This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft File: bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft (raw, json) Hash identifier: wtQ8QfKiINT79ixfr8RzY3aFNcvzwTqNhm87PcQZ0RY= Subject key identifier: 3F:A5:0F:D5:6E:6F:A4:D2:81:78:4D:E3:39:7C:C1:C8:66:D8:D4:79 Authority key identifier: 6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8 Certificate issuer: /CN=6d7ea43a1c4755787d491fba563b88811dccc5f8 Certificate serial: 019AF1D1AF6003AB4481B2E12062E1874288 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft Manifest number: 07CE Signing time: Sat 06 Dec 2025 04:00:42 +0000 Manifest this update: Sat 06 Dec 2025 04:00:42 +0000 Manifest next update: Sun 07 Dec 2025 04:00:42 +0000 Files and hashes: 1: bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl (hash: Fw/V7qR6kB+g7D+nPOAKztBjZdHqVrHzsNRii3jiZ+I=) 2: e_fKzyMGP2BAukkTPFbz9htGhsU.roa (hash: R8piax2BZXmCIRcmiQxJAzyQx3Kr2idqCRP3833Mldo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:af:60:03:ab:44:81:b2:e1:20:62:e1:87:42:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d7ea43a1c4755787d491fba563b88811dccc5f8 Validity Not Before: Dec 6 04:00:42 2025 GMT Not After : Dec 7 04:00:42 2025 GMT Subject: CN=3fa50fd56e6fa4d281784de3397cc1c866d8d479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6c:f1:56:94:31:56:27:14:0d:ac:76:b7:a1: 77:65:d2:f7:c9:0f:d3:2d:21:f4:7c:1f:e3:ce:d8: da:1c:84:c5:12:cd:aa:03:3d:48:4d:1f:5b:67:9e: 11:02:d9:c5:76:aa:d4:27:b9:27:3c:4c:e5:67:17: d1:1f:18:83:ef:7c:fc:77:5f:06:a8:f5:32:25:17: 82:1e:dc:b5:75:82:fc:bb:44:29:33:a2:ad:e2:0f: c7:fb:bf:d4:b3:e4:a7:38:ad:1c:34:0d:bb:6e:03: 4c:4c:a2:91:45:f6:55:76:96:08:1a:c5:27:b4:7f: db:5c:33:32:5e:72:33:45:ac:62:17:85:a5:28:e0: 6f:5f:99:0d:8d:bf:e1:df:a7:d6:24:e2:b0:d1:66: 86:98:be:a6:14:55:c5:21:2b:d2:a8:51:fc:40:36: 0c:57:4e:d0:e3:23:63:7f:e5:9b:d7:69:8e:56:f0: 65:b2:3e:87:69:06:df:1d:fe:b9:7e:97:0f:68:2f: 72:e8:95:ef:40:e2:cb:9b:6b:47:0a:95:7d:5c:e5: 20:da:59:76:12:0d:ed:74:ec:6b:e1:6d:fa:7d:8c: d8:b7:46:1f:fb:a2:49:24:3a:4a:f0:ff:8e:2c:76: eb:61:03:26:49:99:57:13:02:63:36:03:ce:78:6d: 9a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A5:0F:D5:6E:6F:A4:D2:81:78:4D:E3:39:7C:C1:C8:66:D8:D4:79 X509v3 Authority Key Identifier: keyid:6D:7E:A4:3A:1C:47:55:78:7D:49:1F:BA:56:3B:88:81:1D:CC:C5:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c9996-6f6b-4c31-863e-589d30ffaa8c/1/bX6kOhxHVXh9SR-6VjuIgR3Mxfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ea:59:9b:bd:66:e7:cb:c1:18:c3:f5:9e:86:b2:75:42:b1: