This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft File: 6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft (raw, json) Hash identifier: O7MPu1KKg2o/Mr+6wBI8Nx2KECxzLMjaVJVOTFmbWps= Subject key identifier: 49:5B:64:BA:90:C4:54:8B:F7:17:19:79:1F:87:30:68:62:80:40:8D Authority key identifier: E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4 Certificate issuer: /CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4 Certificate serial: 019AF0BF9D81C2D21F1187AB8FE333A35A3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft Manifest number: 1159 Signing time: Fri 05 Dec 2025 23:01:20 +0000 Manifest this update: Fri 05 Dec 2025 23:01:20 +0000 Manifest next update: Sat 06 Dec 2025 23:01:20 +0000 Files and hashes: 1: 6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl (hash: UnvnbI4/6mqLqAcrnfr2Q0FBG+qfsm9RauRlOxWOc74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9d:81:c2:d2:1f:11:87:ab:8f:e3:33:a3:5a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4 Validity Not Before: Dec 5 23:01:20 2025 GMT Not After : Dec 6 23:01:20 2025 GMT Subject: CN=495b64ba90c4548bf71719791f8730686280408d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e6:19:e8:3a:36:28:03:e6:39:63:29:34:85: 2f:99:61:3e:3a:ee:52:2e:fa:84:b0:b0:cc:f6:d7: b5:cc:a5:f0:5a:0e:df:cf:0f:e6:c5:d4:cc:fb:19: c1:68:ac:d0:2b:1c:b2:b7:b0:e3:59:a2:e4:20:c1: c6:4f:9b:b4:b1:db:41:5c:c3:f9:9b:f2:3b:17:a6: f9:cf:ba:56:df:96:ae:e2:6c:aa:b9:a6:66:71:a1: d1:13:91:21:e6:07:7d:fd:30:de:dc:8c:13:9d:95: 14:de:1a:0d:35:02:9a:3b:69:4e:04:14:bf:f3:ec: 80:fa:f5:8b:df:46:48:35:78:5c:74:34:23:52:d4: 20:39:40:4e:e2:65:bb:4c:0f:b8:1b:26:7d:79:7d: 95:01:cb:77:75:41:90:3b:6c:c8:c6:4b:4a:63:29: e3:fe:c3:a6:29:65:36:c1:26:95:6e:b5:11:8e:4d: 81:ee:77:e7:11:a5:4e:c6:72:4b:03:e4:da:67:e2: 23:c6:6b:3b:78:9b:1b:25:fc:07:5d:02:fe:81:ab: af:93:3c:0d:d1:a5:00:51:43:e6:c5:16:cf:05:ae: 73:bd:28:2e:69:4a:3f:a5:7b:11:80:b8:31:1f:07: 98:a9:b6:73:b7:44:c7:ca:b4:1b:13:da:29:6b:98: ab:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5B:64:BA:90:C4:54:8B:F7:17:19:79:1F:87:30:68:62:80:40:8D X509v3 Authority Key Identifier: keyid:E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:f8:fe:7a:be:45:1e:65:c0:33:95:83:c5:38:43:19:c2:ad: a7:1d:ea:11:bd:d8:04:59:72:ed:49:90:7b:ea:47:27:76:09: 40:f9:74:6c:eb:eb:d6:62:68:eb:0a:06:4d:28:35:25:3a:a0: e1:7f:91:f5:c8:e8:a0:33:4f:5b:58:4c:ea:ca:c0:c4:69:15: dd:34:be:ab:56:58:85:3d:b4:3a:d3:f6:b5:67:80:58:93:68: 90:ad:e5:7b:ba:1d:60:b2:51:cd:53:5d:d1:37:e3:15:8e:b3: 6a:d0:7e:c3:22:ea:03:59:00:37:24:b6:ef:6b:3b:88:2c:44: f8:64:54:54:a1:90:21:70:11:42:c3:98:4b:6d:ad:90:10:55: 24:e4:63:c6:07:4f:75:c8:a1:8c:49:94:61:ee:7f:e8:3a:02: 20:fc:d1:fd:34:c1:0f:d9:72:42:70:40:0f:6d:85:10:f3:f7: ab:35:5b:35:f8:bd:df:fd:48:e4:ad:18:9b:1b:49:ba:be:52: 89:c8:8b:3a:a5:3a:88:8b:ff:2e:a2:fc:ea:ce:7b:18:6a:b6: 74:d3:da:2e:a5:6b:c8:7a:2b:69:6c:a7:d9:51:b1:29:ab:b8: 89:aa:db:5c:5a:9f:c1:d3:7c:86:f6:12:b4:73:10:e2:ca:e5: b2:45:37:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv52BwtIfEYerj+Mzo1o/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NmI5MTJiNGE1YTBjNzcwM2I1Y2E1OGIxODY3NDFlMGQ1 MzM1YjQwHhcNMjUxMjA1MjMwMTIwWhcNMjUxMjA2MjMwMTIwWjAzMTEwLwYDVQQD Eyg0OTViNjRiYTkwYzQ1NDhiZjcxNzE5NzkxZjg3MzA2ODYyODA0MDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOYZ6Do2KAPmOWMpNIUvmWE+Ou5S LvqEsLDM9te1zKXwWg7fzw/mxdTM+xnBaKzQKxyyt7DjWaLkIMHGT5u0sdtBXMP5 m/I7F6b5z7pW35au4myquaZmcaHRE5Eh5gd9/TDe3IwTnZUU3hoNNQKaO2lOBBS/ 8+yA+vWL30ZINXhcdDQjUtQgOUBO4mW7TA+4GyZ9eX2VAct3dUGQO2zIxktKYynj /sOmKWU2wSaVbrURjk2B7nfnEaVOxnJLA+TaZ+Ijxms7eJsbJfwHXQL+gauvkzwN 0aUAUUPmxRbPBa5zvSguaUo/pXsRgLgxHweYqbZzt0THyrQbE9opa5irTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElbZLqQxFSL9xcZeR+HMGhigECNMB8GA1UdIwQY MBaAFOlrkStKWgx3A7XKWLGGdB4NUzW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNld1UkswcGFESGNEdGNwWXNZWjBIZzFUTmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yZjMzODMtZGI3OS00NGM2LWJiNmIt YjU0NjE1MGZkYzA0LzEvNld1UkswcGFESGNEdGNwWXNZWjBIZzFUTmJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8yZjMzODMtZGI3OS00NGM2LWJiNmItYjU0NjE1MGZkYzA0 LzEvNld1UkswcGFESGNEdGNwWXNZWjBIZzFUTmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcvj+er5F HmXAM5WDxThDGcKtpx3qEb3YBFly7UmQe+pHJ3YJQPl0bOvr1mJo6woGTSg1JTqg 4X+R9cjooDNPW1hM6srAxGkV3TS+q1ZYhT20OtP2tWeAWJNokK3le7odYLJRzVNd 0TfjFY6zatB+wyLqA1kANyS272s7iCxE+GRUVKGQIXARQsOYS22tkBBVJORjxgdP dcihjEmUYe5/6DoCIPzR/TTBD9lyQnBAD22FEPP3qzVbNfi93/1I5K0YmxtJur5S iciLOqU6iIv/LqL86s57GGq2dNPaLqVryHoraWyn2VGxKau4iarbXFqfwdN8hvYS tHMQ4srlskU39g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:10 2025 by rpki-client