This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft File: a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft (raw, json) Hash identifier: 5qQhL6y9rjuHJrY3w0w6SOH4RRM9TkEfB0l1v4WPUbo= Subject key identifier: 83:EB:78:83:92:84:12:50:C8:CE:49:F5:32:5F:65:78:B6:59:FC:87 Authority key identifier: 6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5 Certificate issuer: /CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5 Certificate serial: 019AF31CB5586FA14966B57101A1537CAF21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft Manifest number: 0B79 Signing time: Sat 06 Dec 2025 10:02:15 +0000 Manifest this update: Sat 06 Dec 2025 10:02:15 +0000 Manifest next update: Sun 07 Dec 2025 10:02:15 +0000 Files and hashes: 1: a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl (hash: kL5NDtysAbn12NAQqNoqJGdJBY1ylXqWlzfsWvYeRG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:b5:58:6f:a1:49:66:b5:71:01:a1:53:7c:af:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5 Validity Not Before: Dec 6 10:02:15 2025 GMT Not After : Dec 7 10:02:15 2025 GMT Subject: CN=83eb788392841250c8ce49f5325f6578b659fc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a6:35:03:b7:43:bb:c7:e1:14:7f:09:81:a3: 9f:be:9e:31:99:43:1b:dc:b9:86:02:a9:29:69:c7: c8:f8:2e:e9:e9:cb:ff:e8:37:4d:85:4f:4d:b3:a2: 17:e2:12:8a:90:8d:82:9e:ae:11:83:f3:6e:6f:35: 60:d0:f1:89:fa:c8:62:fb:7a:5a:2b:cc:12:96:6b: 98:07:f6:01:c9:20:0e:26:1f:a6:fc:46:35:ce:71: a7:eb:e6:6e:09:96:0f:c9:d1:bd:a1:a3:14:70:42: 20:c7:1a:75:73:b1:f6:40:df:8e:0c:d4:95:97:6d: dd:f7:ea:c9:45:16:00:d6:9b:cb:69:0c:77:76:3a: f5:42:ad:df:6e:20:7f:95:9d:09:b8:78:24:8e:b6: 4a:5e:b0:27:ca:2a:72:1d:d8:08:2b:31:67:19:13: 42:d5:ed:39:fd:16:7d:e4:8c:ed:b7:91:9b:56:71: d9:3e:57:0b:cd:c3:d9:5a:85:7b:44:c6:8d:98:d5: e0:92:83:53:eb:45:6e:57:9a:96:32:1e:a1:8f:f4: 85:62:b5:4a:78:b8:cd:7f:b4:82:c0:37:21:af:3a: 91:b3:4e:8b:e3:cb:cd:63:71:a2:cc:6b:dc:4c:4f: 84:bb:5a:1a:1b:dd:40:d7:cd:59:eb:73:d6:c4:a5: 40:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EB:78:83:92:84:12:50:C8:CE:49:F5:32:5F:65:78:B6:59:FC:87 X509v3 Authority Key Identifier: keyid:6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:88:53:85:28:83:40:da:b2:6a:2d:49:42:bf:e4:a7:8b:d4: 99:93:b2:d5:8a:0f:f5:01:ca:89:ad:42:1f:30:c0:f0:38:eb: 0d:a1:b3:c4:c4:78:88:24:5e:e2:c6:0c:6c:f9:03:47:31:ee: bb:a2:a3:36:1d:eb:bc:bd:68:35:f7:14:48:51:2a:50:fe:d6: 60:a6:6f:51:23:8e:96:5c:7e:df:3e:04:78:f3:69:2c:50:a0: 7a:e6:06:32:b7:88:25:d5:f5:f0:a6:82:67:ac:54:83:b3:17: e8:de:5f:e8:88:fc:06:04:ae:13:e5:96:9e:4e:c8:60:7b:c2: 1a:9f:4e:29:ef:a3:44:f0:14:d1:3c:d0:05:60:c9:8a:d1:18: 8a:db:d8:e4:76:40:fd:81:f3:ff:ba:8d:cb:55:2f:98:5b:e6: a1:45:75:5b:ff:e4:3d:f3:aa:2b:a5:b1:6f:f3:53:6f:f6:d8: fb:63:e5:bf:71:8c:e6:51:d7:19:22:b8:92:35:3d:85:36:e6: 8d:1d:f3:22:6e:e1:b2:c2:02:8c:9a:2d:fb:65:04:d5:71:49: 40:3b:aa:00:d5:47:41:7c:fa:4f:e4:ec:34:1b:f1:2a:e5:1f: 96:20:24:3c:f5:91:23:7a:2b:7b:70:23:5c:14:7a:b0:ee:97: 48:f3:70:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLVYb6FJZrVxAaFTfK8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYWEwNWM2ZjhmOWJmZDcwZTNkNDFmZTA1YmFmYzUwZDEy NTNiZjUwHhcNMjUxMjA2MTAwMjE1WhcNMjUxMjA3MTAwMjE1WjAzMTEwLwYDVQQD Eyg4M2ViNzg4MzkyODQxMjUwYzhjZTQ5ZjUzMjVmNjU3OGI2NTlmYzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6Y1A7dDu8fhFH8JgaOfvp4xmUMb 3LmGAqkpacfI+C7p6cv/6DdNhU9Ns6IX4hKKkI2Cnq4Rg/NubzVg0PGJ+shi+3pa K8wSlmuYB/YBySAOJh+m/EY1znGn6+ZuCZYPydG9oaMUcEIgxxp1c7H2QN+ODNSV l23d9+rJRRYA1pvLaQx3djr1Qq3fbiB/lZ0JuHgkjrZKXrAnyipyHdgIKzFnGRNC 1e05/RZ95Iztt5GbVnHZPlcLzcPZWoV7RMaNmNXgkoNT60VuV5qWMh6hj/SFYrVK eLjNf7SCwDchrzqRs06L48vNY3GizGvcTE+Eu1oaG91A181Z63PWxKVAfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPreIOShBJQyM5J9TJfZXi2WfyHMB8GA1UdIwQY MBaAFGuqBcb4+b/XDj1B/gW6/FDRJTv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTZvRnh2ajV2OWNPUFVILUJicjhVTkVsT19VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZjUxMTktNmRjYy00M2EyLThkYWYt ZjMyMTFkOTE1MjBkLzEvYTZvRnh2ajV2OWNPUFVILUJicjhVTkVsT19VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZjUxMTktNmRjYy00M2EyLThkYWYtZjMyMTFkOTE1MjBk LzEvYTZvRnh2ajV2OWNPUFVILUJicjhVTkVsT19VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx4hThSiD QNqyai1JQr/kp4vUmZOy1YoP9QHKia1CHzDA8DjrDaGzxMR4iCRe4sYMbPkDRzHu u6KjNh3rvL1oNfcUSFEqUP7WYKZvUSOOllx+3z4EePNpLFCgeuYGMreIJdX18KaC Z6xUg7MX6N5f6Ij8BgSuE+WWnk7IYHvCGp9OKe+jRPAU0TzQBWDJitEYitvY5HZA /YHz/7qNy1UvmFvmoUV1W//kPfOqK6Wxb/NTb/bY+2Plv3GM5lHXGSK4kjU9hTbm jR3zIm7hssICjJot+2UE1XFJQDuqANVHQXz6T+TsNBvxKuUfliAkPPWRI3ore3Aj XBR6sO6XSPNwUw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:45 2025 by rpki-client