This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft File: 6Ey_buD7yr9563S8Ykjzls8K6uQ.mft (raw, json) Hash identifier: 81kzG3O1fDcBRlCnTmZAkGtq8n5i3XATRZmhU4ajRZI= Subject key identifier: BC:97:7B:39:F9:8C:F1:C6:FD:FD:54:5B:48:7B:59:5F:EE:3B:3F:A5 Authority key identifier: E8:4C:BF:6E:E0:FB:CA:BF:79:EB:74:BC:62:48:F3:96:CF:0A:EA:E4 Certificate issuer: /CN=e84cbf6ee0fbcabf79eb74bc6248f396cf0aeae4 Certificate serial: 019AF0BF1D5132700E5AA31358CF65F647C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ey_buD7yr9563S8Ykjzls8K6uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft Manifest number: 0A6E Signing time: Fri 05 Dec 2025 23:00:47 +0000 Manifest this update: Fri 05 Dec 2025 23:00:47 +0000 Manifest next update: Sat 06 Dec 2025 23:00:47 +0000 Files and hashes: 1: 6Ey_buD7yr9563S8Ykjzls8K6uQ.crl (hash: pONcF/EI/77vYTGrXM734RsAC7b4lHZtXj2RnJWH2tw=) 2: mB31WjQtqMTVmm5ONFKs18JD3Uo.roa (hash: Z6mSYjSXOwJwo9Icil5Sl39+R4LrLCDB6tJ0XOF0rak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6Ey_buD7yr9563S8Ykjzls8K6uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:1d:51:32:70:0e:5a:a3:13:58:cf:65:f6:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e84cbf6ee0fbcabf79eb74bc6248f396cf0aeae4 Validity Not Before: Dec 5 23:00:47 2025 GMT Not After : Dec 6 23:00:47 2025 GMT Subject: CN=bc977b39f98cf1c6fdfd545b487b595fee3b3fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:36:1c:bd:65:3a:79:a6:f8:28:33:1e:d6:c6: bb:96:a4:8f:84:21:d1:9b:06:37:31:44:5d:b4:c7: 85:de:81:7f:15:97:46:2d:ca:98:b7:2e:0e:11:6b: df:db:8f:60:7d:bf:5f:58:c0:ca:78:7a:27:13:b1: b2:a4:03:98:df:ca:0d:e8:f4:3a:7e:ce:98:2a:a5: 80:a9:e1:dd:e3:fb:d4:01:26:01:b6:62:45:5f:ea: 36:5b:d8:5b:26:17:bb:d4:69:3e:16:0e:ec:3a:d9: 36:f9:ba:1c:4b:bc:e9:09:c4:d4:2d:a6:ed:6e:34: 28:da:05:1a:e9:cb:3a:56:18:6b:9e:08:e1:2e:15: 54:b6:42:87:fa:67:65:c1:e3:e3:96:82:cc:6d:fb: 9f:8a:37:e4:42:e7:a8:3d:98:17:21:eb:89:ab:66: 9a:87:7b:d2:37:0e:c5:ce:ee:d0:49:69:9d:a2:52: 0e:25:ec:4b:89:13:12:f8:0d:22:e1:1d:67:f1:87: 73:97:b8:6a:dc:58:90:7a:4b:af:57:36:b3:d6:ef: f6:65:19:24:f1:6b:b1:9b:4b:93:5d:b3:93:96:13: 0f:35:40:79:d5:53:03:53:33:2a:c1:a7:0e:ab:68: 38:1e:4f:40:c3:63:f9:1f:e1:c9:eb:07:20:23:3e: f8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:97:7B:39:F9:8C:F1:C6:FD:FD:54:5B:48:7B:59:5F:EE:3B:3F:A5 X509v3 Authority Key Identifier: keyid:E8:4C:BF:6E:E0:FB:CA:BF:79:EB:74:BC:62:48:F3:96:CF:0A:EA:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ey_buD7yr9563S8Ykjzls8K6uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:63:21:92:f0:1a:c2:45:f9:d6:15:87:54:02:f4:53:41:a7: