This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft File: 6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft (raw, json) Hash identifier: tE+ouTI+JXAya/1LGJFH8jB7jKPH27RV8MCdxAJ5JSQ= Subject key identifier: 0C:3E:F4:38:4E:10:FF:11:AF:80:74:AD:3B:85:D6:B9:F1:FD:E8:D1 Authority key identifier: E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF Certificate issuer: /CN=e939540fd16b633501fbf7441a746fc56f9f59bf Certificate serial: 019AF2AD6C18DD9960EE58C51F3D12ACBD06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft Manifest number: 04FC Signing time: Sat 06 Dec 2025 08:00:42 +0000 Manifest this update: Sat 06 Dec 2025 08:00:42 +0000 Manifest next update: Sun 07 Dec 2025 08:00:42 +0000 Files and hashes: 1: 4hrax96C0YsCzZ7N3cD-vhrr54E.roa (hash: p2Xi036U7l5VIBvQc3SfD5E2iNcExLoqMhnCDdE1HDs=) 2: 6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl (hash: Hp5+uxv6ssTh/9NcNvmqSQD+9vfZagzHTHlnOFABi5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:6c:18:dd:99:60:ee:58:c5:1f:3d:12:ac:bd:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e939540fd16b633501fbf7441a746fc56f9f59bf Validity Not Before: Dec 6 08:00:42 2025 GMT Not After : Dec 7 08:00:42 2025 GMT Subject: CN=0c3ef4384e10ff11af8074ad3b85d6b9f1fde8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:78:57:40:45:9e:94:40:f0:d3:f0:fd:ba:65: dd:80:1d:38:c5:ea:79:26:30:2a:55:a2:5a:9f:12: 03:91:f9:a5:c0:30:40:af:96:3f:28:6d:88:98:fd: 97:9d:d8:3d:9e:cd:fb:af:76:11:82:16:19:93:b5: 9d:94:eb:fb:5d:4d:88:ed:52:58:ab:59:f9:0a:8d: d8:1a:b4:11:e6:9a:2c:93:4a:cf:ce:c1:32:75:b4: 53:18:a7:5d:de:a9:29:04:fb:07:86:59:75:88:67: 59:f6:42:91:81:e4:68:60:7f:d8:4e:bd:61:ea:6d: 26:b2:2f:cc:31:ce:36:e7:3d:b7:1e:5f:5b:03:83: 49:2f:3a:d4:bc:db:12:3a:c3:41:ca:96:85:b0:77: ea:f6:0b:65:03:83:78:15:10:64:39:35:7c:02:c8: fb:40:e7:db:62:3c:e3:d9:c0:a7:c6:8d:81:65:24: f2:d7:21:da:65:41:94:a2:5b:d6:04:6e:29:f4:24: b3:62:27:29:90:b2:6c:e0:c7:bf:db:19:d2:a5:b8: ef:57:6c:c5:08:13:0a:37:2c:b4:69:6f:9a:39:7a: a7:d4:9f:7f:68:03:9c:da:59:81:b8:21:af:3b:c1: 6b:10:4a:94:cd:78:63:bd:ea:95:db:02:c1:90:07: 23:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3E:F4:38:4E:10:FF:11:AF:80:74:AD:3B:85:D6:B9:F1:FD:E8:D1 X509v3 Authority Key Identifier: keyid:E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:45:a5:17:1a:e7:4c:30:e9:68:ff:fd:9c:35:56:65:b4:d4: