This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft File: 6D-DcLFcuReWVQPKADcyMthXqp0.mft (raw, json) Hash identifier: 0RPh8MHVYGLO+xHru+8F0iHtt+kdQtt54D+OTHjWCr4= Subject key identifier: D4:8A:42:E1:B2:CF:30:9B:39:58:48:CF:A6:42:42:46:DB:DC:4C:6A Authority key identifier: E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D Certificate issuer: /CN=e83f8370b15cb917965503ca00373232d857aa9d Certificate serial: 019AFCC4F086D27C7C86BA44CFFCE957502D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft Manifest number: 125A Signing time: Mon 08 Dec 2025 07:02:36 +0000 Manifest this update: Mon 08 Dec 2025 07:02:36 +0000 Manifest next update: Tue 09 Dec 2025 07:02:36 +0000 Files and hashes: 1: 6D-DcLFcuReWVQPKADcyMthXqp0.crl (hash: yfvk0Wa18b5A+LN5crIQ4sIbkzDmgcyIUu5MRrtbw5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c4:f0:86:d2:7c:7c:86:ba:44:cf:fc:e9:57:50:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e83f8370b15cb917965503ca00373232d857aa9d Validity Not Before: Dec 8 07:02:36 2025 GMT Not After : Dec 9 07:02:36 2025 GMT Subject: CN=d48a42e1b2cf309b395848cfa6424246dbdc4c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d4:b2:fe:a9:e4:62:51:ac:b7:47:a0:e0:c5: 6c:0e:38:0e:c9:70:61:ec:17:ca:6c:75:ee:ca:66: 66:40:ae:c7:c1:4b:da:a0:91:58:35:ba:e5:6b:92: ba:5b:e1:f0:81:fc:a3:c6:0e:57:1e:10:04:bd:10: 03:09:16:e1:96:b7:bd:42:23:21:21:e8:71:eb:00: d8:32:89:d3:25:83:82:5d:9f:f7:16:94:37:1e:3a: b0:ca:23:32:11:f0:5b:f5:47:41:85:84:96:98:2d: e6:b9:58:ee:10:ce:6f:17:de:89:5b:db:b2:2b:07: d7:4e:c6:fa:ae:21:09:43:41:4f:23:77:20:d4:12: da:61:6a:8e:fe:3c:88:ba:99:7a:e9:56:91:d7:3f: f1:b6:87:a5:2f:4d:16:2d:2f:02:47:c9:99:89:2e: 67:b9:82:a2:3b:6c:5b:ba:9b:5f:1a:38:3b:91:98: e8:68:19:f3:64:53:3b:c1:b1:03:60:8a:44:ee:ac: 64:2c:ab:b2:5f:c2:67:ca:3d:b3:b2:37:f7:27:1a: ad:a3:2b:08:b5:e6:ca:20:dd:a4:e1:87:ef:b3:16: 74:29:bb:ab:34:67:1b:a7:88:fd:8f:6c:9b:e0:7b: 40:f5:34:8a:bc:69:37:3f:61:70:aa:98:34:fa:a2: b9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8A:42:E1:B2:CF:30:9B:39:58:48:CF:A6:42:42:46:DB:DC:4C:6A X509v3 Authority Key Identifier: keyid:E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:e1:47:ce:f8:90:dd:e9:be:42:ea:08:0a:95:10:2c:46:0f: b1:ad:20:ff:b6:46:30:ed:8f:15:79:53:21:97:1f:b4:d4:60: 16:8a:f3:e3:54:b7:e9:e5:91:67:5a:3d:35:15:4a:a4:c3:22: cf:0e:67:51:15:b8:d6:23:18:5b:40:55:81:00:7a:b1:aa:7e: c6:1a:b1:2d:fa:ba:e7:b3:7a:d3:83:3f:7a:ad:7d:9f:4b:c8: 7a:38:83:48:bd:63:d7:1f:0f:5c:d5:71:96:0a:f1:40:e5:c1: f8:b3:48:3f:80:2b:e1:1e:9d:bb:de:d5:a9:fb:eb:84:43:18: 43:7e:10:6a:01:6c:b8:41:57:fb:06:e2:22:a4:97:cc:cc:e8: a7:3a:4c:bc:d9:09:ba:1a:d1:0e:92:43:8b:38:df:48:56:1d: e4:73:c6:41:0d:f5:15:23:54:3c:11:29:83:72:80:61:0d:04: 5b:3f:36:54:eb:a9:83:20:06:b1:39:6c:c6:d9:38:22:df:87: 42:32:5e:bf:85:a5:65:0f:cf:46:c6:85:4e:e2:29:02:9f:c5: 99:2c:e8:e6:8b:0d:3f:92:3d:e7:6b:1a:4b:95:54:08:2e:1a: 60:cc:d3:2d:fb:7a:4c:2e:93:70:16:13:dc:9a:fa:fc:ed:26: 67:ec:a8:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8xPCG0nx8hrpEz/zpV1AtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4M2Y4MzcwYjE1Y2I5MTc5NjU1MDNjYTAwMzczMjMyZDg1 N2FhOWQwHhcNMjUxMjA4MDcwMjM2WhcNMjUxMjA5MDcwMjM2WjAzMTEwLwYDVQQD EyhkNDhhNDJlMWIyY2YzMDliMzk1ODQ4Y2ZhNjQyNDI0NmRiZGM0YzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59Sy/qnkYlGst0eg4MVsDjgOyXBh 7BfKbHXuymZmQK7HwUvaoJFYNbrla5K6W+Hwgfyjxg5XHhAEvRADCRbhlre9QiMh Iehx6wDYMonTJYOCXZ/3FpQ3HjqwyiMyEfBb9UdBhYSWmC3muVjuEM5vF96JW9uy KwfXTsb6riEJQ0FPI3cg1BLaYWqO/jyIupl66VaR1z/xtoelL00WLS8CR8mZiS5n uYKiO2xbuptfGjg7kZjoaBnzZFM7wbEDYIpE7qxkLKuyX8Jnyj2zsjf3JxqtoysI tebKIN2k4YfvsxZ0KburNGcbp4j9j2yb4HtA9TSKvGk3P2Fwqpg0+qK5ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSKQuGyzzCbOVhIz6ZCQkbb3ExqMB8GA1UdIwQY MBaAFOg/g3CxXLkXllUDygA3MjLYV6qdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkQtRGNMRmN1UmVXVlFQS0FEY3lNdGhYcXAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS82NzE0MWMtZDY2ZS00MjBiLTg4ZTEt MzY4Y2I5NWQxOGNhLzEvNkQtRGNMRmN1UmVXVlFQS0FEY3lNdGhYcXAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS82NzE0MWMtZDY2ZS00MjBiLTg4ZTEtMzY4Y2I5NWQxOGNh LzEvNkQtRGNMRmN1UmVXVlFQS0FEY3lNdGhYcXAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGeFHzviQ 3em+QuoICpUQLEYPsa0g/7ZGMO2PFXlTIZcftNRgForz41S36eWRZ1o9NRVKpMMi zw5nURW41iMYW0BVgQB6sap+xhqxLfq657N604M/eq19n0vIejiDSL1j1x8PXNVx lgrxQOXB+LNIP4Ar4R6du97VqfvrhEMYQ34QagFsuEFX+wbiIqSXzMzopzpMvNkJ uhrRDpJDizjfSFYd5HPGQQ31FSNUPBEpg3KAYQ0EWz82VOupgyAGsTlsxtk4It+H QjJev4WlZQ/PRsaFTuIpAp/FmSzo5osNP5I952saS5VUCC4aYMzTLft6TC6TcBYT 3Jr6/O0mZ+yoSw== -----END CERTIFICATE-----Generated at Mon Dec 8 09:37:53 2025 by rpki-client