This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft File: 6MpwwfyVubHp3Hd1RVutuSFPkdA.mft (raw, json) Hash identifier: jg+VR40sYkDcd/n9r2mt6dDLHBhZTDv3C+toAfBZcBo= Subject key identifier: 11:B4:CD:0A:E8:A8:64:2C:4A:1B:7C:32:1F:AD:28:EB:FF:F9:4D:5B Authority key identifier: E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0 Certificate issuer: /CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0 Certificate serial: 019AF49BB2F47ED3F61CE70E9E7E7972804D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft Manifest number: 1669 Signing time: Sat 06 Dec 2025 17:00:35 +0000 Manifest this update: Sat 06 Dec 2025 17:00:35 +0000 Manifest next update: Sun 07 Dec 2025 17:00:35 +0000 Files and hashes: 1: 6MpwwfyVubHp3Hd1RVutuSFPkdA.crl (hash: 6HqPnNVPlaoypX8kV+3/mV9L4U/cR93GifXGTae7Ri8=) 2: h3MBCKUGhHfeEGJEjBUvFcZingY.roa (hash: Kf87fhJV7eWi54ATVvDhv4SnGp1TZLheM1w//OwPipM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:b2:f4:7e:d3:f6:1c:e7:0e:9e:7e:79:72:80:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0 Validity Not Before: Dec 6 17:00:35 2025 GMT Not After : Dec 7 17:00:35 2025 GMT Subject: CN=11b4cd0ae8a8642c4a1b7c321fad28ebfff94d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f9:16:39:3b:fc:f3:66:83:58:2f:be:0b:75: 49:c5:64:7a:f3:f9:a0:6e:5c:4a:35:cb:8c:29:e7: c5:c2:72:ff:6a:1a:80:d9:9b:17:81:dc:70:be:21: 2d:f3:21:04:c6:65:a0:f3:d1:4a:3d:99:51:fc:43: 1f:d2:06:63:82:55:7d:31:4f:d2:e6:dd:a4:72:7b: 33:35:cf:00:d1:67:ef:5e:8d:27:46:26:21:4f:0c: 38:ac:01:11:c9:8a:02:f5:3a:4d:a1:03:81:eb:cd: 2a:47:09:f3:a5:16:60:de:0e:17:35:d4:e4:2f:cc: 0a:bc:1d:83:18:39:8b:67:ab:9b:f2:6d:dc:41:5b: fd:86:98:be:4d:43:09:52:88:51:8b:31:03:a1:d1: 04:96:6e:a9:69:20:ca:b9:2f:a3:70:50:db:a2:51: 39:ad:bb:32:19:3b:67:0f:1b:5a:37:87:86:18:53: f4:f6:e6:b0:d6:23:43:5e:af:96:df:44:4a:82:d0: 64:c1:b0:75:9b:65:7e:1b:10:f8:aa:15:17:67:b5: 53:32:00:a2:d3:3f:b6:0e:25:e2:c4:9f:cd:b7:96: e5:fc:fe:f4:7a:af:e3:b9:b0:b9:bb:18:bd:1a:49: 21:a2:a4:69:cb:ce:7a:cd:88:53:42:62:5e:f1:62: 4e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B4:CD:0A:E8:A8:64:2C:4A:1B:7C:32:1F:AD:28:EB:FF:F9:4D:5B X509v3 Authority Key Identifier: keyid:E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:4e:26:9d:b5:a7:83:5f:47:01:54:d3:3f:56:c0:42:02:d7: 96:12:b2:d6:87:62:a3:91:17:09:13:29:e7:b5:c2:e5:c1:fc: