This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft File: 6vlt8xs_QE31t345nOeTcbT0REM.mft (raw, json) Hash identifier: IukVCZPYfaMthMZKi8vjRTsuCPacKdMGX+QIBePlYbk= Subject key identifier: 43:6D:B5:60:26:83:BF:DE:72:FB:CA:20:48:5B:E5:B2:1A:A0:5B:3F Authority key identifier: EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43 Certificate issuer: /CN=eaf96df31b3f404df5b77e399ce79371b4f44443 Certificate serial: 019AF42DF355D67D696F23EF667979E4A12A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft Manifest number: 0506 Signing time: Sat 06 Dec 2025 15:00:43 +0000 Manifest this update: Sat 06 Dec 2025 15:00:43 +0000 Manifest next update: Sun 07 Dec 2025 15:00:43 +0000 Files and hashes: 1: 6vlt8xs_QE31t345nOeTcbT0REM.crl (hash: 0O8o4q90uQJXManoWIWftzthgobUy+00Rf7Xw79exjU=) 2: zku7rL4ehWHvRZK1RwrAb6MT-1c.roa (hash: nNwzvzSXO21Gwoc000T5O5APuYh4t3vWkKVJ9XFGR80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:f3:55:d6:7d:69:6f:23:ef:66:79:79:e4:a1:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf96df31b3f404df5b77e399ce79371b4f44443 Validity Not Before: Dec 6 15:00:43 2025 GMT Not After : Dec 7 15:00:43 2025 GMT Subject: CN=436db5602683bfde72fbca20485be5b21aa05b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0b:d7:67:b5:1a:20:c1:b0:00:3d:20:3b:40: 53:80:c6:1c:fd:b2:77:a5:7c:ec:68:24:dd:be:b0: 88:25:aa:d5:c9:6f:ab:8c:75:24:df:21:f1:f8:64: fb:6a:71:29:36:46:79:c1:ef:8b:be:60:06:b4:2e: 17:71:4b:c0:5d:b5:25:8a:17:0c:80:c2:e2:2f:cb: 9b:fd:3a:3b:07:ca:f1:25:df:86:ee:1b:d0:ee:4e: ff:bf:db:a4:18:10:ec:8f:02:d3:22:68:55:6d:7a: 9d:4d:36:47:0d:d4:03:fc:d8:ad:7a:4c:fe:43:c9: 93:81:c2:ed:64:18:94:b0:d3:cc:03:78:9e:b9:2e: 0f:f9:14:14:36:3c:92:c4:cb:f2:b3:c9:b6:35:85: 3e:08:d7:6b:3d:81:c5:a0:58:3a:1e:a8:16:d5:28: fd:88:0f:db:af:5e:1d:ac:4e:fc:57:11:4b:79:da: 84:15:fc:b8:80:48:47:c0:36:3d:87:dc:10:b4:e9: 86:52:4f:ac:ff:f9:4a:73:b3:59:32:cb:78:b0:58: e0:04:8c:f4:f2:31:f0:ed:d9:89:88:74:c8:e5:7d: d0:65:3e:0c:55:ac:88:56:ca:bc:2f:6b:ca:78:ea: 83:31:ba:ee:59:0d:9e:8d:57:4d:75:56:39:13:34: dd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6D:B5:60:26:83:BF:DE:72:FB:CA:20:48:5B:E5:B2:1A:A0:5B:3F X509v3 Authority Key Identifier: keyid:EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:2e:e2:eb:c2:e2:d6:77:1e:f4:3d:85:85:54:d9:ef:3b:82: ad:ae:9b:7b:9c:ef:41:36:34:3f:30:9a:f7:58:01:f1:d6:3f: