This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft File: 6EKkZljB0BusjUOWHGtJ54jjzMM.mft (raw, json) Hash identifier: Tfoyj3rYQu9o1mR6HPr8CEPEbHqPctJLPaPe0glySbU= Subject key identifier: A1:54:7E:59:16:4A:F2:91:54:EC:A6:B3:30:EF:64:96:B4:EB:9C:F3 Authority key identifier: E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3 Certificate issuer: /CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3 Certificate serial: 019AF49BB8CE8B80CE5DDFF8DD4F45EE3AA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 17:00:37 +0000 Manifest this update: Sat 06 Dec 2025 17:00:37 +0000 Manifest next update: Sun 07 Dec 2025 17:00:37 +0000 Files and hashes: 1: 6EKkZljB0BusjUOWHGtJ54jjzMM.crl (hash: p/4MxR0c3rUzMEaKI67PBzNgqMABet4P6VnEP5wSqnI=) 2: xANWJIQxy5Izrn9gOyePr5tbhgY.roa (hash: BAFdEGijvRbR7pMhm3hhAYe67gFmqJkY0ASzrXKygw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:b8:ce:8b:80:ce:5d:df:f8:dd:4f:45:ee:3a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3 Validity Not Before: Dec 6 17:00:37 2025 GMT Not After : Dec 7 17:00:37 2025 GMT Subject: CN=a1547e59164af29154eca6b330ef6496b4eb9cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:91:a8:c1:6d:79:6c:fc:0c:6d:55:f2:a1:c8: 64:e0:f8:d0:ce:b2:95:1a:65:05:39:ec:59:bd:ab: f4:38:b8:70:d8:f4:f9:5b:47:da:31:d7:d1:60:d3: 42:77:f9:f3:ff:4e:d0:4c:ef:06:f8:23:fd:b6:22: 3a:27:cf:be:14:b4:d2:5d:90:dc:8c:4a:05:00:0e: 3c:a0:5d:d9:6f:ce:98:21:9f:49:d3:bc:48:70:08: d0:30:2e:64:39:9d:21:55:d6:3d:22:a2:53:80:e5: 69:e6:4a:bc:e4:1c:e5:74:42:c7:be:c4:eb:f6:7c: 50:37:64:fb:41:9f:9a:d1:c0:55:3b:c2:83:65:ce: ee:fb:bc:f7:43:59:9d:87:52:01:b5:b0:cb:0a:ca: 39:ef:66:2c:0a:43:38:71:f3:6c:10:f8:e4:f3:06: e5:bb:2d:37:12:7b:d5:e1:cb:a2:14:5d:4b:fe:b6: aa:f1:f9:35:3b:71:dc:2b:14:22:fb:0a:89:c2:fa: de:fc:50:28:7d:ac:7b:46:19:90:c0:73:ee:fb:67: 06:8b:9f:05:d1:3b:58:40:89:3e:ff:40:81:cd:43: 4d:85:cf:1c:6b:c2:cb:7f:da:4c:bb:ed:c5:88:0d: 34:bc:bb:9f:be:b3:ff:bb:b4:fc:81:c1:b6:d0:56: 61:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:54:7E:59:16:4A:F2:91:54:EC:A6:B3:30:EF:64:96:B4:EB:9C:F3 X509v3 Authority Key Identifier: keyid:E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:7a:90:c5:26:ee:3e:2b:a7:92:76:82:03:0c:a5:a9:00:98: 87:d5:75:89:20:36:5b:1b:d7:d2:cc:92:5a:49:12:e4:d1:35: 7a:96:8d:94:2e:84:df:ae:63:1a:a4:35:f2:d0:86:7a:6d:a8: 