This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft File: 6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft (raw, json) Hash identifier: TYYSNrJG8wWbD4EXvOE3D7pZtiiQUUpIOm2GJiXPJrM= Subject key identifier: E6:48:40:EC:02:6F:05:8D:91:1C:DE:95:E7:51:86:C3:93:58:21:EA Authority key identifier: E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED Certificate issuer: /CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed Certificate serial: 019B22F4F095BD8A923D4B2CB369F91AE093 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft Manifest number: 0C Signing time: Mon 15 Dec 2025 17:00:36 +0000 Manifest this update: Mon 15 Dec 2025 17:00:36 +0000 Manifest next update: Tue 16 Dec 2025 17:00:36 +0000 Files and hashes: 1: 6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl (hash: tmIeIuM76GlOp/iU0mUXpF5iJeJJX1IdAtqk0QIiKZ8=) 2: MAZcp8zMa1lDf2zvUKI1J7t014U.asa (hash: jICbr8hIKG1YCnyn+VxSRdfMj4CzBFuYkBHTze7swiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f4:f0:95:bd:8a:92:3d:4b:2c:b3:69:f9:1a:e0:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed Validity Not Before: Dec 15 17:00:36 2025 GMT Not After : Dec 16 17:00:36 2025 GMT Subject: CN=e64840ec026f058d911cde95e75186c3935821ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:bf:0d:8d:9a:ed:f8:4d:e0:36:53:4d:4f: d0:0e:fb:20:1b:1b:93:2f:84:0a:07:64:e8:60:e6: 34:39:81:d7:95:c3:b4:54:23:2c:6a:eb:d9:d9:4d: 4a:79:42:33:2f:30:55:dd:fb:57:82:e9:90:f2:04: fc:9f:2a:42:10:77:f2:88:5f:d7:18:c1:6b:27:ea: 61:d1:4c:dd:b0:f1:73:99:48:30:8f:e4:9c:73:6d: 61:45:f7:17:df:9a:29:07:67:cf:8d:ac:f8:ff:cb: 0f:59:a4:32:ce:6a:35:00:3e:cb:c1:8b:a3:c6:d5: a6:5a:c8:70:34:ea:36:67:57:7d:d2:64:3d:2c:20: 6d:6a:e3:df:72:93:47:ff:63:f8:3d:30:d6:dd:9b: 3f:b9:4a:1e:c5:7d:d4:03:1b:ee:19:01:cb:13:93: 9d:2b:73:7a:7d:ce:8a:12:e2:4c:9a:b6:32:4a:01: 22:e4:ff:73:08:a0:2f:62:21:82:b4:0e:a6:9e:9a: 99:12:45:8c:81:c4:04:5a:b5:22:03:f9:c6:4c:64: ec:ef:ae:d2:36:a9:e7:f6:f0:6d:bb:de:f9:e5:9f: 04:a4:b1:04:46:22:d9:25:17:46:2e:7f:49:b1:6a: 30:91:f2:b7:4b:3b:4e:0e:70:91:8c:92:85:d2:f3: 39:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:48:40:EC:02:6F:05:8D:91:1C:DE:95:E7:51:86:C3:93:58:21:EA X509v3 Authority Key Identifier: keyid:E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:0c:ef:df:5e:1f:9d:06:cd:67:4f:33:1f:59:bb:e1:4b:8a: 1a:11:a5:6e:20:50:aa:b4:00:e4:1f:3e:89:74:0a:62:47:c0: 