This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft File: c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft (raw, json) Hash identifier: jUKWlPri8wGUJZuHBCHKPdLX0QgPi7OCMBOx/Vn4Djg= Subject key identifier: C7:0D:49:FD:6D:36:76:F1:28:D9:A0:BE:D7:5B:9A:7D:69:15:D8:72 Authority key identifier: 73:AB:E1:5F:6C:54:09:2B:10:3D:4A:C0:86:44:46:9A:7B:1E:6F:E4 Certificate issuer: /CN=73abe15f6c54092b103d4ac08644469a7b1e6fe4 Certificate serial: 019AF2765066654B6D9F0F482B81F422D3D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft Manifest number: 16ED Signing time: Sat 06 Dec 2025 07:00:31 +0000 Manifest this update: Sat 06 Dec 2025 07:00:31 +0000 Manifest next update: Sun 07 Dec 2025 07:00:31 +0000 Files and hashes: 1: c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl (hash: y8fTAZjD+UohPtFKDL4ec7NsW/WubrNIGQc1pW7QOB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:50:66:65:4b:6d:9f:0f:48:2b:81:f4:22:d3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73abe15f6c54092b103d4ac08644469a7b1e6fe4 Validity Not Before: Dec 6 07:00:31 2025 GMT Not After : Dec 7 07:00:31 2025 GMT Subject: CN=c70d49fd6d3676f128d9a0bed75b9a7d6915d872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:98:7f:75:38:de:88:54:6e:c8:31:3a:6f:76: cb:6d:63:ef:cb:82:59:36:18:fb:0a:20:7c:d4:3b: 5e:f4:b0:64:e4:30:98:c3:ae:ed:22:3e:9f:39:36: 32:4e:9c:66:06:c1:a3:49:b5:06:01:c9:a4:00:d6: 2b:f1:ce:d1:f6:25:91:87:42:72:28:47:f2:f1:2c: b1:5d:7f:69:1a:1a:eb:bb:23:3d:75:df:21:ca:19: dd:b6:08:b7:fa:cb:aa:1c:ef:f5:63:76:35:6e:84: c3:e2:80:6f:27:cc:3e:6b:1a:6c:41:0c:ba:77:81: f4:49:79:5e:52:bc:02:a0:93:c4:5d:35:cd:2d:62: f9:1f:2a:97:a2:f5:26:a5:cc:3e:13:b0:6c:5e:64: 09:5c:1b:45:74:54:41:6d:67:26:a4:36:a8:f4:46: 23:df:fe:79:4f:01:f6:df:c0:90:91:eb:62:dd:0c: 06:74:34:4c:2e:86:38:3f:7f:eb:cc:18:a7:66:8e: b8:07:65:e0:5c:30:60:e8:b7:26:63:01:02:a7:ab: 7d:9b:97:e5:b5:ea:7e:97:11:b6:e0:be:ba:7b:08: 0f:fd:ab:81:f7:b4:bd:72:47:2d:d8:cc:0f:fe:dd: 12:dd:9b:01:ee:39:d7:8d:31:89:67:ae:75:6f:c1: 4a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0D:49:FD:6D:36:76:F1:28:D9:A0:BE:D7:5B:9A:7D:69:15:D8:72 X509v3 Authority Key Identifier: keyid:73:AB:E1:5F:6C:54:09:2B:10:3D:4A:C0:86:44:46:9A:7B:1E:6F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6vhX2xUCSsQPUrAhkRGmnseb-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8251f-c3fc-48e6-8aef-192be3897dac/1/c6vhX2xUCSsQPUrAhkRGmnseb-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b2:59:6c:66:84:6a:68:f3:49:9c:33:54:08:3c:8d:6b:58: