This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft File: 6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft (raw, json) Hash identifier: 2URj6+rN76GKohNYY3B8VSPAN79RSM4BFDdCTymr3jw= Subject key identifier: BF:69:4B:EC:3D:11:4E:46:AC:14:C1:2C:11:DE:A9:D7:ED:25:11:B5 Authority key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5 Certificate issuer: /CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5 Certificate serial: 019AF31B983ED229E6E625448D589601F2B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft Manifest number: 0DDF Signing time: Sat 06 Dec 2025 10:01:03 +0000 Manifest this update: Sat 06 Dec 2025 10:01:03 +0000 Manifest next update: Sun 07 Dec 2025 10:01:03 +0000 Files and hashes: 1: 6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl (hash: 8bYeJTuKLYVqf5g8fODKi7ngixWif6TGERAfGG4A7rI=) 2: DD5wwVR4QntHgRvmQHrM5gRYoL0.roa (hash: +XZFURh1MsaKfVC7ehNqW8S6TsTBbdN2yMCWh0GcBWI=) 3: pBGZNx_OAmMdbFc_db_0hiPmyn0.roa (hash: QFrjKNE3vTim3+tyZdQRJX7MRvsrfcNJr7UDy9LbkxY=) 4: vgSjBdnlNw4PtVl7ZUje8-cR03s.roa (hash: H3OQmYWity24ih078EAoQ3E84gh3OSk8WYJH295c1kc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:98:3e:d2:29:e6:e6:25:44:8d:58:96:01:f2:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5 Validity Not Before: Dec 6 10:01:03 2025 GMT Not After : Dec 7 10:01:03 2025 GMT Subject: CN=bf694bec3d114e46ac14c12c11dea9d7ed2511b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:de:be:16:d3:c3:0d:38:62:39:03:3f:74:c8: 22:af:e7:e8:41:f7:4e:6b:c7:f8:6c:e8:57:72:a2: f9:78:18:be:4c:1e:2d:92:0b:69:6b:39:ac:c9:0c: 98:57:a6:7e:3d:08:51:5a:ec:6e:e6:ba:d5:38:76: a2:a9:a3:1e:e0:87:7a:c7:e3:eb:34:db:39:f8:9f: 69:48:cb:5a:f3:e5:d1:e1:64:17:03:90:61:23:1c: 66:6d:7e:8c:98:a7:37:56:32:f2:ba:49:8f:34:ee: df:88:23:6e:23:25:52:82:6c:37:03:1f:b9:af:66: cb:4b:3a:d9:cf:5c:72:5d:7c:82:4f:9d:66:d0:1a: 33:2d:b7:0c:37:b9:4e:73:e6:2b:75:65:fd:a1:a0: 64:82:74:d6:be:4b:bb:61:ba:d4:b4:06:d4:b4:e6: af:a3:a3:06:da:39:fa:2e:68:46:e7:53:2b:8c:78: 58:87:f5:e1:e8:97:bb:cd:3a:cf:d6:9f:43:ef:26: ad:2b:8d:8f:ef:ef:65:2f:d9:30:2f:79:a6:92:30: 1f:65:0e:c9:26:63:ab:2e:16:68:38:da:5b:1e:fe: 66:3b:34:ae:36:60:ca:aa:0f:6f:97:f6:40:5e:f7: 62:55:da:9c:a0:b7:91:10:36:2b:f6:dc:fc:5e:b9: 2c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:69:4B:EC:3D:11:4E:46:AC:14:C1:2C:11:DE:A9:D7:ED:25:11:B5 X509v3 Authority Key Identifier: keyid:E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6f:4d:04:b4:8b:0e:62:4c:a0:54:a9:3f:3a:26:74:24:7e: 