This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft File: 6W3gIbqO3QcU7TEgxJhy6jzOioY.mft (raw, json) Hash identifier: KptunwbgE4sOOw5J4GGhXdC8VLNVrfjDMgSX6k2p6HA= Subject key identifier: 27:27:1E:BB:09:44:13:F5:87:0B:BB:B1:98:5F:CF:C1:12:6F:E3:68 Authority key identifier: E9:6D:E0:21:BA:8E:DD:07:14:ED:31:20:C4:98:72:EA:3C:CE:8A:86 Certificate issuer: /CN=e96de021ba8edd0714ed3120c49872ea3cce8a86 Certificate serial: 019AF389981E3BB7B2D89E1F84C20A8FB0A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W3gIbqO3QcU7TEgxJhy6jzOioY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 12:01:12 +0000 Manifest this update: Sat 06 Dec 2025 12:01:12 +0000 Manifest next update: Sun 07 Dec 2025 12:01:12 +0000 Files and hashes: 1: 6W3gIbqO3QcU7TEgxJhy6jzOioY.crl (hash: K4sivmwycVlALzmB3mc6Z2Fgd5Gmz8oGw97LK3U+BkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft rsync://rpki.ripe.net/repository/DEFAULT/6W3gIbqO3QcU7TEgxJhy6jzOioY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:98:1e:3b:b7:b2:d8:9e:1f:84:c2:0a:8f:b0:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96de021ba8edd0714ed3120c49872ea3cce8a86 Validity Not Before: Dec 6 12:01:12 2025 GMT Not After : Dec 7 12:01:12 2025 GMT Subject: CN=27271ebb094413f5870bbbb1985fcfc1126fe368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b7:8b:de:47:89:9a:95:57:d5:c7:62:15:b6: db:b7:41:8b:ad:07:dc:02:53:07:4d:62:ed:15:6d: 83:5c:82:bd:d9:81:9e:d0:f9:5f:09:ee:55:4f:87: d1:dc:13:db:d9:26:6a:71:15:6e:40:9d:d0:e1:fc: 48:5d:c5:48:51:64:5a:e2:6e:fe:ea:d4:a0:86:e7: d9:08:c3:4d:94:38:36:6f:8d:f3:f6:33:b0:44:1d: 02:dd:91:74:c2:c5:87:27:3b:18:da:a6:16:7b:39: fe:2d:08:40:a7:99:bb:6c:08:7c:bc:50:a9:fa:90: 5e:35:c7:f6:5a:77:bd:a1:83:0c:99:77:ca:86:62: fa:96:1c:54:d6:c0:6c:9b:00:23:c4:89:6d:dc:13: eb:77:c9:f7:d4:93:6a:60:ba:7b:fe:c8:3d:4d:54: 60:30:f5:b5:92:5a:6e:e5:19:c0:ec:ce:3b:fc:0b: ad:06:71:ac:e5:2d:5a:b3:a3:62:52:31:c5:8e:49: ba:2b:3e:78:f4:5e:9e:5c:59:41:2f:15:c3:8e:59: 67:04:3c:d9:88:5f:3a:24:f0:8e:36:b8:5f:09:f9: ff:9f:61:8d:a7:a2:03:90:d9:0f:e4:ff:aa:49:d3: b8:73:22:a2:a4:f8:d5:61:b3:a3:57:17:d2:eb:7a: 57:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:27:1E:BB:09:44:13:F5:87:0B:BB:B1:98:5F:CF:C1:12:6F:E3:68 X509v3 Authority Key Identifier: keyid:E9:6D:E0:21:BA:8E:DD:07:14:ED:31:20:C4:98:72:EA:3C:CE:8A:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W3gIbqO3QcU7TEgxJhy6jzOioY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b1:e3:a3:7a:2a:b4:a1:e8:ee:87:57:64:05:f9:1c:60:ac: