This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft File: l6A46SAR7iaAaKFRfSRM4iwmVU0.mft (raw, json) Hash identifier: UjUxcwtR08IwuCbkU6hyNrcAXoJoyQQLUxnyBf/zA20= Subject key identifier: 8D:2C:B9:BF:03:8E:B3:AD:79:55:5E:E6:B6:C5:88:A6:D3:76:88:A4 Authority key identifier: 97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D Certificate issuer: /CN=97a038e92011ee268068a1517d244ce22c26554d Certificate serial: 019AF1D207AF2C2428915F9CE3F4D8A41E45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft Manifest number: 0ACC Signing time: Sat 06 Dec 2025 04:01:04 +0000 Manifest this update: Sat 06 Dec 2025 04:01:04 +0000 Manifest next update: Sun 07 Dec 2025 04:01:04 +0000 Files and hashes: 1: l6A46SAR7iaAaKFRfSRM4iwmVU0.crl (hash: qv/K3RmR6fEb62JTENxSI0z6gTyDYIChYUvltlVXrkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:07:af:2c:24:28:91:5f:9c:e3:f4:d8:a4:1e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97a038e92011ee268068a1517d244ce22c26554d Validity Not Before: Dec 6 04:01:04 2025 GMT Not After : Dec 7 04:01:04 2025 GMT Subject: CN=8d2cb9bf038eb3ad79555ee6b6c588a6d37688a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2f:ea:07:c7:27:0b:99:9d:9c:10:81:2d:d0: 80:75:80:72:1f:98:5b:4a:1a:bb:9e:be:50:64:3e: 3b:a5:05:de:0e:9f:2d:e2:0d:72:de:b6:8e:41:85: 6c:4c:f9:0b:b4:69:c4:5c:87:df:6a:a7:56:c2:ec: 6b:62:07:ab:49:3c:33:54:aa:ff:47:d4:b6:2b:dd: df:23:de:0f:0a:30:f9:a1:12:01:94:1f:8e:97:c4: ca:3f:96:a6:0c:ad:55:8a:6d:9a:d5:e2:62:1d:c8: b9:04:56:5e:b4:90:d1:14:1d:18:e4:a7:ed:60:38: 3c:4a:b7:0f:4a:e0:47:5d:97:7f:0c:20:63:ca:dd: e0:1f:09:6e:3e:b1:4d:a5:43:8e:c6:32:24:88:5f: 74:b6:f2:e3:70:c3:20:49:df:4e:c4:12:d6:d8:e8: 88:a9:3e:3d:67:a1:7a:d5:7e:ca:5c:6d:93:16:ae: 40:8e:f9:68:1b:f6:3d:01:7c:f7:e6:93:b4:fb:03: 34:e7:6b:55:58:1b:14:d1:73:d8:44:7b:81:85:e9: b4:e4:6e:c4:98:6e:cc:e0:0e:eb:a3:b7:9e:25:2f: b5:db:c8:6e:01:aa:3c:de:1f:ff:44:6e:65:4d:99: 83:4f:12:88:15:8c:c4:9c:27:04:14:0b:28:56:c4: 0e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2C:B9:BF:03:8E:B3:AD:79:55:5E:E6:B6:C5:88:A6:D3:76:88:A4 X509v3 Authority Key Identifier: keyid:97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:4f:77:e3:6a:b5:eb:78:8c:0b:8f:5b:64:a2:b7:f5:23:c6: 17:9b:42:21:02:7f:08:ca:fb:cd:47:26:06:0c:bf:39:c5:58: 5d:e2:14:8e:44:3c:d9:cb:92:0f:ab:67:c2:10:e8:4d:e0:a6: 