This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft File: 6DGCFvAxEBktn29i_-4ZDrvVxBs.mft (raw, json) Hash identifier: SvUxtcwV5wG3TssmeUQRDtYOhSOLYouvqRFE5/XWBOM= Subject key identifier: 63:79:F8:1E:A3:83:39:67:02:6D:94:BD:E6:5E:81:E1:4D:31:4F:C5 Authority key identifier: E8:31:82:16:F0:31:10:19:2D:9F:6F:62:FF:EE:19:0E:BB:D5:C4:1B Certificate issuer: /CN=e8318216f03110192d9f6f62ffee190ebbd5c41b Certificate serial: 019AF1D19FDC727398ECBF89148DAEBCF6A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft Manifest number: 01A6 Signing time: Sat 06 Dec 2025 04:00:38 +0000 Manifest this update: Sat 06 Dec 2025 04:00:38 +0000 Manifest next update: Sun 07 Dec 2025 04:00:38 +0000 Files and hashes: 1: 6DGCFvAxEBktn29i_-4ZDrvVxBs.crl (hash: VpVaiC0cVGfEp0dokFOOucn/rSVfoGal7+u2eGVdDKE=) 2: 7rHBYtW6X1cejc9TILphrdP_TBk.roa (hash: fyAkynyCTru31PmwyHkLxs5s4xfquOrJnfeQ7K5zOpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.crl rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9f:dc:72:73:98:ec:bf:89:14:8d:ae:bc:f6:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8318216f03110192d9f6f62ffee190ebbd5c41b Validity Not Before: Dec 6 04:00:38 2025 GMT Not After : Dec 7 04:00:38 2025 GMT Subject: CN=6379f81ea3833967026d94bde65e81e14d314fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:dd:43:34:f8:75:27:f4:a2:ca:d0:31:87: 7f:e1:66:b1:20:73:a3:1e:e1:15:ef:95:bb:10:49: bb:c2:60:cd:cc:ea:34:1a:ed:eb:d0:b0:3f:b8:94: d0:29:34:97:82:55:b6:a5:12:d8:3c:84:63:fe:fe: 94:c3:f2:e2:2e:f7:b9:c0:19:74:a6:60:33:fa:7c: 05:e5:03:ba:25:3e:9e:4b:ed:76:0d:ec:e1:3b:cb: 7a:fa:f4:cf:4d:96:a8:dd:ab:c7:6a:3b:3b:b1:a9: bf:fc:05:4c:b9:9a:cf:35:75:74:80:94:7a:d5:ce: 96:08:6e:b1:35:6d:e2:97:a9:b2:87:d3:b9:9a:70: 14:28:cd:be:7d:18:aa:6c:13:1f:23:08:0d:3d:02: 99:d5:46:19:66:8e:35:82:12:52:78:08:5f:d5:0b: 4f:0a:ef:74:b0:35:9b:d0:69:6d:8c:48:de:98:f0: 48:19:2e:6a:2f:56:dd:88:9d:ed:d3:84:80:ce:b3: b0:56:6b:77:e2:3a:cc:62:17:10:c9:6d:c0:4d:e2: b2:3a:a6:4b:68:9d:0a:0e:ad:04:87:4e:a1:01:93: a4:3b:7d:d4:45:c9:89:f3:9c:51:1c:e2:b4:4f:83: a3:c1:ba:dd:ae:5d:df:b3:cf:2b:2d:9b:c0:64:73: c2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:79:F8:1E:A3:83:39:67:02:6D:94:BD:E6:5E:81:E1:4D:31:4F:C5 X509v3 Authority Key Identifier: keyid:E8:31:82:16:F0:31:10:19:2D:9F:6F:62:FF:EE:19:0E:BB:D5:C4:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DGCFvAxEBktn29i_-4ZDrvVxBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/816cf9-e6a0-43f1-8a3d-5c7c3ad74a32/1/6DGCFvAxEBktn29i_-4ZDrvVxBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a5:7c:ae:dc:20:59:2c:80:a1:0f:fa:9a:13:10:4d:43:2c: 