This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft File: 6ILCYEFZvDDAW58M9unYNhAuqUs.mft (raw, json) Hash identifier: gI2Quhem61J3EkJ+Lvz0MoF+KRYZ5Z1zDhIHwNkfYT8= Subject key identifier: 7E:52:C4:CD:77:32:06:A3:B1:F0:BD:2E:67:C3:F3:A4:52:62:4A:B8 Authority key identifier: E8:82:C2:60:41:59:BC:30:C0:5B:9F:0C:F6:E9:D8:36:10:2E:A9:4B Certificate issuer: /CN=e882c2604159bc30c05b9f0cf6e9d836102ea94b Certificate serial: 019AF50A97F7415BD9B67EE227E512D1B2EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft Manifest number: 1425 Signing time: Sat 06 Dec 2025 19:01:43 +0000 Manifest this update: Sat 06 Dec 2025 19:01:43 +0000 Manifest next update: Sun 07 Dec 2025 19:01:43 +0000 Files and hashes: 1: 6ILCYEFZvDDAW58M9unYNhAuqUs.crl (hash: MZpQ81ssuDwevg1sHzJ2c5yHoC4mTUp0+j2tWg/neOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.crl rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:97:f7:41:5b:d9:b6:7e:e2:27:e5:12:d1:b2:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e882c2604159bc30c05b9f0cf6e9d836102ea94b Validity Not Before: Dec 6 19:01:43 2025 GMT Not After : Dec 7 19:01:43 2025 GMT Subject: CN=7e52c4cd773206a3b1f0bd2e67c3f3a452624ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b4:f2:6d:ac:c0:12:8b:48:aa:3e:79:ea:c8: f1:92:1d:9c:3e:2e:37:4c:f0:5f:01:29:8b:6e:4a: ee:9e:fc:02:9b:7e:38:c1:ae:f8:55:98:1a:39:c6: d3:8e:9b:7e:e3:ac:7c:ab:a0:49:a2:4f:92:6b:2f: 82:bb:87:af:d9:39:06:ad:c5:ce:be:0b:7b:7a:a2: 72:b3:e2:ef:3d:ac:4f:77:21:3b:da:09:49:c7:39: 42:11:f8:7d:81:f0:ea:20:a9:0d:6f:83:a2:bf:d3: 0c:4e:2b:35:4b:4d:eb:42:a2:12:40:53:dc:ea:4b: be:e5:28:00:37:2a:22:95:35:b7:45:07:46:0c:19: ee:1d:f9:7a:cf:ab:a6:17:d3:7a:5d:d4:a3:83:a4: ad:63:ad:0b:c0:c5:05:28:59:c1:08:a2:11:1a:ee: e2:68:c1:2a:74:8b:ea:7c:bb:57:dd:83:91:6a:41: 54:0b:f2:dc:b6:d0:3f:3e:c0:f1:74:d2:75:d8:d1: 39:8c:bf:ae:54:89:60:c3:03:92:47:69:be:87:51: f8:02:ca:a3:5a:0b:41:bb:c0:54:a6:6b:9a:62:15: 55:81:dd:c9:d3:4b:d9:23:a8:75:37:d2:ca:c6:c0: 31:77:99:e1:f5:c2:49:6f:94:57:28:fa:80:10:b1: 0b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:52:C4:CD:77:32:06:A3:B1:F0:BD:2E:67:C3:F3:A4:52:62:4A:B8 X509v3 Authority Key Identifier: keyid:E8:82:C2:60:41:59:BC:30:C0:5B:9F:0C:F6:E9:D8:36:10:2E:A9:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:78:cc:de:20:de:7a:02:e0:b7:6b:69:f6:35:fb:73:df:ea: 24:45:e4:30:80:90:fa:f2:e8:37:8a:25:ca:06:11:fe:93:4f: 