This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft File: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft (raw, json) Hash identifier: yRZCheHVPPDtWhOsopv5QInhVGRPvksO8dxBiWqYzO0= Subject key identifier: 1D:89:95:AC:A6:B6:D7:A6:7B:7C:51:EC:F7:9F:63:29:EF:AF:55:C1 Authority key identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17 Certificate issuer: /CN=ea7651c0f1bf648ec64952e8084574b900f08a17 Certificate serial: 019AF31C7D6C2E86BA2976F4A1B771C2A570 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft Manifest number: 049C Signing time: Sat 06 Dec 2025 10:02:01 +0000 Manifest this update: Sat 06 Dec 2025 10:02:01 +0000 Manifest next update: Sun 07 Dec 2025 10:02:01 +0000 Files and hashes: 1: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl (hash: 2vHYBh0MHZEBS/iJ64P7ul7mPo+iUOorRf0jl5IVQVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:7d:6c:2e:86:ba:29:76:f4:a1:b7:71:c2:a5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea7651c0f1bf648ec64952e8084574b900f08a17 Validity Not Before: Dec 6 10:02:01 2025 GMT Not After : Dec 7 10:02:01 2025 GMT Subject: CN=1d8995aca6b6d7a67b7c51ecf79f6329efaf55c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:0d:42:41:7b:1d:fc:be:6a:9f:54:3a:2a: bd:ad:f0:e3:62:69:6b:0f:b3:cc:e2:fd:9f:65:0b: 96:f2:f5:ca:2f:a0:e4:46:fb:02:4f:83:59:61:9c: 9a:be:77:28:88:c7:f8:f1:91:e8:73:61:e6:81:bd: bb:d8:13:51:20:e0:6f:d1:fe:69:83:d4:6b:20:ad: 52:04:63:d0:a1:44:b4:f0:35:78:a7:2e:d8:f9:14: 4f:58:17:7d:8d:71:3b:3b:ae:5e:43:e9:4f:58:cb: 83:30:72:57:23:97:f5:86:ca:4b:49:74:0f:9c:91: c2:d3:3e:08:00:2f:36:03:ed:ee:9c:a8:ba:a4:da: 63:c8:b6:ba:89:f4:b7:24:ed:c0:a0:7e:d2:d4:64: 7f:73:c9:6d:65:ce:fe:0a:68:ee:28:7e:1b:6f:78: e4:d3:50:5b:3c:4b:d7:83:bd:3a:cd:ac:0a:fa:2c: 16:36:92:52:22:86:8d:c4:81:d6:6f:a1:cf:c4:dd: ca:43:2e:19:51:19:d3:5c:94:52:13:16:4d:73:0a: 42:36:6a:3e:3c:49:e3:b1:8d:10:6c:e6:32:6e:90: 61:21:53:3f:73:c5:67:1a:29:e7:20:2a:70:ae:78: e6:f0:f9:0a:25:e6:46:18:62:4b:6d:66:3c:3a:fe: 87:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:89:95:AC:A6:B6:D7:A6:7B:7C:51:EC:F7:9F:63:29:EF:AF:55:C1 X509v3 Authority Key Identifier: keyid:EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b5:c8:90:3f:07:ba:41:31:1b:27:62:1a:40:81:eb:c4:7a: 12:4b:73:61:c1:d3:b3:38:0a:12:f2:5b:16:d9:3a:16:a3:79: b2:c1:82:b6:fb:de:aa:16:e0:93:53:e9:98:29:21:82:71:ab: 75:78:38:f3:97:5c:a9:f8:6c:42:7e:72:19:a1:57:1d:83:55: 2d:5f:61:77:80:b6:a9:1e:ba:dc:4b:01:e2:49:af:5d:5b:69: 1d:97:69:7f:0a:6c:bf:bd:33:a8:38:2b:60:82:69:14:2d:43: 58:41:15:fd:73:ec:26:85:87:ff:4f:5a:ae:79:a7:65:ae:d2: bd:ac:26:d0:71:af:26:20:4b:3e:90:f4:a4:2a:a7:12:43:cb: d3:04:ff:55:b3:af:ef:2e:72:d2:a0:98:1a:97:b4:74:3a:e2: f0:a8:63:e4:46:36:a8:b5:2a:08:38:19:d8:c2:20:76:73:11: e8:ec:13:96:71:cd:f7:89:4d:8a:95:f4:a0:db:13:d5:c5:66: 40:7e:96:0c:c1:19:40:93:b7:b8:32:06:a4:bf:c0:61:2b:a2: 0f:23:4f:5d:39:23:4e:6e:47:b7:10:77:74:53:c2:e1:a4:2a: 47:04:9e:2c:c7:c7:0b:d6:99:5c:44:78:55:50:61:86:70:b8: 65:56:b3:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHH1sLoa6KXb0obdxwqVwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNzY1MWMwZjFiZjY0OGVjNjQ5NTJlODA4NDU3NGI5MDBm MDhhMTcwHhcNMjUxMjA2MTAwMjAxWhcNMjUxMjA3MTAwMjAxWjAzMTEwLwYDVQQD EygxZDg5OTVhY2E2YjZkN2E2N2I3YzUxZWNmNzlmNjMyOWVmYWY1NWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB4NQkF7Hfy+ap9UOiq9rfDjYmlr D7PM4v2fZQuW8vXKL6DkRvsCT4NZYZyavncoiMf48ZHoc2Hmgb272BNRIOBv0f5p g9RrIK1SBGPQoUS08DV4py7Y+RRPWBd9jXE7O65eQ+lPWMuDMHJXI5f1hspLSXQP nJHC0z4IAC82A+3unKi6pNpjyLa6ifS3JO3AoH7S1GR/c8ltZc7+CmjuKH4bb3jk 01BbPEvXg706zawK+iwWNpJSIoaNxIHWb6HPxN3KQy4ZURnTXJRSExZNcwpCNmo+ PEnjsY0QbOYybpBhIVM/c8VnGinnICpwrnjm8PkKJeZGGGJLbWY8Ov6HeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2Jlaymtteme3xR7PefYynvr1XBMB8GA1UdIwQY MBaAFOp2UcDxv2SOxklS6AhFdLkA8IoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80ZDAxMDYtYzFlZC00ZmYxLWFiZDYt NjBkZWM5N2Q2NzgzLzEvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS80ZDAxMDYtYzFlZC00ZmYxLWFiZDYtNjBkZWM5N2Q2Nzgz LzEvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrXIkD8H ukExGydiGkCB68R6EktzYcHTszgKEvJbFtk6FqN5ssGCtvveqhbgk1PpmCkhgnGr dXg485dcqfhsQn5yGaFXHYNVLV9hd4C2qR663EsB4kmvXVtpHZdpfwpsv70zqDgr YIJpFC1DWEEV/XPsJoWH/09arnmnZa7Svawm0HGvJiBLPpD0pCqnEkPL0wT/VbOv 7y5y0qCYGpe0dDri8Khj5EY2qLUqCDgZ2MIgdnMR6OwTlnHN94lNipX0oNsT1cVm QH6WDMEZQJO3uDIGpL/AYSuiDyNPXTkjTm5HtxB3dFPC4aQqRwSeLMfHC9aZXER4 VVBhhnC4ZVazIg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:54 2025 by rpki-client