This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft File: 6Vv1iCFn0VKIW0akbDYJbscsEOg.mft (raw, json) Hash identifier: fTTmPTdI4xfL8tu+bfDkwtIAmSoDAd9NsZXRnwCeZwE= Subject key identifier: BD:AF:B3:FE:F6:00:00:61:97:B7:27:38:41:45:86:BF:1B:13:A6:9B Authority key identifier: E9:5B:F5:88:21:67:D1:52:88:5B:46:A4:6C:36:09:6E:C7:2C:10:E8 Certificate issuer: /CN=e95bf5882167d152885b46a46c36096ec72c10e8 Certificate serial: 019AF3F75ED5CDF3F7C1DD9CDA991EF85FAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft Manifest number: 015B Signing time: Sat 06 Dec 2025 14:01:06 +0000 Manifest this update: Sat 06 Dec 2025 14:01:06 +0000 Manifest next update: Sun 07 Dec 2025 14:01:06 +0000 Files and hashes: 1: 6Vv1iCFn0VKIW0akbDYJbscsEOg.crl (hash: jN4Neh0OhnHR1zRcRWTl6N30XZkYSd+n7HrZphU3hBM=) 2: ecPi4F9FvpvnnyN08rNPNOwyAw0.roa (hash: gVC4oBRFhWQMZYBIpFGSJSlbUZiFGdF6+OMg3NAk+j8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:5e:d5:cd:f3:f7:c1:dd:9c:da:99:1e:f8:5f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e95bf5882167d152885b46a46c36096ec72c10e8 Validity Not Before: Dec 6 14:01:06 2025 GMT Not After : Dec 7 14:01:06 2025 GMT Subject: CN=bdafb3fef600006197b72738414586bf1b13a69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:76:24:4b:81:f4:01:3d:c6:21:85:63:d6:b3: f8:05:47:fc:06:c3:64:69:08:cc:74:e1:b8:6e:a9: 50:48:a2:8e:76:66:76:b7:e1:e5:34:48:2f:4d:fd: 20:76:b0:a7:79:11:f9:df:a8:fc:f1:14:e2:cf:52: ec:38:2f:f4:46:90:cc:e1:52:cc:02:f2:03:30:58: ba:41:dc:68:36:e8:a4:f0:a7:d9:61:65:e6:04:9c: 52:28:ae:0f:fa:2f:2b:10:df:97:ce:cf:2e:af:93: 5f:99:3a:4b:a1:ac:d5:dc:c3:bf:d3:db:93:c5:ec: 30:7e:38:00:69:68:36:21:7b:1e:93:e1:d3:ba:01: 3b:f0:3b:0e:62:57:00:08:4c:7a:78:e5:a4:b9:a9: 52:a4:01:a5:54:8c:66:01:5b:25:03:19:af:a8:3e: 10:87:3a:a7:3e:80:b8:c2:6b:8d:64:0b:84:c6:36: 34:0b:fa:a0:c9:95:64:e3:d5:b2:1b:1b:6a:00:c3: c9:ce:73:05:66:49:f5:36:1c:8f:78:09:4f:5f:21: b8:55:1b:d3:4c:aa:be:86:75:51:5d:ec:f1:34:4e: 98:e3:67:41:0e:8d:86:52:63:7b:5f:13:8c:64:32: 85:fb:b9:ca:43:cf:79:5b:fd:5a:79:88:88:b6:2b: 31:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AF:B3:FE:F6:00:00:61:97:B7:27:38:41:45:86:BF:1B:13:A6:9B X509v3 Authority Key Identifier: keyid:E9:5B:F5:88:21:67:D1:52:88:5B:46:A4:6C:36:09:6E:C7:2C:10:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Vv1iCFn0VKIW0akbDYJbscsEOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/494fc5-8370-4313-a775-4c7c6ee1d645/1/6Vv1iCFn0VKIW0akbDYJbscsEOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:07:36:37:61:d7:1a:0e:99:46:02:08:aa:fb:a1:04:f6:ce: 