This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft File: 6W0H10zRSlpDn0g3WMQk260zl3o.mft (raw, json) Hash identifier: KjlwuKB309a5NF5NW4xNkfXv5w2KDexp/Stu+4IpkJU= Subject key identifier: AB:40:41:27:6D:07:62:13:55:06:F8:5D:30:C0:89:75:EA:D8:14:8C Authority key identifier: E9:6D:07:D7:4C:D1:4A:5A:43:9F:48:37:58:C4:24:DB:AD:33:97:7A Certificate issuer: /CN=e96d07d74cd14a5a439f483758c424dbad33977a Certificate serial: 019AF6F9D2EFFAF1F14FA23D027136EBA59D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W0H10zRSlpDn0g3WMQk260zl3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft Manifest number: 10C5 Signing time: Sun 07 Dec 2025 04:02:38 +0000 Manifest this update: Sun 07 Dec 2025 04:02:38 +0000 Manifest next update: Mon 08 Dec 2025 04:02:38 +0000 Files and hashes: 1: 6W0H10zRSlpDn0g3WMQk260zl3o.crl (hash: /yLaHecl+0EpdmEbGx8SeCm544sb/R8wQ3VPxsnWGDQ=) 2: cWBtpv0lbtjjKIiQC4VphdrpJsI.roa (hash: 53d/EkPX5lZbgRgCOrdlmmeWh1Ezm+rcdsaRC9uISUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.crl rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft rsync://rpki.ripe.net/repository/DEFAULT/6W0H10zRSlpDn0g3WMQk260zl3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:d2:ef:fa:f1:f1:4f:a2:3d:02:71:36:eb:a5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96d07d74cd14a5a439f483758c424dbad33977a Validity Not Before: Dec 7 04:02:38 2025 GMT Not After : Dec 8 04:02:38 2025 GMT Subject: CN=ab4041276d0762135506f85d30c08975ead8148c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f2:5e:64:96:34:5d:99:14:ec:cb:60:d6:dd: a3:f2:41:b5:d9:6c:96:eb:e6:e5:9b:86:df:67:43: cc:67:04:40:1d:3e:50:bb:c8:0b:83:c0:58:70:81: b6:3a:54:5e:73:ec:38:83:53:1b:23:5e:33:ec:3f: 3b:7e:c1:d4:2e:3c:66:85:5a:92:81:fd:90:46:b2: d0:3d:4e:67:93:8a:fe:33:27:22:6b:79:ce:9a:c2: 5e:34:9e:2c:f2:d1:64:e0:0c:46:c8:b3:84:9e:a5: 61:49:67:14:86:20:df:17:21:32:b3:a3:f4:c9:70: b6:ae:74:8a:22:87:56:8f:76:35:00:66:dd:19:3e: 76:9a:b8:16:e4:e8:e3:ba:f9:1f:83:c7:8d:f3:f2: a9:ff:4b:86:96:e3:b9:ff:45:9b:73:e0:82:22:f1: 91:8c:4d:d3:76:89:f9:d8:d0:7d:44:5f:80:43:57: 50:9b:2b:d2:fb:f0:d8:28:f3:4e:c1:e9:a7:5f:12: f8:99:5a:dd:17:ca:a7:71:12:36:f7:6e:e7:f5:6f: 81:38:58:58:41:1c:38:e2:79:a6:e1:52:58:14:09: 55:f9:b3:f3:0f:be:62:69:0a:c4:b6:3e:f2:ff:f9: 2a:7a:1a:fd:35:d7:ef:c4:33:07:65:d6:0e:ba:7e: 0c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:40:41:27:6D:07:62:13:55:06:F8:5D:30:C0:89:75:EA:D8:14:8C X509v3 Authority Key Identifier: keyid:E9:6D:07:D7:4C:D1:4A:5A:43:9F:48:37:58:C4:24:DB:AD:33:97:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W0H10zRSlpDn0g3WMQk260zl3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6824a-da61-4cb3-aa78-a0e2410f01e9/1/6W0H10zRSlpDn0g3WMQk260zl3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:ec:e9:1d:5c:29:6c:40:5c:1d:aa:64:77:8b:0a:0f:10:6b: f5:d3:84:e4:67:d8:56:15:89:bf:67:6c:bd:ba:7e:40:1f:72: bb:cc:3f:10:4b:6c:f4:f6:7a:8a:98:55:2b:2c:0a:8e:9e:f3: ca:28:54:dd:c6:7b:a5:a7:6e:00:a6:2d:d5:be:61:be:07:78: e8:f3:d9:18:79:b5:5e:85:55:23:26:c0:d7:8b:f2:c6:1d:15: dd:d7:ef:fd:c7:81:4b:1e:b5:bb:47:e8:f6:7f:63:b5:4a:2c: cc:36:74:a2:a4:b1:0b:a0:0a:1a:03:e9:fb:a0:c1:93:67:b6: d2:2e:97:76:79:de:2f:e6:c9:63:02:b3:af:d8:5d:10:92:7a: 96:73:a4:25:6e:c0:36:58:c8:04:d8:da:9e:3a:a5:f9:35:c4: 25:d9:0b:02:f9:9c:a7:e9:01:a5:bc:a4:53:4b:0d:bb:5b:3f: c4:df:76:ec:b8:cf:05:d9:c8:5a:6b:4f:69:6d:43:dd:c6:0a: da:d4:df:92:fe:61:92:35:29:64:d6:0f:26:4a:37:67:c0:00: 3a:0a:ec:1e:36:41:f6:a3:06:52:a2:23:3b:98:47:0d:61:c0: dc:1f:4a:d7:1a:8c:19:35:c8:03:c8:ed:45:4c:50:94:d8:e3: 1e:d5:7b:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+dLv+vHxT6I9AnE266WdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NmQwN2Q3NGNkMTRhNWE0MzlmNDgzNzU4YzQyNGRiYWQz Mzk3N2EwHhcNMjUxMjA3MDQwMjM4WhcNMjUxMjA4MDQwMjM4WjAzMTEwLwYDVQQD EyhhYjQwNDEyNzZkMDc2MjEzNTUwNmY4NWQzMGMwODk3NWVhZDgxNDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PJeZJY0XZkU7Mtg1t2j8kG12WyW 6+blm4bfZ0PMZwRAHT5Qu8gLg8BYcIG2OlRec+w4g1MbI14z7D87fsHULjxmhVqS gf2QRrLQPU5nk4r+Mycia3nOmsJeNJ4s8tFk4AxGyLOEnqVhSWcUhiDfFyEys6P0 yXC2rnSKIodWj3Y1AGbdGT52mrgW5Ojjuvkfg8eN8/Kp/0uGluO5/0Wbc+CCIvGR jE3Tdon52NB9RF+AQ1dQmyvS+/DYKPNOwemnXxL4mVrdF8qncRI2927n9W+BOFhY QRw44nmm4VJYFAlV+bPzD75iaQrEtj7y//kqehr9NdfvxDMHZdYOun4MbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtAQSdtB2ITVQb4XTDAiXXq2BSMMB8GA1UdIwQY MBaAFOltB9dM0UpaQ59IN1jEJNutM5d6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlcwSDEwelJTbHBEbjBnM1dNUWsyNjB6bDNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iNjgyNGEtZGE2MS00Y2IzLWFhNzgt YTBlMjQxMGYwMWU5LzEvNlcwSDEwelJTbHBEbjBnM1dNUWsyNjB6bDNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iNjgyNGEtZGE2MS00Y2IzLWFhNzgtYTBlMjQxMGYwMWU5 LzEvNlcwSDEwelJTbHBEbjBnM1dNUWsyNjB6bDNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOzpHVwp bEBcHapkd4sKDxBr9dOE5GfYVhWJv2dsvbp+QB9yu8w/EEts9PZ6iphVKywKjp7z yihU3cZ7paduAKYt1b5hvgd46PPZGHm1XoVVIybA14vyxh0V3dfv/ceBSx61u0fo 9n9jtUoszDZ0oqSxC6AKGgPp+6DBk2e20i6XdnneL+bJYwKzr9hdEJJ6lnOkJW7A NljIBNjanjql+TXEJdkLAvmcp+kBpbykU0sNu1s/xN927LjPBdnIWmtPaW1D3cYK 2tTfkv5hkjUpZNYPJko3Z8AAOgrsHjZB9qMGUqIjO5hHDWHA3B9K1xqMGTXIA8jt RUxQlNjjHtV7+Q== -----END CERTIFICATE-----Generated at Sun Dec 7 05:53:11 2025 by rpki-client