This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft File: 6B8A4bRaGW0p_COM5zm6kUD2GUY.mft (raw, json) Hash identifier: 26zkSgnDZ6SwGUWpyPBquF3c2UmX3QCKcvCtmYWu/3M= Subject key identifier: 9E:1C:F6:F0:DC:F5:49:D7:F4:E5:B1:B8:FA:67:82:64:72:C6:9C:A6 Authority key identifier: E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46 Certificate issuer: /CN=e81f00e1b45a196d29fc238ce739ba9140f61946 Certificate serial: 019AF12D43F4B0614BF0855F0B2A4E0401D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft Manifest number: 030D Signing time: Sat 06 Dec 2025 01:01:06 +0000 Manifest this update: Sat 06 Dec 2025 01:01:06 +0000 Manifest next update: Sun 07 Dec 2025 01:01:06 +0000 Files and hashes: 1: 6B8A4bRaGW0p_COM5zm6kUD2GUY.crl (hash: YK+Qphpds1cuhkaozHVFaAv/RlNQ4a338T652jLeNT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:43:f4:b0:61:4b:f0:85:5f:0b:2a:4e:04:01:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e81f00e1b45a196d29fc238ce739ba9140f61946 Validity Not Before: Dec 6 01:01:06 2025 GMT Not After : Dec 7 01:01:06 2025 GMT Subject: CN=9e1cf6f0dcf549d7f4e5b1b8fa67826472c69ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:42:a3:c3:0d:6e:be:96:e6:aa:ea:fe:82:62: d9:72:90:52:5b:50:72:60:c5:55:46:4e:44:11:b0: 16:30:b2:d3:b1:ca:14:0f:3f:f3:b5:f9:f2:8a:ce: 89:8b:a5:25:42:fe:93:2a:c2:12:6d:d9:56:0c:13: 73:ed:e7:63:cf:84:ea:4f:ab:b4:9a:d0:f0:44:13: 6c:55:3b:b3:d0:f1:87:fb:b9:23:29:56:59:89:3b: 13:25:f0:26:de:27:7b:26:ea:70:46:8f:84:c7:d4: b7:8e:3b:b1:76:d0:ab:05:2a:56:a2:54:a6:26:e8: c0:e4:b8:35:0d:97:ab:0c:75:56:41:29:57:e1:a9: 55:d2:4d:30:2e:61:83:b9:5b:61:23:74:5b:75:91: 02:44:b3:b9:03:fd:85:3c:94:e7:12:6d:66:ea:8d: 9d:c3:3c:a1:f8:08:64:21:32:19:a7:a5:91:63:51: d8:07:02:e1:b0:7c:d3:2f:c5:a7:b5:79:8a:a9:78: 0d:71:81:1b:98:07:27:0d:86:e4:1a:8a:d9:ae:a3: 38:a3:92:62:0a:79:f0:f2:26:ff:f3:27:e0:f6:4b: b8:77:d3:4d:d8:2d:4c:de:48:a3:09:be:c5:5d:e7: ee:dd:5f:69:32:15:2c:89:bb:be:b7:fd:23:b0:16: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1C:F6:F0:DC:F5:49:D7:F4:E5:B1:B8:FA:67:82:64:72:C6:9C:A6 X509v3 Authority Key Identifier: keyid:E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:d0:5d:42:1e:28:dd:f4:14:ee:d0:32:e3:ab:69:b9:94:7b: 55:63:b9:3d:a7:72:d5:92:cf:a6:23:e9:f7:9f:f6:a1:1e:ef: fa:dc:41:61:4e:21:12:2d:07:1e:3f:c3:f2:dd:8f:3b:49:ae: 