f3:04:39:96:1b:06:9f:3c:f7:4b:32:f9:ac:43:e2:66:89:5d: 52:f9:5a:cc:ef:d4:13:65:a1:eb:03:12:9a:0d:69:3c:d1:84: 7c:71:fc:46:93:74:05:fc:6e:d3:d7:2c:4f:52:8d:1f:0b:2c: c3:b0:c7:7d:32:0d:3b:12:68:bc:c8:bc:ae:e9:c0:cf:f2:90: 10:0c:29:e9:22:b9:6f:c7:46:42:f5:1f:bd:7d:4e:a1:d2:05: fe:ff:b2:c2:5c:d5:71:63:5b:52:a0:3f:8e:7d:15:17:6a:c4: 9c:d8:d5:34:6c:4c:35:db:5c:98:ce:d1:ca:b1:31:c4:90:34: a0:30:53:b6:df:0d:3c:e9:f5:0a:0c:a3:4d:af:2c:a3:3f:30: 21:21:e2:62:bb:00:be:34:74:ee:6b:36:77:30:43:56:09:4f: 79:36:53:1a:93:64:d2:97:75:a1:59:b2:c9:4f:f7:44:d2:dd: 17:eb:43:01:fc:43:72:ab:a5:46:dc:71:38:07:1f:35:4d:f3: d6:9f:47:12:4f:1e:7e:4f:c8:73:bc:ca:12:89:0a:13:5a:b0: 75:5a:7b:c0:38:1d:5f:d3:23:74:3e:9b:7f:34:a7:7e:2f:a1: 0b:e5:77:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWwY3Zlg7ljFHz0SrL0GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5Mzk1NDBmZDE2YjYzMzUwMWZiZjc0NDFhNzQ2ZmM1NmY5 ZjU5YmYwHhcNMjUxMjA2MDgwMDQyWhcNMjUxMjA3MDgwMDQyWjAzMTEwLwYDVQQD EygwYzNlZjQzODRlMTBmZjExYWY4MDc0YWQzYjg1ZDZiOWYxZmRlOGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnhXQEWelEDw0/D9umXdgB04xep5 JjAqVaJanxIDkfmlwDBAr5Y/KG2ImP2Xndg9ns37r3YRghYZk7WdlOv7XU2I7VJY q1n5Co3YGrQR5posk0rPzsEydbRTGKdd3qkpBPsHhll1iGdZ9kKRgeRoYH/YTr1h 6m0msi/MMc425z23Hl9bA4NJLzrUvNsSOsNBypaFsHfq9gtlA4N4FRBkOTV8Asj7 QOfbYjzj2cCnxo2BZSTy1yHaZUGUolvWBG4p9CSzYicpkLJs4Me/2xnSpbjvV2zF CBMKNyy0aW+aOXqn1J9/aAOc2lmBuCGvO8FrEEqUzXhjveqV2wLBkAcjvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAw+9DhOEP8Rr4B0rTuF1rnx/ejRMB8GA1UdIwQY MBaAFOk5VA/Ra2M1Afv3RBp0b8Vvn1m/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlRsVUQ5RnJZelVCLV9kRUduUnZ4Vy1mV2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81YWY0Y2UtMGVlZS00MTgyLTkwOTQt OWY1MmM3MzBhY2RmLzEvNlRsVUQ5RnJZelVCLV9kRUduUnZ4Vy1mV2I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81YWY0Y2UtMGVlZS00MTgyLTkwOTQtOWY1MmM3MzBhY2Rm LzEvNlRsVUQ5RnJZelVCLV9kRUduUnZ4Vy1mV2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0WlFxrn TDDpaP/9nDVWZbTU8wQ5lhsGnzz3SzL5rEPiZoldUvlazO/UE2Wh6wMSmg1pPNGE fHH8RpN0Bfxu09csT1KNHwssw7DHfTINOxJovMi8runAz/KQEAwp6SK5b8dGQvUf vX1OodIF/v+ywlzVcWNbUqA/jn0VF2rEnNjVNGxMNdtcmM7RyrExxJA0oDBTtt8N POn1CgyjTa8soz8wISHiYrsAvjR07ms2dzBDVglPeTZTGpNk0pd1oVmyyU/3RNLd F+tDAfxDcqulRtxxOAcfNU3z1p9HEk8efk/Ic7zKEokKE1qwdVp7wDgdX9MjdD6b fzSnfi+hC+V3jQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:09 2025 by rpki-client