5e:68:e6:5d:f4:80:f0:5c:ef:51:10:70:1d:43:a6:7f:df:45: e0:9d:8f:50:e6:0a:25:4c:4f:a7:2d:9e:15:f1:ef:54:29:34: 4b:4a:75:c1:f0:c7:c2:8b:47:ab:eb:3c:c4:08:10:d9:3c:a6: b2:8e:79:0c:16:57:e2:8d:fb:8f:d3:ac:3e:a0:dc:d6:4c:62: 5b:6d:7a:59:65:62:66:59:8d:20:63:12:c0:b3:14:4c:6b:3f: 51:4a:5e:39:cb:4a:e5:1e:72:01:a5:9c:3f:70:4c:85:62:0b: f9:e6:52:5f:18:de:15:65:f4:e3:7a:1c:ad:b6:a7:de:55:e7: 48:b9:c3:ca:45:68:c8:b1:8e:74:43:36:ea:e1:b7:e8:ac:01: 5c:ec:70:7a:ce:4e:43:81:0b:6e:b6:b7:59:9d:74:69:bb:c2: 78:80:2e:87:f9:2c:42:eb:83:6a:47:96:70:38:0d:b9:3a:1d: 2c:4a:a9:be:89:78:76:bf:d6:51:93:5f:82:9a:7e:db:6a:28: 27:a5:43:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gevLCQokV+c4/TYpB5FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YTAzOGU5MjAxMWVlMjY4MDY4YTE1MTdkMjQ0Y2UyMmMy NjU1NGQwHhcNMjUxMjA2MDQwMTA0WhcNMjUxMjA3MDQwMTA0WjAzMTEwLwYDVQQD Eyg4ZDJjYjliZjAzOGViM2FkNzk1NTVlZTZiNmM1ODhhNmQzNzY4OGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny/qB8cnC5mdnBCBLdCAdYByH5hb Shq7nr5QZD47pQXeDp8t4g1y3raOQYVsTPkLtGnEXIffaqdWwuxrYgerSTwzVKr/ R9S2K93fI94PCjD5oRIBlB+Ol8TKP5amDK1Vim2a1eJiHci5BFZetJDRFB0Y5Kft YDg8SrcPSuBHXZd/DCBjyt3gHwluPrFNpUOOxjIkiF90tvLjcMMgSd9OxBLW2OiI qT49Z6F61X7KXG2TFq5AjvloG/Y9AXz35pO0+wM052tVWBsU0XPYRHuBhem05G7E mG7M4A7ro7eeJS+128huAao83h//RG5lTZmDTxKIFYzEnCcEFAsoVsQOBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0sub8DjrOteVVe5rbFiKbTdoikMB8GA1UdIwQY MBaAFJegOOkgEe4mgGihUX0kTOIsJlVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDZBNDZTQVI3aWFBYUtGUmZTUk00aXdtVlUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZmZkMmYtY2ZlYi00NWE4LThkZWYt ODUyYjZkOGMwMmUyLzEvbDZBNDZTQVI3aWFBYUtGUmZTUk00aXdtVlUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZmZkMmYtY2ZlYi00NWE4LThkZWYtODUyYjZkOGMwMmUy LzEvbDZBNDZTQVI3aWFBYUtGUmZTUk00aXdtVlUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk09342q1 63iMC49bZKK39SPGF5tCIQJ/CMr7zUcmBgy/OcVYXeIUjkQ82cuSD6tnwhDoTeCm XmjmXfSA8FzvURBwHUOmf99F4J2PUOYKJUxPpy2eFfHvVCk0S0p1wfDHwotHq+s8 xAgQ2Tymso55DBZX4o37j9OsPqDc1kxiW216WWViZlmNIGMSwLMUTGs/UUpeOctK 5R5yAaWcP3BMhWIL+eZSXxjeFWX043ocrban3lXnSLnDykVoyLGOdEM26uG36KwB XOxwes5OQ4ELbra3WZ10abvCeIAuh/ksQuuDakeWcDgNuTodLEqpvol4dr/WUZNf gpp+22ooJ6VDGA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:41 2025 by rpki-client