fe:f4:ee:02:f7:fe:a0:07:1e:5e:4b:ea:84:1f:10:d7:73:c1: 1c:19:1c:47:d5:bc:d7:18:2d:0a:27:74:65:97:11:ed:0a:6f: 12:f6:f3:50:c4:af:03:bd:f7:3f:bb:da:5c:11:e9:bd:d8:55: dc:5e:63:ae:d4:13:87:39:d5:27:84:33:da:be:b7:b0:9d:0d: 32:4d:7f:ac:3e:11:0b:a4:13:64:c0:4b:22:9f:b7:c2:be:9e: b2:fc:3c:b6:22:c2:6a:ec:a6:26:c2:5c:9e:fb:94:c0:d1:e4: 99:c9:6d:de:c0:25:0d:2c:00:6b:56:b4:95:dc:19:e7:fd:1a: 7d:e2:43:bc:d4:75:97:4f:33:a4:f8:3a:38:ef:73:0d:30:db: b0:9b:24:5c:35:0d:7f:84:32:5a:29:92:70:85:55:d7:4e:56: f4:c9:59:a5:65:7d:4c:02:ab:f7:7c:3f:18:5c:fe:5d:9e:f6: a2:3f:d6:d3:4d:41:4f:f2:84:53:2d:35:df:48:68:e1:f1:d7: 26:ba:17:dc:fc:6f:b7:dd:ef:e8:24:b8:1b:1e:7f:9c:fb:53: 73:a8:aa:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7L0ftP2HOcOnn55coBNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Y2E3MGMxZmM5NWI5YjFlOWRjNzc3NTQ1NWJhZGI5MjE0 ZjkxZDAwHhcNMjUxMjA2MTcwMDM1WhcNMjUxMjA3MTcwMDM1WjAzMTEwLwYDVQQD EygxMWI0Y2QwYWU4YTg2NDJjNGExYjdjMzIxZmFkMjhlYmZmZjk0ZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/kWOTv882aDWC++C3VJxWR68/mg blxKNcuMKefFwnL/ahqA2ZsXgdxwviEt8yEExmWg89FKPZlR/EMf0gZjglV9MU/S 5t2kcnszNc8A0WfvXo0nRiYhTww4rAERyYoC9TpNoQOB680qRwnzpRZg3g4XNdTk L8wKvB2DGDmLZ6ub8m3cQVv9hpi+TUMJUohRizEDodEElm6paSDKuS+jcFDbolE5 rbsyGTtnDxtaN4eGGFP09uaw1iNDXq+W30RKgtBkwbB1m2V+GxD4qhUXZ7VTMgCi 0z+2DiXixJ/Nt5bl/P70eq/jubC5uxi9GkkhoqRpy856zYhTQmJe8WJOxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBG0zQroqGQsSht8Mh+tKOv/+U1bMB8GA1UdIwQY MBaAFOjKcMH8lbmx6dx3dUVbrbkhT5HQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk1wd3dmeVZ1YkhwM0hkMVJWdXR1U0ZQa2RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZmI5ZmUtZGRjNy00NDMyLWE0YTMt MTZkOWY3ZDA3NGYzLzEvNk1wd3dmeVZ1YkhwM0hkMVJWdXR1U0ZQa2RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81ZmI5ZmUtZGRjNy00NDMyLWE0YTMtMTZkOWY3ZDA3NGYz LzEvNk1wd3dmeVZ1YkhwM0hkMVJWdXR1U0ZQa2RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoU4mnbWn g19HAVTTP1bAQgLXlhKy1odio5EXCRMp57XC5cH8/vTuAvf+oAceXkvqhB8Q13PB HBkcR9W81xgtCid0ZZcR7QpvEvbzUMSvA733P7vaXBHpvdhV3F5jrtQThznVJ4Qz 2r63sJ0NMk1/rD4RC6QTZMBLIp+3wr6esvw8tiLCauymJsJcnvuUwNHkmclt3sAl DSwAa1a0ldwZ5/0afeJDvNR1l08zpPg6OO9zDTDbsJskXDUNf4QyWimScIVV105W 9MlZpWV9TAKr93w/GFz+XZ72oj/W001BT/KEUy0130ho4fHXJroX3Pxvt93v6CS4 Gx5/nPtTc6iqdg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:26:46 2025 by rpki-client