CA:2B:F0:B0:88:5F:F9:25:A3:5D:EE Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77 Certificate issuer: /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277 Certificate serial: 019AF12D947900C3523D9CA0B4F929B9A052 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft Manifest number: 0A93 Signing time: Sat 06 Dec 2025 01:01:27 +0000 Manifest this update: Sat 06 Dec 2025 01:01:27 +0000 Manifest next update: Sun 07 Dec 2025 01:01:27 +0000 Files and hashes: 1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: wv2isL0fekxrAlAjG0yFs1dihdwKAkeo9VsNiHzoFCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:94:79:00:c3:52:3d:9c:a0:b4:f9:29:b9:a0:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277 Validity Not Before: Dec 6 01:01:27 2025 GMT Not After : Dec 7 01:01:27 2025 GMT Subject: CN=9abee502724d656aa5ca2bf0b0885ff925a35dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:44:1e:0c:b2:bf:81:7f:33:b1:5f:4e:36:d2: 2f:82:75:e1:ae:99:9d:e5:33:b9:6a:00:93:5d:47: 08:f3:23:12:55:ab:96:64:68:23:71:e8:25:fe:21: dc:25:af:9d:eb:d9:2a:54:44:c1:55:23:ce:c5:e1: db:8b:c1:24:0c:be:1c:f1:7a:09:5c:d4:47:94:7c: bc:d4:ac:3c:fe:6a:33:7b:b1:b7:44:9d:77:39:c7: 46:2e:de:e2:4c:1d:14:02:95:f9:32:a0:2c:9d:70: 24:8b:ae:8a:c8:e2:2c:99:fe:67:26:33:b8:9d:28: 2f:96:ca:41:23:aa:d2:76:cd:b9:7a:f9:0e:48:b6: 93:e6:15:37:15:6e:96:c0:c3:a8:10:4c:6e:77:3c: dd:88:d8:66:df:e0:a5:32:d4:4f:6d:7a:b6:3d:be: 0d:3b:fb:5b:d5:1e:c1:3d:af:cb:93:66:a0:43:4e: 55:4a:dc:64:5f:90:1a:e4:bd:42:27:4f:e3:55:b2: bf:45:af:5e:ba:64:b0:22:e3:1b:c4:9a:70:29:a0: 25:c6:08:be:18:0e:f2:28:6a:c6:ef:b4:1e:33:81: 7c:ee:c8:28:87:8f:18:55:15:d4:b6:80:3f:17:be: 1b:ae:65:bf:46:a5:0e:c7:50:bc:59:58:df:ab:00: 22:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BE:E5:02:72:4D:65:6A:A5:CA:2B:F0:B0:88:5F:F9:25:A3:5D:EE X509v3 Authority Key Identifier: keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:00:84:11:a5:aa:80:1e:88:a7:16:f9:6b:49:4c:5c:62:b2: e0:7c:cd:e1:15:eb:e6:17:b1:7b:1a:1a:96:55:ec:cd:9d:ca: a2:1b:3e:76:01:91:e2:54:9c:31:dc:35:a2:23:63:ba:9c:b3: d3:44:e9:31:ad:92:99:fb:0e:9d:3f:1e:45:7b:ba:7b:18:5d: 8d:63:66:c7:cd:24:5f:d4:87:40:b5:97:3a:da:e6:9c:d9:6d: 63:d1:69:e2:68:db:88:50:70:3f:af:57:c3:c8:92:e6:bd:c1: 8c:55:88:8f:3c:53:25:5f:2c:66:9e:d2:45:68:f1:5d:fe:a2: 31:c6:c1:86:25:7a:56:32:b7:9d:a1:3e:1a:a5:3e:53:37:41: ea:e8:c6:19:4f:f4:9b:62:b6:d0:ac:36:43:ee:9f:52:7a:39: 90:93:6b:7d:36:28:ce:8e:6a:20:dc:a7:2a:60:7d:95:df:61: f3:69:0e:a8:43:40:87:e9:07:74:2e:47:9e:29:6a:60:b3:d4: 19:23:6b:d5:22:68:6e:f2:1a:a7:09:d5:fb:d0:d2:be:2c:a4: c0:6e:27:1a:3e:a2:2f:8f:98:44:db:39:9c:78:b2:76:ae:9b: 28:a6:00:13:21:28:80:85:bd:f4:60:f7:1a:c2:55:d0:ca:e4: a5:12:a3:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZR5AMNSPZygtPkpuaBSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5M2RjZTg1MGNiMjYyN2E1MmJkZjRiOTkzNGExMTI4OGNi NmQyNzcwHhcNMjUxMjA2MDEwMTI3WhcNMjUxMjA3MDEwMTI3WjAzMTEwLwYDVQQD Eyg5YWJlZTUwMjcyNGQ2NTZhYTVjYTJiZjBiMDg4NWZmOTI1YTM1ZGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0QeDLK/gX8zsV9ONtIvgnXhrpmd 5TO5agCTXUcI8yMSVauWZGgjcegl/iHcJa+d69kqVETBVSPOxeHbi8EkDL4c8XoJ XNRHlHy81Kw8/moze7G3RJ13OcdGLt7iTB0UApX5MqAsnXAki66KyOIsmf5nJjO4 nSgvlspBI6rSds25evkOSLaT5hU3FW6WwMOoEExudzzdiNhm3+ClMtRPbXq2Pb4N O/tb1R7BPa/Lk2agQ05VStxkX5Aa5L1CJ0/jVbK/Ra9eumSwIuMbxJpwKaAlxgi+ GA7yKGrG77QeM4F87sgoh48YVRXUtoA/F74brmW/RqUOx1C8WVjfqwAi8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJq+5QJyTWVqpcor8LCIX/klo13uMB8GA1UdIwQY MBaAFOk9zoUMsmJ6Ur30uZNKESiMttJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlQzT2hReXlZbnBTdmZTNWswb1JLSXkyMG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kNGYyZTgtZDYxOS00ODY5LTk4ZTMt ZjVlOTM2NDY2OThlLzEvNlQzT2hReXlZbnBTdmZTNWswb1JLSXkyMG5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9kNGYyZTgtZDYxOS00ODY5LTk4ZTMtZjVlOTM2NDY2OThl LzEvNlQzT2hReXlZbnBTdmZTNWswb1JLSXkyMG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuACEEaWq gB6Ipxb5a0lMXGKy4HzN4RXr5hexexoallXszZ3Kohs+dgGR4lScMdw1oiNjupyz 00TpMa2SmfsOnT8eRXu6exhdjWNmx80kX9SHQLWXOtrmnNltY9Fp4mjbiFBwP69X w8iS5r3BjFWIjzxTJV8sZp7SRWjxXf6iMcbBhiV6VjK3naE+GqU+UzdB6ujGGU/0 m2K20Kw2Q+6fUno5kJNrfTYozo5qINynKmB9ld9h82kOqENAh+kHdC5HnilqYLPU GSNr1SJobvIapwnV+9DSviykwG4nGj6iL4+YRNs5nHiydq6bKKYAEyEogIW99GD3 GsJV0MrkpRKjVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:55 2025 by rpki-client