This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft File: 6P36cUAM43C3X3N3gEhXTkYnQxs.mft (raw, json) Hash identifier: LjSRixfxq4ohS5ppziEH5YoN0dLJRU2vNkitavy7oic= Subject key identifier: F8:6D:5C:2E:0C:6B:6F:B7:97:72:A3:CB:8F:B1:5A:BB:A3:6A:DD:0A Authority key identifier: E8:FD:FA:71:40:0C:E3:70:B7:5F:73:77:80:48:57:4E:46:27:43:1B Certificate issuer: /CN=e8fdfa71400ce370b75f73778048574e4627431b Certificate serial: 019AF54085B7AC85C49E5963C5FA994D7AF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft Manifest number: 0401 Signing time: Sat 06 Dec 2025 20:00:37 +0000 Manifest this update: Sat 06 Dec 2025 20:00:37 +0000 Manifest next update: Sun 07 Dec 2025 20:00:37 +0000 Files and hashes: 1: 6P36cUAM43C3X3N3gEhXTkYnQxs.crl (hash: w/GYO9nYpY5vLLRnfl4yNGGljXbmHVKx+SfXS4QXjBs=) 2: SFK2b_vmIkLWDU_i-BkLji71FEk.roa (hash: P/e3nZJRHwq7a4VZvWLqRGgl5JZQml0sLv8iElODBF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.crl rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:85:b7:ac:85:c4:9e:59:63:c5:fa:99:4d:7a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8fdfa71400ce370b75f73778048574e4627431b Validity Not Before: Dec 6 20:00:37 2025 GMT Not After : Dec 7 20:00:37 2025 GMT Subject: CN=f86d5c2e0c6b6fb79772a3cb8fb15abba36add0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7b:4c:09:27:03:7d:38:95:dd:f9:d9:7e:68: c0:31:6f:e7:20:72:3b:09:e9:51:1d:f7:f2:fe:ed: b4:08:04:a6:01:7e:90:fe:f2:03:d8:c6:c0:28:22: 83:bb:a4:7c:33:ef:d5:1f:d3:81:bb:ec:de:67:02: e3:f5:2c:20:3e:49:b4:4a:01:45:90:62:d5:56:34: 77:f3:d5:31:9a:12:d6:8f:01:76:e6:7f:0c:6d:c7: 9d:65:e9:0e:9a:7d:ed:aa:52:cf:89:0b:65:06:6a: 32:e5:93:38:41:fb:57:e9:d8:de:b1:ff:7d:f9:76: e8:98:d4:f9:4a:44:13:00:b3:86:d3:ab:77:6a:f1: 26:53:bd:51:1e:86:03:6f:06:05:c0:cf:93:47:27: 66:45:b8:66:92:ed:ec:c8:eb:34:2d:13:26:53:99: a0:34:85:37:49:98:65:be:86:5b:e8:44:3b:21:be: 6f:04:fb:87:a7:36:b8:11:06:7b:20:10:0f:1a:a3: bd:47:e0:bb:7b:41:15:e5:2f:86:92:fc:af:e1:76: ed:23:31:13:0f:ae:c0:5a:33:30:88:9d:bd:3a:c1: 5e:d2:e4:28:ee:f7:0a:68:4b:d0:25:a8:e8:2c:1e: 09:84:34:bd:bf:7e:89:f6:99:9e:25:cd:4c:9a:8d: bd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6D:5C:2E:0C:6B:6F:B7:97:72:A3:CB:8F:B1:5A:BB:A3:6A:DD:0A X509v3 Authority Key Identifier: keyid:E8:FD:FA:71:40:0C:E3:70:B7:5F:73:77:80:48:57:4E:46:27:43:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:2d:c8:bc:4c:09:b6:1d:50:a8:18:fa:5a:25:3b:dc:62:a7: ef:9d:26:1c:f3:6b:ec:78:1b:fe:18:4a:20:ba:44:4a:72:9d: 0c:b7:5c:7f:bd:73:93:6b:f1:18:d9:62:78:d0:ea:fa:97:cd: 80:a1:b5:40:11:61:1d:b6:9a:3b:29:d8:41:c5:c2:fd:e1:87: 62:11:65:00:1b:31:6e:aa:eb:57:c6:28:0c:91:10:54:2c:2f: 58:c6:17:78:9e:8a:fc:08:57:69:50:d0:92:23:2d:54:e1:72: 7f:18:68:4d:e8:b2:6d:3b:95:0a:92:3a:c5:dd:94:e3:39:0b: 4c:b7:74:1b:9e:a6:fc:29:61:50:df:14:93:c9:5f:70:07:c7: c1:e7:09:64:3b:3c:79:a8:55:97:65:47:54:fa:a6:71:3b:88: d3:31:bb:58:43:53:1e:f9:0d:a2:b6:76:63:e8:58:05:25:21: e9:bd:6b:c5:42:7c:52:d3:ba:e5:d3:42:e5:ad:86:fa:b5:72: 61:26:c8:59:e0:9b:09:b9:2f:40:ad:6e:81:8b:91:19:d5:d7: a2:03:be:41:4e:87:c7:f3:2e:a1:45:00:1b:a7:22:54:9e:b3: 01:08:9e:49:0d:4c:f2:0f:1e:58:ef:0c:55:21:c6:de:7e:39: 27:3a:f8:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QIW3rIXEnlljxfqZTXr1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ZmRmYTcxNDAwY2UzNzBiNzVmNzM3NzgwNDg1NzRlNDYy NzQzMWIwHhcNMjUxMjA2MjAwMDM3WhcNMjUxMjA3MjAwMDM3WjAzMTEwLwYDVQQD EyhmODZkNWMyZTBjNmI2ZmI3OTc3MmEzY2I4ZmIxNWFiYmEzNmFkZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXtMCScDfTiV3fnZfmjAMW/nIHI7 CelRHffy/u20CASmAX6Q/vID2MbAKCKDu6R8M+/VH9OBu+zeZwLj9SwgPkm0SgFF kGLVVjR389UxmhLWjwF25n8MbcedZekOmn3tqlLPiQtlBmoy5ZM4QftX6djesf99 +XbomNT5SkQTALOG06t3avEmU71RHoYDbwYFwM+TRydmRbhmku3syOs0LRMmU5mg NIU3SZhlvoZb6EQ7Ib5vBPuHpza4EQZ7IBAPGqO9R+C7e0EV5S+Gkvyv4XbtIzET D67AWjMwiJ29OsFe0uQo7vcKaEvQJajoLB4JhDS9v36J9pmeJc1Mmo29QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhtXC4Ma2+3l3Kjy4+xWrujat0KMB8GA1UdIwQY MBaAFOj9+nFADONwt19zd4BIV05GJ0MbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlAzNmNVQU00M0MzWDNOM2dFaFhUa1luUXhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81NWJlNzUtMGUwYS00MTNlLTg5Y2Mt Mzc4YTNlN2JjMDgzLzEvNlAzNmNVQU00M0MzWDNOM2dFaFhUa1luUXhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81NWJlNzUtMGUwYS00MTNlLTg5Y2MtMzc4YTNlN2JjMDgz LzEvNlAzNmNVQU00M0MzWDNOM2dFaFhUa1luUXhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0S3IvEwJ th1QqBj6WiU73GKn750mHPNr7Hgb/hhKILpESnKdDLdcf71zk2vxGNlieNDq+pfN gKG1QBFhHbaaOynYQcXC/eGHYhFlABsxbqrrV8YoDJEQVCwvWMYXeJ6K/AhXaVDQ kiMtVOFyfxhoTeiybTuVCpI6xd2U4zkLTLd0G56m/ClhUN8Uk8lfcAfHwecJZDs8 eahVl2VHVPqmcTuI0zG7WENTHvkNorZ2Y+hYBSUh6b1rxUJ8UtO65dNC5a2G+rVy YSbIWeCbCbkvQK1ugYuRGdXXogO+QU6Hx/MuoUUAG6ciVJ6zAQieSQ1M8g8eWO8M VSHG3n45Jzr4Vw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:22 2025 by rpki-client