This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft File: 6f383DJhtXr63-1zD7Le2yhkn88.mft (raw, json) Hash identifier: o4PgaqrEQPLBfnQMev7XEMfVdI6juxSTOvkm0/Zq70U= Subject key identifier: 70:27:F3:57:82:40:38:A2:AF:39:51:AC:3B:D2:76:8B:A8:9E:EB:02 Authority key identifier: E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF Certificate issuer: /CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf Certificate serial: 019AF49BBC59A9B95B296C45E05CEA78E646 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 17:00:38 +0000 Manifest this update: Sat 06 Dec 2025 17:00:38 +0000 Manifest next update: Sun 07 Dec 2025 17:00:38 +0000 Files and hashes: 1: 6f383DJhtXr63-1zD7Le2yhkn88.crl (hash: LOaHz0m5qdq5wtywIn5lKzYmU+RnmrQFEArdSPCkdCY=) 2: Tci-duFHvWMEGttKQ92T_aViR_A.roa (hash: TNMB/iEiiWHvlZINV0FtcnUi3rWiLmL/5woKI9WyM90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:bc:59:a9:b9:5b:29:6c:45:e0:5c:ea:78:e6:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf Validity Not Before: Dec 6 17:00:38 2025 GMT Not After : Dec 7 17:00:38 2025 GMT Subject: CN=7027f357824038a2af3951ac3bd2768ba89eeb02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c9:e8:c4:43:bc:ee:8d:02:44:35:4d:27:0f: 4b:cc:96:54:4a:88:9c:a8:62:05:b5:0f:2c:79:e2: 6e:b3:be:bd:b2:55:35:e1:2b:e0:25:1d:53:6f:f0: 6e:31:e6:e9:ae:61:2b:68:ce:dd:8d:2b:18:6d:97: c8:7f:d2:7f:53:06:6a:6f:30:d2:cf:2f:19:d3:5d: 14:a8:6a:37:e7:db:2c:4c:db:64:3b:bb:b9:1d:69: db:b0:29:8b:b8:c7:39:8b:2b:6d:a3:59:75:e3:df: 6d:4f:46:04:8f:d7:06:ed:b5:0f:93:a2:fa:98:59: 20:df:bc:88:ce:ae:ae:57:06:0e:a4:30:e9:7a:53: 30:07:e8:e8:0f:f4:07:d1:58:b7:1e:82:f4:37:93: e1:61:bf:04:f8:d3:3a:d9:ae:71:7b:96:a2:d3:ab: d7:6d:3d:29:be:d0:ab:4c:45:64:cb:65:06:06:b6: 03:4b:c2:82:fb:79:aa:48:81:28:47:fb:23:3e:b9: e4:f5:25:4c:87:54:69:fe:20:d9:f3:72:27:20:b0: df:8b:57:eb:ca:f9:57:34:a1:c0:07:7d:81:8e:d3: 4b:71:d4:94:c2:cd:2f:f4:aa:c4:af:45:6a:ce:5b: 52:34:8e:dd:0f:52:f1:a4:fd:a4:30:d3:e2:7b:7f: 38:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:27:F3:57:82:40:38:A2:AF:39:51:AC:3B:D2:76:8B:A8:9E:EB:02 X509v3 Authority Key Identifier: keyid:E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9a:97:ab:44:1f:cc:b5:8e:8e:bf:ce:eb:f0:14:22:9d:26: 9e:a6:77:59:02:88:fd:ba:ce:ad:ed:f3:43:55:72:27:95:1b: 7e:58:ab:13:52:9b:fd:6b:27:ab:1a:e8:5e:7e:37:5f:fd:dd: 