This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft File: 6fRRBEShet1zJxRhUpQ0lauruWg.mft (raw, json) Hash identifier: TCQvx6x/xuVfsacFTymb7595W5p3LKdX+ydlS1cp07U= Subject key identifier: 13:EA:59:3C:83:90:C8:44:47:53:5B:99:18:0D:75:15:42:B0:A6:87 Authority key identifier: E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68 Certificate issuer: /CN=e9f4510444a17add7327146152943495ababb968 Certificate serial: 019AF208F38276EE455DE9FF744696CEDEE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft Manifest number: 0EBB Signing time: Sat 06 Dec 2025 05:01:04 +0000 Manifest this update: Sat 06 Dec 2025 05:01:04 +0000 Manifest next update: Sun 07 Dec 2025 05:01:04 +0000 Files and hashes: 1: 6fRRBEShet1zJxRhUpQ0lauruWg.crl (hash: tSZGU3urauRiqGLY6jqYzsyZcJppARCLuIxFdDYNJow=) 2: Uw2HhLlb12QdlcnO10bcifYvljg.roa (hash: EG7NygDJOn+EsjphNy2/UMJJcrFk3icM7+6Z8Bfo4BQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f3:82:76:ee:45:5d:e9:ff:74:46:96:ce:de:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9f4510444a17add7327146152943495ababb968 Validity Not Before: Dec 6 05:01:04 2025 GMT Not After : Dec 7 05:01:04 2025 GMT Subject: CN=13ea593c8390c84447535b99180d751542b0a687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:0d:c7:5e:06:21:44:37:85:15:79:cc:0f:6f: 64:ff:14:0b:48:d0:d9:ef:df:45:3c:51:fc:2b:a9: c2:d8:75:9c:81:2e:a9:54:87:95:bb:18:b7:69:00: 59:ef:3f:ea:6b:08:23:aa:08:01:c2:7a:b7:16:9c: ea:6f:23:95:e9:fd:5f:a3:dd:87:84:3a:df:0d:0d: 5a:ac:60:25:66:ac:0a:e5:1c:21:f9:fa:30:8b:40: a9:84:94:dc:a7:14:13:88:56:a1:a0:a2:55:d4:f8: 60:fe:09:c1:dc:c4:85:8e:c4:14:e0:e6:dc:7d:98: 1a:3a:6d:b4:14:d7:64:71:5c:bf:65:9c:6b:4b:35: 9f:da:18:43:c0:53:9a:a1:7f:bc:f1:78:ad:35:77: 4e:18:9e:56:09:0b:e3:5e:ae:43:6c:eb:37:b0:49: a8:89:ae:a0:49:68:2e:57:45:09:31:55:e4:d8:ef: 49:cb:65:de:7c:89:47:42:76:82:80:6f:5a:50:b5: ac:d6:1d:cb:e7:b2:39:5e:fd:a1:c1:70:39:2c:48: 74:40:f2:9d:d3:6f:5e:6e:7b:47:95:96:55:70:1e: d4:65:0a:1a:66:13:66:bd:5c:48:78:d8:3e:08:96: 41:d4:a4:32:0a:19:c6:f9:5b:59:04:e0:30:a5:df: 55:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EA:59:3C:83:90:C8:44:47:53:5B:99:18:0D:75:15:42:B0:A6:87 X509v3 Authority Key Identifier: keyid:E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:dc:6f:1c:df:cd:1a:38:d7:7c:0a:2b:1e:a6:d2:55:ef:99: d0:2b:08:b3:fd:ed:9b:53:f5:b2:f2:80:02:b5:61:ab:73:89: f1:e2:af:cd:65:40:12:e1:7c:97:e5:5a:c3:7b:f1:32:d8:e2: 6b:09:60:1c:0c:b4:67:28:97:3c:37:fe:ea:82:f0:ce:76:5e: 47:c7:16:e1:c6:89:dc:57:96:36:59:c2:ac:d9:4f:b6:af:aa: a2:f4:98:ad:fe:8c:ff:fb:56:15:d7:19:d8:f7:5a:d7:36:da: e4:b6:d2:d2:aa:18:e9:c2:6e:98:df:22:07:fb:18:9d:fb:8e: 2e:83:e9:0c:f1:fd:05:ac:7d:54:36:8c:c0:4b:8c:3c:92:69: 0c:51:9c:3a:dc:8e:14:6d:b4:9e:4c:7c:00:05:74:87:c0:af: b6:cd:2a:b1:f7:a0:eb:6b:3e:35:f7:13:59:29:46:d5:33:80: 55:4a:47:ec:e8:d9:3b:3e:e4:10:fc:83:63:d7:d8:57:8b:13: ca:ef:f1:5e:f0:80:75:f9:9a:df:cb:03:ce:da:51:28:80:56: ab:17:60:a4:5d:da:a0:ca:ad:55:c4:4c:cb:39:17:19:b4:71: 1a:5e:64:58:2b:26:8b:ff:b5:ca:65:42:e9:2f:8d:14:f9:e2: 3d:a3:a9:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPOCdu5FXen/dEaWzt7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZjQ1MTA0NDRhMTdhZGQ3MzI3MTQ2MTUyOTQzNDk1YWJh YmI5NjgwHhcNMjUxMjA2MDUwMTA0WhcNMjUxMjA3MDUwMTA0WjAzMTEwLwYDVQQD EygxM2VhNTkzYzgzOTBjODQ0NDc1MzViOTkxODBkNzUxNTQyYjBhNjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9A3HXgYhRDeFFXnMD29k/xQLSNDZ 799FPFH8K6nC2HWcgS6pVIeVuxi3aQBZ7z/qawgjqggBwnq3FpzqbyOV6f1fo92H hDrfDQ1arGAlZqwK5Rwh+fowi0CphJTcpxQTiFahoKJV1Phg/gnB3MSFjsQU4Obc fZgaOm20FNdkcVy/ZZxrSzWf2hhDwFOaoX+88XitNXdOGJ5WCQvjXq5DbOs3sEmo ia6gSWguV0UJMVXk2O9Jy2XefIlHQnaCgG9aULWs1h3L57I5Xv2hwXA5LEh0QPKd 029ebntHlZZVcB7UZQoaZhNmvVxIeNg+CJZB1KQyChnG+VtZBOAwpd9VjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPqWTyDkMhER1NbmRgNdRVCsKaHMB8GA1UdIwQY MBaAFOn0UQREoXrdcycUYVKUNJWrq7loMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YTllNWItYWE0MC00ZGMyLThkZWQt YTI3NmVkMGJhMWJjLzEvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80YTllNWItYWE0MC00ZGMyLThkZWQtYTI3NmVkMGJhMWJj LzEvNmZSUkJFU2hldDF6SnhSaFVwUTBsYXVydVdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNxvHN/N GjjXfAorHqbSVe+Z0CsIs/3tm1P1svKAArVhq3OJ8eKvzWVAEuF8l+Vaw3vxMtji awlgHAy0ZyiXPDf+6oLwznZeR8cW4caJ3FeWNlnCrNlPtq+qovSYrf6M//tWFdcZ 2Pda1zba5LbS0qoY6cJumN8iB/sYnfuOLoPpDPH9Bax9VDaMwEuMPJJpDFGcOtyO FG20nkx8AAV0h8Cvts0qsfeg62s+NfcTWSlG1TOAVUpH7OjZOz7kEPyDY9fYV4sT yu/xXvCAdfma38sDztpRKIBWqxdgpF3aoMqtVcRMyzkXGbRxGl5kWCsmi/+1ymVC 6S+NFPniPaOpuA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:24 2025 by rpki-client