82:66:64:ce:c5:11:5e:22:bd:ea:f3:6e:2f:6d:f4:21:03:b7: 07:d3:0c:15:86:e8:83:7d:8f:f4:4b:7d:86:8a:08:07:43:70: 60:85:e3:9a:8f:e4:70:59:06:36:a4:89:14:9e:0a:dc:f9:c0: 80:c5:60:c1:8a:bc:03:87:9a:d9:f2:ac:d5:86:34:09:26:46: 70:d8:f4:f3:d5:1b:41:a7:82:9d:8c:2f:6a:fd:45:f6:d9:4a: 48:fc:9c:10:ce:41:3b:19:e9:3c:b2:62:0e:3f:af:9f:80:f2: aa:0c:6b:69:23:f5:8c:52:86:8b:1e:9e:8b:09:3a:da:22:9f: a5:1a:e6:ba:68:44:1c:85:8a:0a:c0:b0:fc:2c:44:7f:a9:42: f0:1c:c1:6e:f9:f1:e0:2e:f0:9f:cd:56:43:89:71:77:3f:3f: a4:1b:df:b6:95:b5:b9:90:01:ac:e6:3d:91:28:a8:4a:68:55: 19:0b:ce:b7:74:35:c4:20:1f:85:78:69:7a:44:ff:72:0a:e1: 0d:c6:90:1c:18:7c:b5:ba:4b:7e:19:2e:0c:03:ec:3a:ac:e8: 48:ba:c8:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9PCVvYqSPUsss2n5GuCTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YmJjMWU1MzdlMmYzZDFlNGRhYjI4MzJhZTYyNGI1ZDYz NzllZWQwHhcNMjUxMjE1MTcwMDM2WhcNMjUxMjE2MTcwMDM2WjAzMTEwLwYDVQQD EyhlNjQ4NDBlYzAyNmYwNThkOTExY2RlOTVlNzUxODZjMzkzNTgyMWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8K/DY2a7fhN4DZTTU/QDvsgGxuT L4QKB2ToYOY0OYHXlcO0VCMsauvZ2U1KeUIzLzBV3ftXgumQ8gT8nypCEHfyiF/X GMFrJ+ph0UzdsPFzmUgwj+Scc21hRfcX35opB2fPjaz4/8sPWaQyzmo1AD7LwYuj xtWmWshwNOo2Z1d90mQ9LCBtauPfcpNH/2P4PTDW3Zs/uUoexX3UAxvuGQHLE5Od K3N6fc6KEuJMmrYySgEi5P9zCKAvYiGCtA6mnpqZEkWMgcQEWrUiA/nGTGTs767S Nqnn9vBtu9755Z8EpLEERiLZJRdGLn9JsWowkfK3SztODnCRjJKF0vM5pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZIQOwCbwWNkRzeledRhsOTWCHqMB8GA1UdIwQY MBaAFOi7weU34vPR5NqygyrmJLXWN57tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkx2QjVUZmk4OUhrMnJLREt1WWt0ZFkzbnUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85ZDA5YmYtZDU2YS00NGY3LThjZDkt OTYzNmUyMzMwZDdlLzEvNkx2QjVUZmk4OUhrMnJLREt1WWt0ZFkzbnUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC85ZDA5YmYtZDU2YS00NGY3LThjZDktOTYzNmUyMzMwZDdl LzEvNkx2QjVUZmk4OUhrMnJLREt1WWt0ZFkzbnUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwzv314f nQbNZ08zH1m74UuKGhGlbiBQqrQA5B8+iXQKYkfAgmZkzsURXiK96vNuL230IQO3 B9MMFYbog32P9Et9hooIB0NwYIXjmo/kcFkGNqSJFJ4K3PnAgMVgwYq8A4ea2fKs 1YY0CSZGcNj089UbQaeCnYwvav1F9tlKSPycEM5BOxnpPLJiDj+vn4DyqgxraSP1 jFKGix6eiwk62iKfpRrmumhEHIWKCsCw/CxEf6lC8BzBbvnx4C7wn81WQ4lxdz8/ pBvftpW1uZABrOY9kSioSmhVGQvOt3Q1xCAfhXhpekT/cgrhDcaQHBh8tbpLfhku DAPsOqzoSLrItw== -----END CERTIFICATE-----Generated at Tue Dec 16 00:46:02 2025 by rpki-client