c9:0b:4d:df:02:d0:4c:54:b6:ff:b5:e7:a8:be:7b:bb:9a:53: a9:a0:c4:38:a6:c9:b5:4d:32:e5:b5:14:b2:90:ee:88:db:f9: 26:5b:8a:83:fe:58:c0:c4:07:4e:47:1d:eb:c4:d7:2b:ac:8b: a6:48:ab:29:c4:35:b3:97:a6:e9:df:73:18:97:3e:20:57:cd: aa:e4:f5:55:9d:cd:66:4a:e6:0e:cf:ee:a7:d5:ff:3d:68:39: d8:a4:c4:10:5b:35:32:1b:07:2e:80:a4:b3:ba:52:85:98:d3: 93:3e:bc:2a:4d:e4:7e:e0:a1:74:81:a4:f3:6e:59:4a:d9:7a: 83:5e:ed:eb:54:fa:81:38:ba:b0:ef:0a:8c:e8:86:36:34:26: e0:3f:91:59:99:67:5b:91:d2:d7:68:93:b9:99:e3:ce:97:ba: b2:59:b3:4c:d3:62:5d:a7:c7:aa:10:e4:52:20:a8:a5:00:52: 44:50:bd:7f:c7:3a:13:69:c2:5d:5d:c2:58:95:de:8e:c8:b6: 14:d5:14:1d:8f:93:35:7d:ba:df:52:ae:70:3d:78:d1:3d:f7: 3b:f9:48:76:43:53:cf:fa:fe:e3:62:6b:fa:95:8d:aa:c1:38: ae:8b:5f:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvx1RMnAOWqMTWM9l9kfAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NGNiZjZlZTBmYmNhYmY3OWViNzRiYzYyNDhmMzk2Y2Yw YWVhZTQwHhcNMjUxMjA1MjMwMDQ3WhcNMjUxMjA2MjMwMDQ3WjAzMTEwLwYDVQQD EyhiYzk3N2IzOWY5OGNmMWM2ZmRmZDU0NWI0ODdiNTk1ZmVlM2IzZmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzYcvWU6eab4KDMe1sa7lqSPhCHR mwY3MURdtMeF3oF/FZdGLcqYty4OEWvf249gfb9fWMDKeHonE7GypAOY38oN6PQ6 fs6YKqWAqeHd4/vUASYBtmJFX+o2W9hbJhe71Gk+Fg7sOtk2+bocS7zpCcTULabt bjQo2gUa6cs6VhhrngjhLhVUtkKH+mdlwePjloLMbfufijfkQueoPZgXIeuJq2aa h3vSNw7Fzu7QSWmdolIOJexLiRMS+A0i4R1n8Ydzl7hq3FiQekuvVzaz1u/2ZRkk 8Wuxm0uTXbOTlhMPNUB51VMDUzMqwacOq2g4Hk9Aw2P5H+HJ6wcgIz74YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyXezn5jPHG/f1UW0h7WV/uOz+lMB8GA1UdIwQY MBaAFOhMv27g+8q/eet0vGJI85bPCurkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkV5X2J1RDd5cjk1NjNTOFlranpsczhLNnVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81MmRhMzUtMjZjYi00ZmVhLWJjZDgt ZDNhMzhjNzZhZDRkLzEvNkV5X2J1RDd5cjk1NjNTOFlranpsczhLNnVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC81MmRhMzUtMjZjYi00ZmVhLWJjZDgtZDNhMzhjNzZhZDRk LzEvNkV5X2J1RDd5cjk1NjNTOFlranpsczhLNnVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWMhkvAa wkX51hWHVAL0U0GnyQtN3wLQTFS2/7XnqL57u5pTqaDEOKbJtU0y5bUUspDuiNv5 JluKg/5YwMQHTkcd68TXK6yLpkirKcQ1s5em6d9zGJc+IFfNquT1VZ3NZkrmDs/u p9X/PWg52KTEEFs1MhsHLoCks7pShZjTkz68Kk3kfuChdIGk825ZStl6g17t61T6 gTi6sO8KjOiGNjQm4D+RWZlnW5HS12iTuZnjzpe6slmzTNNiXafHqhDkUiCopQBS RFC9f8c6E2nCXV3CWJXejsi2FNUUHY+TNX2631KucD140T33O/lIdkNTz/r+42Jr +pWNqsE4rotf8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:49 2025 by rpki-client