This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft File: 6B4yXNISZiXGbUadtk5O-aqw3GM.mft (raw, json) Hash identifier: e8EHG4R3ozcwAjtWOBfH57lNsyomzTEe4Z7/Vdvh7ew= Subject key identifier: 74:0E:55:5D:66:3E:1F:93:DB:F2:55:F9:10:63:F2:21:C0:C5:9B:8D Authority key identifier: E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63 Certificate issuer: /CN=e81e325cd2126625c66d469db64e4ef9aab0dc63 Certificate serial: 019AF163F7D87A0BC9F144C61D0032B515FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft Manifest number: 0EC2 Signing time: Sat 06 Dec 2025 02:00:51 +0000 Manifest this update: Sat 06 Dec 2025 02:00:51 +0000 Manifest next update: Sun 07 Dec 2025 02:00:51 +0000 Files and hashes: 1: 6B4yXNISZiXGbUadtk5O-aqw3GM.crl (hash: y3ByvhZtJK0lPp0wKoHz3yNYI2j8isrSpeAzAcI1b40=) 2: guRa0ry_XeErXAXDimQX6nD8r-o.roa (hash: HkTFHVv5bF3CwAvh/UV6s5H3UbyzToqbz92TpMOY9SE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.crl rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f7:d8:7a:0b:c9:f1:44:c6:1d:00:32:b5:15:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e81e325cd2126625c66d469db64e4ef9aab0dc63 Validity Not Before: Dec 6 02:00:51 2025 GMT Not After : Dec 7 02:00:51 2025 GMT Subject: CN=740e555d663e1f93dbf255f91063f221c0c59b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:24:8f:dc:9a:c1:49:b9:a5:56:06:e0:8e:8e: c4:5a:6c:5f:d8:76:88:da:1f:c8:b9:5d:66:7e:f7: 98:a8:e0:f8:17:a9:c4:9a:4b:f0:d4:56:81:50:d6: 72:04:1b:a2:00:12:e1:54:e7:04:cb:91:4e:09:e7: 3a:c6:5b:98:5a:99:44:d0:66:3e:d8:fa:fc:19:9d: 78:4b:41:2f:5a:d5:b1:88:78:a4:d8:42:d9:d1:62: a4:29:a9:22:02:a0:b2:b4:83:1b:62:9f:6c:1c:eb: e9:84:73:f6:6d:5e:f1:2c:1d:33:df:29:28:88:ce: ca:93:54:cb:90:ab:e9:51:3d:4e:26:bf:99:3a:67: 23:64:41:2c:43:f2:b4:a8:41:8c:b8:86:25:a0:15: 19:0e:a0:96:34:3a:89:8e:55:9c:fc:fe:f2:42:4c: 56:62:a6:c2:b7:7d:e8:94:ad:cf:56:85:d7:f7:9c: 6d:51:81:75:68:da:9f:db:f3:49:7e:7d:0e:f7:b1: f0:d3:5d:81:a7:e1:1f:dc:a9:58:63:fc:01:52:29: 29:12:5e:2e:b4:c8:65:f7:74:fa:c3:06:12:30:05: 42:75:1d:0c:d5:aa:46:4c:f1:a5:56:92:d5:0d:a0: e7:38:f4:da:ea:c7:62:b8:10:77:a6:1b:fb:87:aa: ed:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0E:55:5D:66:3E:1F:93:DB:F2:55:F9:10:63:F2:21:C0:C5:9B:8D X509v3 Authority Key Identifier: keyid:E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ad:eb:db:1c:80:c4:d4:ab:4a:3a:8b:c8:77:99:ed:b8:4a: 