This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft File: _s7aKggEQpcq6nJV-LM6dg7LMcs.mft (raw, json) Hash identifier: n2Ivt3nihxOu++k5ck4qJpxbdUUU7oGEJ2EH+G4fYHU= Subject key identifier: 06:A9:80:40:77:02:3E:28:E2:70:62:B7:10:EF:C7:E6:F0:39:FC:FD Authority key identifier: FE:CE:DA:2A:08:04:42:97:2A:EA:72:55:F8:B3:3A:76:0E:CB:31:CB Certificate issuer: /CN=feceda2a080442972aea7255f8b33a760ecb31cb Certificate serial: 019AF12E854B339B1DC07E387047B3133D4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft Manifest number: 0D6A Signing time: Sat 06 Dec 2025 01:02:29 +0000 Manifest this update: Sat 06 Dec 2025 01:02:29 +0000 Manifest next update: Sun 07 Dec 2025 01:02:29 +0000 Files and hashes: 1: _s7aKggEQpcq6nJV-LM6dg7LMcs.crl (hash: cAwspRhQ79m0/O1lSb+h1sL7xFfLHFJ7317VvGEAjsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:85:4b:33:9b:1d:c0:7e:38:70:47:b3:13:3d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feceda2a080442972aea7255f8b33a760ecb31cb Validity Not Before: Dec 6 01:02:29 2025 GMT Not After : Dec 7 01:02:29 2025 GMT Subject: CN=06a9804077023e28e27062b710efc7e6f039fcfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a4:73:41:54:7a:d6:6e:c6:bb:43:f4:6f:c1: d3:07:2d:ee:de:12:ca:c2:b4:71:36:84:e6:df:2a: 05:bc:c7:4e:8c:40:01:8a:db:72:93:bd:8d:9f:cb: da:03:22:ed:45:02:41:f0:66:e6:26:1f:b8:22:d4: cc:98:8a:59:50:b7:3b:e4:b0:13:a4:d1:48:72:9c: 3b:49:c7:ad:da:28:36:29:ef:91:71:4e:59:1b:75: 56:6e:3c:86:03:30:1e:1a:f2:d5:84:8a:d4:9e:5f: d3:a9:e0:53:61:6c:dd:25:2c:1e:36:3a:41:07:5d: 2e:55:a2:03:50:04:9c:06:f9:b8:cd:b2:41:3c:9f: 75:6e:62:89:2c:e9:74:b7:99:d1:c4:a4:d2:3a:43: ae:eb:37:40:ce:a3:2b:b0:72:94:d5:41:61:e9:1c: dd:e9:dc:04:3c:bc:55:62:91:40:80:32:47:ba:44: 95:c1:16:a3:5e:5a:6c:89:17:e8:f1:07:1c:3d:fe: 03:aa:73:57:c9:ee:5d:1b:05:4e:74:14:c1:03:0d: f8:15:31:33:b2:04:c2:87:57:90:0d:7c:85:59:d1: 80:96:b9:3f:07:bb:a6:3e:ab:6f:63:ae:02:44:df: 0e:83:98:73:f7:1c:ef:71:c1:98:11:fc:d4:9c:5d: 37:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A9:80:40:77:02:3E:28:E2:70:62:B7:10:EF:C7:E6:F0:39:FC:FD X509v3 Authority Key Identifier: keyid:FE:CE:DA:2A:08:04:42:97:2A:EA:72:55:F8:B3:3A:76:0E:CB:31:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:39:98:42:de:1d:56:1c:d4:7f:1b:73:3f:88:22:c9:5e:05: ce:b5:98:b6:d1:4a:6d:f6:00:ce:18:6b:c5:20:dd:73:fc:e2: b5:fb:62:f6:8a:0f:44:bb:c7:1f:26:dd:7c:a2:c8:75:29:aa: ef:d3:94:fd:e7:22:04:55:87:9c:4a:9b:ff:da:41:f5:0b:27: b4:5c:01:35:3c:ac:08:46:91:50:af:05:99:81:1e:2a:3a:b5: 4f:00:3c:87:71:c2:00:c2:60:75:e6:38:30:64:4c:76:41:a6: 19:50:09:67:0e:3a:6b:64:69:10:4b:37:4a:44:d4:fd:d4:f3: 64:34:26:c5:56:e8:16:1c:a3:53:bc:de:c3:8e:55:3e:86:f9: 57:6c:45:4e:db:8f:5e:e6:ea:65:fc:94:d2:00:b8:55:51:bf: fa:0e:f9:6f:c0:44:cf:63:ac:16:1f:54:a4:39:33:81:af:a2: 11:d3:1e:f1:b8:37:29:c4:e7:9d:63:c0:cd:38:0f:49:87:ba: d3:d1:16:2a:6a:4c:c0:91:d6:88:eb:a4:13:48:25:16:0d:ac: ce:33:05:da:9b:fb:30:f8:17:02:83:d2:da:bd:65:46:ec:b6: 13:25:fa:9e:81:b8:f0:72:d7:3f:c7:a0:ed:d0:d4:d6:99:70: 82:ef:7c:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLoVLM5sdwH44cEezEz1KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlY2VkYTJhMDgwNDQyOTcyYWVhNzI1NWY4YjMzYTc2MGVj YjMxY2IwHhcNMjUxMjA2MDEwMjI5WhcNMjUxMjA3MDEwMjI5WjAzMTEwLwYDVQQD EygwNmE5ODA0MDc3MDIzZTI4ZTI3MDYyYjcxMGVmYzdlNmYwMzlmY2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqRzQVR61m7Gu0P0b8HTBy3u3hLK wrRxNoTm3yoFvMdOjEABittyk72Nn8vaAyLtRQJB8GbmJh+4ItTMmIpZULc75LAT pNFIcpw7Scet2ig2Ke+RcU5ZG3VWbjyGAzAeGvLVhIrUnl/TqeBTYWzdJSweNjpB B10uVaIDUAScBvm4zbJBPJ91bmKJLOl0t5nRxKTSOkOu6zdAzqMrsHKU1UFh6Rzd 6dwEPLxVYpFAgDJHukSVwRajXlpsiRfo8QccPf4DqnNXye5dGwVOdBTBAw34FTEz sgTCh1eQDXyFWdGAlrk/B7umPqtvY64CRN8Og5hz9xzvccGYEfzUnF03dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAapgEB3Aj4o4nBitxDvx+bwOfz9MB8GA1UdIwQY MBaAFP7O2ioIBEKXKupyVfizOnYOyzHLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3M3YUtnZ0VRcGNxNm5KVi1MTTZkZzdMTWNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy82MjNhZWItMGZjOS00MDNhLThkMzUt YjA0Y2Q4YTczYWZjLzEvX3M3YUtnZ0VRcGNxNm5KVi1MTTZkZzdMTWNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy82MjNhZWItMGZjOS00MDNhLThkMzUtYjA0Y2Q4YTczYWZj LzEvX3M3YUtnZ0VRcGNxNm5KVi1MTTZkZzdMTWNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjmYQt4d VhzUfxtzP4giyV4FzrWYttFKbfYAzhhrxSDdc/zitfti9ooPRLvHHybdfKLIdSmq 79OU/eciBFWHnEqb/9pB9QsntFwBNTysCEaRUK8FmYEeKjq1TwA8h3HCAMJgdeY4 MGRMdkGmGVAJZw46a2RpEEs3SkTU/dTzZDQmxVboFhyjU7zew45VPob5V2xFTtuP XubqZfyU0gC4VVG/+g75b8BEz2OsFh9UpDkzga+iEdMe8bg3KcTnnWPAzTgPSYe6 09EWKmpMwJHWiOukE0glFg2szjMF2pv7MPgXAoPS2r1lRuy2EyX6noG48HLXP8eg 7dDU1plwgu984w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:39 2025 by rpki-client