This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft File: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft (raw, json) Hash identifier: xkP2Xcj0JQnn3cxY9FwGj+nXh8zBECGmAy+V7hmhNGQ= Subject key identifier: E4:70:39:A8:B4:04:69:83:7F:71:31:5F:86:EE:69:C2:9A:36:05:E4 Authority key identifier: E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1 Certificate issuer: /CN=e96a769beca3b1932955158135596365c43c83b1 Certificate serial: 019AF0BF86FED9D8DD2336877F3831A3650B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft Manifest number: 0EDB Signing time: Fri 05 Dec 2025 23:01:15 +0000 Manifest this update: Fri 05 Dec 2025 23:01:15 +0000 Manifest next update: Sat 06 Dec 2025 23:01:15 +0000 Files and hashes: 1: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl (hash: ieJZ9UqwF/VcbJj3ubxoLA5ugjLKNulrBNJtEutXAvA=) 2: Qt-NHTWPG9Blnlp9KwVRBT4_TNs.roa (hash: iMKB/O68vIbAIcl8B86g//4tQCSnWahP5EtY42n7PM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:86:fe:d9:d8:dd:23:36:87:7f:38:31:a3:65:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96a769beca3b1932955158135596365c43c83b1 Validity Not Before: Dec 5 23:01:15 2025 GMT Not After : Dec 6 23:01:15 2025 GMT Subject: CN=e47039a8b40469837f71315f86ee69c29a3605e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:69:a2:6a:be:d9:f4:e5:1e:6b:34:ab:35:90: 2f:5e:a4:9f:ec:e0:17:ad:f5:0d:e6:0e:c5:d0:34: 35:52:f9:be:e1:d9:ef:57:6e:28:c1:a8:df:f2:f2: d2:2d:8f:6b:f1:cc:4b:2d:15:47:77:55:6e:db:89: 59:6e:ce:55:67:fb:40:87:6e:22:e9:49:a3:73:91: a2:6a:8b:9c:fa:19:a8:f8:fb:ca:ce:29:2e:24:64: 37:d7:76:46:30:a2:fd:99:25:ec:54:4b:a6:5d:9e: c0:2e:41:8b:bb:f5:ea:35:71:50:45:f8:3f:e0:a6: b7:20:00:0c:0c:6d:15:38:a6:2e:7e:2f:e0:23:57: 75:f9:ec:c4:57:e3:d5:ee:5c:59:72:7a:5f:27:d8: e8:ec:62:d1:da:22:81:39:c5:7d:0d:8c:ec:f3:f0: cb:ff:95:6f:8b:d0:e5:45:7e:9e:b0:8c:3a:93:24: d0:2d:68:ed:19:3d:18:29:08:8e:19:46:f7:82:ad: cf:b4:f3:c3:69:b6:48:ec:42:59:4d:40:25:ab:23: 62:6b:5f:14:4b:64:67:05:d3:ce:94:fe:43:a7:15: 3b:76:30:18:eb:34:93:e9:a8:e6:ff:83:cb:92:28: 2c:d1:2c:bc:a6:97:1c:cc:9c:3b:f4:9b:5b:8e:5b: 5a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:70:39:A8:B4:04:69:83:7F:71:31:5F:86:EE:69:C2:9A:36:05:E4 X509v3 Authority Key Identifier: keyid:E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8b:c1:02:5d:1f:3d:73:8c:dc:37:57:2d:be:dd:38:ea:02: