This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json) Hash identifier: XjgBHSzGrp+t0Bsj9OQwZUpdhUTLDolTqARjOPiF81o= Subject key identifier: 0B:0D:1B:E0:32:A1:4A:61:F3:37:29:DD:F4:99:B3:6C:93:E8:50:79 Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60 Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260 Certificate serial: 019AF12DCF82EEF7D1AC988ECF6B292FEB55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft Manifest number: 0E7E Signing time: Sat 06 Dec 2025 01:01:42 +0000 Manifest this update: Sat 06 Dec 2025 01:01:42 +0000 Manifest next update: Sun 07 Dec 2025 01:01:42 +0000 Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: zR//Vni1x6anmd/p9mfMs6hMizw9uvqj3NhiSvL+79w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:cf:82:ee:f7:d1:ac:98:8e:cf:6b:29:2f:eb:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260 Validity Not Before: Dec 6 01:01:42 2025 GMT Not After : Dec 7 01:01:42 2025 GMT Subject: CN=0b0d1be032a14a61f33729ddf499b36c93e85079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:26:f2:96:da:80:16:37:e6:99:f0:6b:b6:c8: 7c:c4:78:5b:57:e2:59:c8:cb:6f:af:a7:b6:02:64: 81:0a:6a:ef:a0:b1:83:23:5f:37:ed:80:a6:4d:ec: 5c:b5:14:53:31:00:93:c2:9e:08:b5:e0:6f:46:78: 7b:b3:14:92:31:1f:ec:61:b6:c3:e9:4e:f3:69:55: 71:60:f3:10:d6:32:50:4a:af:c8:87:f9:b5:74:9e: fb:66:14:42:a5:41:87:3f:25:0a:7e:cb:e8:f0:e1: e4:f5:54:da:12:d7:9d:84:54:13:d7:da:45:a1:55: 59:c7:42:cc:d3:0b:48:c9:57:14:a5:67:18:54:26: f4:05:67:0c:ad:1d:2c:68:d7:5a:14:27:c8:ed:18: 92:92:fb:16:aa:d8:8e:e0:b5:40:19:9d:03:9c:04: 94:4a:69:51:01:e1:47:75:61:cf:05:ff:21:bf:9e: 87:76:da:17:14:cc:f0:fc:e1:3f:b0:a9:42:98:56: 94:dd:cc:b6:5b:26:6a:a2:19:a1:f0:1b:0d:1f:91: 86:fc:fd:54:1a:8c:5d:4b:ef:07:6b:9d:f6:53:0e: 25:02:4d:b0:ba:b8:f8:b4:57:cb:d5:1c:ae:da:2d: a3:5e:4a:46:07:6c:76:48:ae:c9:ec:a4:c3:f5:93: 74:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0D:1B:E0:32:A1:4A:61:F3:37:29:DD:F4:99:B3:6C:93:E8:50:79 X509v3 Authority Key Identifier: keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:53:ee:ef:83:54:b1:a2:ee:d9:50:a7:43:b9:95:f4:b2:1b: ce:da:25:2d:5b:aa:22:e7:2d:c8:93:a6:7e:83:43:07:97:1b: c6:6e:6e:e5:b3:cd:b8:3b:dc:63:79:f7:82:f7:1d:13:9d:ab: 59:ee:7b:9d:6b:e8:97:ae:87:c0:46:09:49:c7:21:cd:83:57: 83:61:8c:52:4c:86:87:f6:4f:ee:81:d1:b1:1d:f3:fa:98:10: 24:3a:b6:2f:72:4a:e9:93:ba:45:d4:ef:77:c6:fc:14:24:2f: c7:6e:d8:ad:1d:41:e6:fa:48:ae:4d:aa:1c:7f:9f:cf:5d:55: 06:9a:a8:7a:94:6a:78:48:33:6e:81:e6:95:ab:a3:42:d5:59: b8:e2:3e:89:26:a6:26:91:dc:72:b5:26:20:4e:58:43:c0:c1: 6c:cd:a2:24:83:c4:95:f4:6a:21:2f:cf:a2:7b:bd:3a:fb:a4: b4:87:43:91:c9:1a:88:8b:8e:b3:ba:6b:62:d7:6c:cf:75:6f: 6a:2d:df:a0:ff:c8:03:ab:ca:a5:e0:3b:5e:d5:ed:86:50:c8: 70:73:b6:4f:77:28:6b:5d:62:9b:42:28:b9:6e:24:c1:62:a8: 31:f3:49:bb:d7:5a:b8:4d:5c:66:b0:9c:2e:a1:1c:b7:e7:61: 2e:61:d6:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLc+C7vfRrJiOz2spL+tVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMDFjYWZmODkzNTQ2OTEwYTI1ZmJjY2ViODYyMzU1Zjdh MzcyNjAwHhcNMjUxMjA2MDEwMTQyWhcNMjUxMjA3MDEwMTQyWjAzMTEwLwYDVQQD EygwYjBkMWJlMDMyYTE0YTYxZjMzNzI5ZGRmNDk5YjM2YzkzZTg1MDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SbyltqAFjfmmfBrtsh8xHhbV+JZ yMtvr6e2AmSBCmrvoLGDI1837YCmTexctRRTMQCTwp4IteBvRnh7sxSSMR/sYbbD 6U7zaVVxYPMQ1jJQSq/Ih/m1dJ77ZhRCpUGHPyUKfsvo8OHk9VTaEtedhFQT19pF oVVZx0LM0wtIyVcUpWcYVCb0BWcMrR0saNdaFCfI7RiSkvsWqtiO4LVAGZ0DnASU SmlRAeFHdWHPBf8hv56HdtoXFMzw/OE/sKlCmFaU3cy2WyZqohmh8BsNH5GG/P1U GoxdS+8Ha532Uw4lAk2wurj4tFfL1Ryu2i2jXkpGB2x2SK7J7KTD9ZN0xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsNG+AyoUph8zcp3fSZs2yT6FB5MB8GA1UdIwQY MBaAFOoByv+JNUaRCiX7zOuGI1X3o3JgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYTdlYTItNTAzMC00ZTY0LWJkZDYt MmU5ZWRhMTk5YTc4LzEvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8wYTdlYTItNTAzMC00ZTY0LWJkZDYtMmU5ZWRhMTk5YTc4 LzEvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVPu74NU saLu2VCnQ7mV9LIbztolLVuqIuctyJOmfoNDB5cbxm5u5bPNuDvcY3n3gvcdE52r We57nWvol66HwEYJScchzYNXg2GMUkyGh/ZP7oHRsR3z+pgQJDq2L3JK6ZO6RdTv d8b8FCQvx27YrR1B5vpIrk2qHH+fz11VBpqoepRqeEgzboHmlaujQtVZuOI+iSam JpHccrUmIE5YQ8DBbM2iJIPElfRqIS/Ponu9OvuktIdDkckaiIuOs7prYtdsz3Vv ai3foP/IA6vKpeA7XtXthlDIcHO2T3coa11im0IouW4kwWKoMfNJu9dauE1cZrCc LqEct+dhLmHWYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:06 2025 by rpki-client