This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft File: 6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft (raw, json) Hash identifier: nIhj9xtDpfRQabGXnZg2Dd8p0SeA9X0TFFU53h2ni4g= Subject key identifier: 35:E5:D8:77:D7:3C:E2:BF:62:76:A2:7C:96:9F:B6:A0:0D:4E:6C:9B Authority key identifier: EB:10:B0:9B:A0:C1:0C:F0:76:E5:10:79:31:D3:D6:91:A4:39:65:28 Certificate issuer: /CN=eb10b09ba0c10cf076e5107931d3d691a4396528 Certificate serial: 019AF2097EAC5C4ACE7012D8BB92A5D853BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft Manifest number: 05AE Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: 1-TEAa7vqhDR8MFmfWosBtb41wek.roa (hash: eqiD9H7n4ulTtrxau5diRG8AJtoZzGM451rZtgj6RWo=) 2: 6xCwm6DBDPB25RB5MdPWkaQ5ZSg.crl (hash: P+V+OdGXS9DZ50ePBC8vx6ebUXg7cKOf8ITvTSRGa8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.crl rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7e:ac:5c:4a:ce:70:12:d8:bb:92:a5:d8:53:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb10b09ba0c10cf076e5107931d3d691a4396528 Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=35e5d877d73ce2bf6276a27c969fb6a00d4e6c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e5:32:68:1c:12:fa:f7:11:c1:e9:18:87:a6: d5:fc:f6:54:ac:a8:10:b5:64:2a:6d:a3:fa:1e:b3: b8:ae:0a:7a:26:e7:6c:f0:74:cc:36:87:d1:a5:84: 28:c1:a7:bb:ba:29:30:61:ad:12:a7:29:a7:ee:7e: b2:dc:0b:fb:8a:0b:4b:2a:ee:10:d1:88:6c:5d:ed: dd:6d:bd:14:f0:d5:d2:b3:9d:40:35:c2:d9:f4:f4: 25:19:7b:df:dc:4a:be:a2:9a:96:b9:f0:c0:af:35: e4:31:3d:e1:e2:76:dc:d4:47:b9:af:1e:1e:fa:f0: 26:10:68:6c:96:02:2f:b9:5c:47:f8:19:d2:37:85: 86:51:ef:bf:ec:57:4d:6a:ac:0b:c7:c2:db:40:22: 24:6c:4f:7c:7f:79:60:79:47:1b:0b:59:0c:1d:10: 15:1d:f9:5d:3a:9d:43:21:b3:11:7a:5d:7d:80:a2: 00:d6:f9:4f:d3:ee:1d:5c:2d:10:e4:29:9a:a0:91: c4:05:b5:ef:fd:00:59:d0:13:af:02:35:a6:6c:91: 32:7a:62:6b:6f:08:73:4d:ce:65:f1:24:39:74:4c: a5:57:d3:16:cc:af:2c:b6:75:65:84:4d:4c:08:a9: 65:b6:c0:6c:25:1e:ed:d6:13:0b:b5:b0:20:66:a2: 23:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E5:D8:77:D7:3C:E2:BF:62:76:A2:7C:96:9F:B6:A0:0D:4E:6C:9B X509v3 Authority Key Identifier: keyid:EB:10:B0:9B:A0:C1:0C:F0:76:E5:10:79:31:D3:D6:91:A4:39:65:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:9f:18:0a:5d:66:d1:35:a2:8c:d9:c5:dd:86:6f:5c:a2:af: ad:d4:de:2f:1f:ee:27:20:d9:b1:ce:b3:18:ad:b3:3c:c5:10: 72:ce:a0:5b:2e:7e:fc:3f:04:5a:00:5d:a2:c1:79:da:d7:a0: ba:1f:16:ce:18:ce:a7:6e:52:2a:9c:c8:11:be:b3:00:8d:75: 1c:a5:d6:5e:ad:0f:04:b5:1c:78:d5:ce:c8:4d:ac:8d:88:4a: ec:08:3d:6c:90:79:b5:fc:95:3b:6f:db:b0:30:fc:38:cb:b6: 65:c9:00:d1:d8:e8:68:18:fa:a6:57:c8:11:5c:80:49:4e:c0: f5:86:3c:ab:76:5e:0c:89:39:bb:e9:0e:89:a4:bf:59:56:e8: 49:5f:b8:99:95:7b:f0:52:a9:01:c5:25:b4:43:ac:9a:db:4f: e4:f2:d3:ec:db:83:fb:2b:e3:c3:d7:35:99:ce:98:28:bb:e9: 60:e1:60:0b:1d:e8:ae:66:88:4d:0d:e3:29:a9:1b:f3:97:ca: 4d:bb:ce:19:55:f4:4a:93:77:a8:e7:4d:2f:38:95:35:00:cf: 35:05:5e:2c:15:53:28:a0:50:51:d5:3f:41:fb:e7:c6:c7:56: 84:90:a1:8e:2c:9e:64:03:a0:f2:b8:8e:66:dd:30:29:49:49: e7:e5:01:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCX6sXErOcBLYu5Kl2FO7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMTBiMDliYTBjMTBjZjA3NmU1MTA3OTMxZDNkNjkxYTQz OTY1MjgwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD EygzNWU1ZDg3N2Q3M2NlMmJmNjI3NmEyN2M5NjlmYjZhMDBkNGU2YzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleUyaBwS+vcRwekYh6bV/PZUrKgQ tWQqbaP6HrO4rgp6Juds8HTMNofRpYQowae7uikwYa0Spymn7n6y3Av7igtLKu4Q 0YhsXe3dbb0U8NXSs51ANcLZ9PQlGXvf3Eq+opqWufDArzXkMT3h4nbc1Ee5rx4e +vAmEGhslgIvuVxH+BnSN4WGUe+/7FdNaqwLx8LbQCIkbE98f3lgeUcbC1kMHRAV HfldOp1DIbMRel19gKIA1vlP0+4dXC0Q5CmaoJHEBbXv/QBZ0BOvAjWmbJEyemJr bwhzTc5l8SQ5dEylV9MWzK8stnVlhE1MCKlltsBsJR7t1hMLtbAgZqIjUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXl2HfXPOK/YnaifJaftqANTmybMB8GA1UdIwQY MBaAFOsQsJugwQzwduUQeTHT1pGkOWUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnhDd202REJEUEIyNVJCNU1kUFdrYVE1WlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hMDBkMTItODYwMy00YmZhLTliNjIt MGEwMzdkNzhjZjAzLzEvNnhDd202REJEUEIyNVJCNU1kUFdrYVE1WlNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9hMDBkMTItODYwMy00YmZhLTliNjItMGEwMzdkNzhjZjAz LzEvNnhDd202REJEUEIyNVJCNU1kUFdrYVE1WlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZ8YCl1m 0TWijNnF3YZvXKKvrdTeLx/uJyDZsc6zGK2zPMUQcs6gWy5+/D8EWgBdosF52teg uh8WzhjOp25SKpzIEb6zAI11HKXWXq0PBLUceNXOyE2sjYhK7Ag9bJB5tfyVO2/b sDD8OMu2ZckA0djoaBj6plfIEVyASU7A9YY8q3ZeDIk5u+kOiaS/WVboSV+4mZV7 8FKpAcUltEOsmttP5PLT7NuD+yvjw9c1mc6YKLvpYOFgCx3ormaITQ3jKakb85fK TbvOGVX0SpN3qOdNLziVNQDPNQVeLBVTKKBQUdU/QfvnxsdWhJChjiyeZAOg8riO Zt0wKUlJ5+UB1g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:18 2025 by rpki-client