This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft File: 6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft (raw, json) Hash identifier: Q1os4YNmtVYZ6XROS0T00mvpf7fLTerffGFulrNxTDM= Subject key identifier: DD:74:00:80:94:A4:69:BE:C4:16:C1:27:C6:EE:F7:55:7A:49:B4:87 Authority key identifier: E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59 Certificate issuer: /CN=e979403cd68c98df738e31062903a0b322600b59 Certificate serial: 019AF57844E4CCDE667E2D50487B5F6D5EE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft Manifest number: 030B Signing time: Sat 06 Dec 2025 21:01:31 +0000 Manifest this update: Sat 06 Dec 2025 21:01:31 +0000 Manifest next update: Sun 07 Dec 2025 21:01:31 +0000 Files and hashes: 1: 6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl (hash: vcvkuCL+8SNDTnzzGXT9YxMkaFwOWISBPRLTOCTYuOU=) 2: F2xZ9QgRce67ga9Jmar4OMuLjGo.roa (hash: bnt8ZsENPOXky7xH9NrByc19Ki/WFnxkHvhWkRdi1JQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:44:e4:cc:de:66:7e:2d:50:48:7b:5f:6d:5e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e979403cd68c98df738e31062903a0b322600b59 Validity Not Before: Dec 6 21:01:31 2025 GMT Not After : Dec 7 21:01:31 2025 GMT Subject: CN=dd74008094a469bec416c127c6eef7557a49b487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:de:36:cf:93:d6:f1:75:4b:b3:b8:a6:18:ed: 08:dd:3e:4e:7a:d4:d0:e9:06:70:c5:a0:aa:39:8e: 09:c2:d5:cd:fb:21:bf:a6:5d:e0:50:85:01:4e:4d: 68:40:d0:6a:e9:43:5b:e8:96:1c:fa:f3:dc:9f:07: 32:d7:31:f8:10:95:e2:58:98:c5:5e:5f:fc:43:4e: a5:8a:29:c0:45:be:52:19:72:61:41:65:e4:78:c9: d1:78:c8:48:42:00:5e:ea:06:9d:d8:32:b7:4a:92: 82:b6:c1:b5:08:cc:e8:a3:67:d4:1a:22:8c:28:09: 93:d6:4e:28:25:1c:c1:43:3f:1d:e8:47:f2:8d:58: d9:17:6a:11:79:f5:25:8b:b6:b8:25:3c:5b:da:b1: 5b:61:9d:0c:df:fb:aa:5e:be:58:51:51:d2:37:34: f2:9b:0c:57:14:2c:32:1b:c3:4b:53:80:f8:8e:e3: 42:23:35:37:20:bd:0c:81:d1:da:d7:d6:eb:ac:d2: 5f:84:ca:bb:a6:05:74:ac:df:39:66:a3:e1:df:a3: fd:28:7e:5b:9c:a7:3a:e6:56:cd:e2:c6:26:68:dc: 8c:c2:5b:38:47:ed:9e:43:35:57:cc:0e:4f:62:71: c9:38:82:81:09:d7:03:2c:7d:2b:c4:52:6c:0b:ec: af:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:74:00:80:94:A4:69:BE:C4:16:C1:27:C6:EE:F7:55:7A:49:B4:87 X509v3 Authority Key Identifier: keyid:E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8a:14:0c:8c:22:20:ce:24:79:44:9f:24:0e:85:0b:e0:ad: 62:ce:da:7a:e2:16:b5:d7:93:85:44:77:6f:db:be:c5:02:39: 48:e4:41:8b:de:d5:1d:4f:8c:e7:73:f9:77:96:3c:b5:74:6a: 28:09:17:91:97:d3:73:97:1b:26:8f:6a:6c:99:54:3d:97:86: 8e:26:cd:ae:c1:41:f2:8e:a9:2e:ae:6a:89:d3:d8:76:19:28: df:d9:a0:5f:2b:ee:c1:f5:e7:1d:3a:b9:24:26:8b:27:a8:64: 44:35:66:02:22:12:d9:75:53:b2:a1:5d:17:97:80:2d:c0:e6: e6:31:5a:d9:41:fc:04:eb:69:d1:47:27:9c:e5:f0:3d:ba:fe: 01:9d:29:07:50:84:9c:fc:a5:4e:1b:fa:b6:b4:8b:b1:46:7f: 96:c5:67:2f:4b:53:34:f0:06:9d:5d:85:b7:db:01:6a:2d:05: 2f:b2:e9:f8:8c:d1:e9:ea:0b:8f:f6:ff:d8:a5:fd:9e:5d:00: c7:19:18:e6:02:34:87:02:5b:4c:b6:76:f8:5d:5a:04:f9:48: 2b:29:03:48:19:f0:3c:bb:5d:04:c1:40:5f:b9:4d:45:93:66: 52:9d:26:58:1d:6a:fc:23:59:3b:26:a1:8c:f2:08:c0:2f:33: 86:d9:84:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eETkzN5mfi1QSHtfbV7mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5Nzk0MDNjZDY4Yzk4ZGY3MzhlMzEwNjI5MDNhMGIzMjI2 MDBiNTkwHhcNMjUxMjA2MjEwMTMxWhcNMjUxMjA3MjEwMTMxWjAzMTEwLwYDVQQD EyhkZDc0MDA4MDk0YTQ2OWJlYzQxNmMxMjdjNmVlZjc1NTdhNDliNDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t42z5PW8XVLs7imGO0I3T5OetTQ 6QZwxaCqOY4JwtXN+yG/pl3gUIUBTk1oQNBq6UNb6JYc+vPcnwcy1zH4EJXiWJjF Xl/8Q06liinARb5SGXJhQWXkeMnReMhIQgBe6gad2DK3SpKCtsG1CMzoo2fUGiKM KAmT1k4oJRzBQz8d6EfyjVjZF2oRefUli7a4JTxb2rFbYZ0M3/uqXr5YUVHSNzTy mwxXFCwyG8NLU4D4juNCIzU3IL0MgdHa19brrNJfhMq7pgV0rN85ZqPh36P9KH5b nKc65lbN4sYmaNyMwls4R+2eQzVXzA5PYnHJOIKBCdcDLH0rxFJsC+yvzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN10AICUpGm+xBbBJ8bu91V6SbSHMB8GA1UdIwQY MBaAFOl5QDzWjJjfc44xBikDoLMiYAtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMDNhOGYtMzY3Zi00Y2ZhLTlhNzgt ZTgxNjIxYjYxZDY1LzEvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMDNhOGYtMzY3Zi00Y2ZhLTlhNzgtZTgxNjIxYjYxZDY1 LzEvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATooUDIwi IM4keUSfJA6FC+CtYs7aeuIWtdeThUR3b9u+xQI5SORBi97VHU+M53P5d5Y8tXRq KAkXkZfTc5cbJo9qbJlUPZeGjibNrsFB8o6pLq5qidPYdhko39mgXyvuwfXnHTq5 JCaLJ6hkRDVmAiIS2XVTsqFdF5eALcDm5jFa2UH8BOtp0UcnnOXwPbr+AZ0pB1CE nPylThv6trSLsUZ/lsVnL0tTNPAGnV2Ft9sBai0FL7Lp+IzR6eoLj/b/2KX9nl0A xxkY5gI0hwJbTLZ2+F1aBPlIKykDSBnwPLtdBMFAX7lNRZNmUp0mWB1q/CNZOyah jPIIwC8zhtmEjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:21:31 2025 by rpki-client