This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft File: 6X9KenczHtX3zn7oBowu29LQ034.mft (raw, json) Hash identifier: WAgDwmMzF7lcYD0RYp6ZhL7DkhUooxaJolrytcvBAEk= Subject key identifier: 80:4A:1D:16:08:4F:49:1C:6A:F1:6C:8B:82:81:94:60:1D:D8:CC:D9 Authority key identifier: E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E Certificate issuer: /CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e Certificate serial: 019AF12D632BEA88866CFFB056838B048005 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:01:14 +0000 Manifest this update: Sat 06 Dec 2025 01:01:14 +0000 Manifest next update: Sun 07 Dec 2025 01:01:14 +0000 Files and hashes: 1: 6X9KenczHtX3zn7oBowu29LQ034.crl (hash: zwN9RqstRN5VLqftCsyDj1uXBlfybUSYI9mEPC8ysuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:63:2b:ea:88:86:6c:ff:b0:56:83:8b:04:80:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e Validity Not Before: Dec 6 01:01:14 2025 GMT Not After : Dec 7 01:01:14 2025 GMT Subject: CN=804a1d16084f491c6af16c8b828194601dd8ccd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:e0:d6:d5:2f:10:5b:2a:40:ac:42:ef:e5: 8a:7e:35:88:a4:51:44:a6:8a:1a:ce:1b:7c:2a:28: 89:5b:94:9e:36:9b:98:47:fe:b7:50:b1:6a:71:48: 0d:55:c8:07:5e:a3:4c:1e:5e:3a:5b:07:b0:e9:e4: a1:24:3e:2c:6f:c7:ac:f4:f5:a4:5e:c4:f6:9e:be: 51:b9:be:29:b8:93:b9:7c:4c:e8:26:32:e5:55:ab: a4:d0:a5:80:e5:07:02:4c:de:2a:0f:57:36:95:c8: b8:4b:a9:38:3e:42:51:8a:52:6c:e0:77:f0:d3:51: bb:13:94:4e:31:78:c6:b2:de:45:14:ed:09:f3:24: f8:b1:21:9a:1e:37:21:a9:8e:79:74:2f:cd:c7:71: b1:37:37:23:36:0b:ad:d1:21:3e:a5:bc:66:8a:79: 7b:63:5c:61:6e:5c:23:ca:05:f0:65:c9:af:08:04: c3:d6:41:df:5e:a4:24:a8:5d:18:41:e7:51:98:92: 9a:07:d2:98:bb:df:70:f8:38:ed:56:4f:a5:a4:9e: 3b:8d:ba:a1:f2:e4:ed:58:fe:d1:ee:5b:0c:bb:6e: 6c:28:b0:49:53:59:55:37:22:5a:4f:da:66:87:fd: dc:c5:7c:64:1e:29:7a:29:6e:3c:a4:65:fd:89:14: fa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4A:1D:16:08:4F:49:1C:6A:F1:6C:8B:82:81:94:60:1D:D8:CC:D9 X509v3 Authority Key Identifier: keyid:E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:21:6e:04:4f:03:e1:ba:6a:74:21:d3:ec:fe:9d:7d:f9:8f: 40:78:55:13:6d:22:10:80:90:9b:1f:82:de:ba:85:6b:ac:a0: 05:56:85:64:01:22:bf:4f:0b:c9:33:5a:3e:25:b9:a1:ab:da: 22:55:c3:84:4f:a7:7e:8e:70:a4:6c:f0:a8:80:27:6f:9e:e9: e3:6b:f3:54:08:bf:97:ca:a3:ef:49:00:e6:a2:25:fd:a6:6d: af:be:eb:93:d5:64:06:95:e6:e8:04:6d:07:15:a3:4b:b9:fb: 13:bd:22:47:35:c8:7a:40:e6:7a:37:a5:af:ae:0f:6a:cb:a4: cd:7f:83:46:c3:28:ca:24:8e:86:99:53:23:ab:6f:2d:2e:c3: d8:18:b2:4d:f2:4d:15:b9:49:37:65:c2:64:36:b7:88:c3:90: bb:02:3a:e7:eb:e6:5e:97:5e:9b:13:d0:f3:44:d0:96:1c:a6: 6c:96:9b:c1:52:b4:24:0f:ef:17:ce:e8:db:7a:03:2b:c0:f0: 83:39:a5:09:4f:5a:77:48:6a:82:90:c6:ce:30:13:7b:0c:a8: 92:9e:0c:12:f3:04:42:ed:b0:a2:91:df:3c:e0:50:2b:99:5d: 39:7b:e6:7b:05:99:3d:e6:48:ea:34:0f:1a:f8:a6:5c:da:4d: 55:26:91:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWMr6oiGbP+wVoOLBIAFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5N2Y0YTdhNzczMzFlZDVmN2NlN2VlODA2OGMyZWRiZDJk MGQzN2UwHhcNMjUxMjA2MDEwMTE0WhcNMjUxMjA3MDEwMTE0WjAzMTEwLwYDVQQD Eyg4MDRhMWQxNjA4NGY0OTFjNmFmMTZjOGI4MjgxOTQ2MDFkZDhjY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2Xg1tUvEFsqQKxC7+WKfjWIpFFE pooazht8KiiJW5SeNpuYR/63ULFqcUgNVcgHXqNMHl46Wwew6eShJD4sb8es9PWk XsT2nr5Rub4puJO5fEzoJjLlVauk0KWA5QcCTN4qD1c2lci4S6k4PkJRilJs4Hfw 01G7E5ROMXjGst5FFO0J8yT4sSGaHjchqY55dC/Nx3GxNzcjNgut0SE+pbxminl7 Y1xhblwjygXwZcmvCATD1kHfXqQkqF0YQedRmJKaB9KYu99w+DjtVk+lpJ47jbqh 8uTtWP7R7lsMu25sKLBJU1lVNyJaT9pmh/3cxXxkHil6KW48pGX9iRT6awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBKHRYIT0kcavFsi4KBlGAd2MzZMB8GA1UdIwQY MBaAFOl/Snp3Mx7V985+6AaMLtvS0NN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlg5S2VuY3pIdFgzem43b0Jvd3UyOUxRMDM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80NDI1MDYtNTNmOS00N2RiLWIzYjgt M2FiMjFiNTIzMDAwLzEvNlg5S2VuY3pIdFgzem43b0Jvd3UyOUxRMDM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy80NDI1MDYtNTNmOS00N2RiLWIzYjgtM2FiMjFiNTIzMDAw LzEvNlg5S2VuY3pIdFgzem43b0Jvd3UyOUxRMDM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyFuBE8D 4bpqdCHT7P6dffmPQHhVE20iEICQmx+C3rqFa6ygBVaFZAEiv08LyTNaPiW5oava IlXDhE+nfo5wpGzwqIAnb57p42vzVAi/l8qj70kA5qIl/aZtr77rk9VkBpXm6ARt BxWjS7n7E70iRzXIekDmejelr64PasukzX+DRsMoyiSOhplTI6tvLS7D2BiyTfJN FblJN2XCZDa3iMOQuwI65+vmXpdemxPQ80TQlhymbJabwVK0JA/vF87o23oDK8Dw gzmlCU9ad0hqgpDGzjATewyokp4MEvMEQu2wopHfPOBQK5ldOXvmewWZPeZI6jQP GvimXNpNVSaRcA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:51 2025 by rpki-client