1f:85:44:c1:e4:c1:ca:d2:2a:c0:b4:97:4e:ad:02:e3:f4:e7: 8f:16:77:24:3b:25:f5:9b:f0:55:a7:1d:fc:8f:e3:06:5e:2f: d9:43:17:d1:04:9d:f9:50:af:85:63:a4:dc:5b:05:6f:eb:db: c6:64:76:f8:ab:e5:bd:2e:77:8c:52:92:c8:84:b6:b3:12:c9: fd:b5:a6:90:0f:56:fe:a4:58:48:de:f4:34:dd:c2:78:7e:95: 07:e0:e0:1d:bd:31:d4:51:f6:cb:c8:92:9a:d1:15:59:49:21: 88:9a:3c:d5:9a:37:87:d7:cf:1a:5a:fb:ea:03:55:19:9b:54: 73:39:c2:0c:39:cb:f9:4d:bb:39:c7:b0:8c:b9:85:cc:73:91: 46:d3:cd:4b:67:de:82:cd:48:d8:db:84:7f:52:62:b9:67:19: 23:ff:ed:58:28:48:6b:68:2a:05:19:3a:ea:e2:7a:4b:29:31: 0a:ae:23:cc:d4:99:f8:22:bd:37:b0:03:f3:65:43:47:11:3c: 29:d8:9e:9a:fe:31:af:97:8d:ab:9d:5c:ab:32:b0:5d:28:e8: 48:b8:4e:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cpf3QVvZtn7iJ+US0bLqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ODJjMjYwNDE1OWJjMzBjMDViOWYwY2Y2ZTlkODM2MTAy ZWE5NGIwHhcNMjUxMjA2MTkwMTQzWhcNMjUxMjA3MTkwMTQzWjAzMTEwLwYDVQQD Eyg3ZTUyYzRjZDc3MzIwNmEzYjFmMGJkMmU2N2MzZjNhNDUyNjI0YWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57TybazAEotIqj556sjxkh2cPi43 TPBfASmLbkrunvwCm344wa74VZgaOcbTjpt+46x8q6BJok+Say+Cu4ev2TkGrcXO vgt7eqJys+LvPaxPdyE72glJxzlCEfh9gfDqIKkNb4Oiv9MMTis1S03rQqISQFPc 6ku+5SgANyoilTW3RQdGDBnuHfl6z6umF9N6XdSjg6StY60LwMUFKFnBCKIRGu7i aMEqdIvqfLtX3YORakFUC/LcttA/PsDxdNJ12NE5jL+uVIlgwwOSR2m+h1H4Asqj WgtBu8BUpmuaYhVVgd3J00vZI6h1N9LKxsAxd5nh9cJJb5RXKPqAELELBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5SxM13MgajsfC9LmfD86RSYkq4MB8GA1UdIwQY MBaAFOiCwmBBWbwwwFufDPbp2DYQLqlLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNklMQ1lFRlp2RERBVzU4TTl1bllOaEF1cVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iOWRjNDAtNTQ3MC00NTY4LWJiYjkt NjMwNTg5YzY4ODg5LzEvNklMQ1lFRlp2RERBVzU4TTl1bllOaEF1cVVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9iOWRjNDAtNTQ3MC00NTY4LWJiYjktNjMwNTg5YzY4ODg5 LzEvNklMQ1lFRlp2RERBVzU4TTl1bllOaEF1cVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3jM3iDe egLgt2tp9jX7c9/qJEXkMICQ+vLoN4olygYR/pNPH4VEweTBytIqwLSXTq0C4/Tn jxZ3JDsl9ZvwVacd/I/jBl4v2UMX0QSd+VCvhWOk3FsFb+vbxmR2+KvlvS53jFKS yIS2sxLJ/bWmkA9W/qRYSN70NN3CeH6VB+DgHb0x1FH2y8iSmtEVWUkhiJo81Zo3 h9fPGlr76gNVGZtUcznCDDnL+U27OcewjLmFzHORRtPNS2fegs1I2NuEf1JiuWcZ I//tWChIa2gqBRk66uJ6SykxCq4jzNSZ+CK9N7AD82VDRxE8Kdiemv4xr5eNq51c qzKwXSjoSLhO/Q== -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:14 2025 by rpki-client