This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft File: 6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft (raw, json) Hash identifier: flxtbEbD5EO39MTzManCF2zYOqF03b13nRqCQmmXBvw= Subject key identifier: B1:3B:6C:68:55:30:4D:B6:F7:E9:2D:91:D1:E6:80:74:6A:1A:D6:9F Authority key identifier: E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90 Certificate issuer: /CN=e887e5fcbcbf1ad03268dac9ee5d292025368090 Certificate serial: 019AF465728BDC73C5D72EB02293C6D00976 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft Manifest number: 0E58 Signing time: Sat 06 Dec 2025 16:01:20 +0000 Manifest this update: Sat 06 Dec 2025 16:01:20 +0000 Manifest next update: Sun 07 Dec 2025 16:01:20 +0000 Files and hashes: 1: 6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl (hash: 1LpS0MVegAQvMx+oEEnjrQuXcQE0atueIoVCDps3Ndg=) 2: RshraodQG0v2CwIen1d8e2inEyk.roa (hash: tjJ3tzpy63NbiAcLeNQHsJL6oNJgQPy/v6//+8AFf5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:72:8b:dc:73:c5:d7:2e:b0:22:93:c6:d0:09:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e887e5fcbcbf1ad03268dac9ee5d292025368090 Validity Not Before: Dec 6 16:01:20 2025 GMT Not After : Dec 7 16:01:20 2025 GMT Subject: CN=b13b6c6855304db6f7e92d91d1e680746a1ad69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d0:2e:27:6b:e4:7d:59:7c:13:4f:8e:7b:9d: df:7c:1c:96:52:f1:b6:87:1b:ee:d9:db:af:a5:e4: 64:5b:8b:06:c6:8d:47:3f:d6:81:23:c0:53:9d:5a: 3c:02:ec:b0:59:b3:90:5d:3c:2c:9c:a5:61:36:c1: 00:89:66:ec:64:5b:77:02:9a:b3:fd:51:15:99:40: 58:c4:84:96:25:72:f0:29:84:70:fb:24:c9:54:b5: ce:93:20:ca:58:3c:9e:84:3f:02:48:d0:5b:08:b7: e5:c3:b2:a0:e6:2e:87:bb:4b:4e:45:a4:3d:1f:3c: 0e:01:21:b1:9b:f2:a1:40:2d:cc:ce:58:6a:ef:00: 69:5d:4f:d7:39:4f:1c:6c:71:41:e5:99:cc:22:1e: 56:92:78:79:78:48:af:4d:3b:93:15:d0:e9:6f:e0: a8:54:50:20:06:15:a1:aa:c2:1e:21:8f:98:38:d0: 62:ed:de:c2:d3:c4:c9:7f:af:85:ae:c8:3e:87:c1: 5d:fb:1e:97:6f:01:0c:0b:48:12:eb:ee:1b:90:2f: 4e:91:81:13:f1:e6:f7:b3:e0:fe:ff:76:9b:87:c7: 88:f2:03:88:85:e6:84:87:3b:50:08:a6:fa:09:fe: cd:f6:76:42:6c:ba:be:68:8d:94:20:31:05:e1:74: 66:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3B:6C:68:55:30:4D:B6:F7:E9:2D:91:D1:E6:80:74:6A:1A:D6:9F X509v3 Authority Key Identifier: keyid:E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:28:79:28:e8:1b:78:95:75:c4:bf:7f:ba:79:95:7d:46:5d: 