be:13:a8:87:33:f6:01:78:64:e0:68:44:06:7e:87:92:95:37: d5:28:6a:c8:de:cc:f5:74:6d:99:49:42:21:b9:06:af:e6:bc: e0:3a:be:51:db:b8:67:15:d1:27:f0:49:f0:7d:18:13:bb:5c: d2:42:20:29:a1:51:97:49:ad:83:8a:09:07:71:fd:8f:e3:7e: 2f:1e:cb:a7:95:61:f4:ce:9c:e5:3f:94:59:74:7b:3c:5d:63: 91:6a:38:ba:5f:00:c4:86:09:d8:ae:9c:78:a1:28:b0:0c:f9: f5:2d:45:0c:10:1f:7d:a4:54:86:7c:81:6b:38:d9:26:c8:48: 5f:ab:6c:3b:75:ee:4e:d5:67:68:eb:8d:56:e0:95:f0:d3:68: dc:a3:07:91:1e:c7:42:81:ea:f0:3a:20:2a:55:c1:64:47:4a: 22:bc:e2:8c:1d:11:2c:dd:07:47:1b:f9:7f:26:46:93:ff:0e: ee:62:22:3d:dc:1a:b1:25:aa:b5:12:b9:59:91:ff:93:ca:8d: a2:1f:12:a9:ed:29:7b:0c:9e:9b:7d:f2:fd:c3:83:7f:99:63: 6c:ed:9a:3f:92:48:e0:f8:84:20:b0:ec:37:f6:e6:7a:4a:df: 82:6b:fb:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlBmZUttnw9IK4H0ItPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYWJlMTVmNmM1NDA5MmIxMDNkNGFjMDg2NDQ0NjlhN2Ix ZTZmZTQwHhcNMjUxMjA2MDcwMDMxWhcNMjUxMjA3MDcwMDMxWjAzMTEwLwYDVQQD EyhjNzBkNDlmZDZkMzY3NmYxMjhkOWEwYmVkNzViOWE3ZDY5MTVkODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnph/dTjeiFRuyDE6b3bLbWPvy4JZ Nhj7CiB81Dte9LBk5DCYw67tIj6fOTYyTpxmBsGjSbUGAcmkANYr8c7R9iWRh0Jy KEfy8SyxXX9pGhrruyM9dd8hyhndtgi3+suqHO/1Y3Y1boTD4oBvJ8w+axpsQQy6 d4H0SXleUrwCoJPEXTXNLWL5HyqXovUmpcw+E7BsXmQJXBtFdFRBbWcmpDao9EYj 3/55TwH238CQketi3QwGdDRMLoY4P3/rzBinZo64B2XgXDBg6LcmYwECp6t9m5fl tep+lxG24L66ewgP/auB97S9ckct2MwP/t0S3ZsB7jnXjTGJZ651b8FKwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcNSf1tNnbxKNmgvtdbmn1pFdhyMB8GA1UdIwQY MBaAFHOr4V9sVAkrED1KwIZERpp7Hm/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzZ2aFgyeFVDU3NRUFVyQWhrUkdtbnNlYi1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jODI1MWYtYzNmYy00OGU2LThhZWYt MTkyYmUzODk3ZGFjLzEvYzZ2aFgyeFVDU3NRUFVyQWhrUkdtbnNlYi1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9jODI1MWYtYzNmYy00OGU2LThhZWYtMTkyYmUzODk3ZGFj LzEvYzZ2aFgyeFVDU3NRUFVyQWhrUkdtbnNlYi1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrJZbGaE amjzSZwzVAg8jWtYvhOohzP2AXhk4GhEBn6HkpU31ShqyN7M9XRtmUlCIbkGr+a8 4Dq+Udu4ZxXRJ/BJ8H0YE7tc0kIgKaFRl0mtg4oJB3H9j+N+Lx7Lp5Vh9M6c5T+U WXR7PF1jkWo4ul8AxIYJ2K6ceKEosAz59S1FDBAffaRUhnyBazjZJshIX6tsO3Xu TtVnaOuNVuCV8NNo3KMHkR7HQoHq8DogKlXBZEdKIrzijB0RLN0HRxv5fyZGk/8O 7mIiPdwasSWqtRK5WZH/k8qNoh8Sqe0pewyem33y/cODf5ljbO2aP5JI4PiEILDs N/bmekrfgmv7Pg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:47 2025 by rpki-client