This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft File: 6hIZKS2GypY5e4qL0k4IsaiXwaM.mft (raw, json) Hash identifier: 4tfwwGjp6ESmg47OuFdr05Qo1P7NhwCJ293Aue1FXDA= Subject key identifier: 29:12:61:D9:09:E9:C0:A7:85:A5:2A:51:9D:AB:3B:0B:8A:31:3E:71 Authority key identifier: EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3 Certificate issuer: /CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3 Certificate serial: 019AF12E68241DF1F6E02938BB6D9FDC8E98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 01:02:21 +0000 Manifest this update: Sat 06 Dec 2025 01:02:21 +0000 Manifest next update: Sun 07 Dec 2025 01:02:21 +0000 Files and hashes: 1: 6hIZKS2GypY5e4qL0k4IsaiXwaM.crl (hash: Nt5rmSmbclRihNLj3UMACHDSn9q18a1J3uymdkpnznU=) 2: quAuk4oARA-zncvhJ5NL9KJVCeU.roa (hash: ItFM8RojPzfJum0retpVKJonKxKfGyoIIi91j+DB94o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:68:24:1d:f1:f6:e0:29:38:bb:6d:9f:dc:8e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3 Validity Not Before: Dec 6 01:02:21 2025 GMT Not After : Dec 7 01:02:21 2025 GMT Subject: CN=291261d909e9c0a785a52a519dab3b0b8a313e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6a:1b:15:ce:35:7f:a1:89:5a:95:95:bd:70: bd:68:ed:a5:48:64:4c:05:c9:62:b6:2d:23:02:27: 7e:ea:94:45:1d:5d:82:67:1f:10:f0:23:84:96:14: 8c:5f:5a:5a:53:b9:7b:8b:aa:5c:e2:d4:a0:97:41: 83:a0:4f:2f:3d:0b:da:7e:5d:fd:8f:c7:ed:ce:d1: 5c:e3:f2:a2:b8:72:19:8f:b9:f1:ed:8d:80:aa:ca: d4:5e:f0:82:ac:bd:67:bd:53:ff:32:45:e4:b1:f6: e3:85:fc:0a:32:7c:b4:75:9a:6e:f9:90:4e:45:cc: 6f:52:9e:1a:cd:1a:f1:9a:23:b0:9d:bf:dc:9b:92: af:dd:b4:da:3f:98:2d:54:a4:2c:1b:a3:00:f6:b3: 8d:2e:af:19:ef:7a:af:c7:ca:c9:54:6f:f4:38:5c: 82:75:e4:ae:b0:dc:87:23:47:e5:de:21:22:75:40: 2c:ba:90:1d:fe:a9:09:a3:70:d7:e4:34:be:2c:7a: a6:82:64:dc:5b:0a:0e:1a:ba:83:80:f7:44:af:af: b3:1d:53:2a:c5:22:e4:29:0c:8f:76:b5:b0:ed:46: c0:76:fb:71:ea:4a:fb:42:0e:e2:61:34:8f:2c:a2: 09:02:94:1b:03:ff:9a:4e:1f:a7:92:e7:ce:55:8d: 91:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:12:61:D9:09:E9:C0:A7:85:A5:2A:51:9D:AB:3B:0B:8A:31:3E:71 X509v3 Authority Key Identifier: keyid:EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:64:d8:b6:7a:f3:d3:4c:45:bf:1e:be:75:1d:ff:8e:62:0c: 72:d9:bc:41:5e:ed:7c:a4:fc:05:4e:0b:76:f7:83:57:d0:c8: 75:04:f9:50:3c:fb:43:e7:f1:a9:38:4d:b6:6e:a1:1b:df:e7: c0:f0:e3:ca:fd:44:23:70:af:1e:6f:cc:03:1c:b1:9b:a0:27: 82:21:d4:99:43:63:1b:ea:f6:89:4d:51:44:23:7c:b7:31:05: 72:f9:ee:9d:47:19:d4:93:7e:c5:da:f2:f6:ff:43:fa:ce:22: 33:84:f9:40:73:88:96:27:ec:c3:b8:fa:0a:88:a7:b5:62:df: 70:ac:aa:ce:b8:d5:1a:88:0c:e2:e5:50:53:2b:bb:08:c5:88: 3e:78:a3:08:92:42:93:26:66:bd:a3:7a:8a:d9:dd:9f:43:5c: 71:31:8e:aa:cf:7c:cc:af:d3:dd:ce:4d:1f:a3:10:ac:59:56: a9:6d:14:21:66:a9:4d:af:4d:c7:6f:9f:86:b5:d7:60:90:79: e4:4e:f8:3d:0a:5e:72:28:82:a7:ee:08:42:d5:a8:cf:19:e7: be:e5:af:c7:41:93:0c:39:ab:a2:b6:6c:60:e2:3f:49:98:59: 2a:43:95:b7:88:62:ac:6a:67:c5:3b:a1:05:ee:8f:a5:04:a8: a0:20:9e:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmgkHfH24Ck4u22f3I6YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMTIxOTI5MmQ4NmNhOTYzOTdiOGE4YmQyNGUwOGIxYTg5 N2MxYTMwHhcNMjUxMjA2MDEwMjIxWhcNMjUxMjA3MDEwMjIxWjAzMTEwLwYDVQQD EygyOTEyNjFkOTA5ZTljMGE3ODVhNTJhNTE5ZGFiM2IwYjhhMzEzZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52obFc41f6GJWpWVvXC9aO2lSGRM Bcliti0jAid+6pRFHV2CZx8Q8COElhSMX1paU7l7i6pc4tSgl0GDoE8vPQvafl39 j8ftztFc4/KiuHIZj7nx7Y2AqsrUXvCCrL1nvVP/MkXksfbjhfwKMny0dZpu+ZBO RcxvUp4azRrxmiOwnb/cm5Kv3bTaP5gtVKQsG6MA9rONLq8Z73qvx8rJVG/0OFyC deSusNyHI0fl3iEidUAsupAd/qkJo3DX5DS+LHqmgmTcWwoOGrqDgPdEr6+zHVMq xSLkKQyPdrWw7UbAdvtx6kr7Qg7iYTSPLKIJApQbA/+aTh+nkufOVY2R8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkSYdkJ6cCnhaUqUZ2rOwuKMT5xMB8GA1UdIwQY MBaAFOoSGSkthsqWOXuKi9JOCLGol8GjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmhJWktTMkd5cFk1ZTRxTDBrNElzYWlYd2FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jYmIyZTQtODhjMy00Y2MwLTk2NzUt Yzk4YTFiZGU2NDc2LzEvNmhJWktTMkd5cFk1ZTRxTDBrNElzYWlYd2FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9jYmIyZTQtODhjMy00Y2MwLTk2NzUtYzk4YTFiZGU2NDc2 LzEvNmhJWktTMkd5cFk1ZTRxTDBrNElzYWlYd2FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWTYtnrz 00xFvx6+dR3/jmIMctm8QV7tfKT8BU4LdveDV9DIdQT5UDz7Q+fxqThNtm6hG9/n wPDjyv1EI3CvHm/MAxyxm6AngiHUmUNjG+r2iU1RRCN8tzEFcvnunUcZ1JN+xdry 9v9D+s4iM4T5QHOIlifsw7j6CointWLfcKyqzrjVGogM4uVQUyu7CMWIPnijCJJC kyZmvaN6itndn0NccTGOqs98zK/T3c5NH6MQrFlWqW0UIWapTa9Nx2+fhrXXYJB5 5E74PQpeciiCp+4IQtWozxnnvuWvx0GTDDmrorZsYOI/SZhZKkOVt4hirGpnxTuh Be6PpQSooCCe0g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:54 2025 by rpki-client