c2:bd:37:9e:fe:20:8e:31:47:0d:d1:7e:d1:5b:93:ad:14:ee: 4f:35:27:ad:4e:a1:07:64:f3:46:ba:8d:03:2a:d6:bc:27:e0: ca:97:5e:4c:a0:bc:ae:ac:8b:f2:d6:64:4c:92:21:f0:2e:66: 13:d5:e4:3e:b6:aa:c1:2e:c6:7b:13:10:07:a8:8f:c5:59:78: 18:9c:63:5b:a4:de:2a:58:ee:d8:2d:9d:94:b8:42:5e:ca:2b: dd:5f:e5:82:5f:75:9c:de:4b:fc:a2:c8:ee:82:fb:5a:c8:05: 28:3c:43:0b:18:7d:9d:8f:48:2c:a4:a8:0a:b0:e9:8d:8a:e5: ad:dc:ed:a8:df:63:d4:36:d8:50:be:21:44:dd:1c:57:93:c6: 6f:91:f6:8d:ed:3c:08:72:b8:09:83:19:77:b8:e5:e3:e4:80: 13:4b:8e:29:69:e4:4d:d5:12:b9:f9:2a:d3:cc:e3:c1:ae:dd: f6:bc:86:99:60:2b:b3:fa:a3:4b:e7:07:a0:a2:c8:29:cc:dc: 42:b1:da:5e:35:c7:2d:79:14:13:84:e1:75:41:40:b7:95:37: f0:da:8b:54:e3:b2:41:f6:59:2e:b2:a7:d7:76:92:ce:a1:99: 7a:20:67:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0a9gA6tEgbLhIGLhh0KIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkN2VhNDNhMWM0NzU1Nzg3ZDQ5MWZiYTU2M2I4ODgxMWRj Y2M1ZjgwHhcNMjUxMjA2MDQwMDQyWhcNMjUxMjA3MDQwMDQyWjAzMTEwLwYDVQQD EygzZmE1MGZkNTZlNmZhNGQyODE3ODRkZTMzOTdjYzFjODY2ZDhkNDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWzxVpQxVicUDax2t6F3ZdL3yQ/T LSH0fB/jztjaHITFEs2qAz1ITR9bZ54RAtnFdqrUJ7knPEzlZxfRHxiD73z8d18G qPUyJReCHty1dYL8u0QpM6Kt4g/H+7/Us+SnOK0cNA27bgNMTKKRRfZVdpYIGsUn tH/bXDMyXnIzRaxiF4WlKOBvX5kNjb/h36fWJOKw0WaGmL6mFFXFISvSqFH8QDYM V07Q4yNjf+Wb12mOVvBlsj6HaQbfHf65fpcPaC9y6JXvQOLLm2tHCpV9XOUg2ll2 Eg3tdOxr4W36fYzYt0Yf+6JJJDpK8P+OLHbrYQMmSZlXEwJjNgPOeG2aBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+lD9Vub6TSgXhN4zl8wchm2NR5MB8GA1UdIwQY MBaAFG1+pDocR1V4fUkfulY7iIEdzMX4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlg2a09oeEhWWGg5U1ItNlZqdUlnUjNNeGZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81Yzk5OTYtNmY2Yi00YzMxLTg2M2Ut NTg5ZDMwZmZhYThjLzEvYlg2a09oeEhWWGg5U1ItNlZqdUlnUjNNeGZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi81Yzk5OTYtNmY2Yi00YzMxLTg2M2UtNTg5ZDMwZmZhYThj LzEvYlg2a09oeEhWWGg5U1ItNlZqdUlnUjNNeGZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHepZm71m 58vBGMP1noaydUKxwr03nv4gjjFHDdF+0VuTrRTuTzUnrU6hB2TzRrqNAyrWvCfg ypdeTKC8rqyL8tZkTJIh8C5mE9XkPraqwS7GexMQB6iPxVl4GJxjW6TeKlju2C2d lLhCXsor3V/lgl91nN5L/KLI7oL7WsgFKDxDCxh9nY9ILKSoCrDpjYrlrdztqN9j 1DbYUL4hRN0cV5PGb5H2je08CHK4CYMZd7jl4+SAE0uOKWnkTdUSufkq08zjwa7d 9ryGmWArs/qjS+cHoKLIKczcQrHaXjXHLXkUE4ThdUFAt5U38NqLVOOyQfZZLrKn 13aSzqGZeiBnpA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:42 2025 by rpki-client