d4:05:66:16:f3:e9:a8:ca:b8:ed:47:d0:4a:4f:3a:c5:36:6b: 8a:be:d3:93:0f:9a:42:3b:b8:ca:af:d4:1f:e7:00:de:66:d2: 57:af:52:a5:0e:e1:e4:ae:6b:85:44:cf:55:f6:c7:3b:5e:05: f2:64:99:46:9e:4d:0c:a7:9d:ed:2a:77:36:94:52:91:6d:8c: ab:03:37:68:a4:48:8e:b6:3c:c5:e8:c1:2c:50:40:40:36:da: 9d:ae:30:d6:b6:78:fd:6d:92:e5:30:f1:4d:89:f5:0c:bb:c7: df:92:7e:c5:fa:13:d3:1f:17:4b:e4:94:e3:a9:c3:63:26:ec: 99:71:ba:99:0b:9b:54:61:40:a9:1f:2d:48:94:b9:2b:55:63: 17:ba:b1:44:3a:1f:a4:43:0a:eb:10:cd:87:07:ab:cf:8a:6f: 6b:f4:9f:dc:5e:d1:10:92:d7:34:a7:60:d8:8e:87:57:64:e8: 59:71:ab:b3:ca:5f:3d:22:e9:b4:68:6d:e5:ec:0e:c5:39:fd: 14:27:f0:6b:47:42:93:0f:ce:d4:3a:78:bd:70:fe:1d:3f:32: 91:d9:04:3c:4b:f5:b9:9f:65:87:05:9a:76:d0:ec:66:45:da: 31:41:74:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4b+2djdIzaHfzgxo2ULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NmE3NjliZWNhM2IxOTMyOTU1MTU4MTM1NTk2MzY1YzQz YzgzYjEwHhcNMjUxMjA1MjMwMTE1WhcNMjUxMjA2MjMwMTE1WjAzMTEwLwYDVQQD EyhlNDcwMzlhOGI0MDQ2OTgzN2Y3MTMxNWY4NmVlNjljMjlhMzYwNWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Gmiar7Z9OUeazSrNZAvXqSf7OAX rfUN5g7F0DQ1Uvm+4dnvV24owajf8vLSLY9r8cxLLRVHd1Vu24lZbs5VZ/tAh24i 6Umjc5Giaouc+hmo+PvKzikuJGQ313ZGMKL9mSXsVEumXZ7ALkGLu/XqNXFQRfg/ 4Ka3IAAMDG0VOKYufi/gI1d1+ezEV+PV7lxZcnpfJ9jo7GLR2iKBOcV9DYzs8/DL /5Vvi9DlRX6esIw6kyTQLWjtGT0YKQiOGUb3gq3PtPPDabZI7EJZTUAlqyNia18U S2RnBdPOlP5DpxU7djAY6zST6ajm/4PLkigs0Sy8ppcczJw79JtbjltahQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORwOai0BGmDf3ExX4buacKaNgXkMB8GA1UdIwQY MBaAFOlqdpvso7GTKVUVgTVZY2XEPIOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNldwMm0teWpzWk1wVlJXQk5WbGpaY1E4ZzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jYWU5MWItOWUwZS00ZDVjLWFmYzQt NTUxMThmOGJkNWYyLzEvNldwMm0teWpzWk1wVlJXQk5WbGpaY1E4ZzdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9jYWU5MWItOWUwZS00ZDVjLWFmYzQtNTUxMThmOGJkNWYy LzEvNldwMm0teWpzWk1wVlJXQk5WbGpaY1E4ZzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYvBAl0f PXOM3DdXLb7dOOoC1AVmFvPpqMq47UfQSk86xTZrir7Tkw+aQju4yq/UH+cA3mbS V69SpQ7h5K5rhUTPVfbHO14F8mSZRp5NDKed7Sp3NpRSkW2MqwM3aKRIjrY8xejB LFBAQDbana4w1rZ4/W2S5TDxTYn1DLvH35J+xfoT0x8XS+SU46nDYybsmXG6mQub VGFAqR8tSJS5K1VjF7qxRDofpEMK6xDNhwerz4pva/Sf3F7REJLXNKdg2I6HV2To WXGrs8pfPSLptGht5ewOxTn9FCfwa0dCkw/O1Dp4vXD+HT8ykdkEPEv1uZ9lhwWa dtDsZkXaMUF0lQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:52:24 2025 by rpki-client