0b:00:9b:65:f0:16:65:e0:51:63:47:fd:05:1a:fd:8d:70:83: 8d:6d:a9:3d:8d:61:d4:42:cd:f8:c9:5e:f4:c9:a2:2a:25:68: 2a:c8:bd:8f:48:64:04:77:f3:e3:56:05:36:cf:ac:ad:54:f3: 68:b6:11:ed:b3:61:42:6a:75:89:84:66:be:9d:1b:44:c8:2e: 64:ef:38:a7:97:2d:38:38:64:05:2f:e2:40:70:eb:99:92:8c: c2:91:28:03:7f:33:1a:4d:34:54:2f:e7:c2:d0:eb:73:de:3f: 51:35:20:1d:d3:7d:a8:b7:8a:94:cb:e7:08:28:05:ed:9c:f8: 94:3c:d4:46:d2:36:5b:8f:d8:2a:96:29:ff:56:ee:6b:3d:4c: 42:d2:0b:b4:ae:7e:ec:dc:1c:8e:14:20:6e:ad:a3:38:1e:d8: 1d:aa:a7:1a:77:58:0b:b4:3a:fd:3d:91:e6:a2:6a:d7:93:83: e7:c6:cc:28:20:a1:a3:74:8c:a6:27:7e:17:9a:77:6a:9f:26: 75:61:0b:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUP0sGFL8IVfCypOBAHVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MWYwMGUxYjQ1YTE5NmQyOWZjMjM4Y2U3MzliYTkxNDBm NjE5NDYwHhcNMjUxMjA2MDEwMTA2WhcNMjUxMjA3MDEwMTA2WjAzMTEwLwYDVQQD Eyg5ZTFjZjZmMGRjZjU0OWQ3ZjRlNWIxYjhmYTY3ODI2NDcyYzY5Y2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUKjww1uvpbmqur+gmLZcpBSW1By YMVVRk5EEbAWMLLTscoUDz/ztfnyis6Ji6UlQv6TKsISbdlWDBNz7edjz4TqT6u0 mtDwRBNsVTuz0PGH+7kjKVZZiTsTJfAm3id7JupwRo+Ex9S3jjuxdtCrBSpWolSm JujA5Lg1DZerDHVWQSlX4alV0k0wLmGDuVthI3RbdZECRLO5A/2FPJTnEm1m6o2d wzyh+AhkITIZp6WRY1HYBwLhsHzTL8WntXmKqXgNcYEbmAcnDYbkGorZrqM4o5Ji Cnnw8ib/8yfg9ku4d9NN2C1M3kijCb7FXefu3V9pMhUsibu+t/0jsBboiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4c9vDc9UnX9OWxuPpngmRyxpymMB8GA1UdIwQY MBaAFOgfAOG0WhltKfwjjOc5upFA9hlGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkI4QTRiUmFHVzBwX0NPTTV6bTZrVUQyR1VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zNWExYzgtZTE4Ni00ZWE4LWI3ODMt NDIxZDQ5OGIyMDkyLzEvNkI4QTRiUmFHVzBwX0NPTTV6bTZrVUQyR1VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8zNWExYzgtZTE4Ni00ZWE4LWI3ODMtNDIxZDQ5OGIyMDky LzEvNkI4QTRiUmFHVzBwX0NPTTV6bTZrVUQyR1VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9BdQh4o 3fQU7tAy46tpuZR7VWO5Pady1ZLPpiPp95/2oR7v+txBYU4hEi0HHj/D8t2PO0mu CwCbZfAWZeBRY0f9BRr9jXCDjW2pPY1h1ELN+Mle9MmiKiVoKsi9j0hkBHfz41YF Ns+srVTzaLYR7bNhQmp1iYRmvp0bRMguZO84p5ctODhkBS/iQHDrmZKMwpEoA38z Gk00VC/nwtDrc94/UTUgHdN9qLeKlMvnCCgF7Zz4lDzURtI2W4/YKpYp/1buaz1M QtILtK5+7NwcjhQgbq2jOB7YHaqnGndYC7Q6/T2R5qJq15OD58bMKCCho3SMpid+ F5p3ap8mdWELeA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:34 2025 by rpki-client