a3:e5:dc:14:fc:3b:7b:a9:45:aa:bd:8d:10:0f:a8:01:78:be: 90:a5:1d:df:16:23:9b:1f:17:db:67:0c:19:f9:ff:12:42:d8: 33:b8:cd:6e:2e:1f:84:57:6b:81:8a:83:4a:15:ae:34:1f:f9: 0c:3c:69:8d:ee:58:a1:0b:6a:38:f3:31:56:e6:35:c3:8d:74: c9:e9:f0:fe:a4:21:a8:19:0c:b7:6b:f4:3a:9d:d3:fc:60:5b: 33:e9:d8:d4:62:9e:eb:b0:a7:cc:09:76:07:77:0b:8a:d3:48: 7f:be:82:b2:25:53:41:2d:80:a9:a2:51:81:0f:f0:a2:32:c2: 43:c4:5d:ba:65:c0:b6:05:d5:e3:d3:d3:95:87:eb:9c:d3:a8: 38:85:bc:22:1d:b2:35:d1:94:79:fb:44:cf:a9:1b:57:53:13: c2:f3:00:18:3e:33:fe:8e:e4:b0:ab:0f:e4:dd:23:3b:c6:44: bd:77:86:55:86:6d:e5:f5:7f:e4:0a:8f:ac:76:97:a6:99:43: 4f:53:34:1c:33:c4:c3:88:d0:c5:aa:ad:a2:d4:cf:f0:6e:44: 9a:bd:61:ea:0b:46:c4:02:5e:d8:5e:f7:4b:e1:26:51:50:be: 41:3d:ae:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZgeO7ey2J4fhMIKj7CkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NmRlMDIxYmE4ZWRkMDcxNGVkMzEyMGM0OTg3MmVhM2Nj ZThhODYwHhcNMjUxMjA2MTIwMTEyWhcNMjUxMjA3MTIwMTEyWjAzMTEwLwYDVQQD EygyNzI3MWViYjA5NDQxM2Y1ODcwYmJiYjE5ODVmY2ZjMTEyNmZlMzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbeL3keJmpVX1cdiFbbbt0GLrQfc AlMHTWLtFW2DXIK92YGe0PlfCe5VT4fR3BPb2SZqcRVuQJ3Q4fxIXcVIUWRa4m7+ 6tSghufZCMNNlDg2b43z9jOwRB0C3ZF0wsWHJzsY2qYWezn+LQhAp5m7bAh8vFCp +pBeNcf2Wne9oYMMmXfKhmL6lhxU1sBsmwAjxIlt3BPrd8n31JNqYLp7/sg9TVRg MPW1klpu5RnA7M47/AutBnGs5S1as6NiUjHFjkm6Kz549F6eXFlBLxXDjllnBDzZ iF86JPCONrhfCfn/n2GNp6IDkNkP5P+qSdO4cyKipPjVYbOjVxfS63pXrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcnHrsJRBP1hwu7sZhfz8ESb+NoMB8GA1UdIwQY MBaAFOlt4CG6jt0HFO0xIMSYcuo8zoqGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlczZ0licU8zUWNVN1RFZ3hKaHk2anpPaW9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yMTQxN2QtMjM4Yi00NWUyLWExMjEt M2JlZWEzOWRhOGNhLzEvNlczZ0licU8zUWNVN1RFZ3hKaHk2anpPaW9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8yMTQxN2QtMjM4Yi00NWUyLWExMjEtM2JlZWEzOWRhOGNh LzEvNlczZ0licU8zUWNVN1RFZ3hKaHk2anpPaW9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLHjo3oq tKHo7odXZAX5HGCso+XcFPw7e6lFqr2NEA+oAXi+kKUd3xYjmx8X22cMGfn/EkLY M7jNbi4fhFdrgYqDShWuNB/5DDxpje5YoQtqOPMxVuY1w410yenw/qQhqBkMt2v0 Op3T/GBbM+nY1GKe67CnzAl2B3cLitNIf76CsiVTQS2AqaJRgQ/wojLCQ8RdumXA tgXV49PTlYfrnNOoOIW8Ih2yNdGUeftEz6kbV1MTwvMAGD4z/o7ksKsP5N0jO8ZE vXeGVYZt5fV/5AqPrHaXpplDT1M0HDPEw4jQxaqtotTP8G5Emr1h6gtGxAJe2F73 S+EmUVC+QT2ugA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:34 2025 by rpki-client