This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft File: 6hvqpk83AzxoCTVAtc2c4zdHKG8.mft (raw, json) Hash identifier: 7jWWbRbeG2hClc+2r8i8cm6asiuuh4TftQLFNL5azbQ= Subject key identifier: 31:55:85:ED:EC:DB:35:3E:7C:F6:D9:D9:21:C6:DA:8B:CA:28:12:03 Authority key identifier: EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F Certificate issuer: /CN=ea1beaa64f37033c68093540b5cd9ce33747286f Certificate serial: 019AF12EA14A39D11607EB4BA06E7AB71112 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft Manifest number: 0FE2 Signing time: Sat 06 Dec 2025 01:02:36 +0000 Manifest this update: Sat 06 Dec 2025 01:02:36 +0000 Manifest next update: Sun 07 Dec 2025 01:02:36 +0000 Files and hashes: 1: 6hvqpk83AzxoCTVAtc2c4zdHKG8.crl (hash: F4Adb1DSmGjgdFISpT5WxTpw7Thh/yTv3efYguPc7Fc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a1:4a:39:d1:16:07:eb:4b:a0:6e:7a:b7:11:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea1beaa64f37033c68093540b5cd9ce33747286f Validity Not Before: Dec 6 01:02:36 2025 GMT Not After : Dec 7 01:02:36 2025 GMT Subject: CN=315585edecdb353e7cf6d9d921c6da8bca281203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:b4:ad:4a:23:ea:31:b8:ad:8e:08:67:4e: 59:2c:35:d4:dd:4e:a8:be:ce:ae:8f:d6:f4:2c:a4: 06:e4:7a:0d:c7:56:74:36:dc:74:18:c7:a8:83:f7: ed:77:3a:0f:61:df:19:96:ce:18:2d:a9:6a:97:e3: ef:04:5e:74:7a:2e:a1:c0:e8:b9:da:65:53:c0:5d: e4:84:9b:ba:5e:18:2d:e6:97:d9:5c:f4:dc:d9:6b: 87:b9:0a:32:c6:01:7f:cd:b4:35:c4:25:38:ea:b2: c1:5d:ee:a2:5b:92:e0:0f:84:2b:45:17:fd:82:dd: 6f:1d:16:3b:48:f7:e2:9f:dd:25:fe:6f:71:bf:5f: 49:09:ad:58:9b:62:25:a6:f8:34:31:8f:0d:ff:de: d9:ed:ff:02:88:63:73:7c:56:78:5d:2f:97:92:ae: 22:e8:6f:b5:5b:36:4d:59:73:94:4f:56:98:cd:2a: de:1f:58:aa:83:1f:bc:69:27:58:ea:c0:c0:17:53: be:0e:38:e6:da:49:6d:a0:24:12:58:33:40:fc:4f: 42:85:86:69:73:92:c1:1e:24:3c:90:60:0d:7d:ee: a3:aa:98:c0:39:b9:06:d5:9e:c8:63:74:e0:5f:8c: 38:e3:c5:97:bb:5c:ae:a7:5a:33:3b:05:16:7e:3a: 77:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:55:85:ED:EC:DB:35:3E:7C:F6:D9:D9:21:C6:DA:8B:CA:28:12:03 X509v3 Authority Key Identifier: keyid:EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:e9:cc:86:49:23:c4:16:a4:f7:15:21:22:4d:77:cb:1c:a0: 71:42:20:42:b2:90:22:56:47:c5:d6:d3:a3:66:fb:b0:51:13: 1b:ae:85:27:c8:e9:3d:7b:b7:aa:c5:cc:e6:38:d5:1e:00:8f: d6:67:da:cf:9b:b8:65:80:fd:5e:1f:93:62:80:aa:44:03:42: 37:86:21:cc:33:bb:60:83:58:87:db:d8:8f:b2:ec:94:9a:b8: 18:3b:75:da:69:5e:73:8e:16:7b:c2:3b:26:db:b6:88:6a:27: 08:42:19:5a:b4:c5:9e:5b:c1:0a:7e:7e:e0:a7:08:88:b2:d5: de:cb:b0:a2:12:c1:79:15:19:33:95:fa:e1:3f:03:3a:24:b2: 30:f8:1b:fb:ac:fc:c5:8c:45:18:14:f7:66:00:48:68:75:0e: 5c:b1:09:53:39:2d:b5:14:57:2c:cb:ff:d1:06:39:aa:43:73: 07:82:e6:df:8f:4b:ba:2c:6a:c9:24:f0:87:45:13:eb:fe:29: 3d:0b:69:4f:2f:d3:e0:0a:57:31:15:64:3a:78:2d:c7:90:b7: 9a:5d:11:f0:cc:ad:c5:0a:18:b4:69:cc:84:b8:49:81:4e:9e: 6a:74:f9:7e:3d:66:ac:fb:1c:8c:47:c0:70:d1:b0:b9:93:0e: df:92:b6:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqFKOdEWB+tLoG56txESMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMWJlYWE2NGYzNzAzM2M2ODA5MzU0MGI1Y2Q5Y2UzMzc0 NzI4NmYwHhcNMjUxMjA2MDEwMjM2WhcNMjUxMjA3MDEwMjM2WjAzMTEwLwYDVQQD EygzMTU1ODVlZGVjZGIzNTNlN2NmNmQ5ZDkyMWM2ZGE4YmNhMjgxMjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtje0rUoj6jG4rY4IZ05ZLDXU3U6o vs6uj9b0LKQG5HoNx1Z0Ntx0GMeog/ftdzoPYd8Zls4YLalql+PvBF50ei6hwOi5 2mVTwF3khJu6Xhgt5pfZXPTc2WuHuQoyxgF/zbQ1xCU46rLBXe6iW5LgD4QrRRf9 gt1vHRY7SPfin90l/m9xv19JCa1Ym2Ilpvg0MY8N/97Z7f8CiGNzfFZ4XS+Xkq4i 6G+1WzZNWXOUT1aYzSreH1iqgx+8aSdY6sDAF1O+Djjm2kltoCQSWDNA/E9ChYZp c5LBHiQ8kGANfe6jqpjAObkG1Z7IY3TgX4w448WXu1yup1ozOwUWfjp3awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFVhe3s2zU+fPbZ2SHG2ovKKBIDMB8GA1UdIwQY MBaAFOob6qZPNwM8aAk1QLXNnOM3RyhvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmh2cXBrODNBenhvQ1RWQXRjMmM0emRIS0c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hMDQxY2MtN2VmMC00MDI4LThjZDQt YzVkZWY3YmM2YTEzLzEvNmh2cXBrODNBenhvQ1RWQXRjMmM0emRIS0c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9hMDQxY2MtN2VmMC00MDI4LThjZDQtYzVkZWY3YmM2YTEz LzEvNmh2cXBrODNBenhvQ1RWQXRjMmM0emRIS0c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQenMhkkj xBak9xUhIk13yxygcUIgQrKQIlZHxdbTo2b7sFETG66FJ8jpPXu3qsXM5jjVHgCP 1mfaz5u4ZYD9Xh+TYoCqRANCN4YhzDO7YINYh9vYj7LslJq4GDt12mlec44We8I7 Jtu2iGonCEIZWrTFnlvBCn5+4KcIiLLV3suwohLBeRUZM5X64T8DOiSyMPgb+6z8 xYxFGBT3ZgBIaHUOXLEJUzkttRRXLMv/0QY5qkNzB4Lm349LuixqySTwh0UT6/4p PQtpTy/T4ApXMRVkOngtx5C3ml0R8MytxQoYtGnMhLhJgU6eanT5fj1mrPscjEfA cNGwuZMO35K2wQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:33 2025 by rpki-client