This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.mft File: 6_WDiMYxyXfqUfyttQzSCnSS9ec.mft (raw, json) Hash identifier: H+Sll1mwon1e4cQzYqOuxxvEMaMHUqyQ+XPKHweaAu4= Subject key identifier: 0F:D2:85:D7:B2:ED:7E:35:F2:EE:9D:DE:9B:7D:24:BB:C0:1A:40:65 Authority key identifier: EB:F5:83:88:C6:31:C9:77:EA:51:FC:AD:B5:0C:D2:0A:74:92:F5:E7 Certificate issuer: /CN=ebf58388c631c977ea51fcadb50cd20a7492f5e7 Certificate serial: 019AF12E3E59FA1245DD1AD5B97C0E9DD0AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_WDiMYxyXfqUfyttQzSCnSS9ec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.mft Manifest number: 15E0 Signing time: Sat 06 Dec 2025 01:02:10 +0000 Manifest this update: Sat 06 Dec 2025 01:02:10 +0000 Manifest next update: Sun 07 Dec 2025 01:02:10 +0000 Files and hashes: 1: 6_WDiMYxyXfqUfyttQzSCnSS9ec.crl (hash: hvWfkxnsCb1zOI8gmdm6q3FfWPMg+nP9T3A/lLCLN+s=) 2: KKfXHhC8ynjRtI36KFPIqF0xAvY.roa (hash: ezgy1Jn7srd8Of8dUU4rL8GndM8gLc3B5ZacAY1O9xY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.crl rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.mft rsync://rpki.ripe.net/repository/DEFAULT/6_WDiMYxyXfqUfyttQzSCnSS9ec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:3e:59:fa:12:45:dd:1a:d5:b9:7c:0e:9d:d0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf58388c631c977ea51fcadb50cd20a7492f5e7 Validity Not Before: Dec 6 01:02:10 2025 GMT Not After : Dec 7 01:02:10 2025 GMT Subject: CN=0fd285d7b2ed7e35f2ee9dde9b7d24bbc01a4065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:41:ab:ec:77:9b:92:7e:92:b8:af:1f:d8:bd: bd:ff:4f:70:a2:c2:fc:23:64:2a:2e:01:64:52:fa: 39:e9:8c:76:30:f2:be:ba:32:8b:32:4e:ea:3c:21: 59:ea:7c:bc:74:ff:f6:a7:dd:56:e1:d8:97:f5:67: a7:5a:03:2f:b4:ee:1f:5d:b6:cc:48:88:2f:aa:fa: bd:33:d5:5b:c7:d4:18:ee:f1:bf:a7:21:7e:f0:57: 00:23:bc:36:84:eb:08:de:93:14:f4:44:2b:b4:93: ea:b5:bc:b6:fc:f2:07:9a:e0:2f:45:d9:c0:a2:5b: 1b:20:e3:76:30:56:11:86:2b:81:32:c5:a1:75:cc: e8:8a:84:8e:17:e5:9b:bf:fe:48:52:b8:80:28:ec: af:63:64:93:41:6e:70:68:b8:c6:b6:ad:ef:93:5c: 7d:08:d9:a2:40:43:8f:42:ce:00:2d:83:d3:59:25: c1:07:43:b6:91:5c:78:0c:9e:cd:3f:15:c5:c8:9f: c9:91:82:53:be:ab:bb:2b:8e:e0:b8:86:2a:04:28: 3a:5b:69:74:a4:ce:34:2c:66:2c:01:9e:2d:db:75: 2e:95:8b:d4:63:b9:f9:b5:5d:35:83:9b:be:04:f7: 70:e8:6c:37:70:8d:49:54:25:1e:28:d7:aa:6f:eb: d2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D2:85:D7:B2:ED:7E:35:F2:EE:9D:DE:9B:7D:24:BB:C0:1A:40:65 X509v3 Authority Key Identifier: keyid:EB:F5:83:88:C6:31:C9:77:EA:51:FC:AD:B5:0C:D2:0A:74:92:F5:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_WDiMYxyXfqUfyttQzSCnSS9ec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:46:3b:6c:5b:1d:4e:b6:f9:02:ed:fa:b0:9b:97:67:90:27: c6:db:05:5f:7d:ee:66:3a:08:0c:3d:d3:d1:cb:c6:d7:d8:b7: 04:9b:3d:37:11:dd:72:e2:e3:ee:73:1f:56:4d:c3:b0:e8:79: 50:38:03:d6:51:74:b3:c1:b0:d2:fb:01:7f:8f:64:c1:92:f8: 4b:5a:27:4f:4c:28:b9:e6:12:97:c8:63:b4:c3:99:ab:14:85: e7:5e:2f:bc:5a:91:53:7f:65:5c:21:3a:82:04:28:1a:49:26: cb:15:07:df:54:4e:7d:6f:89:48:4d:9d:0d:26:c1:6f:ab:6a: 0c:50:ea:13:55:f0:66:07:10:0a:8c:59:d3:78:74:aa:53:cf: 7d:94:db:f7:72:53:24:0a:1c:ca:c4:77:35:fe:ed:b5:6a:ec: 75:14:23:26:75:da:17:4a:d6:79:01:e4:29:95:bd:81:2f:98: 52:96:a9:54:a9:49:9a:66:3a:d5:4a:47:4c:02:e8:0b:72:aa: ee:6b:e4:1b:4e:52:e3:d2:78:d6:ef:bd:91:0b:46:f2:55:c7: 40:9b:8b:79:2e:d2:b5:d0:21:02:cd:7d:5f:d6:dc:f5:d0:5e: 5c:5e:5c:7a:df:80:cf:46:2d:44:2a:3e:67:82:14:0e:ad:d6: fe:bb:aa:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLj5Z+hJF3RrVuXwOndCsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZjU4Mzg4YzYzMWM5NzdlYTUxZmNhZGI1MGNkMjBhNzQ5 MmY1ZTcwHhcNMjUxMjA2MDEwMjEwWhcNMjUxMjA3MDEwMjEwWjAzMTEwLwYDVQQD EygwZmQyODVkN2IyZWQ3ZTM1ZjJlZTlkZGU5YjdkMjRiYmMwMWE0MDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUGr7Hebkn6SuK8f2L29/09wosL8 I2QqLgFkUvo56Yx2MPK+ujKLMk7qPCFZ6ny8dP/2p91W4diX9WenWgMvtO4fXbbM SIgvqvq9M9Vbx9QY7vG/pyF+8FcAI7w2hOsI3pMU9EQrtJPqtby2/PIHmuAvRdnA olsbION2MFYRhiuBMsWhdczoioSOF+Wbv/5IUriAKOyvY2STQW5waLjGtq3vk1x9 CNmiQEOPQs4ALYPTWSXBB0O2kVx4DJ7NPxXFyJ/JkYJTvqu7K47guIYqBCg6W2l0 pM40LGYsAZ4t23UulYvUY7n5tV01g5u+BPdw6Gw3cI1JVCUeKNeqb+vSWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/Shdey7X418u6d3pt9JLvAGkBlMB8GA1UdIwQY MBaAFOv1g4jGMcl36lH8rbUM0gp0kvXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNl9XRGlNWXh5WGZxVWZ5dHRRelNDblNTOWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xYzhiZWUtOGRmOC00MTAyLWE0ZWMt NGYxYWRlMWRhMjBkLzEvNl9XRGlNWXh5WGZxVWZ5dHRRelNDblNTOWVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8xYzhiZWUtOGRmOC00MTAyLWE0ZWMtNGYxYWRlMWRhMjBk LzEvNl9XRGlNWXh5WGZxVWZ5dHRRelNDblNTOWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEY7bFsd Trb5Au36sJuXZ5AnxtsFX33uZjoIDD3T0cvG19i3BJs9NxHdcuLj7nMfVk3DsOh5 UDgD1lF0s8Gw0vsBf49kwZL4S1onT0woueYSl8hjtMOZqxSF514vvFqRU39lXCE6 ggQoGkkmyxUH31ROfW+JSE2dDSbBb6tqDFDqE1XwZgcQCoxZ03h0qlPPfZTb93JT JAocysR3Nf7ttWrsdRQjJnXaF0rWeQHkKZW9gS+YUpapVKlJmmY61UpHTALoC3Kq 7mvkG05S49J41u+9kQtG8lXHQJuLeS7StdAhAs19X9bc9dBeXF5cet+Az0YtRCo+ Z4IUDq3W/ruqmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:21:07 2025 by rpki-client