21:f5:f5:69:cb:e4:26:73:02:07:8d:f6:06:c7:92:26:b9:b8: d5:fa:13:fe:62:5d:ce:b6:e8:36:f2:29:26:52:39:d7:09:2e: 8b:c4:a4:a7:ea:37:44:03:2e:93:a1:54:fe:23:1a:f0:fa:d1: dd:42:41:6a:43:36:b2:c5:08:cb:60:fb:0a:fa:3b:26:a8:25: 30:11:71:f4:3f:c7:94:84:3d:1a:18:27:88:6d:b4:d9:92:5f: 9b:4f:1b:bf:9f:34:97:cf:f1:d0:57:dd:d2:14:67:27:51:ba: 37:e6:60:98:5f:b9:67:8d:0d:7d:2e:20:5e:ef:7f:8c:90:a0: b8:41:bd:1c:fb:fb:75:b4:fe:78:0a:a7:a1:97:57:c4:d7:ed: 5a:74:67:75:2f:36:b9:46:1a:69:0b:ef:b6:8d:7a:5b:0d:0e: ea:47:03:54:c4:43:75:f2:b7:2d:ca:45:8b:af:c6:d9:1c:e0: d5:d0:d1:0f:92:c4:42:4e:c7:bd:3d:43:2a:9f:c4:5a:a8:37: fe:c9:10:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7xZqblbKWxF4FzqeOZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZmRmY2RjMzI2MWI1N2FmYWRmZWQ3MzBmYjJkZWRiMjg2 NDlmY2YwHhcNMjUxMjA2MTcwMDM4WhcNMjUxMjA3MTcwMDM4WjAzMTEwLwYDVQQD Eyg3MDI3ZjM1NzgyNDAzOGEyYWYzOTUxYWMzYmQyNzY4YmE4OWVlYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8noxEO87o0CRDVNJw9LzJZUSoic qGIFtQ8seeJus769slU14SvgJR1Tb/BuMebprmEraM7djSsYbZfIf9J/UwZqbzDS zy8Z010UqGo359ssTNtkO7u5HWnbsCmLuMc5iytto1l1499tT0YEj9cG7bUPk6L6 mFkg37yIzq6uVwYOpDDpelMwB+joD/QH0Vi3HoL0N5PhYb8E+NM62a5xe5ai06vX bT0pvtCrTEVky2UGBrYDS8KC+3mqSIEoR/sjPrnk9SVMh1Rp/iDZ83InILDfi1fr yvlXNKHAB32BjtNLcdSUws0v9KrEr0VqzltSNI7dD1LxpP2kMNPie384nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAn81eCQDiirzlRrDvSdouonusCMB8GA1UdIwQY MBaAFOn9/NwyYbV6+t/tcw+y3tsoZJ/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmYzODNESmh0WHI2My0xekQ3TGUyeWhrbjg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8xYmExOTEtYTQyYS00NTA5LWJiMjgt MGJjN2U3ZWYwNzYzLzEvNmYzODNESmh0WHI2My0xekQ3TGUyeWhrbjg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8xYmExOTEtYTQyYS00NTA5LWJiMjgtMGJjN2U3ZWYwNzYz LzEvNmYzODNESmh0WHI2My0xekQ3TGUyeWhrbjg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5qXq0Qf zLWOjr/O6/AUIp0mnqZ3WQKI/brOre3zQ1VyJ5UbflirE1Kb/WsnqxroXn43X/3d IfX1acvkJnMCB432BseSJrm41foT/mJdzrboNvIpJlI51wkui8Skp+o3RAMuk6FU /iMa8PrR3UJBakM2ssUIy2D7Cvo7JqglMBFx9D/HlIQ9GhgniG202ZJfm08bv580 l8/x0Ffd0hRnJ1G6N+ZgmF+5Z40NfS4gXu9/jJCguEG9HPv7dbT+eAqnoZdXxNft WnRndS82uUYaaQvvto16Ww0O6kcDVMRDdfK3LcpFi6/G2Rzg1dDRD5LEQk7HvT1D Kp/EWqg3/skQMw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:20:57 2025 by rpki-client