This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft File: mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft (raw, json) Hash identifier: cu3heiqTOoNQxGCvp78IBBoG+tQukod2Y/V9RzZMp+4= Subject key identifier: 80:3D:72:F1:95:AF:A9:7D:71:67:4F:02:CD:A5:90:50:17:01:99:1E Authority key identifier: 98:AE:84:3E:7B:C8:74:8D:01:5B:C4:7F:63:5B:17:56:1B:E7:28:50 Certificate issuer: /CN=98ae843e7bc8748d015bc47f635b17561be72850 Certificate serial: 019AF50A899A539977A83721820CEDEBB8B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 19:01:39 +0000 Manifest this update: Sat 06 Dec 2025 19:01:39 +0000 Manifest next update: Sun 07 Dec 2025 19:01:39 +0000 Files and hashes: 1: mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl (hash: 3rYwJap0rRAD+l1yRHb/1w6aNMUNZ9g4RlB21MQlI1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:89:9a:53:99:77:a8:37:21:82:0c:ed:eb:b8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98ae843e7bc8748d015bc47f635b17561be72850 Validity Not Before: Dec 6 19:01:39 2025 GMT Not After : Dec 7 19:01:39 2025 GMT Subject: CN=803d72f195afa97d71674f02cda590501701991e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:a5:15:85:1c:03:a2:70:51:c2:16:6f:da: 87:cd:7d:56:7a:6c:4f:39:68:a1:f2:09:47:63:d2: 18:9f:ff:16:37:ca:ec:fe:af:ef:30:06:db:c5:92: 24:8d:db:47:f6:19:32:86:0e:d3:59:3f:ad:aa:05: c3:a0:cc:e0:57:1c:87:68:43:d3:b2:82:c7:4f:37: 34:0d:6f:30:ab:97:10:0c:eb:ce:2a:2e:68:eb:25: 13:28:28:82:73:a5:3b:67:40:f5:e0:bc:95:20:fb: 02:76:a6:be:5d:9e:d5:51:d8:7f:ed:a4:59:ba:90: 82:58:bd:19:32:59:ef:a0:12:43:d5:86:2c:c8:24: 93:fd:0e:24:85:ff:ae:3c:88:eb:98:b1:73:be:1c: 96:4b:dd:e7:98:41:b7:d4:fa:82:54:e8:c3:f6:6c: 3c:ab:d0:24:8e:bf:3c:0a:54:df:b9:ba:fc:28:f7: 0f:23:bf:c2:a9:3a:6e:93:0a:0e:74:63:38:03:2e: d7:ec:3c:f0:fa:e9:02:b4:dd:8c:6c:07:9d:53:33: ed:e6:dd:c2:b6:98:3d:27:84:14:ab:f8:a7:20:74: 9c:b0:55:03:34:9e:7d:4d:47:2b:35:25:aa:be:ff: c8:5b:0e:f8:4f:93:da:26:48:90:fe:13:93:84:87: 94:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3D:72:F1:95:AF:A9:7D:71:67:4F:02:CD:A5:90:50:17:01:99:1E X509v3 Authority Key Identifier: keyid:98:AE:84:3E:7B:C8:74:8D:01:5B:C4:7F:63:5B:17:56:1B:E7:28:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:fc:71:76:5e:88:87:39:8d:96:74:11:67:37:9e:9a:c4:8a: 8c:85:2c:4a:68:3b:ee:ca:9d:5f:a5:ce:05:fe:3b:b6:0a:8b: f2:34:5a:4c:2a:e8:fe:00:7f:70:ee:31:a1:52:76:f9:e5:b6: 1d:f1:f6:c5:0e:23:4b:e8:9a:9f:7c:ae:fe:50:1a:2d:db:10: 0a:e3:7b:b8:a5:c0:8e:17:fb:83:2f:52:1c:85:07:a9:90:ab: e9:e3:26:34:b6:f8:95:d9:28:44:4a:de:2d:e6:c1:ec:88:60: 5d:cf:19:bb:d8:55:31:5d:3d:58:66:da:f8:9e:0c:78:f7:2a: 6c:e7:e7:4d:cd:d0:a1:15:4d:a7:2b:2d:62:93:1a:1c:8e:58: 13:6b:38:93:9f:9a:f3:83:b3:93:54:c4:1a:9c:77:de:89:31: 2e:f6:52:31:c7:23:d7:94:4b:ed:99:20:50:05:8b:30:60:88: 92:46:cc:51:3a:49:71:e6:08:f4:39:26:ad:20:81:b9:12:8d: 50:6f:5c:ad:a5:e3:a1:56:e6:9b:f9:89:4a:4d:0a:fa:cd:b5: 14:d6:59:00:a6:fd:44:53:84:b4:c3:9a:a0:88:85:85:c8:ab: 56:c6:f9:0d:71:7b:59:03:3d:7a:24:cc:96:0c:bf:0c:67:0e: 3f:e5:ad:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ComaU5l3qDchggzt67izMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YWU4NDNlN2JjODc0OGQwMTViYzQ3ZjYzNWIxNzU2MWJl NzI4NTAwHhcNMjUxMjA2MTkwMTM5WhcNMjUxMjA3MTkwMTM5WjAzMTEwLwYDVQQD Eyg4MDNkNzJmMTk1YWZhOTdkNzE2NzRmMDJjZGE1OTA1MDE3MDE5OTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpmlFYUcA6JwUcIWb9qHzX1WemxP OWih8glHY9IYn/8WN8rs/q/vMAbbxZIkjdtH9hkyhg7TWT+tqgXDoMzgVxyHaEPT soLHTzc0DW8wq5cQDOvOKi5o6yUTKCiCc6U7Z0D14LyVIPsCdqa+XZ7VUdh/7aRZ upCCWL0ZMlnvoBJD1YYsyCST/Q4khf+uPIjrmLFzvhyWS93nmEG31PqCVOjD9mw8 q9Akjr88ClTfubr8KPcPI7/CqTpukwoOdGM4Ay7X7Dzw+ukCtN2MbAedUzPt5t3C tpg9J4QUq/inIHScsFUDNJ59TUcrNSWqvv/IWw74T5PaJkiQ/hOThIeUmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIA9cvGVr6l9cWdPAs2lkFAXAZkeMB8GA1UdIwQY MBaAFJiuhD57yHSNAVvEf2NbF1Yb5yhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUs2RVBudklkSTBCVzhSX1kxc1hWaHZuS0ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wNGU1ZDMtYjkyMS00Mjc0LThjZDEt ZWQwNzY3NjcxOGJhLzEvbUs2RVBudklkSTBCVzhSX1kxc1hWaHZuS0ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8wNGU1ZDMtYjkyMS00Mjc0LThjZDEtZWQwNzY3NjcxOGJh LzEvbUs2RVBudklkSTBCVzhSX1kxc1hWaHZuS0ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvxxdl6I hzmNlnQRZzeemsSKjIUsSmg77sqdX6XOBf47tgqL8jRaTCro/gB/cO4xoVJ2+eW2 HfH2xQ4jS+ian3yu/lAaLdsQCuN7uKXAjhf7gy9SHIUHqZCr6eMmNLb4ldkoREre LebB7IhgXc8Zu9hVMV09WGba+J4MePcqbOfnTc3QoRVNpystYpMaHI5YE2s4k5+a 84Ozk1TEGpx33okxLvZSMccj15RL7ZkgUAWLMGCIkkbMUTpJceYI9DkmrSCBuRKN UG9craXjoVbmm/mJSk0K+s21FNZZAKb9RFOEtMOaoIiFhcirVsb5DXF7WQM9eiTM lgy/DGcOP+Wtjw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:30 2025 by rpki-client