This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json) Hash identifier: uUgXaGhW6QPBmk2WnyaU9Lk4AYvv7hOEENcPHOgVJ8Q= Subject key identifier: 6A:C8:A2:52:16:D5:B3:BB:01:CE:51:34:42:19:A4:74:9F:3A:74:2F Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a Certificate serial: 019AF051A40ECFA3C4F22EAC40DFF514CFE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 21:01:13 +0000 Manifest this update: Fri 05 Dec 2025 21:01:13 +0000 Manifest next update: Sat 06 Dec 2025 21:01:13 +0000 Files and hashes: 1: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: UDBHeThyPfaIzsHdF0K2UezDnN0GGub78q0ENwgctH0=) 2: ej_BjAFbZm6hQCW3kEzJ6VoPdPc.roa (hash: U8mMSnb2Uo3FLs8ZgRPpDiQ27ni+P67f58AC/CHMeBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:a4:0e:cf:a3:c4:f2:2e:ac:40:df:f5:14:cf:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a Validity Not Before: Dec 5 21:01:13 2025 GMT Not After : Dec 6 21:01:13 2025 GMT Subject: CN=6ac8a25216d5b3bb01ce51344219a4749f3a742f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b4:4d:fa:aa:a6:e0:0f:25:57:9d:18:a0:31: 86:59:77:98:f0:7a:ad:b2:14:0e:f6:e8:e7:d3:54: a7:7f:a0:ae:cd:d2:8b:c7:42:85:e9:ec:4f:bd:4f: 66:aa:12:4c:41:b6:de:2d:8b:9f:c6:c5:33:d1:e6: 03:f3:fe:fb:7a:c4:59:c8:30:bc:07:dd:fb:ab:21: 59:fd:0a:b3:30:74:02:a9:97:95:b9:d0:d5:4b:de: 3c:90:fe:9a:ea:ba:70:77:0f:f0:89:ce:1d:be:b3: 41:c1:2d:da:71:cc:03:5b:63:c8:f0:c6:89:9b:15: f6:7a:91:b2:c9:e9:ea:4f:39:5f:29:3c:c0:38:ea: 52:56:f6:ac:80:19:1b:b6:8a:18:b6:80:d4:ab:4c: 91:49:29:59:f8:8e:ff:65:81:8a:18:cb:40:88:1e: 48:15:2e:9d:c4:ad:bb:c8:bc:85:69:8a:8a:79:e6: ae:38:bf:33:d8:bc:65:e7:3d:a6:3b:23:f1:03:06: 2c:2c:3e:a8:6e:0a:45:73:0d:e0:aa:b5:d7:8c:0e: b7:17:e5:72:8b:a9:37:41:27:e2:5f:08:6c:c6:57: 76:96:3d:04:59:cb:f9:9c:0b:70:27:e0:42:19:22: f3:c3:68:0c:98:c0:0c:f6:4f:5e:a1:d7:8c:f0:a8: b0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C8:A2:52:16:D5:B3:BB:01:CE:51:34:42:19:A4:74:9F:3A:74:2F X509v3 Authority Key Identifier: keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:50:71:2b:d4:2e:33:23:a2:76:63:2f:38:55:a1:9c:d8:15: 05:5a:54:65:e4:f4:92:08:2c:67:d5:33:16:f2:a8:c4:aa:18: 2d:eb:2a:6a:d5:b7:33:72:a4:3c:35:70:4d:6a:58:ac:b4:df: a7:6c:ab:71:44:38:94:34:a6:7a:ab:9e:3f:6a:5d:99:27:82: ba:a1:8b:3d:5b:ba:01:af:59:e2:8a:80:30:d8:8f:cb:18:79: 8a:9e:c2:48:43:57:03:ff:84:4e:df:63:0e:93:ae:4b:77:a6: 17:53:8f:0f:3b:5b:0f:a5:9b:b3:89:43:4c:02:91:c3:f8:27: f3:2f:a1:ff:24:13:66:18:68:cb:1e:27:72:58:94:09:7a:88: 65:7a:ac:7e:22:86:fe:65:15:7e:b9:9b:20:fe:fb:9b:e5:7c: 18:45:86:01:91:be:60:94:65:b3:cc:c3:47:bc:93:5f:73:94: d4:4e:fc:9c:13:ca:94:cc:e7:d8:44:f0:da:e9:29:e2:ac:21: 9d:a3:0e:66:f0:f1:d8:50:bc:a6:61:f3:e5:85:25:79:20:89: 16:23:bb:5e:44:51:0b:9e:97:20:39:22:89:71:40:7f:82:5d: ca:e7:ff:9a:56:77:05:e9:2e:0d:fc:36:a0:34:2c:2c:a1:b8: c4:d0:3e:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUaQOz6PE8i6sQN/1FM/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNWU4NzBkMzFjYTcwMTk5NTEzNzBjYjIyMWYxOGYxZjA5 ZmE1OGEwHhcNMjUxMjA1MjEwMTEzWhcNMjUxMjA2MjEwMTEzWjAzMTEwLwYDVQQD Eyg2YWM4YTI1MjE2ZDViM2JiMDFjZTUxMzQ0MjE5YTQ3NDlmM2E3NDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbRN+qqm4A8lV50YoDGGWXeY8Hqt shQO9ujn01Snf6CuzdKLx0KF6exPvU9mqhJMQbbeLYufxsUz0eYD8/77esRZyDC8 B937qyFZ/QqzMHQCqZeVudDVS948kP6a6rpwdw/wic4dvrNBwS3accwDW2PI8MaJ mxX2epGyyenqTzlfKTzAOOpSVvasgBkbtooYtoDUq0yRSSlZ+I7/ZYGKGMtAiB5I FS6dxK27yLyFaYqKeeauOL8z2Lxl5z2mOyPxAwYsLD6obgpFcw3gqrXXjA63F+Vy i6k3QSfiXwhsxld2lj0EWcv5nAtwJ+BCGSLzw2gMmMAM9k9eodeM8KiwGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrIolIW1bO7Ac5RNEIZpHSfOnQvMB8GA1UdIwQY MBaAFAxehw0xynAZlRNwyyIfGPHwn6WKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREY2SERUSEtjQm1WRTNETEloOFk4ZkNmcFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yY2MyODMtOTM1Ny00Yzk1LTg0ZDQt MzVjZjc3MGRjOGI5LzEvREY2SERUSEtjQm1WRTNETEloOFk4ZkNmcFlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8yY2MyODMtOTM1Ny00Yzk1LTg0ZDQtMzVjZjc3MGRjOGI5 LzEvREY2SERUSEtjQm1WRTNETEloOFk4ZkNmcFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1BxK9Qu MyOidmMvOFWhnNgVBVpUZeT0kggsZ9UzFvKoxKoYLesqatW3M3KkPDVwTWpYrLTf p2yrcUQ4lDSmequeP2pdmSeCuqGLPVu6Aa9Z4oqAMNiPyxh5ip7CSENXA/+ETt9j DpOuS3emF1OPDztbD6Wbs4lDTAKRw/gn8y+h/yQTZhhoyx4ncliUCXqIZXqsfiKG /mUVfrmbIP77m+V8GEWGAZG+YJRls8zDR7yTX3OU1E78nBPKlMzn2ETw2ukp4qwh naMOZvDx2FC8pmHz5YUleSCJFiO7XkRRC56XIDkiiXFAf4Jdyuf/mlZ3BekuDfw2 oDQsLKG4xNA+mw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:27 2025 by rpki-client