This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft File: 6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft (raw, json) Hash identifier: XE7BMoI9EaDIR0TDlwnNOtjugdZIbpCG5lP2lkYu/+0= Subject key identifier: AF:FC:7E:EF:EE:A5:F5:8C:6E:68:D1:68:53:2E:71:EE:B5:94:35:EE Authority key identifier: E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94 Certificate issuer: /CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94 Certificate serial: 019AF31C0B50D70CB47400AB099CA594A841 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft Manifest number: 07D3 Signing time: Sat 06 Dec 2025 10:01:32 +0000 Manifest this update: Sat 06 Dec 2025 10:01:32 +0000 Manifest next update: Sun 07 Dec 2025 10:01:32 +0000 Files and hashes: 1: 6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl (hash: Z+pClZOYL7LZmcxvDL/cfNygaP7nw+s+qCQ57rUuVDc=) 2: q6-9G3aCT5ZgGlkvHjIFz5bA04g.roa (hash: cfokvWEVeqwKPxGczy1eXytgUST2AAuJ7ts04BX5rq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:0b:50:d7:0c:b4:74:00:ab:09:9c:a5:94:a8:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94 Validity Not Before: Dec 6 10:01:32 2025 GMT Not After : Dec 7 10:01:32 2025 GMT Subject: CN=affc7eefeea5f58c6e68d168532e71eeb59435ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d7:27:5c:13:5d:ec:e8:f9:51:81:97:45:3a: dd:17:cd:88:a9:39:4d:0f:5e:40:7e:81:bb:9f:2e: 7a:93:28:a9:e9:66:ac:17:73:4f:a5:61:b4:e7:87: 67:9e:dc:8e:14:5f:ff:64:f3:86:69:16:18:bd:ae: 76:49:e7:ab:b2:ee:e8:35:5a:35:24:b7:d5:73:91: 94:90:19:fa:5e:88:40:73:74:b7:20:8c:16:c4:b2: a2:59:f0:b8:52:3c:cf:1e:a7:81:f2:d5:e9:9a:75: d0:06:e0:c1:aa:4b:de:e0:10:46:a2:27:1b:3a:fa: b5:26:cb:9c:ca:68:34:06:57:21:d2:bb:8e:33:fb: 59:db:26:a8:44:ab:7e:53:b3:fe:62:33:4f:c3:75: 80:7c:bb:4b:fe:d5:4f:77:6c:3f:6b:5d:df:e6:d9: ef:bd:6e:85:a7:dd:4f:fc:a0:41:49:ca:01:30:3f: 28:a9:16:42:28:88:48:4a:ae:df:79:29:08:4a:d4: ac:54:ca:19:ce:e1:f2:46:5b:1b:cd:64:16:07:5f: 71:37:c9:ff:4e:05:dc:e0:9f:ee:1c:ef:39:1b:fd: 3e:18:24:dc:b7:31:52:a8:92:5d:fe:ed:e4:18:3f: 36:6b:92:df:81:bd:de:01:83:9d:e3:bc:14:df:1e: 2d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FC:7E:EF:EE:A5:F5:8C:6E:68:D1:68:53:2E:71:EE:B5:94:35:EE X509v3 Authority Key Identifier: keyid:E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:80:95:ee:12:e7:a3:88:b2:46:d4:cb:eb:ce:8a:45:63:6c: 1c:da:c7:61:0d:00:de:25:b2:52:d8:3a:c5:42:fc:50:e9:3a: 75:6b:20:4b:83:c4:2c:e3:10:9a:de:e3:b3:41:39:f8:24:91: 04:02:08:96:be:07:c9:c9:37:79:cc:f7:04:8c:8f:2e:3b:d1: 3b:fb:2e:10:0c:26:e0:fc:89:34:3b:13:2d:37:11:d7:d6:08: 72:fc:8a:e0:2f:a1:75:53:7d:40:71:1c:31:92:9f:c5:60:f9: 2a:a8:29:4d:52:14:9b:44:43:39:16:19:62:02:85:13:f9:c3: 18:a4:75:a0:07:c1:71:2f:07:40:79:a1:87:91:fc:5f:48:18: 27:23:69:18:cd:1b:b1:3a:96:a7:2c:c6:7e:5d:f5:8e:45:08: 83:d8:6a:50:a6:96:c0:90:db:34:ca:21:72:50:32:2d:ed:9e: 44:3c:d5:6c:5c:b4:58:95:b8:dd:bf:97:a4:e1:24:6b:df:ef: 29:86:fc:5f:e2:c8:d6:68:db:58:d6:82:6d:3a:33:95:49:aa: e6:ca:7f:c7:22:c8:d5:bd:2a:2d:e1:de:79:7f:ae:d8:ee:97: 66:97:f4:3e:e5:fe:f3:75:3e:c1:d3:77:ba:84:46:75:7f:08: 82:d0:5e:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHAtQ1wy0dACrCZyllKhBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5OTZkMmNiMzk0Nzc4N2YxNWUxOWJhY2IxZTMzNjljMTlm M2VjOTQwHhcNMjUxMjA2MTAwMTMyWhcNMjUxMjA3MTAwMTMyWjAzMTEwLwYDVQQD EyhhZmZjN2VlZmVlYTVmNThjNmU2OGQxNjg1MzJlNzFlZWI1OTQzNWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktcnXBNd7Oj5UYGXRTrdF82IqTlN D15AfoG7ny56kyip6WasF3NPpWG054dnntyOFF//ZPOGaRYYva52Seersu7oNVo1 JLfVc5GUkBn6XohAc3S3IIwWxLKiWfC4UjzPHqeB8tXpmnXQBuDBqkve4BBGoicb Ovq1Jsucymg0Blch0ruOM/tZ2yaoRKt+U7P+YjNPw3WAfLtL/tVPd2w/a13f5tnv vW6Fp91P/KBBScoBMD8oqRZCKIhISq7feSkIStSsVMoZzuHyRlsbzWQWB19xN8n/ TgXc4J/uHO85G/0+GCTctzFSqJJd/u3kGD82a5Lfgb3eAYOd47wU3x4tkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/8fu/upfWMbmjRaFMuce61lDXuMB8GA1UdIwQY MBaAFOmW0ss5R3h/FeGbrLHjNpwZ8+yUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlpiU3l6bEhlSDhWNFp1c3NlTTJuQm56N0pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85YzYxYmEtYzc0Ni00ZmNlLWE5Yzkt NzI3NjJiNTcwNjJmLzEvNlpiU3l6bEhlSDhWNFp1c3NlTTJuQm56N0pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85YzYxYmEtYzc0Ni00ZmNlLWE5YzktNzI3NjJiNTcwNjJm LzEvNlpiU3l6bEhlSDhWNFp1c3NlTTJuQm56N0pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWoCV7hLn o4iyRtTL686KRWNsHNrHYQ0A3iWyUtg6xUL8UOk6dWsgS4PELOMQmt7js0E5+CSR BAIIlr4Hyck3ecz3BIyPLjvRO/suEAwm4PyJNDsTLTcR19YIcvyK4C+hdVN9QHEc MZKfxWD5KqgpTVIUm0RDORYZYgKFE/nDGKR1oAfBcS8HQHmhh5H8X0gYJyNpGM0b sTqWpyzGfl31jkUIg9hqUKaWwJDbNMohclAyLe2eRDzVbFy0WJW43b+XpOEka9/v KYb8X+LI1mjbWNaCbTozlUmq5sp/xyLI1b0qLeHeeX+u2O6XZpf0PuX+83U+wdN3 uoRGdX8IgtBeTw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:43 2025 by rpki-client