30:56:79:ab:61:62:05:13:aa:4d:58:43:3c:44:f5:c4:53:69: 80:2e:07:13:6f:7a:50:c2:3f:51:d8:f1:9c:cc:5e:09:08:b0: 55:8b:93:80:c0:41:b7:28:17:f4:6c:9c:26:3c:85:c4:cf:41: b7:e2:7a:51:b6:17:54:39:8e:7a:74:b0:66:f6:3a:ac:53:ad: 30:39:66:5c:74:15:89:40:81:31:df:9f:8c:f2:b8:ac:74:d5: 08:a7:72:7b:07:a7:8a:b3:42:17:34:ec:b1:9f:48:00:df:7f: 48:2b:81:4d:84:6a:d2:9c:b2:78:aa:7f:55:c6:4b:24:9f:56: 9d:6b:81:ee:48:f0:2f:a1:d5:e3:21:5e:dc:44:a1:eb:a3:ff: 2e:64:d1:b5:ff:f2:1b:b0:9b:f3:00:f6:f3:ad:ce:ce:8a:15: 01:a1:6b:00:59:24:97:51:88:73:b4:7d:2e:12:e5:33:f3:52: 22:a7:39:25:be:3d:92:69:75:73:dd:b6:79:1b:b2:04:f2:8e: 37:25:d9:e2:3d:5e:fb:48:fb:cd:da:05:c2:45:79:80:e3:8f: fd:3b:fa:b8:5b:b7:86:d8:36:d6:9f:7c:69:53:3a:2d:ba:8b: 6c:45:83:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5g+0inm5iVEjViWAfK0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Zjk5Y2Q4ODRmYjVjYmFiM2YzYjM0ZTE3YTgwYTQ4YWRl YzNmZTUwHhcNMjUxMjA2MTAwMTAzWhcNMjUxMjA3MTAwMTAzWjAzMTEwLwYDVQQD EyhiZjY5NGJlYzNkMTE0ZTQ2YWMxNGMxMmMxMWRlYTlkN2VkMjUxMWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud6+FtPDDThiOQM/dMgir+foQfdO a8f4bOhXcqL5eBi+TB4tkgtpazmsyQyYV6Z+PQhRWuxu5rrVOHaiqaMe4Id6x+Pr NNs5+J9pSMta8+XR4WQXA5BhIxxmbX6MmKc3VjLyukmPNO7fiCNuIyVSgmw3Ax+5 r2bLSzrZz1xyXXyCT51m0BozLbcMN7lOc+YrdWX9oaBkgnTWvku7YbrUtAbUtOav o6MG2jn6LmhG51MrjHhYh/Xh6Je7zTrP1p9D7yatK42P7+9lL9kwL3mmkjAfZQ7J JmOrLhZoONpbHv5mOzSuNmDKqg9vl/ZAXvdiVdqcoLeREDYr9tz8XrksmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9pS+w9EU5GrBTBLBHeqdftJRG1MB8GA1UdIwQY MBaAFOj5nNiE+1y6s/OzTheoCkit7D/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlBtYzJJVDdYTHF6ODdOT0Y2Z0tTSzNzUC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kODViYzctNThhNi00MDdhLThhY2It NzUwOWY3ZjRjNWE2LzEvNlBtYzJJVDdYTHF6ODdOT0Y2Z0tTSzNzUC1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9kODViYzctNThhNi00MDdhLThhY2ItNzUwOWY3ZjRjNWE2 LzEvNlBtYzJJVDdYTHF6ODdOT0Y2Z0tTSzNzUC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC29NBLSL DmJMoFSpPzomdCR+MFZ5q2FiBROqTVhDPET1xFNpgC4HE296UMI/UdjxnMxeCQiw VYuTgMBBtygX9GycJjyFxM9Bt+J6UbYXVDmOenSwZvY6rFOtMDlmXHQViUCBMd+f jPK4rHTVCKdyewenirNCFzTssZ9IAN9/SCuBTYRq0pyyeKp/VcZLJJ9WnWuB7kjw L6HV4yFe3ESh66P/LmTRtf/yG7Cb8wD2863OzooVAaFrAFkkl1GIc7R9LhLlM/NS Iqc5Jb49kml1c922eRuyBPKONyXZ4j1e+0j7zdoFwkV5gOOP/Tv6uFu3htg21p98 aVM6LbqLbEWDxw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:43:44 2025 by rpki-client