52:5e:15:cf:29:b7:01:1b:fb:8d:3d:35:0b:ab:2e:04:52:2c: 9e:9d:08:5f:2b:33:99:d4:61:11:d0:20:0a:fb:7d:e8:6c:d1: 3c:d7:c7:04:92:8c:f4:39:41:e2:8c:53:1f:ba:fb:40:52:5c: 71:dc:b0:34:00:91:45:2c:87:a3:39:e6:c0:ce:63:ee:18:22: 32:58:da:c7:ba:57:a4:da:77:fe:f8:25:94:b1:4c:ca:c9:32: 23:19:4a:8d:24:63:fb:d3:a1:2b:69:63:f8:25:b8:1c:de:2c: fe:ae:8d:59:8f:81:20:1a:74:9e:17:fe:2f:14:0b:90:01:46: b6:37:24:18:e2:d0:48:af:fd:79:95:06:85:9f:4a:89:e2:6c: ba:f3:82:6b:d5:d5:42:56:26:33:fb:3c:6f:a7:17:cf:3f:b5: 25:7a:b5:db:79:ee:fd:46:95:9a:b2:a7:81:2c:c6:c1:5b:9c: 4f:17:9a:36:b4:64:c4:14:23:12:df:96:9e:93:0e:ed:d7:e7: 13:cc:42:a0:38:5b:fa:d3:56:ab:4f:ea:3e:3c:bb:97:b1:4b: 24:14:5e:a1:57:f8:1b:3c:3f:05:52:4b:ca:fa:0a:cd:62:50: 2e:e8:39:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz917VzfP3wd2c2pke+F+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NWJmNTg4MjE2N2QxNTI4ODViNDZhNDZjMzYwOTZlYzcy YzEwZTgwHhcNMjUxMjA2MTQwMTA2WhcNMjUxMjA3MTQwMTA2WjAzMTEwLwYDVQQD EyhiZGFmYjNmZWY2MDAwMDYxOTdiNzI3Mzg0MTQ1ODZiZjFiMTNhNjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunYkS4H0AT3GIYVj1rP4BUf8BsNk aQjMdOG4bqlQSKKOdmZ2t+HlNEgvTf0gdrCneRH536j88RTiz1LsOC/0RpDM4VLM AvIDMFi6QdxoNuik8KfZYWXmBJxSKK4P+i8rEN+Xzs8ur5NfmTpLoazV3MO/09uT xewwfjgAaWg2IXsek+HTugE78DsOYlcACEx6eOWkualSpAGlVIxmAVslAxmvqD4Q hzqnPoC4wmuNZAuExjY0C/qgyZVk49WyGxtqAMPJznMFZkn1NhyPeAlPXyG4VRvT TKq+hnVRXezxNE6Y42dBDo2GUmN7XxOMZDKF+7nKQ895W/1aeYiItisxZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2vs/72AABhl7cnOEFFhr8bE6abMB8GA1UdIwQY MBaAFOlb9YghZ9FSiFtGpGw2CW7HLBDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlZ2MWlDRm4wVktJVzBha2JEWUpic2NzRU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80OTRmYzUtODM3MC00MzEzLWE3NzUt NGM3YzZlZTFkNjQ1LzEvNlZ2MWlDRm4wVktJVzBha2JEWUpic2NzRU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS80OTRmYzUtODM3MC00MzEzLWE3NzUtNGM3YzZlZTFkNjQ1 LzEvNlZ2MWlDRm4wVktJVzBha2JEWUpic2NzRU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAc2N2HX Gg6ZRgIIqvuhBPbOUl4Vzym3ARv7jT01C6suBFIsnp0IXyszmdRhEdAgCvt96GzR PNfHBJKM9DlB4oxTH7r7QFJccdywNACRRSyHoznmwM5j7hgiMljax7pXpNp3/vgl lLFMyskyIxlKjSRj+9OhK2lj+CW4HN4s/q6NWY+BIBp0nhf+LxQLkAFGtjckGOLQ SK/9eZUGhZ9KieJsuvOCa9XVQlYmM/s8b6cXzz+1JXq123nu/UaVmrKngSzGwVuc TxeaNrRkxBQjEt+WnpMO7dfnE8xCoDhb+tNWq0/qPjy7l7FLJBReoVf4Gzw/BVJL yvoKzWJQLug5eg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:02:13 2025 by rpki-client