This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft File: 6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft (raw, json) Hash identifier: mTQTfzTZ2nG/AvRF7//M/l3kuntkkBeSNJ3I1C5yRo0= Subject key identifier: 49:7E:89:2E:58:63:35:CD:75:DB:05:AC:F1:C0:69:56:24:DA:C3:73 Authority key identifier: E9:FD:01:E2:50:B4:23:02:76:B3:1E:0B:83:28:D8:7E:69:74:E6:44 Certificate issuer: /CN=e9fd01e250b4230276b31e0b8328d87e6974e644 Certificate serial: 019AF208BC608F0AC09B70334DBD1AF676CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 05:00:50 +0000 Manifest this update: Sat 06 Dec 2025 05:00:50 +0000 Manifest next update: Sun 07 Dec 2025 05:00:50 +0000 Files and hashes: 1: 6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl (hash: x07FUbylpYrOZx2xNfjmlTkkGMiSGvLLzXN3QY6LzuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:bc:60:8f:0a:c0:9b:70:33:4d:bd:1a:f6:76:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9fd01e250b4230276b31e0b8328d87e6974e644 Validity Not Before: Dec 6 05:00:50 2025 GMT Not After : Dec 7 05:00:50 2025 GMT Subject: CN=497e892e586335cd75db05acf1c0695624dac373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f0:32:c9:56:df:2e:c9:e3:35:22:35:8a:81: 13:ad:6f:fd:94:64:d8:10:48:9f:2d:29:e0:84:50: b6:ce:68:66:c8:31:9e:d5:33:36:02:c4:cd:e5:85: 0d:81:c5:78:82:a3:52:da:b7:82:b6:ed:bd:1f:da: dc:a9:b4:fe:8e:ed:24:c2:90:20:55:20:e2:2c:63: 7e:db:7a:c2:f7:84:6a:ec:f2:23:f6:ea:71:9c:bc: f2:69:ba:3b:9c:03:ea:68:12:8f:46:18:47:4c:a5: 5a:29:80:21:73:6d:35:2e:17:fc:2b:57:d3:9b:d3: c8:c0:87:9c:80:fa:f2:70:49:51:57:aa:f7:e8:cb: 93:35:0d:aa:a6:43:d6:b7:9f:4f:b1:cf:d2:3f:c8: 0f:7a:06:47:08:db:dc:af:2e:2d:b0:54:1d:b0:26: ad:bd:68:6b:54:ab:5f:4c:26:86:31:a7:d9:46:c8: 7a:8a:ba:9f:f2:22:df:d5:1d:d9:fb:d8:5d:6e:8d: 42:a8:fb:cb:8b:90:90:ae:ea:b9:cf:df:71:db:28: 8f:4b:43:3e:43:17:f6:54:03:fd:1c:4d:6b:61:0e: 4e:95:2d:c2:b5:44:23:bb:02:d4:b6:01:d2:5d:00: f3:31:57:0b:ae:53:dd:11:3e:6d:ae:b0:64:fc:6a: 3e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7E:89:2E:58:63:35:CD:75:DB:05:AC:F1:C0:69:56:24:DA:C3:73 X509v3 Authority Key Identifier: keyid:E9:FD:01:E2:50:B4:23:02:76:B3:1E:0B:83:28:D8:7E:69:74:E6:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:bf:f0:6f:ba:9c:ec:ee:a3:6a:f7:32:70:1c:85:e9:76:bd: 42:8c:f4:75:e4:2d:5b:ef:09:45:f9:ab:9c:d8:ab:6b:fb:a5: 57:97:29:43:16:93:e3:95:62:a0:81:51:18:02:0b:60:7c:aa: d2:ce:0d:e2:2b:15:20:2b:10:0a:78:bc:b6:55:ab:46:0f:5a: db:95:61:0e:d2:87:f4:34:bc:3e:3a:98:95:a9:92:f0:66:a7: a9:db:51:5e:02:fc:ed:5f:39:24:48:9e:ce:2c:ff:10:76:24: 14:5e:4e:35:b8:e3:12:88:b7:69:b7:3a:99:7f:76:6c:b8:e9: ae:6a:65:34:a6:f0:32:d5:0c:a0:3a:5e:f1:27:07:8c:a0:34: ee:94:47:b1:d8:fa:50:ba:78:b2:6e:be:29:66:60:04:de:67: bd:19:0a:ea:f0:cc:77:9c:d2:9a:02:c2:f2:dc:bb:d0:af:c4: 86:ab:68:1d:4a:f5:70:22:59:3f:18:ea:05:a6:8c:93:c0:ad: ef:80:36:22:e3:37:4a:f9:5b:59:c8:2e:49:99:04:3a:22:09: 76:56:9f:64:15:b4:53:f2:ab:db:ef:86:ba:8c:f1:6c:70:06: f2:d2:0d:2f:1e:6c:71:91:91:ab:04:d0:f9:12:6c:4b:38:68: d1:a8:51:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLxgjwrAm3AzTb0a9nbMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZmQwMWUyNTBiNDIzMDI3NmIzMWUwYjgzMjhkODdlNjk3 NGU2NDQwHhcNMjUxMjA2MDUwMDUwWhcNMjUxMjA3MDUwMDUwWjAzMTEwLwYDVQQD Eyg0OTdlODkyZTU4NjMzNWNkNzVkYjA1YWNmMWMwNjk1NjI0ZGFjMzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvAyyVbfLsnjNSI1ioETrW/9lGTY EEifLSnghFC2zmhmyDGe1TM2AsTN5YUNgcV4gqNS2reCtu29H9rcqbT+ju0kwpAg VSDiLGN+23rC94Rq7PIj9upxnLzyabo7nAPqaBKPRhhHTKVaKYAhc201Lhf8K1fT m9PIwIecgPrycElRV6r36MuTNQ2qpkPWt59Psc/SP8gPegZHCNvcry4tsFQdsCat vWhrVKtfTCaGMafZRsh6irqf8iLf1R3Z+9hdbo1CqPvLi5CQruq5z99x2yiPS0M+ Qxf2VAP9HE1rYQ5OlS3CtUQjuwLUtgHSXQDzMVcLrlPdET5trrBk/Go+qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEl+iS5YYzXNddsFrPHAaVYk2sNzMB8GA1UdIwQY MBaAFOn9AeJQtCMCdrMeC4Mo2H5pdOZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmYwQjRsQzBJd0oyc3g0TGd5allmbWwwNWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zMWZiNTctN2ZmZC00OWY4LTlhNzct YWI0NzU4MDlkMTQwLzEvNmYwQjRsQzBJd0oyc3g0TGd5allmbWwwNWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8zMWZiNTctN2ZmZC00OWY4LTlhNzctYWI0NzU4MDlkMTQw LzEvNmYwQjRsQzBJd0oyc3g0TGd5allmbWwwNWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAur/wb7qc 7O6javcycByF6Xa9Qoz0deQtW+8JRfmrnNira/ulV5cpQxaT45VioIFRGAILYHyq 0s4N4isVICsQCni8tlWrRg9a25VhDtKH9DS8PjqYlamS8GanqdtRXgL87V85JEie ziz/EHYkFF5ONbjjEoi3abc6mX92bLjprmplNKbwMtUMoDpe8ScHjKA07pRHsdj6 ULp4sm6+KWZgBN5nvRkK6vDMd5zSmgLC8ty70K/EhqtoHUr1cCJZPxjqBaaMk8Ct 74A2IuM3SvlbWcguSZkEOiIJdlafZBW0U/Kr2++GuozxbHAG8tINLx5scZGRqwTQ +RJsSzho0ahRBA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:48 2025 by rpki-client