9e:39:65:7c:ac:3e:e9:b1:e1:7e:4a:e5:b1:2f:99:ca:1a:3e: ef:ed:64:76:ad:fb:1c:c7:42:78:30:7b:fc:54:4f:08:ac:9d: 6a:3f:01:94:cf:3a:0f:06:d3:cb:b6:f0:65:9b:86:5e:75:8d: be:8b:4d:74:b8:16:24:7e:80:4a:ff:81:1f:ce:e6:c7:b0:09: 29:f2:35:71:25:2c:e2:40:17:0e:b9:d9:20:24:05:e3:ba:46: f5:20:69:82:46:31:4b:fa:7d:0f:45:dd:76:d0:2f:15:e6:b2: 04:a6:6d:35:b5:5b:c1:4b:8d:a7:12:0e:5c:7e:61:b7:a7:7e: 2d:11:58:a2:c2:10:0a:b6:55:64:a2:63:e3:75:88:04:ae:17: c2:d4:92:26:c0:1a:3a:7d:de:9e:fb:38:cb:05:5b:32:8f:04: e1:4f:7a:be:f7:31:41:2e:72:74:ac:c2:70:32:4f:92:c8:56: da:39:4a:80:55:62:55:bc:93:53:50:48:62:c2:26:30:09:a2: 1e:10:c7:f1:aa:58:a1:e5:28:aa:d9:a7:4c:89:0a:5d:da:81: c8:28:52:7f:ef:4e:25:b9:56:08:fd:b3:28:7c:3a:a2:21:80: 44:2c:e7:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/fYegvJ8UTGHQAytRX6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MWUzMjVjZDIxMjY2MjVjNjZkNDY5ZGI2NGU0ZWY5YWFi MGRjNjMwHhcNMjUxMjA2MDIwMDUxWhcNMjUxMjA3MDIwMDUxWjAzMTEwLwYDVQQD Eyg3NDBlNTU1ZDY2M2UxZjkzZGJmMjU1ZjkxMDYzZjIyMWMwYzU5YjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriSP3JrBSbmlVgbgjo7EWmxf2HaI 2h/IuV1mfveYqOD4F6nEmkvw1FaBUNZyBBuiABLhVOcEy5FOCec6xluYWplE0GY+ 2Pr8GZ14S0EvWtWxiHik2ELZ0WKkKakiAqCytIMbYp9sHOvphHP2bV7xLB0z3yko iM7Kk1TLkKvpUT1OJr+ZOmcjZEEsQ/K0qEGMuIYloBUZDqCWNDqJjlWc/P7yQkxW YqbCt33olK3PVoXX95xtUYF1aNqf2/NJfn0O97Hw012Bp+Ef3KlYY/wBUikpEl4u tMhl93T6wwYSMAVCdR0M1apGTPGlVpLVDaDnOPTa6sdiuBB3phv7h6rt4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQOVV1mPh+T2/JV+RBj8iHAxZuNMB8GA1UdIwQY MBaAFOgeMlzSEmYlxm1GnbZOTvmqsNxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkI0eVhOSVNaaVhHYlVhZHRrNU8tYXF3M0dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hZjc4YzktOTk5ZC00NjUxLWIyMWUt Zjk1Y2QzNmJmOTFhLzEvNkI0eVhOSVNaaVhHYlVhZHRrNU8tYXF3M0dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9hZjc4YzktOTk5ZC00NjUxLWIyMWUtZjk1Y2QzNmJmOTFh LzEvNkI0eVhOSVNaaVhHYlVhZHRrNU8tYXF3M0dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADq3r2xyA xNSrSjqLyHeZ7bhKnjllfKw+6bHhfkrlsS+Zyho+7+1kdq37HMdCeDB7/FRPCKyd aj8BlM86DwbTy7bwZZuGXnWNvotNdLgWJH6ASv+BH87mx7AJKfI1cSUs4kAXDrnZ ICQF47pG9SBpgkYxS/p9D0XddtAvFeayBKZtNbVbwUuNpxIOXH5ht6d+LRFYosIQ CrZVZKJj43WIBK4XwtSSJsAaOn3envs4ywVbMo8E4U96vvcxQS5ydKzCcDJPkshW 2jlKgFViVbyTU1BIYsImMAmiHhDH8apYoeUoqtmnTIkKXdqByChSf+9OJblWCP2z KHw6oiGARCznZw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:41 2025 by rpki-client