ed:3f:22:4f:f8:bd:8f:f9:10:c8:69:69:c1:c9:ae:3f:af:fd: 8b:e2:c9:a8:2a:a7:35:9f:2f:0f:83:65:5d:bf:77:b0:78:19: 91:81:d0:af:ff:a5:da:a5:0b:d8:92:49:35:c2:05:74:62:27: 90:bd:45:75:fa:7d:9d:01:14:31:0c:29:50:f1:81:10:b6:05: b1:b0:68:e8:b9:38:b6:2b:82:f4:5f:b9:ae:6a:12:b8:e8:30: 86:0b:71:48:5c:eb:56:41:5d:23:4a:c7:64:b8:29:c5:4b:12: dc:74:4c:56:81:90:ae:c7:5a:d6:f3:08:c3:b2:8f:d9:68:13: f8:c1:4b:29:7c:a2:7f:f3:9e:4b:d1:e2:75:91:f2:59:f7:93: 54:8b:e4:e3:b1:5d:23:c3:28:80:45:15:82:a8:87:f5:7c:1c: 43:70:d4:72:86:17:05:fe:c2:f6:b5:37:56:dd:ff:af:57:02: 47:9a:e7:65:7e:32:f3:ec:67:01:86:6d:81:64:6a:98:96:5a: f3:c5:cc:e7:50:17:56:77:55:f9:55:29:0c:f8:7e:2a:5d:95: 71:a7:0c:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LfNV1n1pbyPvZnl55KEqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhZjk2ZGYzMWIzZjQwNGRmNWI3N2UzOTljZTc5MzcxYjRm NDQ0NDMwHhcNMjUxMjA2MTUwMDQzWhcNMjUxMjA3MTUwMDQzWjAzMTEwLwYDVQQD Eyg0MzZkYjU2MDI2ODNiZmRlNzJmYmNhMjA0ODViZTViMjFhYTA1YjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgvXZ7UaIMGwAD0gO0BTgMYc/bJ3 pXzsaCTdvrCIJarVyW+rjHUk3yHx+GT7anEpNkZ5we+LvmAGtC4XcUvAXbUlihcM gMLiL8ub/To7B8rxJd+G7hvQ7k7/v9ukGBDsjwLTImhVbXqdTTZHDdQD/Nitekz+ Q8mTgcLtZBiUsNPMA3ieuS4P+RQUNjySxMvys8m2NYU+CNdrPYHFoFg6HqgW1Sj9 iA/br14drE78VxFLedqEFfy4gEhHwDY9h9wQtOmGUk+s//lKc7NZMst4sFjgBIz0 8jHw7dmJiHTI5X3QZT4MVayIVsq8L2vKeOqDMbruWQ2ejVdNdVY5EzTdaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENttWAmg7/ecvvKIEhb5bIaoFs/MB8GA1UdIwQY MBaAFOr5bfMbP0BN9bd+OZznk3G09ERDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnZsdDh4c19RRTMxdDM0NW5PZVRjYlQwUkVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wZTAzOWEtYmU5Ni00MWZjLWFiY2Qt OTY0YjYxYmMzMTliLzEvNnZsdDh4c19RRTMxdDM0NW5PZVRjYlQwUkVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8wZTAzOWEtYmU5Ni00MWZjLWFiY2QtOTY0YjYxYmMzMTli LzEvNnZsdDh4c19RRTMxdDM0NW5PZVRjYlQwUkVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIy7i68Li 1nce9D2FhVTZ7zuCra6be5zvQTY0PzCa91gB8dY/7T8iT/i9j/kQyGlpwcmuP6/9 i+LJqCqnNZ8vD4NlXb93sHgZkYHQr/+l2qUL2JJJNcIFdGInkL1Fdfp9nQEUMQwp UPGBELYFsbBo6Lk4tiuC9F+5rmoSuOgwhgtxSFzrVkFdI0rHZLgpxUsS3HRMVoGQ rsda1vMIw7KP2WgT+MFLKXyif/OeS9HidZHyWfeTVIvk47FdI8MogEUVgqiH9Xwc Q3DUcoYXBf7C9rU3Vt3/r1cCR5rnZX4y8+xnAYZtgWRqmJZa88XM51AXVndV+VUp DPh+Kl2VcacM8w== -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:40 2025 by rpki-client