This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft File: dg6-87rwwTdAhVCVOQhSzkQlzkw.mft (raw, json) Hash identifier: BcDi4tD8SXwL5yzfMSiLGVYTsX27puCecx2wEKIxB08= Subject key identifier: 1C:BD:9D:76:5A:DA:6A:DC:53:F1:D8:DF:A2:5C:D9:D5:0F:51:FE:71 Authority key identifier: 76:0E:BE:F3:BA:F0:C1:37:40:85:50:95:39:08:52:CE:44:25:CE:4C Certificate issuer: /CN=760ebef3baf0c13740855095390852ce4425ce4c Certificate serial: 019AF352CE30E14C921CB5CAE0451B4250DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dg6-87rwwTdAhVCVOQhSzkQlzkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft Manifest number: E9 Signing time: Sat 06 Dec 2025 11:01:21 +0000 Manifest this update: Sat 06 Dec 2025 11:01:21 +0000 Manifest next update: Sun 07 Dec 2025 11:01:21 +0000 Files and hashes: 1: dg6-87rwwTdAhVCVOQhSzkQlzkw.crl (hash: AL92wxQFCe2F5DBV/FgGV3FQdACBFktqj0ijQnlrZUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.crl rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft rsync://rpki.ripe.net/repository/DEFAULT/dg6-87rwwTdAhVCVOQhSzkQlzkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:ce:30:e1:4c:92:1c:b5:ca:e0:45:1b:42:50:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=760ebef3baf0c13740855095390852ce4425ce4c Validity Not Before: Dec 6 11:01:21 2025 GMT Not After : Dec 7 11:01:21 2025 GMT Subject: CN=1cbd9d765ada6adc53f1d8dfa25cd9d50f51fe71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a0:b3:e6:41:86:f3:51:81:c7:12:0a:ab:88: d3:8c:bf:aa:93:60:3d:2e:f3:f4:3f:49:d1:fd:88: 83:d7:b0:cb:0f:94:80:07:18:f7:0e:82:9a:18:83: 0e:27:bf:46:d9:6e:01:25:88:93:2e:08:82:6c:ac: 1a:83:d5:7c:ab:8d:06:68:4f:fb:eb:3b:08:53:08: 72:ff:f2:b4:95:65:65:49:6e:f7:68:51:c6:69:90: b7:c4:d8:cc:41:1a:96:91:c9:c1:51:84:e2:7b:d4: ce:e6:c8:2a:62:3d:e6:f7:b2:66:3d:b6:ff:65:d9: 65:61:66:44:f6:3c:a7:27:90:c7:13:43:71:b5:1f: 18:bd:23:fe:00:c0:46:18:cd:58:6a:fa:18:cd:f6: 59:6d:b4:b1:e1:4c:94:bf:c9:b5:f6:fc:04:1f:cc: 59:8f:d2:3e:25:22:cf:85:5c:d3:34:f4:ae:92:a0: 4f:e0:7f:53:24:ae:1d:02:f2:5a:27:87:a7:b6:d1: bd:c9:fa:40:4b:9e:43:50:50:28:8d:38:47:3a:37: ab:20:88:d4:15:37:86:23:32:cc:49:67:df:a9:1d: be:07:df:e1:18:4f:19:89:26:43:45:54:f6:f2:5c: 9d:c3:08:c0:e8:d2:3a:5d:b6:25:ec:af:ce:c8:12: 66:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:BD:9D:76:5A:DA:6A:DC:53:F1:D8:DF:A2:5C:D9:D5:0F:51:FE:71 X509v3 Authority Key Identifier: keyid:76:0E:BE:F3:BA:F0:C1:37:40:85:50:95:39:08:52:CE:44:25:CE:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dg6-87rwwTdAhVCVOQhSzkQlzkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:89:8a:47:29:62:66:38:c1:b5:ef:ab:57:0c:f3:12:61:4d: ed:1e:41:c4:c6:b5:73:ff:36:83:56:a3:25:29:8f:e6:17:69: f2:fa:b9:b5:26:bd:fb:0b:d0:a1:12:0a:5d:77:73:8d:f6:39: cb:6e:8c:70:ab:42:81:c0:9e:c6:11:53:d5:6b:cc:91:e1:50: f2:35:bc:5e:b2:4b:b8:21:ee:95:09:4c:9f:0e:c8:01:5d:2a: 77:da:2a:4c:8a:76:08:82:8b:e2:5e:60:52:2a:16:dc:4d:3c: 41:b7:08:84:22:eb:8f:48:11:98:c2:bf:04:51:3d:41:95:ff: 80:25:76:3e:70:d5:4f:b7:77:28:07:df:e3:d4:e0:3b:9d:65: c8:ca:19:d7:d6:08:a8:23:d3:fd:e4:82:c3:4c:92:b7:78:ac: fc:88:2f:9b:ec:ca:dc:b2:39:96:81:7f:4e:3b:69:a0:59:4e: 62:f8:30:c6:a3:6b:0b:04:c2:c3:3f:95:9a:7b:96:e2:f7:50: 97:02:67:5f:cc:f9:bb:ce:00:72:df:af:5e:6a:79:23:fb:78: 84:bc:e1:39:3a:e5:e8:70:5b:3e:84:4f:8e:cc:fa:bb:6a:d3: 1b:5d:3c:e4:f9:87:59:73:b2:e3:cc:a8:0a:64:64:2c:56:67: 06:fa:b2:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUs4w4UySHLXK4EUbQlDeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MGViZWYzYmFmMGMxMzc0MDg1NTA5NTM5MDg1MmNlNDQy NWNlNGMwHhcNMjUxMjA2MTEwMTIxWhcNMjUxMjA3MTEwMTIxWjAzMTEwLwYDVQQD EygxY2JkOWQ3NjVhZGE2YWRjNTNmMWQ4ZGZhMjVjZDlkNTBmNTFmZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqCz5kGG81GBxxIKq4jTjL+qk2A9 LvP0P0nR/YiD17DLD5SABxj3DoKaGIMOJ79G2W4BJYiTLgiCbKwag9V8q40GaE/7 6zsIUwhy//K0lWVlSW73aFHGaZC3xNjMQRqWkcnBUYTie9TO5sgqYj3m97JmPbb/ ZdllYWZE9jynJ5DHE0NxtR8YvSP+AMBGGM1YavoYzfZZbbSx4UyUv8m19vwEH8xZ j9I+JSLPhVzTNPSukqBP4H9TJK4dAvJaJ4enttG9yfpAS55DUFAojThHOjerIIjU FTeGIzLMSWffqR2+B9/hGE8ZiSZDRVT28lydwwjA6NI6XbYl7K/OyBJmwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBy9nXZa2mrcU/HY36Jc2dUPUf5xMB8GA1UdIwQY MBaAFHYOvvO68ME3QIVQlTkIUs5EJc5MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGc2LTg3cnd3VGRBaFZDVk9RaFN6a1Fsemt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kZWMyOTUtZDRiNS00MDU3LThkYjIt YTMyYjU4ODA2MDcxLzEvZGc2LTg3cnd3VGRBaFZDVk9RaFN6a1Fsemt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kZWMyOTUtZDRiNS00MDU3LThkYjItYTMyYjU4ODA2MDcx LzEvZGc2LTg3cnd3VGRBaFZDVk9RaFN6a1Fsemt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4mKRyli ZjjBte+rVwzzEmFN7R5BxMa1c/82g1ajJSmP5hdp8vq5tSa9+wvQoRIKXXdzjfY5 y26McKtCgcCexhFT1WvMkeFQ8jW8XrJLuCHulQlMnw7IAV0qd9oqTIp2CIKL4l5g UioW3E08QbcIhCLrj0gRmMK/BFE9QZX/gCV2PnDVT7d3KAff49TgO51lyMoZ19YI qCPT/eSCw0ySt3is/Igvm+zK3LI5loF/TjtpoFlOYvgwxqNrCwTCwz+VmnuW4vdQ lwJnX8z5u84Act+vXmp5I/t4hLzhOTrl6HBbPoRPjsz6u2rTG1085PmHWXOy48yo CmRkLFZnBvqylg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:43:22 2025 by rpki-client