27:1f:6e:39:e7:55:ab:19:19:8a:f0:3b:21:b8:27:bd:e1:bd: 23:a0:0f:34:df:e4:2d:a5:89:6f:52:22:b7:8d:18:d4:36:84: 6b:6a:34:a8:ab:9d:6e:f1:b8:3b:c8:ee:9c:70:87:f5:f3:3c: 00:9d:44:36:ff:13:82:2f:26:d0:1d:41:8d:c7:08:2c:05:0f: 63:80:3a:26:0f:f8:e3:63:e7:74:e5:de:52:29:b6:2e:af:5a: 08:ea:51:2c:c9:09:72:a4:2b:a9:69:a7:26:76:21:97:b5:1e: 95:f3:e1:d8:41:e3:8d:ef:3a:8e:28:e2:d6:25:c1:07:61:e6: 44:1f:bc:a3:b8:58:93:af:42:26:9d:24:1c:42:a1:3d:23:68: f0:e1:16:51:9a:20:cc:62:89:9e:1d:83:31:fa:24:b2:fb:3a: fc:90:32:f9:92:e6:5a:19:5a:55:ce:f8:63:78:0a:b5:c0:3f: d1:ae:50:e3:b9:de:11:54:bf:ef:d9:fa:d8:5d:dc:94:de:b4: 64:67:3c:20:0b:7e:11:6b:df:c6:ab:ad:77:4c:9d:b5:10:36: d6:3c:a5:60:9e:66:38:6a:cb:63:3b:4e:10:cd:2b:d3:d5:e8: 6e:25:23:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZXKL3HPF1y6wIpPG0Al2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4ODdlNWZjYmNiZjFhZDAzMjY4ZGFjOWVlNWQyOTIwMjUz NjgwOTAwHhcNMjUxMjA2MTYwMTIwWhcNMjUxMjA3MTYwMTIwWjAzMTEwLwYDVQQD EyhiMTNiNmM2ODU1MzA0ZGI2ZjdlOTJkOTFkMWU2ODA3NDZhMWFkNjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtAuJ2vkfVl8E0+Oe53ffByWUvG2 hxvu2duvpeRkW4sGxo1HP9aBI8BTnVo8AuywWbOQXTwsnKVhNsEAiWbsZFt3Apqz /VEVmUBYxISWJXLwKYRw+yTJVLXOkyDKWDyehD8CSNBbCLflw7Kg5i6Hu0tORaQ9 HzwOASGxm/KhQC3Mzlhq7wBpXU/XOU8cbHFB5ZnMIh5Wknh5eEivTTuTFdDpb+Co VFAgBhWhqsIeIY+YONBi7d7C08TJf6+Frsg+h8Fd+x6XbwEMC0gS6+4bkC9OkYET 8eb3s+D+/3abh8eI8gOIheaEhztQCKb6Cf7N9nZCbLq+aI2UIDEF4XRmgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLE7bGhVME229+ktkdHmgHRqGtafMB8GA1UdIwQY MBaAFOiH5fy8vxrQMmjaye5dKSAlNoCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNklmbF9MeV9HdEF5YU5ySjdsMHBJQ1UyZ0pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jMWZiNDYtOGI0Ny00ZjkxLThiOWEt ZDdmYWE3ZTdlODRkLzEvNklmbF9MeV9HdEF5YU5ySjdsMHBJQ1UyZ0pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9jMWZiNDYtOGI0Ny00ZjkxLThiOWEtZDdmYWE3ZTdlODRk LzEvNklmbF9MeV9HdEF5YU5ySjdsMHBJQ1UyZ0pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCh5KOgb eJV1xL9/unmVfUZdJx9uOedVqxkZivA7IbgnveG9I6APNN/kLaWJb1Iit40Y1DaE a2o0qKudbvG4O8junHCH9fM8AJ1ENv8Tgi8m0B1BjccILAUPY4A6Jg/442PndOXe Uim2Lq9aCOpRLMkJcqQrqWmnJnYhl7UelfPh2EHjje86jiji1iXBB2HmRB+8o7hY k69CJp0kHEKhPSNo8OEWUZogzGKJnh2DMfoksvs6/JAy+ZLmWhlaVc74Y3gKtcA/ 0a5Q47neEVS/79n62F3clN60ZGc8IAt+EWvfxqutd0ydtRA21jylYJ5mOGrLYztO EM0r09XobiUjDA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:19:02 2025 by rpki-client