This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft File: 6IgY9AA6SCbnpomKFDYfjaWQVk8.mft (raw, json) Hash identifier: oYx7T31njRY1Y+JtfqtyK2oskpM93QQ/i3xcl3Ekv3E= Subject key identifier: 59:21:FA:0B:7E:0C:B6:4D:07:F0:34:42:D1:06:31:D1:E7:1E:D7:5E Authority key identifier: E8:88:18:F4:00:3A:48:26:E7:A6:89:8A:14:36:1F:8D:A5:90:56:4F Certificate issuer: /CN=e88818f4003a4826e7a6898a14361f8da590564f Certificate serial: 019AF49C4D503276774724504EAF527905D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft Manifest number: 0217 Signing time: Sat 06 Dec 2025 17:01:15 +0000 Manifest this update: Sat 06 Dec 2025 17:01:15 +0000 Manifest next update: Sun 07 Dec 2025 17:01:15 +0000 Files and hashes: 1: 6IgY9AA6SCbnpomKFDYfjaWQVk8.crl (hash: KN76kFy8UsjdsgO01XkLoz6pEmp2e/eGU5siFuPYfmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.crl rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:4d:50:32:76:77:47:24:50:4e:af:52:79:05:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e88818f4003a4826e7a6898a14361f8da590564f Validity Not Before: Dec 6 17:01:15 2025 GMT Not After : Dec 7 17:01:15 2025 GMT Subject: CN=5921fa0b7e0cb64d07f03442d10631d1e71ed75e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:97:03:eb:c8:44:5d:ca:cb:fa:0c:67:7b:c5: 17:74:0b:80:b4:d1:e0:b1:01:ff:25:df:8a:bf:a1: 60:c6:7a:47:7e:64:f5:86:cb:c0:ba:ab:e9:4c:9e: 8d:d7:b4:ac:b9:61:70:05:99:23:55:cf:cb:01:74: 63:4f:53:f5:d3:f8:20:c4:05:b0:b0:7f:48:88:1a: f4:eb:e1:53:25:c8:68:ad:cd:5a:53:68:ef:bd:0b: 1a:a1:d7:64:70:cc:ea:1e:06:cf:17:5f:1b:6e:7b: ac:f8:24:c2:fd:7f:8d:fd:72:6e:87:8b:87:97:dd: e3:8e:46:a5:e3:3d:34:7e:c0:0e:6c:f5:2a:12:30: 13:12:f5:1f:3a:50:20:ac:84:bc:31:74:84:43:f7: 8f:10:f5:a8:ad:65:ef:29:b2:5e:9c:1f:81:7f:52: 12:69:e9:a5:29:ce:f4:98:cf:c4:d1:78:11:7c:5d: 13:6d:90:5c:89:e2:a6:c5:75:38:da:6f:06:04:e1: a7:ef:2a:57:b2:a1:bd:c5:73:4f:16:43:bb:45:3e: 0e:50:67:50:f1:d7:8f:8e:6a:74:9d:4c:d1:d8:b2: e1:fb:04:3b:f3:ca:1c:13:49:75:ee:6e:21:d7:20: a4:04:e3:26:41:b0:fa:65:83:04:dc:4b:29:c6:37: 5e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:21:FA:0B:7E:0C:B6:4D:07:F0:34:42:D1:06:31:D1:E7:1E:D7:5E X509v3 Authority Key Identifier: keyid:E8:88:18:F4:00:3A:48:26:E7:A6:89:8A:14:36:1F:8D:A5:90:56:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:5c:8d:8c:27:6d:96:f4:11:aa:bb:71:8a:49:d3:07:d7:96: 03:88:72:27:ac:72:8a:f9:a1:da:4e:12:a7:8b:5e:4d:68:76: a6:dc:20:da:85:75:e8:82:d6:33:a7:77:a1:68:b8:d6:9a:5a: e6:57:31:04:55:6a:c7:9e:fb:6b:d4:e5:38:1e:d1:88:88:96: b9:86:72:b7:65:55:d5:d6:2b:28:2b:ab:f2:0b:96:96:70:51: 40:7d:94:34:ee:a6:de:92:c5:ca:86:d4:a7:92:52:d2:15:cc: fb:b3:a3:a8:04:85:ce:8b:83:cc:1d:1f:7e:98:a2:05:64:4b: 29:7d:80:78:47:d1:17:39:c2:f0:d6:6e:65:2e:9c:aa:e3:bc: e9:64:6c:e5:ba:3e:58:8c:c9:60:69:fb:f9:c8:05:8b:19:ce: 02:22:5e:33:4a:a7:b9:5f:42:9b:91:3b:27:bd:40:fe:90:0a: e7:77:88:0b:e3:2f:15:90:e9:f8:ac:bf:e8:1e:6e:a5:e3:6b: 98:02:48:02:01:87:35:b2:a8:b6:ad:7d:c2:4e:ae:9c:58:67: f8:98:59:8c:4e:59:b4:54:f5:d1:e5:59:a4:81:01:04:a9:c6: ea:12:b4:14:93:c3:c3:a6:54:8e:15:2f:53:5c:ca:95:2a:cd: 32:53:80:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nE1QMnZ3RyRQTq9SeQXQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ODgxOGY0MDAzYTQ4MjZlN2E2ODk4YTE0MzYxZjhkYTU5 MDU2NGYwHhcNMjUxMjA2MTcwMTE1WhcNMjUxMjA3MTcwMTE1WjAzMTEwLwYDVQQD Eyg1OTIxZmEwYjdlMGNiNjRkMDdmMDM0NDJkMTA2MzFkMWU3MWVkNzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJcD68hEXcrL+gxne8UXdAuAtNHg sQH/Jd+Kv6FgxnpHfmT1hsvAuqvpTJ6N17SsuWFwBZkjVc/LAXRjT1P10/ggxAWw sH9IiBr06+FTJchorc1aU2jvvQsaoddkcMzqHgbPF18bbnus+CTC/X+N/XJuh4uH l93jjkal4z00fsAObPUqEjATEvUfOlAgrIS8MXSEQ/ePEPWorWXvKbJenB+Bf1IS aemlKc70mM/E0XgRfF0TbZBcieKmxXU42m8GBOGn7ypXsqG9xXNPFkO7RT4OUGdQ 8dePjmp0nUzR2LLh+wQ788ocE0l17m4h1yCkBOMmQbD6ZYME3Espxjde5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkh+gt+DLZNB/A0QtEGMdHnHtdeMB8GA1UdIwQY MBaAFOiIGPQAOkgm56aJihQ2H42lkFZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNklnWTlBQTZTQ2JucG9tS0ZEWWZqYVdRVms4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMjVmZTMtZjU4MS00Yjg4LWI4NmEt MmJiZWQ1MGJiNTFlLzEvNklnWTlBQTZTQ2JucG9tS0ZEWWZqYVdRVms4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zMjVmZTMtZjU4MS00Yjg4LWI4NmEtMmJiZWQ1MGJiNTFl LzEvNklnWTlBQTZTQ2JucG9tS0ZEWWZqYVdRVms4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFyNjCdt lvQRqrtxiknTB9eWA4hyJ6xyivmh2k4Sp4teTWh2ptwg2oV16ILWM6d3oWi41ppa 5lcxBFVqx577a9TlOB7RiIiWuYZyt2VV1dYrKCur8guWlnBRQH2UNO6m3pLFyobU p5JS0hXM+7OjqASFzouDzB0ffpiiBWRLKX2AeEfRFznC8NZuZS6cquO86WRs5bo+ WIzJYGn7+cgFixnOAiJeM0qnuV9Cm5E7J71A/pAK53eIC+MvFZDp+Ky/6B5upeNr mAJIAgGHNbKotq19wk6unFhn+JhZjE5ZtFT10eVZpIEBBKnG6hK0FJPDw6ZUjhUv U1zKlSrNMlOA/A== -----END CERTIFICATE-----Generated at Sat Dec 6 21:28:02 2025 by rpki-client