07:5b:a3:c7:21:f1:44:e5:ee:45:cf:f4:8d:74:a5:25:5d:09: 8a:df:eb:e4:90:f3:6d:a9:26:53:bb:28:66:04:cb:a1:fb:29: a7:6f:35:00:05:20:88:a6:06:b8:56:a0:92:07:a9:67:5b:9f: 13:06:ac:16:ff:4a:0d:a9:bc:8c:08:29:cf:4d:6e:52:c7:98: 83:0d:26:55:4b:32:40:31:fc:f2:c9:0d:5a:d1:13:54:d9:b5: cb:86:73:6b:6f:7a:f4:03:84:1c:e6:b2:24:33:db:23:20:d6: 43:83:f0:65:3c:64:b6:c1:4d:8e:73:3f:63:e4:ee:59:1e:a0: 52:9e:22:72:f5:28:fa:a7:63:80:d8:0d:f4:49:0f:87:49:6d: 38:3c:7e:bf:f0:11:27:56:09:ba:18:87:64:0a:09:6f:2b:62: d5:d6:c6:a0:a5:3f:0c:16:02:7b:a9:da:f2:4d:2a:5b:77:07: 0b:cd:c4:de:e8:82:99:d6:19:7e:62:23:3f:23:66:2d:bf:c4: 7d:eb:f0:57:62:cd:ec:d2:02:33:e1:12:9a:73:54:c1:0c:af: 7a:09:2a:bd:79:b5:ba:85:ea:95:eb:5f:b8:a2:c3:d5:32:fc: 47:0a:d6:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Z/ccnOY7L+JFI2uvPapMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MzE4MjE2ZjAzMTEwMTkyZDlmNmY2MmZmZWUxOTBlYmJk NWM0MWIwHhcNMjUxMjA2MDQwMDM4WhcNMjUxMjA3MDQwMDM4WjAzMTEwLwYDVQQD Eyg2Mzc5ZjgxZWEzODMzOTY3MDI2ZDk0YmRlNjVlODFlMTRkMzE0ZmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4LdQzT4dSf0osrQMYd/4WaxIHOj HuEV75W7EEm7wmDNzOo0Gu3r0LA/uJTQKTSXglW2pRLYPIRj/v6Uw/LiLve5wBl0 pmAz+nwF5QO6JT6eS+12DezhO8t6+vTPTZao3avHajs7sam//AVMuZrPNXV0gJR6 1c6WCG6xNW3il6myh9O5mnAUKM2+fRiqbBMfIwgNPQKZ1UYZZo41ghJSeAhf1QtP Cu90sDWb0GltjEjemPBIGS5qL1bdiJ3t04SAzrOwVmt34jrMYhcQyW3ATeKyOqZL aJ0KDq0Eh06hAZOkO33URcmJ85xRHOK0T4Ojwbrdrl3fs88rLZvAZHPCvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGN5+B6jgzlnAm2UveZegeFNMU/FMB8GA1UdIwQY MBaAFOgxghbwMRAZLZ9vYv/uGQ671cQbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkRHQ0Z2QXhFQmt0bjI5aV8tNFpEcnZWeEJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi84MTZjZjktZTZhMC00M2YxLThhM2Qt NWM3YzNhZDc0YTMyLzEvNkRHQ0Z2QXhFQmt0bjI5aV8tNFpEcnZWeEJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi84MTZjZjktZTZhMC00M2YxLThhM2QtNWM3YzNhZDc0YTMy LzEvNkRHQ0Z2QXhFQmt0bjI5aV8tNFpEcnZWeEJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6V8rtwg WSyAoQ/6mhMQTUMsB1ujxyHxROXuRc/0jXSlJV0Jit/r5JDzbakmU7soZgTLofsp p281AAUgiKYGuFagkgepZ1ufEwasFv9KDam8jAgpz01uUseYgw0mVUsyQDH88skN WtETVNm1y4Zza2969AOEHOayJDPbIyDWQ4PwZTxktsFNjnM/Y+TuWR6gUp4icvUo +qdjgNgN9EkPh0ltODx+v/ARJ1YJuhiHZAoJbyti1dbGoKU/DBYCe6na8k0qW3cH C83E3uiCmdYZfmIjPyNmLb/EfevwV2LN7NICM+ESmnNUwQyvegkqvXm1uoXqletf uKLD1TL8RwrWSA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:24 2025 by rpki-client