88:0f:6d:7d:88:34:19:63:8d:6b:82:01:4a:8f:a1:77:3d:6d: 74:6a:14:f5:8b:a5:95:32:0e:ec:55:7b:86:ec:1d:7c:c6:57: 1d:b0:30:21:53:32:a1:d1:d8:63:7b:0a:ae:4e:b0:98:44:cf: ca:ff:ed:a7:d9:9b:de:c3:cd:33:7c:6b:37:c0:d6:96:0f:41: dd:97:31:b3:b6:f6:a1:34:e8:54:ee:9b:39:99:7b:f3:85:5b: 86:fc:79:22:2a:aa:10:bb:b4:83:d3:4a:60:12:81:fe:81:a2: a5:06:d3:8a:d3:10:c5:ce:17:3e:c7:ad:35:07:8d:7b:1f:69: 73:c2:5a:c1:05:63:32:d8:d2:72:62:23:6d:36:36:10:7f:ea: d7:05:ad:56:2c:a0:45:c8:f2:43:02:15:ed:48:fe:fe:46:e5: 2e:9f:ba:63:66:0c:ff:07:a3:26:b3:64:d5:c9:99:9f:7a:a6: fb:de:2c:c1:1d:9f:d9:35:93:f5:0a:78:01:b8:60:1f:64:6f: ce:06:dc:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7jOi4DOXd/43U9F7jqgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDJhNDY2NThjMWQwMWJhYzhkNDM5NjFjNmI0OWU3ODhl M2NjYzMwHhcNMjUxMjA2MTcwMDM3WhcNMjUxMjA3MTcwMDM3WjAzMTEwLwYDVQQD EyhhMTU0N2U1OTE2NGFmMjkxNTRlY2E2YjMzMGVmNjQ5NmI0ZWI5Y2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45GowW15bPwMbVXyochk4PjQzrKV GmUFOexZvav0OLhw2PT5W0faMdfRYNNCd/nz/07QTO8G+CP9tiI6J8++FLTSXZDc jEoFAA48oF3Zb86YIZ9J07xIcAjQMC5kOZ0hVdY9IqJTgOVp5kq85BzldELHvsTr 9nxQN2T7QZ+a0cBVO8KDZc7u+7z3Q1mdh1IBtbDLCso572YsCkM4cfNsEPjk8wbl uy03EnvV4cuiFF1L/raq8fk1O3HcKxQi+wqJwvre/FAofax7RhmQwHPu+2cGi58F 0TtYQIk+/0CBzUNNhc8ca8LLf9pMu+3FiA00vLufvrP/u7T8gcG20FZh6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFUflkWSvKRVOymszDvZJa065zzMB8GA1UdIwQY MBaAFOhCpGZYwdAbrI1DlhxrSeeI48zDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVLa1psakIwQnVzalVPV0hHdEo1NGpqek1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jZDA5MmUtNmJlYi00MDM3LThhNWEt ZmFlOGQ0MmFlNWU1LzEvNkVLa1psakIwQnVzalVPV0hHdEo1NGpqek1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9jZDA5MmUtNmJlYi00MDM3LThhNWEtZmFlOGQ0MmFlNWU1 LzEvNkVLa1psakIwQnVzalVPV0hHdEo1NGpqek1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXqQxSbu PiunknaCAwylqQCYh9V1iSA2WxvX0sySWkkS5NE1epaNlC6E365jGqQ18tCGem2o iA9tfYg0GWONa4IBSo+hdz1tdGoU9YullTIO7FV7huwdfMZXHbAwIVMyodHYY3sK rk6wmETPyv/tp9mb3sPNM3xrN8DWlg9B3Zcxs7b2oTToVO6bOZl784Vbhvx5Iiqq ELu0g9NKYBKB/oGipQbTitMQxc4XPsetNQeNex9pc8JawQVjMtjScmIjbTY2EH/q 1wWtViygRcjyQwIV7Uj+/kblLp+6Y2YM/wejJrNk1cmZn3qm+94swR2f2TWT9Qp4 AbhgH2RvzgbcAg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:03:31 2025 by rpki-client